last executing test programs: 1m9.93185042s ago: executing program 0 (id=296): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x13ac6a8e1d2811e8, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c89c) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r5, 0x4, 0x0, @void}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000280), 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r6, 0x4) r8 = socket(0x3, 0x3, 0xfffffffc) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="3b030000000000000502f5a9c20400000009c20400006a44c20400000006000100f252caf38a3cf2255fd8f59ced00000000000000"], 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r9, r10, 0x4}, 0x10) close(0x4) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x4) write(r13, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m9.801976268s ago: executing program 0 (id=297): r0 = socket(0x8, 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x4200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000002c0)=0x80, 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f00000000c0)={&(0x7f00000002c0)={{@any, 0x6}, {@my=0x0, 0x6}, 0x400, "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"}, 0x418, 0x5}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r7 = syz_open_dev$audion(&(0x7f0000000140), 0x4, 0x80) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f0000000200)={0x18, r8, 0x7f, 0x7}) 1m9.69200122s ago: executing program 0 (id=298): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff83}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000010000000097000100ffffffff9500"/32], &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="11323d9840799e4d819c053a81a50dba62ee0e", @ANYRES64=0x0], 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r3, r3, 0x2f, 0x2028, 0x4, @void, @void, @value=r4}, 0x20) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xeca, 0x4}, &(0x7f00000000c0)=0x18) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x38, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004810) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@migrate={0xa8, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@empty}, 0x0, 0x4f000e9ca1872fb5}, [@XFRMA_IF_ID={0x8}, @migrate={0x50, 0x11, [{@in6=@dev, @in=@private, @in6=@mcast1, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa8}}, 0x0) (async) r8 = socket$igmp(0x2, 0x3, 0x2) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet(r9, 0x0, 0x0, 0x80000) (async) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000cc0)=ANY=[], 0x590) 1m9.690857583s ago: executing program 0 (id=299): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0xe2, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = io_uring_setup(0x7659, &(0x7f0000000080)={0x0, 0x17a3, 0x800, 0x1, 0x336, 0x0, r0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsa(0x0, 0xfff, 0x9081) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='fuse\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCXONC(r2, 0x540a, 0x3) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000065c0)=ANY=[@ANYBLOB="580000000102010100000000000000000a00000006000740000400003c0001802c00018014000300ff0100000000000000000000000000010d0004"], 0x58}}, 0x4040800) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x28, 0x12, 0xa01, 0x0, 0x1, {}, [@typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000100)=[0x7fff, 0x520e], 0x2) 1m9.551029123s ago: executing program 0 (id=300): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x875) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r2, r1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x19, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x73622a85, 0x1, 0x0, 0x0, 0x1, 0x20001f}, @fd, @flat=@binder={0x73622a85, 0x1, 0x1000000}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1m8.692212133s ago: executing program 0 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) io_setup(0x2, &(0x7f0000000040)=0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) sendto$inet6(r2, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0xffffffff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x400000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000040)={"66ef2939788694894ed60096cf202bd5a0d201d26b9bdfcefdd7c40c314b", 