last executing test programs: 37.846381569s ago: executing program 0 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4, 0xfffffffffffffffa, 0x7}, 0x4}, 0x20, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x5, r3, 0x5}, 0xc) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="de08fd95f10c008abe4e794008afe4b8067ef7a59dd6dfb56b1495e179b11cd979db2c278689cad2440ae41ec9860c5d9467270594000000000000000915c483877907a29d2ce728b3844dec55cc68e035cf48abd10b60d1d85cc633e3abccd538b26b9c25af8a628a8f66cb81f2091f77e98892c7c98d1cb4953aa6e83e4c171530788c31a2f989b89f836872928372c82d7a164be6bd5614f2b1cd11088bb0887bb00aa8e152c17b184813d9574db33ce718cb75c7aeb4b1f6b98f0f47434f0000", @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000780000001400040073797a6b616c6c65723000000000000008000500070000000a0018000303030303030000b144ba76"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 37.844742424s ago: executing program 0 (id=81): openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x189000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x905, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="eca70ff0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd5) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000000)=[@wrmsr={0x1e, 0x20, {0xda2d6767462cc713, 0xfffffffffffffff7}}, @cpuid={0x14, 0x18, {0xf0000, 0x9fb0}}, @cpuid={0x14, 0x18, {0xe11, 0x2}}, @wr_crn={0x46, 0x20, {0x8, 0x5303}}, @uexit={0x0, 0x18, 0x22}, @wr_crn={0x46, 0x20, {0x8, 0x7}}, @code={0xa, 0x59, {"66baa000ec42d8ecc4e2d5a80326670f2a7000f2ab66ba410066ed420ffac3c423e96c3263c74424000000c0fec744240202000000c7442406000000000f011424b9210800000f32"}}, @rdmsr={0x32, 0x18, {0x2b7}}, @wr_crn={0x46, 0x20, {0x3, 0x2e0}}, @code={0xa, 0x40, {"c4017e2c6700f27f4c0fc73f6565430f7eadb63a0000360f01c4f30f7fdb651a742300f3440f06460f32c441b556eb"}}, @rdmsr={0x32, 0x18, {0x808}}, @cpuid={0x14, 0x18, {0x0, 0x9}}, @code={0xa, 0x59, {"c744240000100000c744240200500000c7442406000000000f011c2467430f01c8c4618dd57f00dd0066b875008ee80f225bc4217950e8470f01c40f01df66baa00066b80e0066ef"}}, @wr_crn={0x46, 0x20, {0x0, 0x7fffffff}}, @uexit={0x0, 0x18, 0xd98}, @wr_crn={0x46, 0x20, {0x4, 0x2e35}}, @uexit={0x0, 0x18, 0x7}], 0x272}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000440)={0xd, 0x0, [{0xac8, 0x0, 0x8}, {0x361, 0x0, 0x14}, {0xdc5, 0x0, 0x44}, {0x391, 0x0, 0x10001}, {0x85a, 0x0, 0x1}, {0x85f}, {0x40000070, 0x0, 0xa72}, {0x83a, 0x0, 0x8}, {0x39c, 0x0, 0x8}, {0x81e, 0x0, 0x8000000000000001}, {0x9df, 0x0, 0x8001}, {0x393, 0x0, 0xf964}, {0x293, 0x0, 0xfffffffffffffffb}]}) 37.630682799s ago: executing program 0 (id=87): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}]}, 0x28}}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001280)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x8, 0xe}, {0x2, 0x4}}}, 0x24}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 37.57058972s ago: executing program 0 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000170a0103000000000000000002000008090001"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="008000006400000008001b00000000000c002b80080001"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000002c0)={0x9, @win={{0x8, 0x7, 0x1, 0xe2}, 0x2, 0x7, 0x0, 0x6, 0x0, 0x6}}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 37.570126897s ago: executing program 0 (id=92): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) fstat(r0, &(0x7f0000000180)) 36.688247918s ago: executing program 0 (id=95): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new0default user:s'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfff5, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r2, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r2, 0x1c, 0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000020000000000008e"], 0x0, 0x2d, 0x0, 0x1, 0xf}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r6 = getpgrp(0x0) syz_emit_ethernet(0xf9, &(0x7f0000000200)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @udp={{0x2d, 0x4, 0x0, 0x36, 0xeb, 0x64, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @local, {[@noop, @timestamp_prespec={0x44, 0x34, 0x8c, 0x3, 0xf, [{@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x3354}, {@local, 0x8}, {@private=0xa010101, 0x1}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x6}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xb, 0x3, [{0x7, 0x5, '\ts?'}]}, @cipso={0x86, 0x37, 0x1, [{0x1, 0x6, "5526bb51"}, {0x5, 0xe, "8a33ea8ced197a00f6dad571"}, {0x1, 0xd, "2c90592782a258a80e65db"}, {0x6, 0x10, "371fb710891256ebd3cc1877efb5"}]}, @cipso={0x86, 0x16, 0x3, [{0x0, 0x9, "6667a10eaaacd6"}, {0x7, 0x7, "46e0ebeaa3"}]}, @end, @generic={0x44, 0xe, "d145f73cef5dc54404dd1b33"}]}}, {0x4e22, 0x4e21, 0x37, 0x0, @opaque="a7b028674415ac4871181f308b1928e7a9fad90b2c7224ae2d04e05b8209474c30521530daffdebaa10a33b2a846a2"}}}}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r6) prctl$PR_SET_PTRACER(0x59616d61, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000ac0)={r5, 0xd0}, &(0x7f0000000b00)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r5, 0x7}, 0x8) 30.529830584s ago: executing program 3 (id=185): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x70bd2c, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3e8b}]}, 0x38}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000000)=""/85) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000000)=""/85) 30.529539681s ago: executing program 3 (id=186): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) r1 = syz_io_uring_setup(0x2cb7, &(0x7f00000000c0)={0x0, 0xd254, 0x2000, 0x2, 0x3c0}, &(0x7f0000000000), &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a0001002abd7000fe1b21324c1475895eb56122b8dbdf250a108008fe00fd040020000008000400", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x8b1c, 0x8, 0x8003, 0x0, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) syz_io_uring_setup(0x3bc0, &(0x7f0000000280)={0x0, 0x162c, 0x200, 0x1, 0x12a, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000300)) 30.36094262s ago: executing program 3 (id=187): r0 = socket$inet(0x2, 0x2, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xb9701, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 30.35910646s ago: executing program 3 (id=188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)={0x0, 0xfb, 0x5e, 0x5, 0x7f, "cfac4c588cf3bbd8e63ce88830807034", "32cefe56d7eebf33813e54b2b8ec7c24c501332a74c2577e3712560fc19810322bea8e115dae48479f7ac0b813c9b05b874ec1a6ab66ee64fa44a6f5b6dfe47abfcd803eb26afb757b"}, 0x5e, 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r6, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7f}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40000c1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x1a, 0x1, @any, 0xc, 0xfe, 0x0, 0xf1, 0x7, 0x4b70, 0x9, @none}]}}}}, 0x1d) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB='$\a\x00\x00', @ANYBLOB="0ae7a3434e8fdcb9bf71ae2db640546db07f4ee9fbb442d7da22d277191542613abc2a0967dba18c6186a3f8003db4779ab9194e6b93ba9a5b20b02ed4e39eb61fffdd6710cac8847038307c6687ae12b3dfdfbe3a8dde4ade71e8ef1c926e9eeb3503fdf4532b48cf2823e6cbc9e49f43d6f909c54ab477258adc3075aa95d53157ee72d237e4626a725fa1d648e4545c2fac27b7bfdc1251e48cdb70794a0fcd6813315b6d2fd27adcab1cfa20a590d9cf51c6d6ca48261c9aa62bceab408bcb031c8e9b0a6e984766491e7041f5174d48b4365128f596b6951c0aabc4d8d1cfb53c73bbec941e85c5", @ANYBLOB="000225bd7000ffdbdf258900000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x724}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000001000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="080026006c0900000800270002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40003}, 0x0) 30.285206672s ago: executing program 3 (id=190): r0 = socket(0x11, 0x800000003, 0x0) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0xd, 0xa, 0x3, "325800000000000000008faa001d0000f4ff400000000000010000001400", 0x39555659}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002540), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002580)) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) r4 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x80000) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f00000004c0)=0xffffffffffffffff) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000540)={0x41c, 0x7d, 0x0, {{0x500, 0x2db, 0x0, 0x5000000, {0xcdb74b01717932d9, 0x400}, 0x10000000, 0x0, 0x0, 0x8000fe, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\xff\xff\xff0\xff\xce\xbc\x92\x00\x00\x00', 0x120, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05>\x00\x1e\x00\x00\x18{\x82O^\x97\xe5p\xbeg\xb0^\xb0V\xca|=9\x00\xb5\x00\x00;Y_\xcb\x14\x03\x03\x00\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x1a\xb4\x94\xcc\xe37A\x95\xcc\x90U\xd1\xc8~x\xcdY\x96\xd9\x967\x87\xe7\xb6\x98\"l5\xf0\x17K\r\xf3\xf8\x91\xcf\x99lI\b\xe889d\x01,\xe2\x15]\xd6\xb3\xf4kb\xcay$\xeba\x13\x90\x98\xb2\"\xbc\xf4/\xeah1Z\x81ju\x16i\xd6%\xe5\xe4\xe4_\x96?\x1e\xe2\x1e\xb7N\xf3\xcd\xf9\x8f7\xb2?\r\xac\xc9\xd9\xe5\xd4\xbe\xbf\x91J\x8d,\x9f\x19fxu\xd1\r\xeb\xddkT\x03\xf6j\xe8}\x8a/\x067\xcdH\x82\x8f,W\xc3,\x19\xc3#9(O\xa5\x14\xa9#l\x1b\x17\xe7R\x93^J\xf4v\x86\xa6\xcfHC\x10\xec\xd1\xe8\x98l\x12_\xb7B\xfd2\xfc]\x87\xe0\x8aj\x8e\r\x94X\x02\xd7\x7f\x15\xb4G\t\x8b\xd5c\x9c\x0e\xba\\o\xd2\x132\xf6\xddX\x8b\x17\"=\xa7l-\xf5\x91\v_\xf9\xfc\x01\x9f\xd9&', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x157, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85+\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\xd0\x02\xaf\x02k\x9en\r\xca\x00\x89\xfdL\xd0\x9c\xf8\r\xbb\xe9Q\xb2\x1f5y\x8b\n\xb6hx\xc0\x9d\"\x8b7\x88\\\x10\x8a\xcb\xee\xcd\xbe\x06Kz\xd8\xd79\x9f\xd5\x18j\'t\x8f$\x88\'\x06\x8f\x89\x0fOPZ\x04\xc4$\xd7%\xc8\x1exa\xe1 --\xc4\xc94\x1dWH\xff\x9eS\x9e\rIT\x8fz\x1c\xcf^\xac\x9a\xa0\x92L\a\x00\x00\x00\xf3|c\xccjn1\xa7}\x1f\xad\x05\x83h\xae\xd5\xe3\xc1M\x89\x96\x87\n\v\t\xd0l\x97\x04\x98\v\xb4GxB\xb1\xed.\x8f%\x01\xb2_\xbc\\^\xe6}\x8bnN\xc7G\xe9]\x03\xf6x\xd7\x1a-\xa34\x92\xf8\xd4\x87\xeeB|Y\xf6\xe7\ni\xa9J}\x987\xd6\x02c\xd68\aM\xfa\x04\xa4V\x04\tD\xb7\x02\"gFh\xc7D\xb7\xba\xda\xad4uXO 5|\x84 \xc1IO\x8d\r4 *\xfb5\xccVp\xe2@\xbe\xba\x96SS\xaf\xe9F\xc0\xc1\xb5\t\x1d9U\xc8\xc8_\xf1\xc7q|\n'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcf\x01.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb49\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff, 0xee00}}, 0x41c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b1b, &(0x7f0000000040)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000000c06010100000000000000000a0000040900faff72797a3000590f8a34e1410209372ea6e00000000900020073797a3100000000050001000700000005000100070000000500010007000000"], 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x8d0) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x8, r8, 0x0, r3}, 0x10) (async) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x11, r3, 0x100000000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000002c0)={0x1c, r2, 0x6d5f37783c783095, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x1c}}, 0x4004000) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pwritev(r9, &(0x7f00000015c0)=[{&(0x7f0000000100)="b1eb0faad279bff5667d14bacf38e966e6598ea9ed29956ea33530ce8dfb81e5f13d9549ce1dc3f17d5d7895bee8edf8612ece5a4461a49838b97826b6e8308ebfb1280c27d4dfb1946cd1c915e1467ea6bcd035eab0b6b72879d77dac8e9ca892b00bbc4c73cc786bf349336dfbff65b8c8fcdcff53f37f146b2d5edf81255d2ca2a65a3e", 0x85}, {&(0x7f00000001c0)="7479910d5d97297b544a78486b5bb7887abcc18fed96fe272df12f7037d4c4194d5e00a1539c34365365336e60bfde6d31b3060e1e7989a7c5481b7334fa5e78447c377bafe503f3049f7a9569642469e5cc46a3e89c719814cc5ee08202847f6a5d82f4fbc79e8e4fae15637e1327ccfe593960caface3e89fe4894a4df1f31dbaa87c9f335073d88969d348def5dbbc8d6768ff889181f52dcb9c6b287a308a176180aeaefa426f64f0f5451629122a0e40020afabb7b1c9c373c6a7d4684445877a632fb42bc948136b150ec4e80a8c73dfeb2873c9936d764d6ffea91bb33a1dececf42a", 0xe6}, {&(0x7f0000000040)="0fa2cc5a6fe366245e552cfac04315d89bc0444de4cc2cbd7bfb144f753e75a4f25c416ae1775845fd2d5500734da85575869d0b45d8ea32084275890addf0295131ab63776ec882d260052a65dd2e4f05b25b2848d6", 0x56}, {&(0x7f00000013c0)="84164a930bc417c6433647f2f46426ab704dc1fd01640985ef0426b26fa1350d7e1f30f0d9bbcc05cd012aca96f74be1b2ae1bc7ea71a534ef6b45609dd22a907c0430d589c32fe00b091c", 0x4b}, {&(0x7f00000014c0)}], 0x4a, 0x4, 0x0) (async) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000480)=0x28) (async) socket(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) 30.128039199s ago: executing program 3 (id=196): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000040) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0\x00'}]}, 0x34}}, 0x488c1) 30.049823782s ago: executing program 32 (id=196): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000040) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0\x00'}]}, 0x34}}, 0x488c1) 22.772407945s ago: executing program 4 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r1) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 21.689909122s ago: executing program 33 (id=95): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new0default user:s'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfff5, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r2, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r2, 0x1c, 0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000020000000000008e"], 0x0, 0x2d, 0x0, 0x1, 0xf}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r6 = getpgrp(0x0) syz_emit_ethernet(0xf9, &(0x7f0000000200)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @udp={{0x2d, 0x4, 0x0, 0x36, 0xeb, 0x64, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @local, {[@noop, @timestamp_prespec={0x44, 0x34, 0x8c, 0x3, 0xf, [{@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x3354}, {@local, 0x8}, {@private=0xa010101, 0x1}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x6}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xb, 0x3, [{0x7, 0x5, '\ts?'}]}, @cipso={0x86, 0x37, 0x1, [{0x1, 0x6, "5526bb51"}, {0x5, 0xe, "8a33ea8ced197a00f6dad571"}, {0x1, 0xd, "2c90592782a258a80e65db"}, {0x6, 0x10, "371fb710891256ebd3cc1877efb5"}]}, @cipso={0x86, 0x16, 0x3, [{0x0, 0x9, "6667a10eaaacd6"}, {0x7, 0x7, "46e0ebeaa3"}]}, @end, @generic={0x44, 0xe, "d145f73cef5dc54404dd1b33"}]}}, {0x4e22, 0x4e21, 0x37, 0x0, @opaque="a7b028674415ac4871181f308b1928e7a9fad90b2c7224ae2d04e05b8209474c30521530daffdebaa10a33b2a846a2"}}}}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r6) prctl$PR_SET_PTRACER(0x59616d61, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000ac0)={r5, 0xd0}, &(0x7f0000000b00)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r5, 0x7}, 0x8) 21.13811738s ago: executing program 5 (id=291): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x20, r0, 0x0) creat(&(0x7f0000001200)='./file1\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r2 = socket(0xf, 0x80000, 0x10000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) fchmodat(r3, &(0x7f0000000a80)='./file1\x00', 0x100) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x33, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x4000814) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x8000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x4}}}, 0x24}}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x10000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x38}}, 0x4000400) sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000300)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)="f133bba79e7e5224be20d493c5e3b88db394d0cd6e89489a699faccd7e6a5b3a40a4d8c5f6f0e6cda16f2ebee0e1aa5b9a7be21629046c87ccb57f1135c3817a2db827c2cc344a556d37dfb57a5151cf14124c277a6e2bdcff5ccebc88dd730089ce77c6745c8d78792a8d36baa8292f54d7750c6f899345a4a60c3a6f3f4baf52976328acc58dbb7b86574aee6964d4b396ca0e92e13faaf4654be1f618eb6bd4f7cc971546c93edc3a54a7881edf71e34cbe1c08ea20c21666026350f09dd5ac3a6eee1a78a68c4c0c568c34cc07900462d2566e30f7bf2db6e4f89c5893ee4f", 0xe1}, {&(0x7f0000000480)="3228a79ee7877265b6cb9634616adfce5c6d379d32bd2a466d8568d36458", 0x1e}, {&(0x7f0000000500)="c0079bbfb237ee07ac89f1364a029d8e5896d6ca05171017618a01a4f9095f315e01ccfb06450ad881ef24c9b8c95dc1c2f3f5859bac2e7fa42f6f4c43d1bda5fe7a4cd2fce890c651b5f8b5dfde859bade0dfd3e4a9caea0924aa7c94d0ff50038213a10dcf5ab0d90ab4f63e99df43fa", 0x71}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="780000000000000008010000d19a0000d39d5380b6fd000eb0e5a8c017260ffb76f8e3ef2ea966f89e221f2345a079cb6ed68773e497e2b80a6d8bad09bf0f30afd098d84bfc7c4afc122f118dbffa681e4b97075f7913c305ebb5893be709a7e92376e5f0b3d1cb3a3153c27ca6acad3774cf91a300000010000000000000002900000007000000"], 0x88}}, {{&(0x7f0000000680)=@un=@abs={0xf943d771d5fb72a0, 0x0, 0x4e20}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="b73765b70a75c0a6f4ef506e2c55fec190b68d045ee4b8ed552c62779f2d5a4d2a2adc92efc7eef8d65308037751b4345be20eb84ae694572c4b6ae1a4036135109d1c749cf6c2d7c151384e", 0x4c}, {&(0x7f00000007c0)="27d6b57d778c9232a72b71867d03eed29f00a8776fada396d73f4d623f89989eecb34dda4ec40b134b59cf0490cf29c82820b1c0b91a7d8cd092cd0c608d419731881d65b67a7e7b3c690d6a8d4b716468aed8996a92fb350db06f4784b3cc56cbcba444fbc10ae242d8e45221654d87aada5ecf93f325ab9ed4873c8117523f0cc458d2769ec4c3169c4fde360074c522707ac0d35918a57fd0fb61555ee656a19cc0b187bcfdee5a35ac4e69e344e0d868cc1fa98fc5b3c5a3a2401aa292b564b2b99bb6a7a84a6de163de6ae6d2e14ace", 0xd2}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="00010000000000000a010000fdffffff87030e2279ea82b63e97f1713a2b1eef9cbbcd47c483e11af5c10b1ac64fdba193f33be38af904ca2630b7a4a90e83d092da0ea48524158468f12d0e15d69ac49ca518b88ed037a43bd049ac939d8a659af2f857b3d0b42fdc03232dc652c31f4ec4cce0405e4aedd814648bb25f078e6a76311b4892063a2c50384d58a28473b7a5b2a1806f978736dff7d89afff4d4ccbfd98172c3961cedfe0aabb497a2c4293c97940b1012917c25dd60450ecf77ad75a9be5d660545fcebbd0660bc6a3c36ba1c66948bec33ca3a52b6c89fd94002ce29542c280fa4486a74075be6e3b50d7814f4b17040181b25dac1c6f5b430"], 0x100}}], 0x2, 0x0) read$dsp(r6, 0x0, 0x4c) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)="cfbd3eeac953c910c67337fe55f5bf15", 0x10}, 0x1, 0x0, 0x0, 0x2040010}, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x101100, 0x0) read$proc_mixer(r9, &(0x7f00000002c0)=""/254, 0xfe) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r6, &(0x7f0000000200)=""/168, 0xa8) 20.689634958s ago: executing program 5 (id=291): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x20, r0, 0x0) creat(&(0x7f0000001200)='./file1\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r2 = socket(0xf, 0x80000, 0x10000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) fchmodat(r3, &(0x7f0000000a80)='./file1\x00', 