0x0, 0x2, 0x401, 0x9, 0x5, 0xb88f, 0x2, 0x3, [0x5, 0x0, 0x101, 0x0, 0x7ff, 0x4, 0x97, 0x5, 0x80000001, 0x3, 0x3, 0xffffffff, 0x4, 0x4, 0x5b11, 0x6, 0x4, 0x9, 0x7f]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000580)={0x3, 0x7, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000440), r6, 0x1}}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00100001000fc0100000000eeffffff00ffffff0000ac1414bb00"/51, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc0100"/112], 0x1a0}}, 0x0) 1m4.875844783s ago: executing program 3 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new0default user:syz '], 0x2a, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (rerun: 32) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents64(r4, &(0x7f0000001ec0)=""/142, 0x8e) (async) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) (async) close(r3) (async, rerun: 32) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x800b2a9, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x300, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) io_uring_setup(0x1c12, &(0x7f0000000200)={0x0, 0xfc35, 0x200, 0x0, 0x35e}) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) (rerun: 64) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 1m4.872987777s ago: executing program 3 (id=356): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_collapse_huge_page_isolate\x00', r4, 0x0, 0x802}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new0default user:s'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESHEX=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m4.772158736s ago: executing program 3 (id=357): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}], 0x18, 0x4}], 0x1, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000100)}], 0x1, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0x10, 0x0) 1m4.771252536s ago: executing program 3 (id=358): keyctl$session_to_parent(0x12) (async, rerun: 64) r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="651bd03df95f21fdefd46892dd713b52ca194e52687cc01c313abd5360009486d04a2f1a08fbdf3c35fa83ce90c6d173c8868af5421d89590da5528508e37b3b609db08d85f6ce91290ec45b6a01c773ae8ee7340aa5ebc50ff0eebaa2d1c1d18b4e67bb783298cb5a5d87791b4887aab32d28047fd4e298bd58986af596353ea094821521", 0x85, 0xfffffffffffffffd) (async, rerun: 64) mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='xfs\x00', 0x850, 0x0) (async) r1 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="33413d78275219265a6c5f1542a59e0934ebc893a308f874e02181efce06cca4296474aa3f596bbd9717596afb24a0e172b9e0dc502170365c298330", 0x3c, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f00000002c0)='.dead\x00', &(0x7f0000000300)={'syz', 0x1}, r0) (async) keyctl$session_to_parent(0x12) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (rerun: 32) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564233a73"], 0x54}}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r9, 0xc008551b, &(0x7f00000004c0)={0x4, 0x10, [0xfffffffb, 0x6, 0x7, 0xa40]}) keyctl$session_to_parent(0x12) (async, rerun: 32) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r9, 0x0) (rerun: 32) keyctl$invalidate(0x15, r0) 1m4.651993982s ago: executing program 3 (id=360): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="100100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000d400128009000100766c616e00000000c40002804c0004800c0001000500000001f8ffff0c0001002f000000ff0f00000c00010006000000f50300000c000100080000006fa400000c00010000080000470d00000c000100b72942da34fcffff0c000200000000000400000006000100020000000600010001000000100004800c000100ffff000000000010400004800c000100b7dc3d66010100000c00010000000000000000000c00010009000000000000000c0001007f0000004b00000005000100b50a00000010000006000100030000006272696467655f736c6176655f3100000500110026000000"], 0x110}}, 0x4000) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x42) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x8) (async) mkdir(&(0x7f00000001c0)='./file1\x00', 0x8) chdir(&(0x7f0000000240)='./file0\x00') (async) chdir(&(0x7f0000000240)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000001ffffee0000000000000010000000000000"], 0x0, 0x26}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 1m4.511714478s ago: executing program 3 (id=362): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01001e010000340200400600000008000d005000000008000d0030000000080003002e00000008000e0000000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r5, 0x100, 0x123, 0x234}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44008814}, 0xfcaeca0cd1654028) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000005c0)={{r6, r7+60000000}, {r8, r9+60000000}}, &(0x7f0000000600)) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7fff}, 0x2}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) r13 = socket(0x10, 0x803, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r14) sendmsg$DEVLINK_CMD_RATE_NEW(r14, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c141cb25aa3dcd2bbc85e9862107dadb7d570a0e0d5a028f4a8513609edb6c4e63cc8ac", @ANYRES16=r16, @ANYBLOB="010129bd7000fddbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e00a80066697273746e616d65000000"], 0x44}, 0x1, 0x0, 0x0, 0x88800}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r14, &(0x7f0000000b00)={0x0, 0xfffffdd4, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20040008}, 0xc4) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x59) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r17, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffd2d7c70000000000000000000", @ANYRES32=0x0, @ANYBLOB="008000000000000024001e800b00010067726574617000001400028008000700ac1414aa080001007b48f9a662286489bcd301b0b1b61b04ddfacc4906ba60489214dca1eef0716b2d5efca8df15f7e809baa5da179d41d72fa2b9658e6e6b044bb6e09db941362aee82d19887b1f20400846ff51decd598c585712c2621b709ec328c1c464ae204266a9aa0b2bb02008ef69b946d4b7bca7c472a926a89d5735cd3beaf5e38b84ac9ce7422d46f0b033215dcc3e6dd1df55eaef85749b3c36b0566b892dc420dfec2d045b30a41dd90a4ceef8c51", @ANYRES32=r17, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r17, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4048800}, 0xc850) 57.950162155s ago: executing program 1 (id=379): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x1ff, 0x8400) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/128, 0x80}) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0xa3, 0xd, 0x4, 0xfe, 0xe0, 0xfeff, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}}], {0x14}}, 0xa8}}, 0x0) 57.051940458s ago: executing program 1 (id=380): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r5, 0xb01}, 0x14}}, 0x50) 57.051638918s ago: executing program 1 (id=381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}, @qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x80) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000cc0)=ANY=[@ANYBLOB="6d6f64659b30303030303030303030303030303030303030303031312c00"]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 56.938670043s ago: executing program 1 (id=382): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000005480)={0x0, 'syz1\x00'}) r3 = socket(0x10, 0x3, 0x80000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001000010400"/26, @ANYRES32=0x0, @ANYBLOB="03800000000000001800128008000100736974000c000280050009002d000000"], 0x38}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x43882000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfe}}}}}}}, 0x0) madvise(&(0x7f0000229000/0x1000)=nil, 0x1000, 0x10) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r5 = epoll_create(0x264) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x80000000}) 56.781628085s ago: executing program 1 (id=383): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x875) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r2, r1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x19, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x73622a85, 0x1, 0x0, 