0x100) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x33, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x4000814) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x8000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x4}}}, 0x24}}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x10000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x38}}, 0x4000400) sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000300)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)="f133bba79e7e5224be20d493c5e3b88db394d0cd6e89489a699faccd7e6a5b3a40a4d8c5f6f0e6cda16f2ebee0e1aa5b9a7be21629046c87ccb57f1135c3817a2db827c2cc344a556d37dfb57a5151cf14124c277a6e2bdcff5ccebc88dd730089ce77c6745c8d78792a8d36baa8292f54d7750c6f899345a4a60c3a6f3f4baf52976328acc58dbb7b86574aee6964d4b396ca0e92e13faaf4654be1f618eb6bd4f7cc971546c93edc3a54a7881edf71e34cbe1c08ea20c21666026350f09dd5ac3a6eee1a78a68c4c0c568c34cc07900462d2566e30f7bf2db6e4f89c5893ee4f", 0xe1}, {&(0x7f0000000480)="3228a79ee7877265b6cb9634616adfce5c6d379d32bd2a466d8568d36458", 0x1e}, {&(0x7f0000000500)="c0079bbfb237ee07ac89f1364a029d8e5896d6ca05171017618a01a4f9095f315e01ccfb06450ad881ef24c9b8c95dc1c2f3f5859bac2e7fa42f6f4c43d1bda5fe7a4cd2fce890c651b5f8b5dfde859bade0dfd3e4a9caea0924aa7c94d0ff50038213a10dcf5ab0d90ab4f63e99df43fa", 0x71}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="780000000000000008010000d19a0000d39d5380b6fd000eb0e5a8c017260ffb76f8e3ef2ea966f89e221f2345a079cb6ed68773e497e2b80a6d8bad09bf0f30afd098d84bfc7c4afc122f118dbffa681e4b97075f7913c305ebb5893be709a7e92376e5f0b3d1cb3a3153c27ca6acad3774cf91a300000010000000000000002900000007000000"], 0x88}}, {{&(0x7f0000000680)=@un=@abs={0xf943d771d5fb72a0, 0x0, 0x4e20}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="b73765b70a75c0a6f4ef506e2c55fec190b68d045ee4b8ed552c62779f2d5a4d2a2adc92efc7eef8d65308037751b4345be20eb84ae694572c4b6ae1a4036135109d1c749cf6c2d7c151384e", 0x4c}, {&(0x7f00000007c0)="27d6b57d778c9232a72b71867d03eed29f00a8776fada396d73f4d623f89989eecb34dda4ec40b134b59cf0490cf29c82820b1c0b91a7d8cd092cd0c608d419731881d65b67a7e7b3c690d6a8d4b716468aed8996a92fb350db06f4784b3cc56cbcba444fbc10ae242d8e45221654d87aada5ecf93f325ab9ed4873c8117523f0cc458d2769ec4c3169c4fde360074c522707ac0d35918a57fd0fb61555ee656a19cc0b187bcfdee5a35ac4e69e344e0d868cc1fa98fc5b3c5a3a2401aa292b564b2b99bb6a7a84a6de163de6ae6d2e14ace", 0xd2}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x100}}], 0x2, 0x0) read$dsp(r6, 0x0, 0x4c) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)="cfbd3eeac953c910c67337fe55f5bf15", 0x10}, 0x1, 0x0, 0x0, 0x2040010}, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x101100, 0x0) read$proc_mixer(r9, &(0x7f00000002c0)=""/254, 0xfe) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r6, &(0x7f0000000200)=""/168, 0xa8) 20.259148086s ago: executing program 5 (id=291): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x20, r0, 0x0) creat(&(0x7f0000001200)='./file1\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r2 = socket(0xf, 0x80000, 0x10000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) fchmodat(r3, &(0x7f0000000a80)='./file1\x00', 0x100) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x33, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x4000814) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x8000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x4}}}, 0x24}}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x10000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x38}}, 0x4000400) sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000300)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)="f133bba79e7e5224be20d493c5e3b88db394d0cd6e89489a699faccd7e6a5b3a40a4d8c5f6f0e6cda16f2ebee0e1aa5b9a7be21629046c87ccb57f1135c3817a2db827c2cc344a556d37dfb57a5151cf14124c277a6e2bdcff5ccebc88dd730089ce77c6745c8d78792a8d36baa8292f54d7750c6f899345a4a60c3a6f3f4baf52976328acc58dbb7b86574aee6964d4b396ca0e92e13faaf4654be1f618eb6bd4f7cc971546c93edc3a54a7881edf71e34cbe1c08ea20c21666026350f09dd5ac3a6eee1a78a68c4c0c568c34cc07900462d2566e30f7bf2db6e4f89c5893ee4f", 0xe1}, {&(0x7f0000000480)="3228a79ee7877265b6cb9634616adfce5c6d379d32bd2a466d8568d36458", 0x1e}, {&(0x7f0000000500)="c0079bbfb237ee07ac89f1364a029d8e5896d6ca05171017618a01a4f9095f315e01ccfb06450ad881ef24c9b8c95dc1c2f3f5859bac2e7fa42f6f4c43d1bda5fe7a4cd2fce890c651b5f8b5dfde859bade0dfd3e4a9caea0924aa7c94d0ff50038213a10dcf5ab0d90ab4f63e99df43fa", 0x71}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="780000000000000008010000d19a0000d39d5380b6fd000eb0e5a8c017260ffb76f8e3ef2ea966f89e221f2345a079cb6ed68773e497e2b80a6d8bad09bf0f30afd098d84bfc7c4afc122f118dbffa681e4b97075f7913c305ebb5893be709a7e92376e5f0b3d1cb3a3153c27ca6acad3774cf91a300000010000000000000002900000007000000"], 0x88}}, {{&(0x7f0000000680)=@un=@abs={0xf943d771d5fb72a0, 0x0, 0x4e20}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="b73765b70a75c0a6f4ef506e2c55fec190b68d045ee4b8ed552c62779f2d5a4d2a2adc92efc7eef8d65308037751b4345be20eb84ae694572c4b6ae1a4036135109d1c749cf6c2d7c151384e", 0x4c}, {&(0x7f00000007c0)="27d6b57d778c9232a72b71867d03eed29f00a8776fada396d73f4d623f89989eecb34dda4ec40b134b59cf0490cf29c82820b1c0b91a7d8cd092cd0c608d419731881d65b67a7e7b3c690d6a8d4b716468aed8996a92fb350db06f4784b3cc56cbcba444fbc10ae242d8e45221654d87aada5ecf93f325ab9ed4873c8117523f0cc458d2769ec4c3169c4fde360074c522707ac0d35918a57fd0fb61555ee656a19cc0b187bcfdee5a35ac4e69e344e0d868cc1fa98fc5b3c5a3a2401aa292b564b2b99bb6a7a84a6de163de6ae6d2e14ace", 0xd2}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x100}}], 0x2, 0x0) read$dsp(r6, 0x0, 0x4c) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)="cfbd3eeac953c910c67337fe55f5bf15", 0x10}, 0x1, 0x0, 0x0, 0x2040010}, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x101100, 0x0) read$proc_mixer(r9, &(0x7f00000002c0)=""/254, 0xfe) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r6, &(0x7f0000000200)=""/168, 0xa8) 18.879618868s ago: executing program 5 (id=291): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x20, r0, 0x0) creat(&(0x7f0000001200)='./file1\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r2 = socket(0xf, 0x80000, 0x10000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) fchmodat(r3, &(0x7f0000000a80)='./file1\x00', 0x100) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x33, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x4000814) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x8000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x4}}}, 0x24}}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x10000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x38}}, 0x4000400) sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000300)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)="f133bba79e7e5224be20d493c5e3b88db394d0cd6e89489a699faccd7e6a5b3a40a4d8c5f6f0e6cda16f2ebee0e1aa5b9a7be21629046c87ccb57f1135c3817a2db827c2cc344a556d37dfb57a5151cf14124c277a6e2bdcff5ccebc88dd730089ce77c6745c8d78792a8d36baa8292f54d7750c6f899345a4a60c3a6f3f4baf52976328acc58dbb7b86574aee6964d4b396ca0e92e13faaf4654be1f618eb6bd4f7cc971546c93edc3a54a7881edf71e34cbe1c08ea20c21666026350f09dd5ac3a6eee1a78a68c4c0c568c34cc07900462d2566e30f7bf2db6e4f89c5893ee4f", 0xe1}, {&(0x7f0000000480)="3228a79ee7877265b6cb9634616adfce5c6d379d32bd2a466d8568d36458", 0x1e}, {&(0x7f0000000500)="c0079bbfb237ee07ac89f1364a029d8e5896d6ca05171017618a01a4f9095f315e01ccfb06450ad881ef24c9b8c95dc1c2f3f5859bac2e7fa42f6f4c43d1bda5fe7a4cd2fce890c651b5f8b5dfde859bade0dfd3e4a9caea0924aa7c94d0ff50038213a10dcf5ab0d90ab4f63e99df43fa", 0x71}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="780000000000000008010000d19a0000d39d5380b6fd000eb0e5a8c017260ffb76f8e3ef2ea966f89e221f2345a079cb6ed68773e497e2b80a6d8bad09bf0f30afd098d84bfc7c4afc122f118dbffa681e4b97075f7913c305ebb5893be709a7e92376e5f0b3d1cb3a3153c27ca6acad3774cf91a300000010000000000000002900000007000000"], 0x88}}, {{&(0x7f0000000680)=@un=@abs={0xf943d771d5fb72a0, 0x0, 0x4e20}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="b73765b70a75c0a6f4ef506e2c55fec190b68d045ee4b8ed552c62779f2d5a4d2a2adc92efc7eef8d65308037751b4345be20eb84ae694572c4b6ae1a4036135109d1c749cf6c2d7c151384e", 0x4c}, {&(0x7f00000007c0)="27d6b57d778c9232a72b71867d03eed29f00a8776fada396d73f4d623f89989eecb34dda4ec40b134b59cf0490cf29c82820b1c0b91a7d8cd092cd0c608d419731881d65b67a7e7b3c690d6a8d4b716468aed8996a92fb350db06f4784b3cc56cbcba444fbc10ae242d8e45221654d87aada5ecf93f325ab9ed4873c8117523f0cc458d2769ec4c3169c4fde360074c522707ac0d35918a57fd0fb61555ee656a19cc0b187bcfdee5a35ac4e69e344e0d868cc1fa98fc5b3c5a3a2401aa292b564b2b99bb6a7a84a6de163de6ae6d2e14ace", 0xd2}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="00010000000000000a010000fdffffff87030e2279ea82b63e97f1713a2b1eef9cbbcd47c483e11af5c10b1ac64fdba193f33be38af904ca2630b7a4a90e83d092da0ea48524158468f12d0e15d69ac49ca518b88ed037a43bd049ac939d8a659af2f857b3d0b42fdc03232dc652c31f4ec4cce0405e4aedd814648bb25f078e6a76311b4892063a2c50384d58a28473b7a5b2a1806f978736dff7d89afff4d4ccbfd98172c3961cedfe0aabb497a2c4293c97940b1012917c25dd60450ecf77ad75a9be5d660545fcebbd0660bc6a3c36ba1c66948bec33ca3a52b6c89fd94002ce29542c280fa4486a74075be6e3b50d7814f4b17040181b25dac1c6f5b430"], 0x100}}], 0x2, 0x0) read$dsp(r6, 0x0, 0x4c) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)="cfbd3eeac953c910c67337fe55f5bf15", 0x10}, 0x1, 0x0, 0x0, 0x2040010}, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x101100, 0x0) read$proc_mixer(r9, &(0x7f00000002c0)=""/254, 0xfe) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r6, &(0x7f0000000200)=""/168, 0xa8) 15.11534722s ago: executing program 4 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r1) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12.716994106s ago: executing program 5 (id=291): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x20, r0, 0x0) creat(&(0x7f0000001200)='./file1\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r2 = socket(0xf, 0x80000, 0x10000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) fchmodat(r3, &(0x7f0000000a80)='./file1\x00', 0x100) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x33, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x4000814) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x8000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x4}}}, 0x24}}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x10000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x38}}, 0x4000400) sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000300)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)="f133bba79e7e5224be20d493c5e3b88db394d0cd6e89489a699faccd7e6a5b3a40a4d8c5f6f0e6cda16f2ebee0e1aa5b9a7be21629046c87ccb57f1135c3817a2db827c2cc344a556d37dfb57a5151cf14124c277a6e2bdcff5ccebc88dd730089ce77c6745c8d78792a8d36baa8292f54d7750c6f899345a4a60c3a6f3f4baf52976328acc58dbb7b86574aee6964d4b396ca0e92e13faaf4654be1f618eb6bd4f7cc971546c93edc3a54a7881edf71e34cbe1c08ea20c21666026350f09dd5ac3a6eee1a78a68c4c0c568c34cc07900462d2566e30f7bf2db6e4f89c5893ee4f", 0xe1}, {&(0x7f0000000480)="3228a79ee7877265b6cb9634616adfce5c6d379d32bd2a466d8568d36458", 0x1e}, {&(0x7f0000000500)="c0079bbfb237ee07ac89f1364a029d8e5896d6ca05171017618a01a4f9095f315e01ccfb06450ad881ef24c9b8c95dc1c2f3f5859bac2e7fa42f6f4c43d1bda5fe7a4cd2fce890c651b5f8b5dfde859bade0dfd3e4a9caea0924aa7c94d0ff50038213a10dcf5ab0d90ab4f63e99df43fa", 0x71}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="780000000000000008010000d19a0000d39d5380b6fd000eb0e5a8c017260ffb76f8e3ef2ea966f89e221f2345a079cb6ed68773e497e2b80a6d8bad09bf0f30afd098d84bfc7c4afc122f118dbffa681e4b97075f7913c305ebb5893be709a7e92376e5f0b3d1cb3a3153c27ca6acad3774cf91a300000010000000000000002900000007000000"], 0x88}}, {{&(0x7f0000000680)=@un=@abs={0xf943d771d5fb72a0, 0x0, 0x4e20}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="b73765b70a75c0a6f4ef506e2c55fec190b68d045ee4b8ed552c62779f2d5a4d2a2adc92efc7eef8d65308037751b4345be20eb84ae694572c4b6ae1a4036135109d1c749cf6c2d7c151384e", 0x4c}, {&(0x7f00000007c0)="27d6b57d778c9232a72b71867d03eed29f00a8776fada396d73f4d623f89989eecb34dda4ec40b134b59cf0490cf29c82820b1c0b91a7d8cd092cd0c608d419731881d65b67a7e7b3c690d6a8d4b716468aed8996a92fb350db06f4784b3cc56cbcba444fbc10ae242d8e45221654d87aada5ecf93f325ab9ed4873c8117523f0cc458d2769ec4c3169c4fde360074c522707ac0d35918a57fd0fb61555ee656a19cc0b187bcfdee5a35ac4e69e344e0d868cc1fa98fc5b3c5a3a2401aa292b564b2b99bb6a7a84a6de163de6ae6d2e14ace", 0xd2}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x100}}], 0x2, 0x0) read$dsp(r6, 0x0, 0x4c) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)="cfbd3eeac953c910c67337fe55f5bf15", 0x10}, 0x1, 0x0, 0x0, 0x2040010}, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x101100, 0x0) read$proc_mixer(r9, &(0x7f00000002c0)=""/254, 0xfe) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r6, &(0x7f0000000200)=""/168, 0xa8) 7.410601462s ago: executing program 4 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r1) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 6.059334516s ago: executing program 5 (id=291): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x20, r0, 0x0) creat(&(0x7f0000001200)='./file1\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r2 = socket(0xf, 0x80000, 0x10000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) fchmodat(r3, &(0x7f0000000a80)='./file1\x00', 0x100) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x33, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x4000814) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x8000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x4}}}, 0x24}}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x10000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x38}}, 0x4000400) sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000300)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)="f133bba79e7e5224be20d493c5e3b88db394d0cd6e89489a699faccd7e6a5b3a40a4d8c5f6f0e6cda16f2ebee0e1aa5b9a7be21629046c87ccb57f1135c3817a2db827c2cc344a556d37dfb57a5151cf14124c277a6e2bdcff5ccebc88dd730089ce77c6745c8d78792a8d36baa8292f54d7750c6f899345a4a60c3a6f3f4baf52976328acc58dbb7b86574aee6964d4b396ca0e92e13faaf4654be1f618eb6bd4f7cc971546c93edc3a54a7881edf71e34cbe1c08ea20c21666026350f09dd5ac3a6eee1a78a68c4c0c568c34cc07900462d2566e30f7bf2db6e4f89c5893ee4f", 0xe1}, {&(0x7f0000000480)="3228a79ee7877265b6cb9634616adfce5c6d379d32bd2a466d8568d36458", 0x1e}, {&(0x7f0000000500)="c0079bbfb237ee07ac89f1364a029d8e5896d6ca05171017618a01a4f9095f315e01ccfb06450ad881ef24c9b8c95dc1c2f3f5859bac2e7fa42f6f4c43d1bda5fe7a4cd2fce890c651b5f8b5dfde859bade0dfd3e4a9caea0924aa7c94d0ff50038213a10dcf5ab0d90ab4f63e99df43fa", 0x71}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="780000000000000008010000d19a0000d39d5380b6fd000eb0e5a8c017260ffb76f8e3ef2ea966f89e221f2345a079cb6ed68773e497e2b80a6d8bad09bf0f30afd098d84bfc7c4afc122f118dbffa681e4b97075f7913c305ebb5893be709a7e92376e5f0b3d1cb3a3153c27ca6acad3774cf91a300000010000000000000002900000007000000"], 0x88}}, {{&(0x7f0000000680)=@un=@abs={0xf943d771d5fb72a0, 0x0, 0x4e20}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="b73765b70a75c0a6f4ef506e2c55fec190b68d045ee4b8ed552c62779f2d5a4d2a2adc92efc7eef8d65308037751b4345be20eb84ae694572c4b6ae1a4036135109d1c749cf6c2d7c151384e", 0x4c}, {&(0x7f00000007c0)="27d6b57d778c9232a72b71867d03eed29f00a8776fada396d73f4d623f89989eecb34dda4ec40b134b59cf0490cf29c82820b1c0b91a7d8cd092cd0c608d419731881d65b67a7e7b3c690d6a8d4b716468aed8996a92fb350db06f4784b3cc56cbcba444fbc10ae242d8e45221654d87aada5ecf93f325ab9ed4873c8117523f0cc458d2769ec4c3169c4fde360074c522707ac0d35918a57fd0fb61555ee656a19cc0b187bcfdee5a35ac4e69e344e0d868cc1fa98fc5b3c5a3a2401aa292b564b2b99bb6a7a84a6de163de6ae6d2e14ace", 0xd2}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x100}}], 0x2, 0x0) read$dsp(r6, 0x0, 0x4c) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)="cfbd3eeac953c910c67337fe55f5bf15", 0x10}, 0x1, 0x0, 0x0, 0x2040010}, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x101100, 0x0) read$proc_mixer(r9, &(0x7f00000002c0)=""/254, 0xfe) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r6, &(0x7f0000000200)=""/168, 0xa8) 2.09970861s ago: executing program 1 (id=417): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="400308"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0xf8, 0x2, &(0x7f0000000080)={0x22, "53815fda5cddd0761f2ed60e48746c6dcf6cfd8ead46eb19aa390d74794dfde636"}}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 769.605273ms ago: executing program 2 (id=436): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x4196, 0x3, 0x6, 0x1}}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x4196, 0x3, 0x6, 0x1}}) (async) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) (async) 748.701454ms ago: executing program 4 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r1) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 261.768145ms ago: executing program 1 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff8500fba2f130000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000), 0x80800) 260.541838ms ago: executing program 2 (id=438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES32], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x12) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004401}, 0x44084) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x20000006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0xe, 0x2, 0x0, "11010000001400000100b64c00005c4b7c15000000000800"}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 180.45006ms ago: executing program 1 (id=439): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 178.860752ms ago: executing program 2 (id=440): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xffffffffffffffb2) syz_emit_vhci(0x0, 0x7) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xffffffffffffffb2) (async) syz_emit_vhci(0x0, 0x7) (async) 178.397827ms ago: executing program 1 (id=441): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200d0af00000000000040900000490000008a6f4754b36ecdbefcfee61bb4f1e79548a9bb61f70967bed55cdd309a636ac094405dbb2bca26ba6d6cd45092563ed893283fefacb8a990f8b53e82a9aa1a4d9cf5eb01c62adbf7337142b26bc483d2965fca3f83b257be7cfb58367244af5d34aeea2b0af09c272f01a06863c50edba908c0ffec4c33563c71aaaf8049beb6ee03108c11d48f67fb62ef9d7ad25a9fd38db73ef6"], 0x0, 0x26, 0x0, 0x1}, 0x28) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x4) quotactl_fd$Q_SYNC(r1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 120.369831ms ago: executing program 1 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0, &(0x7f0000000280)=0x0) unshare(0x22020600) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 396.851µs ago: executing program 2 (id=444): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) 109.434µs ago: executing program 2 (id=445): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002740)={0x18c, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@generic="73beb769bd2abd5c8df88ab5a54eb5499e7523317e", @generic="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", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x12, 0x18, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1c, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, 0x18c}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = syz_io_uring_setup(0x110b, &(0x7f0000000240)={0x0, 0xd736, 0x0, 0x3, 0xbf7ffffa}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f0000000300)=0x84615c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) io_uring_enter(r0, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x141600, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f"]) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000c95d"}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x3}) socket(0x18, 0x80000, 0x2) r6 = syz_io_uring_setup(0x230, &(0x7f0000000580)={0x0, 0xacf1, 0x10100, 0x201}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r6, 0x207a98, 0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001914"], 0x10}}, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 0s ago: executing program 1 (id=446): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) lseek(r4, 0x4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffec3, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="ef"}) socket$packet(0x11, 0x2, 0x300) 0s ago: executing program 1 (id=447): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r9) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc16a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x6, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x2c0, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x280, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xfff1}}, @TCA_MATCHALL_ACT={0x25c, 0x2, [@m_sample={0xb8, 0x18, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x401}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}]}, {0x63, 0x6, "6f5b506598dcd7f2e0ecceb2777e80a90a86b73ff101a34898e762596e20eb185c0599a1267acee3089cd6e86595da9984f70ab4f2c41f6a602f7569dc1a2f676fe47db272ab5397f4700afef712a320d7fdb8034dd37a94eff740d46fab9f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x1a0, 0x10, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '##\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x5, 0x6, 0x5, 0xb}}, @TCA_DEF_PARMS={0x18, 0x2, {0x100, 0x2, 0x2, 0x6, 0x5}}, @TCA_DEF_DATA={0xb, 0x3, '$-&$(-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x7, 0x56, 0xffffffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x8, 0x1, 0x8caf, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x6, 0x20000000, 0x2, 0xa}}]}, {0xe5, 0x6, "e112d5fcf5f7b16c8f2ea8f308c36d70c695f817ddfb2d936b92095a726372efcbebaa1b04a8668834b88d779ff110773f544ad22f0584260368c918e0a9ce5db59b686824646595efaa605b218bb0acd901ada7a2707dd575286103fac6b41b8707572ab54fee7ce8b15c0e861fbe364c96123cb9f8ab5a8b7b45e6ff049825971b27cb268c6475575e2d308d864ea5de326d1d14d07972bf84c5326af19fcdce26391e0818f5a120583ae9b53d456e7b548e64069c994df09748ff6973ba6dccbbfd6c03696c3311399d60168727ba24d5db0609dd862fb67b7d1013e7e3cd78"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x2c0}}, 0x24044094) ioctl$int_in(0xffffffffffffffff, 0x73, &(0x7f0000000040)=0x80) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:5666' (ED25519) to the list of known hosts. [ 45.166949][ T40] audit: type=1400 audit(1758169603.806:62): avc: denied { name_bind } for pid=5914 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.200470][ T40] audit: type=1400 audit(1758169603.836:63): avc: denied { write } for pid=5915 comm="sh" path="pipe:[8284]" dev="pipefs" ino=8284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.222514][ T40] audit: type=1400 audit(1758169603.866:64): avc: denied { execute } for pid=5915 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.231965][ T40] audit: type=1400 audit(1758169603.866:65): avc: denied { execute_no_trans } for pid=5915 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.598096][ T5915] cgroup: Unknown subsys name 'net' [ 47.601338][ T40] audit: type=1400 audit(1758169606.236:66): avc: denied { mounton } for pid=5915 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.754658][ T5915] cgroup: Unknown subsys name 'cpuset' [ 47.760198][ T5915] cgroup: Unknown subsys name 'rlimit' [ 47.998843][ T5951] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.685598][ T5915] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.134413][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.134430][ T40] audit: type=1400 audit(1758169610.776:80): avc: denied { execmem } for pid=5959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.416941][ T40] audit: type=1400 audit(1758169611.056:81): avc: denied { create } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.427552][ T40] audit: type=1400 audit(1758169611.056:82): avc: denied { read write } for pid=5963 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.435967][ T40] audit: type=1400 audit(1758169611.056:83): avc: denied { open } for pid=5963 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.451242][ T40] audit: type=1400 audit(1758169611.066:84): avc: denied { ioctl } for pid=5963 comm="syz-executor" path="socket:[5673]" dev="sockfs" ino=5673 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.461690][ T5969] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.462661][ T5970] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.464777][ T5969] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.467220][ T5970] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.469120][ T5969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.472323][ T5977] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.474335][ T5969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.479188][ T5975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.480381][ T5977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.481316][ T5969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.481937][ T5975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.484375][ T5969] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.484390][ T5977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.487069][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.490745][ T5969] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.491267][ T40] audit: type=1400 audit(1758169611.126:85): avc: denied { read } for pid=5963 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.494586][ T5970] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.495366][ T40] audit: type=1400 audit(1758169611.126:86): avc: denied { open } for pid=5963 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.497986][ T5970] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.500059][ T5975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.504204][ T40] audit: type=1400 audit(1758169611.136:87): avc: denied { mounton } for pid=5963 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.516599][ T5974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.529301][ T5974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.745752][ T40] audit: type=1400 audit(1758169611.386:88): avc: denied { module_request } for pid=5976 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.808121][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 52.862706][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 52.870362][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 52.999156][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 53.074570][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.077403][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.080376][ T5976] bridge_slave_0: entered allmulticast mode [ 53.084834][ T5976] bridge_slave_0: entered promiscuous mode [ 53.125760][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.128754][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.131753][ T5963] bridge_slave_0: entered allmulticast mode [ 53.135510][ T5963] bridge_slave_0: entered promiscuous mode [ 53.153322][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.155648][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.157934][ T5965] bridge_slave_0: entered allmulticast mode [ 53.160711][ T5965] bridge_slave_0: entered promiscuous mode [ 53.165169][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.167425][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.169697][ T5976] bridge_slave_1: entered allmulticast mode [ 53.172561][ T5976] bridge_slave_1: entered promiscuous mode [ 53.198651][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.200965][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.203871][ T5963] bridge_slave_1: entered allmulticast mode [ 53.206608][ T5963] bridge_slave_1: entered promiscuous mode [ 53.209124][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.211933][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.214985][ T5965] bridge_slave_1: entered allmulticast mode [ 53.219282][ T5965] bridge_slave_1: entered promiscuous mode [ 53.293395][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.361290][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.372352][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.378391][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.384940][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.423243][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.576231][ T5965] team0: Port device team_slave_0 added [ 53.605591][ T5976] team0: Port device team_slave_0 added [ 53.609065][ T5963] team0: Port device team_slave_0 added [ 53.612624][ T5965] team0: Port device team_slave_1 added [ 53.615363][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.618091][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.622009][ T5971] bridge_slave_0: entered allmulticast mode [ 53.625654][ T5971] bridge_slave_0: entered promiscuous mode [ 53.630785][ T5976] team0: Port device team_slave_1 added [ 53.638828][ T5963] team0: Port device team_slave_1 added [ 53.665015][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.667860][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.670601][ T5971] bridge_slave_1: entered allmulticast mode [ 53.673965][ T5971] bridge_slave_1: entered promiscuous mode [ 53.790368][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.794077][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.802039][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.830976][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.834564][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.843125][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.848426][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.850747][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.859899][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.864462][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.866862][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.875650][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.892775][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.897012][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.899922][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.910406][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.915967][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.918714][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.928274][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.941908][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.002864][ T5971] team0: Port device team_slave_0 added [ 54.086490][ T5971] team0: Port device team_slave_1 added [ 54.092251][ T5965] hsr_slave_0: entered promiscuous mode [ 54.095274][ T5965] hsr_slave_1: entered promiscuous mode [ 54.118541][ T5963] hsr_slave_0: entered promiscuous mode [ 54.121249][ T5963] hsr_slave_1: entered promiscuous mode [ 54.123666][ T5963] debugfs: 'hsr0' already exists in 'hsr' [ 54.125759][ T5963] Cannot create hsr debugfs directory [ 54.195306][ T5976] hsr_slave_0: entered promiscuous mode [ 54.198127][ T5976] hsr_slave_1: entered promiscuous mode [ 54.200742][ T5976] debugfs: 'hsr0' already exists in 'hsr' [ 54.203211][ T5976] Cannot create hsr debugfs directory [ 54.205888][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.208738][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.220701][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.227057][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.229833][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.238863][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.397162][ T5971] hsr_slave_0: entered promiscuous mode [ 54.399525][ T5971] hsr_slave_1: entered promiscuous mode [ 54.403110][ T5971] debugfs: 'hsr0' already exists in 'hsr' [ 54.405209][ T5971] Cannot create hsr debugfs directory [ 54.532206][ T5974] Bluetooth: hci3: command tx timeout [ 54.532422][ T5972] Bluetooth: hci0: command tx timeout [ 54.541314][ T5972] Bluetooth: hci1: command tx timeout [ 54.611447][ T5972] Bluetooth: hci2: command tx timeout [ 54.699311][ T5965] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.707236][ T5965] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.711775][ T5965] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.722480][ T5965] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.766463][ T5963] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.773985][ T5963] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.779775][ T5963] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.786867][ T5963] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.837688][ T5976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.843722][ T5976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.850451][ T5976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.857476][ T5976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.927163][ T5971] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.947681][ T5971] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.952391][ T5971] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.960739][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.966152][ T5971] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.998396][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.015047][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.020161][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.022616][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.033908][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.036192][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.064577][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.077204][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.079912][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.096859][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.102082][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.105098][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.138850][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.159611][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.174770][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.177823][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.190363][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.192823][ T40] audit: type=1400 audit(1758169613.836:89): avc: denied { sys_module } for pid=5965 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.200169][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.203924][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.208566][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.211613][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.226301][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.229293][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.318880][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.359160][ T5965] veth0_vlan: entered promiscuous mode [ 55.368984][ T5965] veth1_vlan: entered promiscuous mode [ 55.392980][ T5965] veth0_macvtap: entered promiscuous mode [ 55.398576][ T5965] veth1_macvtap: entered promiscuous mode [ 55.420732][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.432190][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.436861][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.453176][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.466407][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.480800][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.485182][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.494742][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.504283][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.546713][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.549367][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.553173][ T5963] veth0_vlan: entered promiscuous mode [ 55.576325][ T5971] veth0_vlan: entered promiscuous mode [ 55.586718][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.591467][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.595773][ T5963] veth1_vlan: entered promiscuous mode [ 55.599149][ T5976] veth0_vlan: entered promiscuous mode [ 55.603930][ T5971] veth1_vlan: entered promiscuous mode [ 55.620818][ T5976] veth1_vlan: entered promiscuous mode [ 55.626207][ T5965] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.642396][ T5971] veth0_macvtap: entered promiscuous mode [ 55.655820][ T5963] veth0_macvtap: entered promiscuous mode [ 55.658855][ T5971] veth1_macvtap: entered promiscuous mode [ 55.676117][ T5963] veth1_macvtap: entered promiscuous mode [ 55.683812][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.686851][ T5976] veth0_macvtap: entered promiscuous mode [ 55.697682][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.703269][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.707068][ T5976] veth1_macvtap: entered promiscuous mode [ 55.716323][ T1181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.719658][ T1181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.735461][ T1181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.739185][ T1181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.749749][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.774055][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.779821][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.783308][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.786785][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.794596][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.806597][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.820284][ T1181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.827315][ T1181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.844880][ T1181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.848039][ T1181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.872366][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.876263][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.907901][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.910792][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.936149][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.938619][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.956415][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.959527][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.979328][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.982314][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.995481][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.998559][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.120984][ T6066] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1'. [ 56.190964][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 56.191840][ T6068] : renamed from bond_slave_0 (while UP) [ 56.196963][ T6066] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 56.199632][ T6066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.214656][ T6066] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.219146][ T6066] block device autoloading is deprecated and will be removed. [ 56.325737][ T6030] IPVS: starting estimator thread 0... [ 56.369824][ T6079] ======================================================= [ 56.369824][ T6079] WARNING: The mand mount option has been deprecated and [ 56.369824][ T6079] and is ignored by this kernel. Remove the mand [ 56.369824][ T6079] option from the mount to silence this warning. [ 56.369824][ T6079] ======================================================= [ 56.414489][ T6073] IPVS: using max 23 ests per chain, 55200 per kthread [ 56.453192][ T6086] No control pipe specified [ 56.512533][ T6090] Zero length message leads to an empty skb [ 56.561883][ T6092] Bluetooth: MGMT ver 1.23 [ 56.612509][ T5972] Bluetooth: hci3: command tx timeout [ 56.612821][ T5974] Bluetooth: hci1: command tx timeout [ 56.613168][ T63] Bluetooth: hci0: command tx timeout [ 56.641529][ T6097] erspan1: entered promiscuous mode [ 56.696976][ T5974] Bluetooth: hci2: command tx timeout [ 56.768665][ T6105] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.773311][ T6105] block device autoloading is deprecated and will be removed. [ 56.871945][ T6103] md0: using deprecated bitmap file support [ 56.874293][ T6103] md0: error: bitmap file must be a regular file [ 56.925192][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'. [ 56.968978][ T6107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.102668][ T6116] warning: `syz.2.