0x0, 0x1, 0x20001f}, @fd, @flat=@binder={0x73622a85, 0x1, 0x1000000}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 56.770519591s ago: executing program 1 (id=384): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="a9ff0b07685926a847000000000000", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ipvlan1\x00', 0x10) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000000)=0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 52.750974995s ago: executing program 32 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) io_setup(0x2, &(0x7f0000000040)=0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) sendto$inet6(r2, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0xffffffff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x400000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000040)={"66ef2939788694894ed60096cf202bd5a0d201d26b9bdfcefdd7c40c314b", 0x0, 0x2, 0x401, 0x9, 0x5, 0xb88f, 0x2, 0x3, [0x5, 0x0, 0x101, 0x0, 0x7ff, 0x4, 0x97, 0x5, 0x80000001, 0x3, 0x3, 0xffffffff, 0x4, 0x4, 0x5b11, 0x6, 0x4, 0x9, 0x7f]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000580)={0x3, 0x7, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000440), r6, 0x1}}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00100001000fc0100000000eeffffff00ffffff0000ac1414bb00"/51, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc0100"/112], 0x1a0}}, 0x0) 49.498590592s ago: executing program 33 (id=362): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01001e010000340200400600000008000d005000000008000d0030000000080003002e00000008000e0000000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r5, 0x100, 0x123, 0x234}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44008814}, 0xfcaeca0cd1654028) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000005c0)={{r6, r7+60000000}, {r8, r9+60000000}}, &(0x7f0000000600)) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7fff}, 0x2}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) r13 = socket(0x10, 0x803, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r14) sendmsg$DEVLINK_CMD_RATE_NEW(r14, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c141cb25aa3dcd2bbc85e9862107dadb7d570a0e0d5a028f4a8513609edb6c4e63cc8ac", @ANYRES16=r16, @ANYBLOB="010129bd7000fddbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e00a80066697273746e616d65000000"], 0x44}, 0x1, 0x0, 0x0, 0x88800}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r14, &(0x7f0000000b00)={0x0, 0xfffffdd4, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20040008}, 0xc4) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x59) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r17, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffd2d7c70000000000000000000", @ANYRES32=0x0, @ANYBLOB="008000000000000024001e800b00010067726574617000001400028008000700ac1414aa080001007b48f9a662286489bcd301b0b1b61b04ddfacc4906ba60489214dca1eef0716b2d5efca8df15f7e809baa5da179d41d72fa2b9658e6e6b044bb6e09db941362aee82d19887b1f20400846ff51decd598c585712c2621b709ec328c1c464ae204266a9aa0b2bb02008ef69b946d4b7bca7c472a926a89d5735cd3beaf5e38b84ac9ce7422d46f0b033215dcc3e6dd1df55eaef85749b3c36b0566b892dc420dfec2d045b30a41dd90a4ceef8c51", @ANYRES32=r17, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r17, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4048800}, 0xc850) 41.711469463s ago: executing program 34 (id=384): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="a9ff0b07685926a847000000000000", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ipvlan1\x00', 0x10) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000000)=0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 39.86745279s ago: executing program 2 (id=128): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='soure\x00', &(0x7f0000000100)='[:]:/', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x48}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 31.767721836s ago: executing program 2 (id=128): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='soure\x00', &(0x7f0000000100)='[:]:/', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x48}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 24.558948234s ago: executing program 2 (id=128): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='soure\x00', &(0x7f0000000100)='[:]:/', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x48}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 17.599408064s ago: executing program 2 (id=128): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='soure\x00', &(0x7f0000000100)='[:]:/', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x48}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 16.779416233s ago: executing program 5 (id=639): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf250000000008000300", @ANYRES32=r2, @ANYBLOB="0c009900040000000700000006003600cd00000004005f0004005f0004005f00"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) r3 = memfd_secret(0x80000) write$P9_RSTATFS(r3, &(0x7f0000000240)={0x43, 0x9, 0x1, {0x28, 0x9dbfa8d7, 0x8, 0x6, 0x0, 0x7fffffff, 0x400, 0x1, 0x1}}, 0x43) 16.70119159s ago: executing program 5 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x1) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x10000, 0x399000, 0x8}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x473}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16.351204058s ago: executing program 5 (id=647): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) (async) exit(0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) io_setup(0x7, &(0x7f0000000000)=0x0) io_pgetevents(r1, 0xfff, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0400ff000006001200000000000600ab9a0000000025276fc2354c78b8a09f60b80c8499e7b58c725ed65bd73baa8de8fda3000ee783295e50677b11327d5fe8bf30d1c384e9832c76e65d"], 0x44}}, 0x0) 16.350800642s ago: executing program 5 (id=648): r0 = gettid() (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000001580), &(0x7f00000015c0)=0x4) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) (async) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) (async) timer_gettime(r7, &(0x7f0000000000)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0xe, 0x2, 0x4, 0x0, 0xfe}) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 15.420669072s ago: executing program 5 (id=661): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000000c0)={0xc, 0x7, {0xa3, 0xe7c, 0x5, {0x8, 0x3}, {0x3, 0x1}, @rumble={0x9, 0x8fb}}, {0x57, 0x1200, 0x8, {0xa10e}, {0x8, 0x3}, @ramp={0x400, 0x40, {0x8001, 0x1, 0xffff, 0x5}}}}) (async) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000000c0)={0xc, 0x7, {0xa3, 0xe7c, 0x5, {0x8, 0x3}, {0x3, 0x1}, @rumble={0x9, 0x8fb}}, {0x57, 0x1200, 0x8, {0xa10e}, {0x8, 0x3}, @ramp={0x400, 0x40, {0x8001, 0x1, 0xffff, 0x5}}}}) 15.181157105s ago: executing program 5 (id=663): r0 = getpgid(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) write$char_usb(r2, &(0x7f0000000140)="8df95fefca817bd6be83e8990a58f0c870c1acb9cebc578b5a8fa2a7986ccb97b61003fb580c26251d3979445480c8af5e659a61a54114c2f2977add6300d98a2f3388b781e25cdc0981e4d6dba078cd05d4421d9cc1a89e19fecf5878e6d690c65d8d117d076fe0454dd33ef90c49dba967020c6a5ec1ee35bdc239fae12ebced6f1b2cdb0cb379db76742ed3f7b73542628a0e20de05c4a9df9aa596053cffd647074c1e4f96a995794b621971e579d8b0c817d3a9bd761a26c7c5c81815af49a78d4dd1d33135b8b8e9589217baf23c48c2209102788e7c089b5593755cdf380bf2c777dc159273419b25e00fa0499c93e18c40f53a4a18", 0xf9) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) sendmmsg(r3, &(0x7f0000001580)=[{{&(0x7f0000000240)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="462be5ef31f2bf911caf8fcae67fb90e02ba1efdea14fa377fc57a4527687dd1b445dcb9300454fb971915721720c8742786712bd46dc5c40c2f79d48be99535c0fa094a777edfda477db68ded22042679947fbff01396736e597fb8899ac4574dce15467245e82d505cc2ee2ad5d3e18aa8eef1db0829d18aced85e17cb39093216b875d4d000831f2f2fcae0f576918619d5b96abd85706010502ff21e533a6e6dff789e580f961e45454632b8a10dd45ea531b3e9afeec92dcaffb5c62b409c4922530e72c88e917b12b0ddcdac3505b6941c86", 