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.195892][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 57.195903][ T40] audit: type=1400 audit(1758169615.836:185): avc: denied { setattr } for pid=6117 comm="syz.2.20" name="cuse" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 57.201061][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 57.209413][ T6118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6118 comm=syz.2.20 [ 57.222846][ T40] audit: type=1400 audit(1758169615.866:186): avc: denied { unmount } for pid=5976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.250121][ T40] audit: type=1400 audit(1758169615.886:187): avc: denied { create } for pid=6126 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.257015][ T40] audit: type=1400 audit(1758169615.896:188): avc: denied { read write } for pid=6126 comm="syz.2.22" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 57.264556][ T40] audit: type=1400 audit(1758169615.896:189): avc: denied { open } for pid=6126 comm="syz.2.22" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 57.272613][ T40] audit: type=1400 audit(1758169615.896:190): avc: denied { read write } for pid=6126 comm="syz.2.22" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.280417][ T40] audit: type=1400 audit(1758169615.896:191): avc: denied { open } for pid=6126 comm="syz.2.22" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.290491][ T40] audit: type=1400 audit(1758169615.896:192): avc: denied { ioctl } for pid=6126 comm="syz.2.22" path="/dev/video0" dev="devtmpfs" ino=955 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.301236][ T40] audit: type=1400 audit(1758169615.916:193): avc: denied { ioctl } for pid=6126 comm="syz.2.22" path="socket:[10408]" dev="sockfs" ino=10408 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.311497][ T40] audit: type=1400 audit(1758169615.916:194): avc: denied { bind } for pid=6126 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.327410][ T6131] bridge_slave_0: left allmulticast mode [ 57.329217][ T6131] bridge_slave_0: left promiscuous mode [ 57.332263][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.339845][ T6131] bridge_slave_1: left allmulticast mode [ 57.343667][ T6131] bridge_slave_1: left promiscuous mode [ 57.346497][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.359789][ T6131] bond0: (slave bond_slave_0): Releasing backup interface [ 57.368407][ T6131] bond0: (slave bond_slave_1): Releasing backup interface [ 57.383817][ T6131] team0: Port device team_slave_0 removed [ 57.390552][ T6134] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.392652][ T6131] team0: Port device team_slave_1 removed [ 57.395934][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.398291][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.404514][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.407754][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.426684][ T6132] team0: Mode changed to "broadcast" [ 57.439798][ T6131] vlan0: entered promiscuous mode [ 57.459228][ T6131] team0: Port device vlan0 added [ 57.466765][ T6131] tipc: Started in network mode [ 57.469026][ T6131] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 57.473678][ T6131] tipc: Enabled bearer , priority 0 [ 57.541430][ T6150] capability: warning: `syz.2.29' uses 32-bit capabilities (legacy support in use) [ 57.550960][ T6150] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 57.556214][ T6150] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 57.559622][ T6150] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 57.592618][ T6152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.30'. [ 57.732470][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'. [ 57.735355][ T6171] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 57.739930][ T6171] qnx6: wrong signature (magic) in superblock #1. [ 57.744727][ T6171] qnx6: unable to read the first superblock [ 57.803377][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 57.809730][ T6175] macvlan2: entered promiscuous mode [ 58.404357][ T6185] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 58.467692][ T6191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=6191 comm=syz.3.41 [ 58.592047][ T6004] tipc: Node number set to 11578026 [ 58.694910][ T5974] Bluetooth: hci3: command tx timeout [ 58.694946][ T5972] Bluetooth: hci0: command tx timeout [ 58.694964][ T63] Bluetooth: hci1: command tx timeout [ 58.710254][ T6237] syz.2.51 uses obsolete (PF_INET,SOCK_PACKET) [ 58.761408][ T1332] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.771578][ T5972] Bluetooth: hci2: command tx timeout [ 58.846337][ T6242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.849499][ T6242] openvswitch: netlink: IPv6 tunnel dst address is zero [ 58.911547][ T1332] usb 6-1: Using ep0 maxpacket: 8 [ 58.915936][ T1332] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 58.919037][ T1332] usb 6-1: config 179 has no interface number 0 [ 58.921099][ T1332] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 58.921317][ T6030] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.925461][ T1332] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 58.932841][ T1332] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 58.937321][ T1332] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 58.941451][ T1332] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 58.946248][ T1332] usb 6-1: config 179 interface 65 has no altsetting 0 [ 58.948726][ T1332] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 58.951990][ T1332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.965543][ T1332] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input6 [ 58.978489][ T6248] netlink: 'syz.2.54': attribute type 1 has an invalid length. [ 59.004090][ T6248] tmpfs: Bad value for 'mpol' [ 59.023042][ T5362] input input6: unable to receive magic message: -110 [ 59.027142][ T5362] input input6: unable to receive magic message: -32 [ 59.031517][ T5362] input input6: unable to receive magic message: -32 [ 59.035424][ T5362] input input6: unable to receive magic message: -32 [ 59.048322][ T5362] input input6: unable to receive magic message: -32 [ 59.052881][ T5362] input input6: unable to receive magic message: -32 [ 59.056821][ T5362] input input6: unable to receive magic message: -32 [ 59.091506][ T6030] usb 5-1: Using ep0 maxpacket: 8 [ 59.094678][ T6030] usb 5-1: config 0 has no interfaces? [ 59.096866][ T6030] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 59.100156][ T6030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.105803][ T6030] usb 5-1: config 0 descriptor?? [ 59.150718][ T6254] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 59.154133][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.56'. [ 59.160496][ T6193] wg1: entered promiscuous mode [ 59.163661][ T6193] wg1: entered allmulticast mode [ 59.316359][ T6055] usb 5-1: USB disconnect, device number 2 [ 59.422858][ T6272] tmpfs: Bad value for 'mpol' [ 59.698829][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 59.701799][ T6055] IPVS: starting estimator thread 0... [ 59.791310][ T6299] IPVS: using max 44 ests per chain, 105600 per kthread [ 59.872939][ T6308] vivid-000: ================= START STATUS ================= [ 59.875454][ T6308] vivid-000: Radio HW Seek Mode: Bounded [ 59.877239][ T6308] vivid-000: Radio Programmable HW Seek: false [ 59.879198][ T6308] vivid-000: RDS Rx I/O Mode: Block I/O [ 59.880972][ T6308] vivid-000: Generate RBDS Instead of RDS: false [ 59.883872][ T6308] vivid-000: RDS Reception: true [ 59.885426][ T6308] vivid-000: RDS Program Type: 0 inactive [ 59.887243][ T6308] vivid-000: RDS PS Name: inactive [ 59.888887][ T6308] vivid-000: RDS Radio Text: inactive [ 59.890579][ T6308] vivid-000: RDS Traffic Announcement: false inactive [ 59.893782][ T6308] vivid-000: RDS Traffic Program: false inactive [ 59.895793][ T6308] vivid-000: RDS Music: false inactive [ 59.897505][ T6308] vivid-000: ================== END STATUS ================== [ 60.066544][ T6312] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 60.168833][ T6321] raw_sendmsg: syz.2.75 forgot to set AF_INET. Fix it! [ 60.253157][ T6332] ALSA: seq fatal error: cannot create timer (-22) [ 60.264712][ T6325] netlink: 'syz.2.77': attribute type 7 has an invalid length. [ 60.367907][ T6349] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 60.370375][ T6349] netlink: 228 bytes leftover after parsing attributes in process `syz.2.82'. [ 60.396394][ T6351] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 60.399169][ T6351] netlink: 'syz.3.84': attribute type 4 has an invalid length. [ 60.596175][ T5972] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 60.600343][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 60.600368][ T5972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.600381][ T5972] Workqueue: hci0 hci_rx_work [ 60.600407][ T5972] Call Trace: [ 60.600414][ T5972] [ 60.600422][ T5972] dump_stack_lvl+0x16c/0x1f0 [ 60.600447][ T5972] sysfs_warn_dup+0x7f/0xa0 [ 60.600473][ T5972] sysfs_create_dir_ns+0x24b/0x2b0 [ 60.600497][ T5972] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 60.600520][ T5972] ? find_held_lock+0x2b/0x80 [ 60.600548][ T5972] ? do_raw_spin_unlock+0x172/0x230 [ 60.600570][ T5972] kobject_add_internal+0x2c4/0x9b0 [ 60.600601][ T5972] kobject_add+0x16e/0x240 [ 60.600626][ T5972] ? __pfx_kobject_add+0x10/0x10 [ 60.600652][ T5972] ? do_raw_spin_unlock+0x172/0x230 [ 60.600681][ T5972] ? kobject_put+0xab/0x5a0 [ 60.600714][ T5972] device_add+0x288/0x1aa0 [ 60.600743][ T5972] ? __pfx_dev_set_name+0x10/0x10 [ 60.600761][ T5972] ? __pfx_device_add+0x10/0x10 [ 60.600788][ T5972] ? mgmt_send_event_skb+0x2fb/0x460 [ 60.600814][ T5972] hci_conn_add_sysfs+0x17e/0x230 [ 60.600837][ T5972] le_conn_complete_evt+0x1075/0x1d70 [ 60.600861][ T5972] ? trace_contention_end+0xdd/0x130 [ 60.600878][ T5972] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 60.600896][ T5972] ? hci_event_packet+0x459/0x11c0 [ 60.600922][ T5972] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 60.600943][ T5972] ? skb_pull_data+0x166/0x210 [ 60.600966][ T5972] hci_le_meta_evt+0x354/0x5e0 [ 60.601008][ T5972] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 60.601033][ T5972] hci_event_packet+0x685/0x11c0 [ 60.601053][ T5972] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 60.601076][ T5972] ? __pfx_hci_event_packet+0x10/0x10 [ 60.601097][ T5972] ? kcov_remote_start+0x3c9/0x6d0 [ 60.601117][ T5972] ? lockdep_hardirqs_on+0x7c/0x110 [ 60.601145][ T5972] hci_rx_work+0x2c5/0x16b0 [ 60.601167][ T5972] ? rcu_is_watching+0x12/0xc0 [ 60.601193][ T5972] process_one_work+0x9cc/0x1b70 [ 60.601232][ T5972] ? __pfx_process_one_work+0x10/0x10 [ 60.601261][ T5972] ? assign_work+0x1a0/0x250 [ 60.601283][ T5972] worker_thread+0x6c8/0xf10 [ 60.601314][ T5972] ? __pfx_worker_thread+0x10/0x10 [ 60.601333][ T5972] kthread+0x3c2/0x780 [ 60.601352][ T5972] ? __pfx_kthread+0x10/0x10 [ 60.601371][ T5972] ? rcu_is_watching+0x12/0xc0 [ 60.601393][ T5972] ? __pfx_kthread+0x10/0x10 [ 60.601410][ T5972] ret_from_fork+0x56a/0x730 [ 60.601462][ T5972] ? __pfx_kthread+0x10/0x10 [ 60.601482][ T5972] ret_from_fork_asm+0x1a/0x30 [ 60.601516][ T5972] [ 60.695235][ T5972] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 60.700805][ T5972] Bluetooth: hci0: failed to register connection device [ 60.747201][ T6367] cdrom: dropping to single frame dma [ 60.771806][ T63] Bluetooth: hci1: command tx timeout [ 60.774001][ T5972] Bluetooth: hci3: command tx timeout [ 61.318044][ T6372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.321572][ T6372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.327389][ T6372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.333226][ T6372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.337198][ T6372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.339855][ T6372] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.344615][ T6372] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.348597][ T6372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.351101][ T6372] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 61.355902][ T6372] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 61.358792][ T6372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.361528][ T6372] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 61.365394][ T6372] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 61.385829][ T6386] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.390114][ T6386] block device autoloading is deprecated and will be removed. [ 61.438536][ T53] usb 6-1: USB disconnect, device number 2 [ 61.438573][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 61.707598][ T6411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.746184][ T6413] netlink: 'syz.1.104': attribute type 17 has an invalid length. [ 61.778558][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.781749][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.862971][ T6413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.874931][ T6413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.989275][ T102] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.993311][ T102] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.997702][ T102] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.003123][ T102] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.278578][ T40] kauditd_printk_skb: 117 callbacks suppressed [ 62.278594][ T40] audit: type=1400 audit(1758169620.916:312): avc: denied { create } for pid=6437 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.295113][ T40] audit: type=1400 audit(1758169620.936:313): avc: denied { unmount } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 62.358789][ T40] audit: type=1400 audit(1758169620.996:314): avc: denied { ioctl } for pid=6442 comm="syz.3.114" path="socket:[11492]" dev="sockfs" ino=11492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.366833][ T40] audit: type=1400 audit(1758169620.996:315): avc: denied { connect } for pid=6442 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.391842][ T40] audit: type=1400 audit(1758169621.026:316): avc: denied { setattr } for pid=6444 comm="syz.1.115" name="tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 62.418449][ T6448] __nla_validate_parse: 2 callbacks suppressed [ 62.418463][ T6448] netlink: 56 bytes leftover after parsing attributes in process `syz.3.116'. [ 62.426379][ T40] audit: type=1400 audit(1758169621.066:317): avc: denied { read } for pid=6445 comm="syz.3.116" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.438159][ T40] audit: type=1400 audit(1758169621.066:318): avc: denied { open } for pid=6445 comm="syz.3.116" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.449655][ T40] audit: type=1400 audit(1758169621.076:319): avc: denied { ioctl } for pid=6445 comm="syz.3.116" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.465663][ T40] audit: type=1326 audit(1758169621.106:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.1.117" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe33d8eba9 code=0x0 [ 62.486454][ T40] audit: type=1400 audit(1758169621.126:321): avc: denied { getopt } for pid=6460 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.621878][ T5974] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.742344][ T6480] netlink: 10 bytes leftover after parsing attributes in process `syz.3.121'. [ 63.411406][ T5974] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.411455][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.421276][ T5974] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.436488][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.125'. [ 63.437971][ T6488] capability: warning: `syz.3.124' uses deprecated v2 capabilities in a way that may be insecure [ 63.440424][ T6485] x_tables: ip_tables: udp match: only valid for protocol 17 [ 63.517822][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 63.725829][ T6504] overlayfs: statfs failed on './file0' [ 63.745612][ T6504] syzkaller0: entered promiscuous mode [ 63.747435][ T6504] syzkaller0: entered allmulticast mode [ 63.957706][ T6509] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.960867][ T6509] FAT-fs (loop1): unable to read boot sector [ 64.691302][ T5974] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.981256][ T6030] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 65.046638][ T6526] trusted_key: encrypted_key: insufficient parameters specified [ 65.131437][ T6030] usb 8-1: Using ep0 maxpacket: 8 [ 65.137678][ T6030] usb 8-1: config 255 has an invalid interface number: 42 but max is 3 [ 65.139993][ T6030] usb 8-1: config 255 has an invalid interface number: 112 but max is 3 [ 65.144651][ T6030] usb 8-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 65.147256][ T6030] usb 8-1: config 255 has an invalid interface number: 88 but max is 3 [ 65.150539][ T6030] usb 8-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 65.154723][ T6030] usb 8-1: config 255 has no interface number 0 [ 65.157174][ T6030] usb 8-1: config 255 has no interface number 1 [ 65.159602][ T6030] usb 8-1: config 255 has no interface number 2 [ 65.162159][ T6030] usb 8-1: config 255 interface 42 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 65.166352][ T6030] usb 8-1: config 255 interface 42 altsetting 9 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 65.170634][ T6030] usb 8-1: config 255 interface 42 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 65.174959][ T6030] usb 8-1: config 255 interface 42 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 65.179144][ T6030] usb 8-1: config 255 interface 42 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 65.183577][ T6030] usb 8-1: config 255 interface 42 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 65.187075][ T6030] usb 8-1: config 255 interface 42 altsetting 9 endpoint 0xA has invalid maxpacket 50405, setting to 1024 [ 65.190566][ T6030] usb 8-1: config 255 interface 42 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 65.194242][ T6030] usb 8-1: config 255 interface 112 altsetting 135 has a duplicate endpoint with address 0xA, skipping [ 65.197460][ T6030] usb 8-1: config 255 interface 112 altsetting 135 bulk endpoint 0x7 has invalid maxpacket 64 [ 65.200856][ T6030] usb 8-1: config 255 interface 112 altsetting 135 has a duplicate endpoint with address 0x9, skipping [ 65.205201][ T6030] usb 8-1: config 255 interface 88 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 65.209399][ T6030] usb 8-1: too many endpoints for config 255 interface 3 altsetting 5: 170, using maximum allowed: 30 [ 65.213337][ T6030] usb 8-1: config 255 interface 3 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 65.217479][ T6030] usb 8-1: config 255 interface 42 has no altsetting 0 [ 65.219700][ T6030] usb 8-1: config 255 interface 112 has no altsetting 0 [ 65.222325][ T6030] usb 8-1: config 255 interface 88 has no altsetting 0 [ 65.224568][ T6030] usb 8-1: config 255 interface 3 has no altsetting 0 [ 65.228763][ T6030] usb 8-1: New USB device found, idVendor=19d2, idProduct=0151, bcdDevice=d8.67 [ 65.231908][ T6030] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.234412][ T6030] usb 8-1: Product: syz [ 65.235798][ T6030] usb 8-1: Manufacturer: syz [ 65.237289][ T6030] usb 8-1: SerialNumber: syz [ 65.469989][ T1027] cfg80211: failed to load regulatory.db [ 65.491341][ T5974] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.491380][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.495314][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.543817][ T6539] netlink: 'syz.2.142': attribute type 10 has an invalid length. [ 65.550877][ T6539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.556555][ T6539] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 65.560601][ T6539] netlink: 'syz.2.142': attribute type 10 has an invalid length. [ 65.563275][ T6539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.142'. [ 65.566957][ T6539] batadv0: entered promiscuous mode [ 65.568885][ T6539] batadv0: entered allmulticast mode [ 65.572406][ T6539] bond0: (slave batadv0): Releasing backup interface [ 65.578369][ T6539] bridge0: port 3(batadv0) entered blocking state [ 65.582077][ T6539] bridge0: port 3(batadv0) entered disabled state [ 65.607850][ T6540] "syz.1.141" (6540) uses obsolete ecb(arc4) skcipher [ 65.626875][ T6030] option 8-1:255.42: GSM modem (1-port) converter detected [ 65.659024][ T6030] usb 8-1: USB disconnect, device number 2 [ 65.665664][ T6030] option 8-1:255.42: device disconnected [ 65.692798][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 65.695788][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 66.098249][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 66.101624][ T6559] sp0: Synchronizing with TNC [ 66.104169][ T6559] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.121019][ T6557] veth1_macvtap: entered allmulticast mode [ 66.474939][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 66.485617][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 66.656375][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 66.659246][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 66.662902][ T6604] netlink: 'syz.1.163': attribute type 19 has an invalid length. [ 66.673739][ T6599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=6599 comm=syz.2.161 [ 66.772797][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.924397][ T6616] 9p: Unknown Cache mode or invalid value fs [ 66.986873][ T6616] 9pnet_virtio: no channels available for device $ [ 66.989386][ T6616] 9pnet_virtio: no channels available for device $ [ 66.993890][ T6616] 9pnet_virtio: no channels available for device $ [ 66.996937][ T6616] 9pnet_virtio: no channels available for device $ [ 67.000916][ T6616] 9pnet_virtio: no channels available for device $ [ 67.004003][ T6616] 9pnet_virtio: no channels available for device $ [ 67.007088][ T6616] 9pnet_virtio: no channels available for device $ [ 67.009979][ T6616] 9pnet_virtio: no channels available for device $ [ 67.012991][ T6616] 9pnet_virtio: no channels available for device $ [ 67.015929][ T6616] 9pnet_virtio: no channels available for device $ [ 67.018893][ T6616] 9pnet_virtio: no channels available for device $ [ 67.021750][ T6616] 9pnet_virtio: no channels available for device $ [ 67.024816][ T6616] 9pnet_virtio: no channels available for device $ [ 67.027646][ T6616] 9pnet_virtio: no channels available for device $ [ 67.031085][ T6616] 9pnet_virtio: no channels available for device $ [ 67.035107][ T6616] 9pnet_virtio: no channels available for device $ [ 67.037403][ T6616] 9pnet_virtio: no channels available for device $ [ 67.040178][ T6616] 9pnet_virtio: no channels available for device $ [ 67.043263][ T6616] 9pnet_virtio: no channels available for device $ [ 67.046338][ T6616] 9pnet_virtio: no channels available for device $ [ 67.049248][ T6616] 9pnet_virtio: no channels available for device $ [ 67.052351][ T6616] 9pnet_virtio: no channels available for device $ [ 67.054696][ T6616] 9pnet_virtio: no channels available for device $ [ 67.057339][ T6616] 9pnet_virtio: no channels available for device $ [ 67.060142][ T6616] 9pnet_virtio: no channels available for device $ [ 67.063436][ T6616] 9pnet_virtio: no channels available for device $ [ 67.065830][ T6616] 9pnet_virtio: no channels available for device $ [ 67.068177][ T6616] 9pnet_virtio: no channels available for device $ [ 67.071402][ T6616] 9pnet_virtio: no channels available for device $ [ 67.074443][ T6616] 9pnet_virtio: no channels available for device $ [ 67.077661][ T6616] 9pnet_virtio: no channels available for device $ [ 67.080845][ T6616] 9pnet_virtio: no channels available for device $ [ 67.265363][ T6633] block nbd3: Attempted send on invalid socket [ 67.268093][ T6633] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 67.273540][ T6633] XFS (nbd3): SB validate failed with error -5. [ 67.374635][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 67.374650][ T40] audit: type=1400 audit(1758169626.016:351): avc: denied { ioctl } for pid=6648 comm="syz.3.177" path="socket:[11868]" dev="sockfs" ino=11868 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.374851][ T6650] netlink: 'syz.3.177': attribute type 10 has an invalid length. [ 67.397667][ T6650] batman_adv: batadv0: Adding interface: team0 [ 67.400060][ T6650] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.408427][ T6650] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 67.438459][ T6654] __nla_validate_parse: 2 callbacks suppressed [ 67.438469][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 67.444883][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 67.499930][ T6662] openvswitch: netlink: Flow actions attr not present in new flow. [ 67.510951][ T40] audit: type=1400 audit(1758169626.156:352): avc: denied { read } for pid=6660 comm="syz.3.183" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.521840][ T40] audit: type=1400 audit(1758169626.156:353): avc: denied { open } for pid=6660 comm="syz.3.183" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.581263][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.582288][ T5974] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.582305][ T5970] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.599071][ T40] audit: type=1400 audit(1758169626.236:354): avc: denied { setopt } for pid=6672 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.617871][ T6667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.184'. [ 67.848349][ T6692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.193'. [ 67.854603][ T6692] loop8: detected capacity change from 0 to 16384 [ 67.912394][ T6692] loop8: detected capacity change from 16384 to 16383 [ 67.959212][ T6697] overlayfs: missing 'lowerdir' [ 67.990272][ T40] audit: type=1400 audit(1758169626.626:355): avc: denied { unmount } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.043989][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.072787][ T6702] XFS (nullb0): Invalid superblock magic number [ 68.074421][ T40] audit: type=1400 audit(1758169626.716:356): avc: denied { execute } for pid=6709 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.084014][ T40] audit: type=1400 audit(1758169626.726:357): avc: denied { execute_no_trans } for pid=6709 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.144659][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.216630][ T6722] binder: BINDER_SET_CONTEXT_MGR already set [ 68.219631][ T6722] binder: 6720:6722 ioctl 4018620d 2000000000c0 returned -16 [ 68.223687][ T40] audit: type=1400 audit(1758169626.876:358): avc: denied { ioctl } for pid=6723 comm="syz-executor" path="socket:[11926]" dev="sockfs" ino=11926 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.223924][ T6722] binder: BINDER_SET_CONTEXT_MGR already set [ 68.233782][ T5974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.236316][ T6722] binder: 6720:6722 ioctl 4018620d 2000000000c0 returned -16 [ 68.239894][ T5974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.243637][ T6722] binder: BINDER_SET_CONTEXT_MGR already set [ 68.246307][ T5974] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.246735][ T40] audit: type=1400 audit(1758169626.886:359): avc: denied { append } for pid=6696 comm="syz.2.195" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.247130][ T6722] binder: 6720:6722 ioctl 4018620d 2000000000c0 returned -16 [ 68.261989][ T5974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.264682][ T40] audit: type=1400 audit(1758169626.916:360): avc: denied { write } for pid=6720 comm="syz.1.201" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.278250][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.281268][ T5974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.303086][ T6723] Failed to initialize the IGMP autojoin socket (err -2) [ 68.354676][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.555015][ T6723] chnl_net:caif_netlink_parms(): no params data found [ 68.576365][ T46] bridge_slave_1: left allmulticast mode [ 68.578911][ T46] bridge_slave_1: left promiscuous mode [ 68.582817][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.593971][ T46] bridge_slave_0: left allmulticast mode [ 68.595923][ T46] bridge_slave_0: left promiscuous mode [ 68.598355][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.845126][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.851317][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.851324][ T5972] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.857438][ T46] bond0 (unregistering): Released all slaves [ 68.897000][ T6770] netlink: 'syz.1.210': attribute type 10 has an invalid length. [ 68.952798][ T6770] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 69.008657][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.212'. [ 69.126790][ T6788] block nbd1: Attempted send on invalid socket [ 69.128886][ T6788] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 69.132970][ T6788] EXT4-fs (nbd1): unable to read superblock [ 69.159035][ T6723] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.166214][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.170408][ T6723] bridge_slave_0: entered allmulticast mode [ 69.180188][ T6723] bridge_slave_0: entered promiscuous mode [ 69.213552][ T6723] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.215877][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.218180][ T6723] bridge_slave_1: entered allmulticast mode [ 69.220847][ T6723] bridge_slave_1: entered promiscuous mode [ 69.343482][ T6723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.359075][ T6723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.431105][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 69.513081][ T46] hsr_slave_0: left promiscuous mode [ 69.517031][ T46] hsr_slave_1: left promiscuous mode [ 69.519899][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.526314][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.526599][ T6806] qrtr: Invalid version 0 [ 69.534714][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.538668][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.543523][ T46] batman_adv: batadv0: Removing interface: team0 [ 69.564134][ T46] veth0_macvtap: left promiscuous mode [ 69.566047][ T46] veth1_vlan: left promiscuous mode [ 69.567800][ T46] veth0_vlan: left promiscuous mode [ 69.576060][ T6811] tmpfs: Too few inodes for current use [ 69.653503][ T5972] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.920742][ T6821] netlink: 56 bytes leftover after parsing attributes in process `syz.2.225'. [ 70.089862][ T46] team0 (unregistering): Port device team_slave_1 removed [ 70.143656][ T46] team0 (unregistering): Port device team_slave_0 removed [ 70.302300][ T5972] Bluetooth: hci2: command tx timeout [ 70.564318][ T6723] team0: Port device team_slave_0 added [ 70.577060][ T6723] team0: Port device team_slave_1 added [ 70.621025][ T6823] netlink: 'syz.1.226': attribute type 11 has an invalid length. [ 70.626279][ T6823] netlink: 'syz.1.226': attribute type 4 has an invalid length. [ 70.629842][ T6823] netlink: 224 bytes leftover after parsing attributes in process `syz.1.226'. [ 70.724248][ T6723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.726793][ T6723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.737717][ T6723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.743385][ T6723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.746191][ T6723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.756371][ T6723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.808095][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'. [ 70.813731][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'. [ 70.871623][ T6841] process 'syz.2.231' launched './file1' with NULL argv: empty string added [ 70.872174][ T6842] nfs: Bad value for 'source' [ 70.933170][ T5972] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.953886][ T6838] Failed to initialize the IGMP autojoin socket (err -2) [ 70.970192][ T6723] hsr_slave_0: entered promiscuous mode [ 70.975397][ T6723] hsr_slave_1: entered promiscuous mode [ 70.978090][ T6723] debugfs: 'hsr0' already exists in 'hsr' [ 70.980390][ T6723] Cannot create hsr debugfs directory [ 71.239159][ T6860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6860 comm=syz.2.235 [ 71.419883][ T6723] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 71.437319][ T6723] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 71.446390][ T6723] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 71.452742][ T6723] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 71.560200][ T6886] sock: sock_timestamping_bind_phc: sock not bind to device [ 71.584503][ T5377] udevd[5377]: worker [6749] terminated by signal 33 (Unknown signal 33) [ 71.587182][ T5377] udevd[5377]: worker [6749] failed while handling '/devices/virtual/block/loop2' [ 71.649379][ T6723] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.716132][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.718712][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.724038][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.726291][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.838576][ T6900] netlink: 'syz.1.245': attribute type 30 has an invalid length. [ 71.839554][ T6723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.916257][ T6723] veth0_vlan: entered promiscuous mode [ 71.926542][ T6723] veth1_vlan: entered promiscuous mode [ 71.973359][ T6723] veth0_macvtap: entered promiscuous mode [ 71.983127][ T6723] veth1_macvtap: entered promiscuous mode [ 71.993590][ T6908] program syz.1.246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.020407][ T6723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.034054][ T6723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.041291][ T6723] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 72.054998][ T6723] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 72.064444][ T6723] wireguard: wg0: Could not create IPv4 socket [ 72.069480][ T6723] wireguard: wg1: Could not create IPv4 socket [ 72.077284][ T6723] wireguard: wg2: Could not create IPv4 socket [ 72.104123][ T6911] netlink: 'syz.1.247': attribute type 7 has an invalid length. [ 72.126493][ T6911] bond1 (unregistering): Released all slaves [ 72.450635][ T5972] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 72.588721][ T6936] netlink: 'syz.2.256': attribute type 4 has an invalid length. [ 72.732178][ T6940] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 72.921104][ T6957] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 73.011296][ T5972] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.037098][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 73.037113][ T40] audit: type=1400 audit(72.947:412): avc: denied { mount } for pid=6961 comm="syz.1.264" name="/" dev="hugetlbfs" ino=14938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 73.056578][ T40] audit: type=1400 audit(72.967:413): avc: denied { getopt } for pid=6961 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.100074][ T6966] netdevsim netdevsim1: Direct firmware load for . [ 73.100074][ T6966] failed with error -2 [ 73.105805][ T40] audit: type=1400 audit(73.017:414): avc: denied { firmware_load } for pid=6965 comm="syz.1.266" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.105811][ T6966] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 73.105811][ T6966] [ 73.164783][ T6964] tipc: Started in network mode [ 73.166257][ T6964] tipc: Node identity d6830bbe9971, cluster identity 4711 [ 73.168397][ T6964] tipc: Enabled bearer , priority 0 [ 73.170769][ T6964] syzkaller0: entered promiscuous mode [ 73.172833][ T6964] syzkaller0: entered allmulticast mode [ 73.177510][ T6963] tipc: Resetting bearer [ 73.186278][ T6963] tipc: Disabling bearer [ 73.260369][ T40] audit: type=1400 audit(73.167:415): avc: denied { relabelfrom } for pid=6965 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.262565][ T6971] netlink: 'syz.1.266': attribute type 5 has an invalid length. [ 73.266288][ T40] audit: type=1400 audit(73.167:416): avc: denied { relabelto } for pid=6965 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.645288][ T40] audit: type=1400 audit(73.557:417): avc: denied { ioctl } for pid=6984 comm="syz.2.270" path="socket:[16421]" dev="sockfs" ino=16421 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.652365][ T40] audit: type=1400 audit(73.557:418): avc: denied { map } for pid=6984 comm="syz.2.270" path="socket:[16421]" dev="sockfs" ino=16421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.659654][ T40] audit: type=1400 audit(73.557:419): avc: denied { read } for pid=6984 comm="syz.2.270" path="socket:[16421]" dev="sockfs" ino=16421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.719454][ T40] audit: type=1400 audit(73.627:420): avc: denied { append } for pid=6988 comm="syz.2.272" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.857861][ T7000] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 74.861108][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.867874][ T7000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.970334][ T7000] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 75.086711][ T40] audit: type=1400 audit(74.997:421): avc: denied { nlmsg_read } for pid=7008 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 75.094703][ T5972] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.166865][ T7014] __nla_validate_parse: 4 callbacks suppressed [ 75.166877][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 75.172896][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 75.176395][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 75.179497][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 75.221680][ T5972] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 75.270587][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.279'. [ 75.273762][ T7016] openvswitch: netlink: Flow actions attr not present in new flow. [ 75.341854][ T7025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.346579][ T7025] mmap: syz.2.279 (7025) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.576418][ T5974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.580997][ T5974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.584866][ T5974] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.588288][ T5974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.595274][ T5974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.607200][ T7034] Failed to initialize the IGMP autojoin socket (err -2) [ 76.135974][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 76.139464][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 76.298157][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 76.380146][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.383138][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.389824][ T7048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.500910][ T5972] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 76.680035][ T5974] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.693864][ T5974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.697580][ T5974] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.701036][ T5974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.704736][ T5974] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.722866][ T7061] Failed to initialize the IGMP autojoin socket (err -2) [ 76.845560][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.871886][ T7065] Failed to initialize the IGMP autojoin socket (err -2) [ 76.892120][ T53] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 76.894380][ T53] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 76.896482][ T53] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x2 [ 76.898594][ T53] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 76.900607][ T53] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 76.921229][ T53] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 76.923320][ T53] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 76.925239][ T53] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 76.927246][ T53] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 76.929326][ T53] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 76.944780][ T53] hid-generic 00A0:0008:0003.0002: hidraw1: HID v0.05 Device [syz1] on syz0 [ 76.959689][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.055897][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.178239][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.181259][ T1027] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 77.220730][ T5972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.225776][ T5972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.232644][ T5972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.236564][ T5972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.240147][ T5972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.245413][ T7076] Failed to initialize the IGMP autojoin socket (err -2) [ 77.253770][ T7073] Failed to initialize the IGMP autojoin socket (err -2) [ 77.331508][ T1027] usb 7-1: Invalid ep0 maxpacket: 16 [ 77.420258][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 77.423115][ T7079] bond0: default FDB implementation only supports local addresses [ 77.461567][ T1027] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 77.611297][ T1027] usb 7-1: Invalid ep0 maxpacket: 16 [ 77.613756][ T1027] usb usb7-port1: attempt power cycle [ 77.652085][ T61] bond0 (unregistering): Released all slaves [ 77.661705][ T5974] Bluetooth: hci2: command tx timeout [ 77.684219][ T5972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.688455][ T5972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.693098][ T5972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.693280][ T7034] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 77.697227][ T5972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.703603][ T5972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.705798][ T7034] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 77.711527][ T7034] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 77.716636][ T7034] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 77.729485][ T7086] Failed to initialize the IGMP autojoin socket (err -2) [ 77.761221][ T61] tipc: Disabling bearer [ 77.766173][ T61] tipc: Left network mode [ 77.849990][ T7093] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.973669][ T1027] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 77.994756][ T61] hsr_slave_0: left promiscuous mode [ 77.997567][ T61] hsr_slave_1: left promiscuous mode [ 78.000035][ T1027] usb 7-1: Invalid ep0 maxpacket: 16 [ 78.031793][ T61] veth1_macvtap: left promiscuous mode [ 78.034145][ T61] veth0_macvtap: left promiscuous mode [ 78.036386][ T61] veth1_vlan: left promiscuous mode [ 78.115226][ T5974] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.121436][ T5974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.126622][ T5974] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.130845][ T5974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.140940][ T5974] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.144279][ T1027] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 78.163190][ T1027] usb 7-1: Invalid ep0 maxpacket: 16 [ 78.165553][ T1027] usb usb7-port1: unable to enumerate USB device [ 78.235334][ T61] team0 (unregistering): Port device vlan0 removed [ 78.238997][ T7114] fuse: Unknown parameter 'âªS–p_id' [ 78.357821][ T7118] cgroup: release_agent respecified [ 79.096107][ T7111] Failed to initialize the IGMP autojoin socket (err -2) [ 79.190585][ T7034] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 79.205250][ T7034] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 79.212140][ T7034] wireguard: wg0: Could not create IPv4 socket [ 79.216385][ T7034] wireguard: wg1: Could not create IPv4 socket [ 79.218663][ T7122] netlink: 'syz.1.307': attribute type 11 has an invalid length. [ 79.218832][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 79.218840][ T40] audit: type=1400 audit(79.127:436): avc: denied { create } for pid=7121 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 79.231317][ T40] audit: type=1400 audit(79.127:437): avc: denied { write } for pid=7121 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 79.232414][ T7034] wireguard: wg2: Could not create IPv4 socket [ 79.539996][ T61] IPVS: stop unused estimator thread 0... [ 79.808503][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 79.850410][ T5974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.854092][ T5974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.857674][ T5974] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.860938][ T5974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.865174][ T5974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.878132][ T7130] Failed to initialize the IGMP autojoin socket (err -2) [ 79.964152][ T40] audit: type=1400 audit(79.877:438): avc: denied { append } for pid=7135 comm="syz.1.311" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.964377][ T7136] program syz.1.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.991496][ T7136] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 80.008624][ T40] audit: type=1400 audit(79.917:439): avc: denied { create } for pid=7135 comm="syz.1.311" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.213840][ T40] audit: type=1400 audit(80.127:440): avc: denied { watch watch_reads } for pid=7156 comm="syz.1.317" path="/100/file0" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.237423][ T7158] macvlan3: entered promiscuous mode [ 80.239493][ T7158] macvlan3: entered allmulticast mode [ 80.278740][ T7167] bridge0: port 3(batadv0) entered disabled state [ 80.284709][ T7167] bridge_slave_0: left allmulticast mode [ 80.286623][ T7167] bridge_slave_0: left promiscuous mode [ 80.288969][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.294943][ T7167] bridge_slave_1: left allmulticast mode [ 80.296675][ T7167] bridge_slave_1: left promiscuous mode [ 80.298474][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.305998][ T7167] bond0: (slave ): Releasing backup interface [ 80.309727][ T7167] bond0: (slave bond_slave_1): Releasing backup interface [ 80.317567][ T7167] team0: Port device team_slave_0 removed [ 80.322638][ T7167] team0: Port device team_slave_1 removed [ 80.326670][ T7167] bond0: (slave batadv_slave_0): Releasing backup interface [ 80.332441][ T7167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.335133][ T7167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.350571][ T7170] team0: Mode changed to "broadcast" [ 80.361037][ T7167] vlan0: entered promiscuous mode [ 80.369403][ T7167] team0: Port device vlan0 added [ 80.372663][ T7167] tipc: Enabled bearer , priority 0 [ 80.392222][ T7166] netlink: 'syz.1.319': attribute type 21 has an invalid length. [ 80.394680][ T7166] __nla_validate_parse: 3 callbacks suppressed [ 80.394688][ T7166] netlink: 156 bytes leftover after parsing attributes in process `syz.1.319'. [ 80.411562][ T7175] netlink: 80 bytes leftover after parsing attributes in process `syz.2.321'. [ 80.434055][ T7130] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 80.442115][ T7130] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 80.449957][ T7130] wireguard: wg0: Could not create IPv4 socket [ 80.452460][ T40] audit: type=1400 audit(80.357:441): avc: denied { setopt } for pid=7179 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.453692][ T7180] netlink: 'syz.2.323': attribute type 11 has an invalid length. [ 80.463305][ T7130] wireguard: wg1: Could not create IPv4 socket [ 80.473887][ T7130] wireguard: wg2: Could not create IPv4 socket [ 80.495998][ T7180] tmpfs: Unknown parameter 'ÿÿÿÿ0' [ 80.532440][ T5972] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 80.535153][ T5972] Bluetooth: hci0: Injecting HCI hardware error event [ 80.535480][ T7183] netlink: 'syz.2.324': attribute type 11 has an invalid length. [ 80.538279][ T5974] Bluetooth: hci0: hardware error 0x00 [ 80.545235][ T7183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.324'. [ 80.623013][ T7185] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.643822][ T40] audit: type=1400 audit(80.557:442): avc: denied { unmount } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 80.665916][ T40] audit: type=1400 audit(80.577:443): avc: denied { mount } for pid=7188 comm="syz.2.326" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 80.673360][ T40] audit: type=1400 audit(80.577:444): avc: denied { mounton } for pid=7188 comm="syz.2.326" path="/153/file0" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.682545][ T40] audit: type=1400 audit(80.577:445): avc: denied { read } for pid=7188 comm="syz.2.326" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.981953][ T7200] block nbd2: shutting down sockets [ 81.392452][ T7208] bridge_slave_0: left allmulticast mode [ 81.394761][ T7208] bridge_slave_0: left promiscuous mode [ 81.397080][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.400735][ T7208] bridge_slave_1: left allmulticast mode [ 81.403420][ T7208] bridge_slave_1: left promiscuous mode [ 81.405592][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.409856][ T7208] bond0: (slave bond_slave_0): Releasing backup interface [ 81.415080][ T7208] bond0: (slave bond_slave_1): Releasing backup interface [ 81.419398][ T7208] team0: Port device team_slave_0 removed [ 81.422175][ T7208] team0: Port device team_slave_1 removed [ 81.424215][ T7208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.427223][ T7208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.431826][ T7208] bond0: (slave wlan1): Releasing backup interface [ 81.498119][ T7209] vlan0: entered promiscuous mode [ 81.501585][ T6055] tipc: Node number set to 1341262782 [ 81.671265][ T7200] block nbd2: NBD_DISCONNECT [ 81.675626][ T7200] block nbd2: Send disconnect failed -32 [ 81.833600][ T7211] could not allocate digest TFM handle cryptd(blake2b-160) [ 82.408375][ T7241] netlink: 9484 bytes leftover after parsing attributes in process `syz.2.338'. [ 82.452777][ T7243] mkiss: ax0: crc mode is auto. [ 82.611396][ T5974] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 82.668560][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 82.704185][ T7254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=770 sclass=netlink_tcpdiag_socket pid=7254 comm=syz.2.342 [ 83.022075][ T54] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 83.181355][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 83.188460][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.191665][ T54] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 83.195357][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.201525][ T54] usb 6-1: config 0 descriptor?? [ 83.248798][ T5972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.253150][ T5972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.257237][ T5972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.262081][ T5972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.265737][ T5972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.275980][ T7269] Failed to initialize the IGMP autojoin socket (err -2) [ 83.612007][ T54] hid_parser_main: 2 callbacks suppressed [ 83.612033][ T54] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 83.617521][ T54] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 83.620467][ T54] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 83.622991][ T54] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 83.625599][ T54] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 83.629445][ T54] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 83.810598][ T7258] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 83.814065][ T7258] netlink: 40 bytes leftover after parsing attributes in process `syz.1.344'. [ 83.817307][ T7258] batadv0: entered promiscuous mode [ 83.819040][ T7258] batadv0: entered allmulticast mode [ 83.820797][ T7258] bridge0: port 1(batadv0) entered blocking state [ 83.823045][ T7258] bridge0: port 1(batadv0) entered disabled state [ 83.827583][ T1027] usb 6-1: USB disconnect, device number 3 [ 84.161803][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 84.164764][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 84.366644][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 84.366657][ T40] audit: type=1400 audit(84.277:454): avc: denied { write } for pid=7281 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.395810][ T7288] tmpfs: Bad value for 'mpol' [ 84.450338][ T40] audit: type=1400 audit(84.357:455): avc: denied { write } for pid=7291 comm="syz.1.354" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.458621][ T40] audit: type=1400 audit(84.357:456): avc: denied { ioctl } for pid=7291 comm="syz.1.354" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.460014][ T7292] syz.1.354: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 84.472429][ T7292] CPU: 0 UID: 0 PID: 7292 Comm: syz.1.354 Not tainted syzkaller #0 PREEMPT(full) [ 84.472453][ T7292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.472466][ T7292] Call Trace: [ 84.472478][ T7292] [ 84.472486][ T7292] dump_stack_lvl+0x16c/0x1f0 [ 84.472524][ T7292] warn_alloc+0x248/0x3a0 [ 84.472553][ T7292] ? __pfx_warn_alloc+0x10/0x10 [ 84.472571][ T7292] ? __pfx_stack_trace_save+0x10/0x10 [ 84.472606][ T7292] ? kasan_save_stack+0x42/0x60 [ 84.472622][ T7292] ? kasan_save_stack+0x33/0x60 [ 84.472638][ T7292] ? kasan_save_track+0x14/0x30 [ 84.472655][ T7292] ? xskq_create+0x52/0x1d0 [ 84.472672][ T7292] ? xsk_setsockopt+0x792/0x9a0 [ 84.472689][ T7292] ? do_sock_setsockopt+0xf3/0x1d0 [ 84.472717][ T7292] ? xskq_create+0xfb/0x1d0 [ 84.472736][ T7292] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 84.472773][ T7292] ? xskq_create+0xfb/0x1d0 [ 84.472799][ T7292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 84.472834][ T7292] ? xskq_create+0xfb/0x1d0 [ 84.472853][ T7292] vmalloc_user_noprof+0x9e/0xe0 [ 84.472879][ T7292] ? xskq_create+0xfb/0x1d0 [ 84.472898][ T7292] xskq_create+0xfb/0x1d0 [ 84.472919][ T7292] xsk_setsockopt+0x792/0x9a0 [ 84.472938][ T7292] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.472955][ T7292] ? find_held_lock+0x2b/0x80 [ 84.472981][ T7292] ? selinux_socket_setsockopt+0x6a/0x80 [ 84.473005][ T7292] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.473024][ T7292] do_sock_setsockopt+0xf3/0x1d0 [ 84.473053][ T7292] __sys_setsockopt+0x1a0/0x230 [ 84.473079][ T7292] __x64_sys_setsockopt+0xbd/0x160 [ 84.473099][ T7292] ? do_syscall_64+0x91/0x4e0 [ 84.473121][ T7292] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.473143][ T7292] do_syscall_64+0xcd/0x4e0 [ 84.473168][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.473186][ T7292] RIP: 0033:0x7efe33d8eba9 [ 84.473202][ T7292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.473218][ T7292] RSP: 002b:00007efe34bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.473234][ T7292] RAX: ffffffffffffffda RBX: 00007efe33fd5fa0 RCX: 00007efe33d8eba9 [ 84.473247][ T7292] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 84.473258][ T7292] RBP: 00007efe33e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 84.473269][ T7292] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 84.473281][ T7292] R13: 00007efe33fd6038 R14: 00007efe33fd5fa0 R15: 00007ffd0913f138 [ 84.473308][ T7292] [ 84.473315][ T7292] Mem-Info: [ 84.572390][ T7292] active_anon:5051 inactive_anon:0 isolated_anon:0 [ 84.572390][ T7292] active_file:13621 inactive_file:40651 isolated_file:0 [ 84.572390][ T7292] unevictable:1768 dirty:70 writeback:31 [ 84.572390][ T7292] slab_reclaimable:13102 slab_unreclaimable:66925 [ 84.572390][ T7292] mapped:24060 shmem:2482 pagetables:994 [ 84.572390][ T7292] sec_pagetables:312 bounce:0 [ 84.572390][ T7292] kernel_misc_reclaimable:0 [ 84.572390][ T7292] free:462032 free_pcp:15608 free_cma:0 [ 84.588502][ T7292] Node 0 active_anon:20204kB inactive_anon:0kB active_file:54484kB inactive_file:162404kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96240kB dirty:268kB writeback:124kB shmem:6392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11856kB pagetables:3764kB sec_pagetables:1248kB all_unreclaimable? no Balloon:0kB [ 84.601819][ T7292] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 84.614634][ T7292] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.624966][ T7292] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 84.627389][ T7292] Node 0 DMA32 free:243128kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18608kB inactive_anon:1860kB active_file:54484kB inactive_file:162404kB unevictable:3536kB writepending:360kB present:2080628kB managed:1263424kB mlocked:0kB bounce:0kB free_pcp:41132kB local_pcp:13972kB free_cma:0kB [ 84.638758][ T7292] lowmem_reserve[]: 0 0 0 0 0 [ 84.640810][ T7292] Node 1 Normal free:1589640kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:12kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:21660kB local_pcp:10684kB free_cma:0kB [ 84.651968][ T7292] lowmem_reserve[]: 0 0 0 0 0 [ 84.653958][ T7292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 84.658053][ T7292] Node 0 DMA32: 3*4kB (UE) 65*8kB (ME) 327*16kB (ME) 227*32kB (UME) 133*64kB (UME) 148*128kB (UME) 81*256kB (UM) 51*512kB (UME) 16*1024kB (UME) 14*2048kB (UME) 27*4096kB (M) = 242980kB [ 84.665574][ T7292] Node 1 Normal: 22*4kB (UME) 32*8kB (UME) 37*16kB (UME) 61*32kB (UME) 23*64kB (UME) 9*128kB (UME) 4*256kB (UM) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 384*4096kB (M) = 1589640kB [ 84.672237][ T7292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.675188][ T7292] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.678243][ T7292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.682333][ T7292] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.685801][ T7292] 57317 total pagecache pages [ 84.687654][ T7292] 566 pages in swap cache [ 84.689167][ T7292] Free swap = 122680kB [ 84.690885][ T7292] Total swap = 124996kB [ 84.693009][ T7292] 1048443 pages RAM [ 84.694477][ T7292] 0 pages HighMem/MovableOnly [ 84.696452][ T7292] 283274 pages reserved [ 84.698219][ T7292] 0 pages cma reserved [ 84.853570][ T7296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7296 comm=syz.1.356 [ 84.916773][ T7300] netlink: 'syz.1.358': attribute type 2 has an invalid length. [ 84.920105][ T7300] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 84.924234][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 84.982675][ T40] audit: type=1400 audit(84.897:457): avc: denied { ioctl } for pid=7299 comm="syz.1.358" path="/dev/ptyq7" dev="devtmpfs" ino=134 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 85.045573][ T7307] netlink: zone id is out of range [ 85.047186][ T7307] netlink: zone id is out of range [ 85.048774][ T7307] netlink: zone id is out of range [ 85.050174][ T7307] netlink: zone id is out of range [ 85.052389][ T7307] netlink: del zone limit has 4 unknown bytes [ 85.083145][ T7309] bridge0: port 1(batadv0) entered disabled state [ 85.110221][ T7309] team0: Mode changed to "broadcast" [ 85.115265][ T7309] tipc: Started in network mode [ 85.116974][ T7309] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 85.119266][ T7309] tipc: Enabled bearer , priority 0 [ 85.332234][ T5974] Bluetooth: hci2: command tx timeout [ 85.389279][ T7326] netlink: 32 bytes leftover after parsing attributes in process `syz.1.364'. [ 85.428235][ T7331] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 85.433825][ T7331] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 85.833290][ T7269] netdevsim netdevsim4 netdevsim0: renamed from eth14 [ 85.837711][ T7269] netdevsim netdevsim4 netdevsim1: renamed from eth15 [ 85.842950][ T7269] netdevsim netdevsim4 netdevsim2: renamed from eth16 [ 85.847037][ T7269] netdevsim netdevsim4 netdevsim3: renamed from eth17 [ 86.118471][ T40] audit: type=1400 audit(86.027:458): avc: denied { mount } for pid=7356 comm="syz.1.371" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 86.132909][ T7357] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 86.142437][ T40] audit: type=1400 audit(86.037:459): avc: denied { remount } for pid=7356 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 86.157039][ T40] audit: type=1400 audit(86.067:460): avc: denied { add_name } for pid=7358 comm="syz.2.372" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.167984][ T40] audit: type=1400 audit(86.067:461): avc: denied { create } for pid=7358 comm="syz.2.372" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.176971][ T40] audit: type=1400 audit(86.067:462): avc: denied { associate } for pid=7358 comm="syz.2.372" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 86.188233][ T40] audit: type=1400 audit(86.077:463): avc: denied { read append open } for pid=7358 comm="syz.2.372" path="/177/file0/cpuset.effective_cpus" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.188519][ T7269] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 86.207621][ T7269] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 86.215292][ T7269] wireguard: wg0: Could not create IPv4 socket [ 86.217717][ T5972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.219853][ T7269] wireguard: wg1: Could not create IPv4 socket [ 86.221305][ T5972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.225770][ T7269] wireguard: wg2: Could not create IPv4 socket [ 86.225787][ T5972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.234331][ T5972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.237935][ T5972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.251827][ T6030] tipc: Node number set to 11578026 [ 86.257648][ T7360] Failed to initialize the IGMP autojoin socket (err -2) [ 86.410375][ T7371] vivid-000: ================= START STATUS ================= [ 86.415211][ T7371] vivid-000: Test Pattern: 75% Colorbar [ 86.417799][ T7371] vivid-000: Fill Percentage of Frame: 100 [ 86.420265][ T7371] vivid-000: Horizontal Movement: No Movement [ 86.424338][ T7371] vivid-000: Vertical Movement: No Movement [ 86.426635][ T7371] vivid-000: OSD Text Mode: All [ 86.428498][ T7371] vivid-000: Show Border: false [ 86.430159][ T7371] vivid-000: Show Square: false [ 86.433455][ T7371] vivid-000: Sensor Flipped Horizontally: false [ 86.436303][ T7374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.376'. [ 86.436335][ T7371] vivid-000: Sensor Flipped Vertically: false [ 86.441638][ T7375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.376'. [ 86.441957][ T7371] vivid-000: Insert SAV Code in Image: false [ 86.446961][ T7371] vivid-000: Insert EAV Code in Image: false [ 86.448893][ T7371] vivid-000: Insert Video Guard Band: false [ 86.451402][ T7371] vivid-000: Reduced Framerate: false [ 86.453627][ T7371] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 86.456241][ T7371] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 86.459110][ T7371] vivid-000: Enable Capture Cropping: true [ 86.461087][ T7371] vivid-000: Enable Capture Composing: true [ 86.463599][ T7371] vivid-000: Enable Capture Scaler: true [ 86.465959][ T7371] vivid-000: Timestamp Source: End of Frame [ 86.468487][ T7371] vivid-000: Colorspace: sRGB [ 86.470490][ T7371] vivid-000: Transfer Function: Default [ 86.472337][ T7371] vivid-000: Y'CbCr Encoding: Default [ 86.474285][ T7371] vivid-000: HSV Encoding: Hue 0-179 [ 86.476036][ T7371] vivid-000: Quantization: Default [ 86.477723][ T7371] vivid-000: Apply Alpha To Red Only: false [ 86.477738][ T7371] vivid-000: Standard Aspect Ratio: 4x3 [ 86.477748][ T7371] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 86.477763][ T7371] vivid-000: DV Timings: 640x480p59 inactive [ 86.487691][ T7371] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 86.490549][ T7371] vivid-000: Maximum EDID Blocks: 1 [ 86.492466][ T7371] vivid-000: Limited RGB Range (16-235): false [ 86.495065][ T7371] vivid-000: Rx RGB Quantization Range: Automatic [ 86.497741][ T7371] vivid-000: Power Present: 0x00000001 [ 86.500072][ T7371] tpg source WxH: 320x180 (Y'CbCr) [ 86.502466][ T7371] tpg field: 1 [ 86.503732][ T7371] tpg crop: (0,0)/320x180 [ 86.505057][ T7371] tpg compose: (0,0)/320x180 [ 86.507081][ T7371] tpg colorspace: 8 [ 86.508716][ T7371] tpg transfer function: 0/0 [ 86.510665][ T7371] tpg Y'CbCr encoding: 0/0 [ 86.512726][ T7371] tpg quantization: 0/0 [ 86.514090][ T7371] tpg RGB range: 0/2 [ 86.515339][ T7371] vivid-000: ================== END STATUS ================== [ 86.801905][ T6030] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 86.952924][ T6030] usb 7-1: Using ep0 maxpacket: 32 [ 86.956556][ T6030] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 86.959129][ T6030] usb 7-1: config 0 has no interface number 0 [ 86.963205][ T6030] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 86.965979][ T6030] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.968741][ T6030] usb 7-1: Product: syz [ 86.970198][ T6030] usb 7-1: Manufacturer: syz [ 86.972234][ T6030] usb 7-1: SerialNumber: syz [ 86.980516][ T6030] usb 7-1: config 0 descriptor?? [ 86.984787][ T6030] smsc95xx v2.0.0 [ 86.985952][ T6030] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 86.989543][ T6030] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 87.169951][ T7360] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 87.176860][ T7360] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 87.184633][ T7360] wireguard: wg0: Could not create IPv4 socket [ 87.187529][ T7360] wireguard: wg1: Could not create IPv4 socket [ 87.191948][ T7360] wireguard: wg2: Could not create IPv4 socket [ 87.306847][ T5974] block nbd1: Receive control failed (result -32) [ 87.311793][ T7378] block nbd1: shutting down sockets [ 87.332631][ T7381] infiniband syz2: set down [ 87.334276][ T7381] infiniband syz2: added team_slave_0 [ 87.338410][ T7381] syz2: rxe_create_qp: returned err = -2 [ 87.340983][ T7381] infiniband syz2: Couldn't create ib_mad QP1 [ 87.344583][ T7381] infiniband syz2: Couldn't open port 1 [ 87.356939][ T7381] RDS/IB: syz2: added [ 87.358579][ T7381] smc: adding ib device syz2 with port count 1 [ 87.360896][ T7381] smc: ib device syz2 port 1 has pnetid [ 87.429660][ T7395] netlink: 48 bytes leftover after parsing attributes in process `syz.1.380'. [ 87.542520][ T53] usb 7-1: USB disconnect, device number 6 [ 88.135209][ T7403] team0: Port device vlan0 removed [ 88.143899][ T7403] team0: Unable to change to the same mode the team is in [ 88.148464][ T7403] team0: Port device vlan0 added [ 88.152201][ T7403] tipc: Enabling of bearer rejected, already enabled [ 88.383863][ T7418] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 88.389603][ T7418] netlink: 72 bytes leftover after parsing attributes in process `syz.1.386'. [ 88.500425][ T7421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1908 sclass=netlink_route_socket pid=7421 comm=syz.2.388 [ 88.861444][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 89.011532][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 89.015348][ T9] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.019571][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 89.022526][ T9] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 89.026336][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.031997][ T9] usb 7-1: config 0 descriptor?? [ 89.201863][ T102] Bluetooth: Error in BCSP hdr checksum [ 89.440698][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 89.443445][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 89.447688][ T9] usb 7-1: USB disconnect, device number 7 [ 89.974258][ T7434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7434 comm=syz.2.391 [ 89.982645][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 89.986051][ T7434] netlink: 'syz.2.391': attribute type 5 has an invalid length. [ 90.531302][ T6049] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 90.661311][ T6049] usb 7-1: device descriptor read/64, error -71 [ 90.911311][ T6049] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 90.964671][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.967432][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.970099][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.973536][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.976398][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.986817][ T7439] Failed to initialize the IGMP autojoin socket (err -2) [ 91.041319][ T6049] usb 7-1: device descriptor read/64, error -71 [ 91.153105][ T6049] usb usb7-port1: attempt power cycle [ 91.251322][ T5974] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 91.251353][ T63] Bluetooth: hci2: command 0x1003 tx timeout [ 91.288419][ T5974] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 91.501291][ T6049] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 91.531617][ T6049] usb 7-1: device descriptor read/8, error -71 [ 91.771387][ T6049] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 91.791713][ T6049] usb 7-1: device descriptor read/8, error -71 [ 91.911376][ T6049] usb usb7-port1: unable to enumerate USB device [ 92.202034][ T7439] netdevsim netdevsim4 netdevsim0: renamed from eth14 [ 92.208186][ T7439] netdevsim netdevsim4 netdevsim1: renamed from eth15 [ 92.221583][ T7439] netdevsim netdevsim4 netdevsim2: renamed from eth16 [ 92.228136][ T7439] netdevsim netdevsim4 netdevsim3: renamed from eth17 [ 92.570761][ T7439] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 92.577212][ T7439] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 92.583506][ T7439] wireguard: wg0: Could not create IPv4 socket [ 92.586702][ T7439] wireguard: wg1: Could not create IPv4 socket [ 92.589728][ T7439] wireguard: wg2: Could not create IPv4 socket [ 92.962389][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.966008][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.969476][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.974643][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.977716][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.998532][ T7476] Failed to initialize the IGMP autojoin socket (err -2) [ 93.141259][ T6244] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 93.185235][ T7480] team0: Port device vlan0 removed [ 93.199916][ T7480] team0: Unable to change to the same mode the team is in [ 93.206597][ T7480] team0: Port device vlan0 added [ 93.211045][ T7480] tipc: Enabling of bearer rejected, already enabled [ 93.265434][ T7485] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.312792][ T6244] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 93.315253][ T6244] usb 6-1: config 1 has no interface number 0 [ 93.317089][ T6244] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 93.320122][ T6244] usb 6-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 93.324230][ T6244] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 93.329551][ T6244] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 93.333077][ T6244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.335504][ T6244] usb 6-1: Product: syz [ 93.336767][ T6244] usb 6-1: Manufacturer: syz [ 93.338185][ T6244] usb 6-1: SerialNumber: syz [ 93.343002][ T7475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.346162][ T7475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.349923][ T6244] usb 6-1: Expected 3 endpoints, found: 2 [ 93.354362][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 93.354372][ T40] audit: type=1400 audit(93.267:473): avc: denied { map } for pid=7489 comm="syz.2.404" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.363590][ T40] audit: type=1400 audit(93.267:474): avc: denied { execute } for pid=7489 comm="syz.2.404" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.566072][ T7498] tmpfs: Group quota block hardlimit too large. [ 93.570823][ T40] audit: type=1400 audit(93.477:475): avc: denied { execute } for pid=7497 comm="syz.2.406" dev="hugetlbfs" ino=20656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 93.579951][ T40] audit: type=1400 audit(93.477:476): avc: denied { execute_no_trans } for pid=7497 comm="syz.2.406" path=2F6D656D66643A5B0BDB58AE5B1AA9202864656C6574656429 dev="hugetlbfs" ino=20656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 93.610815][ T40] audit: type=1400 audit(93.517:477): avc: denied { getopt } for pid=7499 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 93.887285][ T7476] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 93.894351][ T7476] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 93.901887][ T6055] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 93.904285][ T7476] wireguard: wg0: Could not create IPv4 socket [ 93.909516][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.909921][ T7476] wireguard: wg1: Could not create IPv4 socket [ 93.913562][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.917753][ T7476] wireguard: wg2: Could not create IPv4 socket [ 94.055634][ T6055] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 94.058649][ T6055] usb 7-1: config 0 has no interface number 0 [ 94.060854][ T6055] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.064839][ T6055] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 8224, setting to 8 [ 94.068625][ T6055] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 94.073101][ T6055] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 94.077055][ T6055] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 94.081116][ T6055] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.084999][ T6055] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 94.088344][ T6055] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.092525][ T6055] usb 7-1: config 0 descriptor?? [ 94.095254][ T7503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.097953][ T7503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.104443][ T6055] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 94.305653][ T6004] usb 7-1: USB disconnect, device number 12 [ 94.309289][ T6004] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 94.833431][ T7514] nft_compat: unsupported protocol 0 [ 94.835944][ T40] audit: type=1400 audit(94.747:478): avc: denied { remove_name } for pid=7513 comm="syz.2.408" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.844534][ T40] audit: type=1400 audit(94.747:479): avc: denied { unlink } for pid=7513 comm="syz.2.408" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.943445][ T40] audit: type=1400 audit(94.857:480): avc: denied { create } for pid=7518 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 94.950197][ T40] audit: type=1400 audit(94.857:481): avc: denied { bind } for pid=7518 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 95.898773][ T34] usb 6-1: USB disconnect, device number 4 [ 95.917325][ T7527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.412'. [ 95.924840][ T7527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.412'. [ 95.975305][ T7533] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.052014][ T40] audit: type=1400 audit(95.967:482): avc: denied { ioctl } for pid=7530 comm="syz.2.414" path="socket:[22568]" dev="sockfs" ino=22568 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.293428][ T7550] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 96.299179][ T7550] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 96.381287][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 96.531689][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 96.535320][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 96.537712][ T34] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 96.540810][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.546345][ T34] usb 6-1: config 0 descriptor?? [ 96.664008][ T7570] overlay: ./file0 is not a directory [ 96.788679][ T7572] tipc: Enabled bearer , priority 0 [ 96.791506][ T7572] syzkaller0: entered promiscuous mode [ 96.793720][ T7572] syzkaller0: entered allmulticast mode [ 96.799012][ T7572] tipc: Resetting bearer [ 96.802572][ T7571] tipc: Resetting bearer [ 96.809754][ T7571] tipc: Disabling bearer [ 96.928550][ T7574] team0: Port device vlan0 removed [ 96.940813][ T7574] team0: Port device vlan0 added [ 96.944314][ T7574] tipc: Enabling of bearer rejected, already enabled [ 96.954515][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 96.956685][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 96.958736][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 96.960810][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 96.964148][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 96.966577][ T34] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 96.997866][ T7576] team0: Port device vlan0 removed [ 97.010631][ T7576] team0: Mode changed to "activebackup" [ 97.083239][ T7580] 9p: Unknown uid 00000000004294967295 [ 97.153956][ T34] usb 6-1: USB disconnect, device number 5 [ 97.895911][ T7599] team0: Port device vlan0 added [ 97.899754][ T7599] tipc: Enabling of bearer rejected, already enabled [ 97.910916][ T7602] trusted_key: encrypted_key: insufficient parameters specified [ 97.994146][ T7611] hfsplus: unable to find HFS+ superblock [ 98.015725][ T5974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.018736][ T5974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.022610][ T5974] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.026067][ T5974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.028838][ T5974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.047145][ T7612] Failed to initialize the IGMP autojoin socket (err -2) [ 98.076642][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805712f400: rx timeout, send abort [ 98.175751][ T7623] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 98.184440][ T7623] ------------[ cut here ]------------ [ 98.186832][ T7623] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 98.190274][ T7623] WARNING: CPU: 2 PID: 7623 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x247/0x850 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 98.197120][ T7623] Modules linked in: [ 98.199768][ T7623] CPU: 2 UID: 0 PID: 7623 Comm: syz.1.447 Not tainted syzkaller #0 PREEMPT(full) [ 98.202998][ T7623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.206502][ T7623] RIP: 0010:drv_unassign_vif_chanctx+0x247/0x850 [ 98.208547][ T7623] Code: 74 24 10 48 81 c6 20 01 00 00 48 89 74 24 10 e8 0f d7 b9 f6 8b 54 24 04 48 8b 74 24 10 48 c7 c7 c0 aa 08 8d e8 aa 7b 78 f6 90 <0f> 0b 90 90 e8 f0 d6 b9 f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 98.214794][ T7623] RSP: 0018:ffffc900031c7998 EFLAGS: 00010286 [ 98.216666][ T7623] RAX: 0000000000000000 RBX: ffff8880486a0d80 RCX: ffffc900040aa000 [ 98.219215][ T7623] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 98.221760][ T7623] RBP: ffff888036048e40 R08: 0000000000000001 R09: 0000000000000000 [ 98.224257][ T7623] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880486a2a28 [ 98.226746][ T7623] R13: 0000000000000000 R14: ffff8880486a1728 R15: ffff8880486a29d0 [ 98.229251][ T7623] FS: 00007efe34bc76c0(0000) GS:ffff8880d68b2000(0000) knlGS:0000000000000000 [ 98.232584][ T7623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.234733][ T7623] CR2: 000000110c338573 CR3: 0000000059794000 CR4: 0000000000352ef0 [ 98.237223][ T7623] Call Trace: [ 98.238313][ T7623] [ 98.239327][ T7623] ieee80211_assign_link_chanctx+0x3f1/0xf00 [ 98.241282][ T7623] __ieee80211_link_release_channel+0x273/0x4b0 [ 98.243279][ T7623] ieee80211_link_release_channel+0x128/0x200 [ 98.245184][ T7623] ieee80211_if_change_type+0x2b0/0x800 [ 98.246981][ T7623] ieee80211_change_iface+0xa5/0x500 [ 98.248693][ T7623] cfg80211_change_iface+0x57f/0xdc0 [ 98.250370][ T7623] cfg80211_wext_siwmode+0x22c/0x2b0 [ 98.252183][ T7623] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 98.254041][ T7623] ? __pfx___mutex_lock+0x10/0x10 [ 98.255687][ T7623] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 98.257525][ T7623] ioctl_standard_call+0xb2/0x1d0 [ 98.259335][ T7623] ? __pfx_ioctl_standard_call+0x10/0x10 [ 98.261247][ T7623] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 98.263107][ T7623] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 98.265122][ T7623] wext_handle_ioctl+0x226/0x2a0 [ 98.266712][ T7623] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 98.268464][ T7623] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 98.270079][ T7623] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 98.272318][ T7623] sock_ioctl+0x3a1/0x6b0 [ 98.273699][ T7623] ? __pfx_sock_ioctl+0x10/0x10 [ 98.275289][ T7623] ? hook_file_ioctl_common+0x145/0x410 [ 98.277046][ T7623] ? selinux_file_ioctl+0x180/0x270 [ 98.278863][ T7623] ? selinux_file_ioctl+0xb4/0x270 [ 98.280537][ T7623] ? __pfx_sock_ioctl+0x10/0x10 [ 98.282181][ T7623] __x64_sys_ioctl+0x18b/0x210 [ 98.283722][ T7623] do_syscall_64+0xcd/0x4e0 [ 98.285201][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.287083][ T7623] RIP: 0033:0x7efe33d8eba9 [ 98.288510][ T7623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.294723][ T7623] RSP: 002b:00007efe34bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.297309][ T7623] RAX: ffffffffffffffda RBX: 00007efe33fd5fa0 RCX: 00007efe33d8eba9 [ 98.299825][ T7623] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000005 [ 98.302392][ T7623] RBP: 00007efe33e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 98.304863][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.307303][ T7623] R13: 00007efe33fd6038 R14: 00007efe33fd5fa0 R15: 00007ffd0913f138 [ 98.309830][ T7623] [ 98.310870][ T7623] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.313194][ T7623] CPU: 2 UID: 0 PID: 7623 Comm: syz.1.447 Not tainted syzkaller #0 PREEMPT(full) [ 98.315951][ T7623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.319242][ T7623] Call Trace: [ 98.320285][ T7623] [ 98.321215][ T7623] dump_stack_lvl+0x3d/0x1f0 [ 98.322713][ T7623] vpanic+0x6e8/0x7a0 [ 98.323991][ T7623] ? __pfx_vpanic+0x10/0x10 [ 98.325449][ T7623] ? drv_unassign_vif_chanctx+0x247/0x850 [ 98.327215][ T7623] panic+0xca/0xd0 [ 98.328406][ T7623] ? __pfx_panic+0x10/0x10 [ 98.329797][ T7623] check_panic_on_warn+0xab/0xb0 [ 98.331333][ T7623] __warn+0xf6/0x3c0 [ 98.332562][ T7623] ? drv_unassign_vif_chanctx+0x247/0x850 [ 98.334320][ T7623] report_bug+0x3c3/0x580 [ 98.335693][ T7623] ? drv_unassign_vif_chanctx+0x247/0x850 [ 98.337491][ T7623] handle_bug+0x184/0x210 [ 98.338914][ T7623] exc_invalid_op+0x17/0x50 [ 98.340354][ T7623] asm_exc_invalid_op+0x1a/0x20 [ 98.341895][ T7623] RIP: 0010:drv_unassign_vif_chanctx+0x247/0x850 [ 98.343871][ T7623] Code: 74 24 10 48 81 c6 20 01 00 00 48 89 74 24 10 e8 0f d7 b9 f6 8b 54 24 04 48 8b 74 24 10 48 c7 c7 c0 aa 08 8d e8 aa 7b 78 f6 90 <0f> 0b 90 90 e8 f0 d6 b9 f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 98.349748][ T7623] RSP: 0018:ffffc900031c7998 EFLAGS: 00010286 [ 98.351617][ T7623] RAX: 0000000000000000 RBX: ffff8880486a0d80 RCX: ffffc900040aa000 [ 98.354170][ T7623] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 98.356682][ T7623] RBP: ffff888036048e40 R08: 0000000000000001 R09: 0000000000000000 [ 98.359211][ T7623] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880486a2a28 [ 98.361517][ T7623] R13: 0000000000000000 R14: ffff8880486a1728 R15: ffff8880486a29d0 [ 98.364005][ T7623] ? __warn_printk+0x1a5/0x350 [ 98.365533][ T7623] ? drv_unassign_vif_chanctx+0x246/0x850 [ 98.367415][ T7623] ieee80211_assign_link_chanctx+0x3f1/0xf00 [ 98.369317][ T7623] __ieee80211_link_release_channel+0x273/0x4b0 [ 98.371259][ T7623] ieee80211_link_release_channel+0x128/0x200 [ 98.373142][ T7623] ieee80211_if_change_type+0x2b0/0x800 [ 98.374858][ T7623] ieee80211_change_iface+0xa5/0x500 [ 98.376513][ T7623] cfg80211_change_iface+0x57f/0xdc0 [ 98.378148][ T7623] cfg80211_wext_siwmode+0x22c/0x2b0 [ 98.380326][ T7623] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 98.382735][ T7623] ? __pfx___mutex_lock+0x10/0x10 [ 98.384776][ T7623] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 98.386610][ T7623] ioctl_standard_call+0xb2/0x1d0 [ 98.388230][ T7623] ? __pfx_ioctl_standard_call+0x10/0x10 [ 98.390021][ T7623] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 98.391862][ T7623] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 98.393880][ T7623] wext_handle_ioctl+0x226/0x2a0 [ 98.395474][ T7623] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 98.397196][ T7623] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 98.399160][ T7623] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 98.401311][ T7623] sock_ioctl+0x3a1/0x6b0 [ 98.402717][ T7623] ? __pfx_sock_ioctl+0x10/0x10 [ 98.404260][ T7623] ? hook_file_ioctl_common+0x145/0x410 [ 98.405986][ T7623] ? selinux_file_ioctl+0x180/0x270 [ 98.407637][ T7623] ? selinux_file_ioctl+0xb4/0x270 [ 98.409268][ T7623] ? __pfx_sock_ioctl+0x10/0x10 [ 98.410810][ T7623] __x64_sys_ioctl+0x18b/0x210 [ 98.412405][ T7623] do_syscall_64+0xcd/0x4e0 [ 98.414044][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.416157][ T7623] RIP: 0033:0x7efe33d8eba9 [ 98.417754][ T7623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.423944][ T7623] RSP: 002b:00007efe34bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.426440][ T7623] RAX: ffffffffffffffda RBX: 00007efe33fd5fa0 RCX: 00007efe33d8eba9 [ 98.428848][ T7623] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000005 [ 98.431238][ T7623] RBP: 00007efe33e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 98.433597][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.436001][ T7623] R13: 00007efe33fd6038 R14: 00007efe33fd5fa0 R15: 00007ffd0913f138 [ 98.438358][ T7623] [ 98.440001][ T7623] Kernel Offset: disabled [ 98.441337][ T7623] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:27:37 Registers: info registers vcpu 0 CPU#0 RAX=00000000000f3127 RBX=0000000000000000 RCX=ffffffff8b94bb49 RDX=0000000000000000 RSI=ffffffff8de52c58 RDI=ffffffff8c163280 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7290 R15=0000000000000000 RIP=ffffffff8b94a68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f12f932cf98 CR3=000000005d8f1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12fb212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12fb212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff6fed3d928326f1 f36f05b268e5df31 7101b4fcf651bb12 c51832ce79f19524 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea8e4413a30c0487 7374e7ff6fed3d92 8326f1f36f05b268 e5df317101b4fcf6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 51bb12c51832ce79 f19524d1b5d44602 5e0698fe065e1ed3 212a3926f6f884a2 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a02436c29964c0c bdf0a300512748b1 c5b6181e4d1749c4 013155ff7a9d1860 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9bf6a20000000000 000007e4b15171ec efe86de4ee9af9d6 fdc470a9c6cb926d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000000 RBX=0000003ca34befcc RCX=0000000000000000 RDX=0000000000000001 RSI=ffffffff8c163200 RDI=0000000000000001 RBP=0000003ca34bdb8e RSP=ffffc90000a7fad0 R8 =0000000000000001 R9 =0000000000000024 R10=ffffe8ffffd50197 R11=0000000000000010 R12=0000000000000001 R13=00000000000032c9 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8b9396b2 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d67b2000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d5d93 CR3=000000005d8f1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12fb212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12fb212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff6fed3d928326f1 f36f05b268e5df31 7101b4fcf651bb12 c51832ce79f19524 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea8e4413a30c0487 7374e7ff6fed3d92 8326f1f36f05b268 e5df317101b4fcf6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 51bb12c51832ce79 f19524d1b5d44602 5e0698fe065e1ed3 212a3926f6f884a2 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a02436c29964c0c bdf0a300512748b1 c5b6181e4d1749c4 013155ff7a9d1860 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9bf6a20000000000 000007e4b15171ec efe86de4ee9af9d6 fdc470a9c6cb926d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564b755 RDI=ffffffff9b1180e0 RBP=ffffffff9b1180a0 RSP=ffffc900031c72f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b1180a0 R15=ffffffff8564b6f0 RIP=ffffffff8564b77f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efe34bc76c0 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c338573 CR3=0000000059794000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000ffffffff Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0913f646 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0913f646 00007ffd0913f64c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe33e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe33e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe33e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe33e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe33e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe33e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe33fa74a8 00007efe33fa74a0 00007efe33fa7498 00007efe33fa7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe34b0d100 00007efe33fa7460 00007efe33fa7478 00007efe33fa74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe33fa74b8 00007efe33fa74b0 00007efe33fa74a8 00007efe33fa74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff88803784afa8 RBX=ffffffff8e5c14e0 RCX=ffffc9000368f704 RDX=0000000000000000 RSI=ffffffff8e5c14e0 RDI=ffff88803784afa8 RBP=ffff88807ffd6500 RSP=ffffc9000368f6f8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff822db0ea R13=0000000000000206 R14=ffff88803784a440 R15=0000000000000004 RIP=ffffffff8197d36d RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f73d1507d60 CR3=000000002b648000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73d09a76c3 00007f73d09a76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc587f390 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558e194f5f 000055558e194eb0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558e193498 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558e1a6f86 000055558e1a6340 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8882080001000008 080606010fd2ef02 0806800306800408 d00300100008c003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010c800800041000 221000060171a608 8004188383888208 0001000008080606 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fd2ef02080680 0306800408d00300 100008c003021000 08b0030fffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0408a0030010 0008900304f91000 0880030010000810 0001000008080606 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01408e4010000b80 04041000060102ce 0010000bb0030020 20202053702501ff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000