0xd5}, {&(0x7f00000003c0)="f3988dd805aa027ca579ade749211ab38fe4b64687369f3edb00e839359376b4137659f38c1342b28858365701fca6b065f648617b732cc4e33b903277bf63b91f150e7f9567fb8fcd86a2b8084204c2a74172", 0x53}, {&(0x7f0000000440)="bf092b43e783519dd0ecb2a81c11ca2346ed926100b67f5436742272c9da79ccfd58285875e6ae77586a097b066d0ed07fe02ffa78569a918c6379439b9d554b4362714c9e6ebe591c79f3ade9d36b3144b426d87b2debe852047bf1d0e4c9758c283ff0d8f16fb5febc718e4a5ba5eca8f06cfc8d038d6274bbb2c39b5e4fd12318e44e08a50fa3940e6d664c9264824e4aa34ea9084b24ce28c67af5e2d35f83a25ac211e81b268878d738096081b1fee1eebda0edaf9eb4fd8f3b5bad6a082391f9ad15027abe7dfaeb9ad67dbd634c31b11d9b0d1a4533bf51a757e633824e8ccb", 0xe3}, {&(0x7f0000000080)="bf1360b4ef0de6a8fd21", 0xa}, {&(0x7f0000000540)="afe8ec4e621ec9d596b2a3928b8a6cf799262c8bef57b703d0aa979c75d751733233bb617fa5dcb6763c29177184be75942f496376871cd48eb685494ea243830d47a7d86e0974199946ecedc8de819b4ef8636a94c80c29f488c305d21cf7a84d05cf721355b492091f00f334a66b3b9703509ab1ac5e34f4c65bcd5eab4d23483a4f704f8f463a271c387daa132285ecbb7e1723d5e314327c24f8142871e6fa947aebf7d1e56a2f5476673863d9f39240851074f659f79fd90cad0d", 0xbd}, {&(0x7f0000000600)="1337e5b81baaa8a70702e955f84284fac4770aaa340e150ee06b4eccbd4391fff826b35b89549b3f31e109355e71218f574f4ff7c934fded1ba60cac5fc2ead6eec2317c88a1f23002bec475a957668b52cc6ee75ab51261626fb84d95082fe6a4816f4ea5a2e69cb91632ce3bb3b3515b6b694ed834b9521069c93d59240d17abeb30460926ec121cef32f87612857f143fbf663c27298a2818dc54e958ac073d0601a56f57704d9b289da7c4dc483b90d1576c43ff075c", 0xb8}, {&(0x7f00000006c0)="243a2238cd3b4e82a4d026ced0fdce3f28cab6d4a5982ee8c6c8b999c240952b08fc8a421dfe43560fa4864e26b0cfd1703c7699be846853d40771c5925303c0a8aced89b26ebf2b6d6279714ac783a2823935a8a69004a79bb7d81b36f262a8d6fee8af8188c7046c1fefc1d9a93ebb1ff0d628e0089e3557f098c1018bc3468b84a91470395f9b74c5f1fb78e2fd796c2f011dade7d6dd570500792a39624075748a46242b3f7b0c9b57454ebc10d9c1712702ddfba7fc2ecb9f8e817237d3951a6c65d1ed6985af82988561a9f69c4b8be6f07c3ab5ab44a7bd15faf8c4ed54594bcf3567008e2185", 0xea}], 0x7, &(0x7f0000000840)=[{0x108, 0x107, 0x7fffffff, "fc275b40f833c4137e16507a6e4b32d7111fb67d98d8325ca8f997ccfc84b1f92becfa5d8783188dca0e3ae1ec400757d03dd332082c83f3e77e26911661aeebd8b0b043af73d5a48c331fe6c354db6729bc03ceb254f7f44f172821b6be59dc1ac1ad66102350012e8758f1e1df74f62bfe1243522be052e9206e9b3d07df28420203f455ce37cf4761bc227583892d28d502f156022b7eee5e9ca7b0bf700f6a1ee99a51efab86d5e5b930e4cd8ff902ada8802d23b738b7f9850a9b36eab01bb16625b90add97040226fa04af02868366dfbf627c6d32073cfcbc213d604fe37f85a107b6a2fb0e76bcde3e6b3133e5"}, {0x18, 0x88, 0xffffffff, "d5e7"}, {0x50, 0x272475d741e84bab, 0x7, "700e93e3c315572a02ffc73268abe6d89a0b0ccb72c7e762168b81b61042b82dcbba1f18ff174db97c8ea0508d4e21aca7447ef9c7fb4be5806d"}, {0x60, 0xff, 0x1c, "6b4c1a9a81d46eafb71bc01e663118b2e99c78311787e5646f38632a02e992ab35504c1bb8022cf120caa63db0c4c053d97d33dddd2c3d6cde931783af9129b4c3273e7345e01f418bc857"}, {0x20, 0x119, 0x5, "0a66dc2cd389dc69b01df471e5bc7e8c"}, {0xc8, 0x119, 0xfff, "21667a0ed2a0a3099fdd8a0f637429cd6d2de32f993906f31e44686a83a808f2db1cac351bbcb12641def7689f8122d2fd2b23a4b51bc336335ec4277af932ae21f2e503617ee283401ce6247007b78a6772ec389bc4cc83d72264364d2ac01c6c2c0356156c871ca3912c1cbe84ada27171324af7637172783413f8dc3a0ed6da7086f54eafcd2c4a7bb905c6f64d5fc39cdab3ce280903459e89777f305f99b0d14fddfaeaf3d23e1daeb18a1bf9212aae54e2e920"}], 0x2b8}}, {{&(0x7f0000000b00)=@can, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000100)="29f2e319312821777a83f7c97f5d711b5b03bd54cd8c", 0x16}, {&(0x7f0000000b80)="5fd4d82799cccba665c7e395662f804da1bc1aaaeb0bfaef9599c6c9c0b9479436427ad46ef6a06c156f6d29aa839445e46236c6", 0x34}, {&(0x7f0000000bc0)="d68f02b816b1c9e60ca3d1e0de9b43712f2a4f58b222662fc82136be6dae27f75077c35cf48bcc1c452a7849574a08f8b8b65c08724514c5e3dbdef14b3231eaa8a7fc813a4c2efd34a6429f2f4d9fbc8d8e6cf0e79d4b4feab6e1c6b3ba5dc75968e8259375bb6a9c293334d2617fbc182e5070b52996570b664cccb516d1ba96b19288cb3698a5c4b2dbe7fbe036bd6e0090a25186609ce609b4e021812f26cb197d35b594f5ff9db0e49613a0a67ad73af00d0fb4db51a8161494d3abdb7e67b74104c5d96c9f70427f43ae00cbbeafe067556cd3aac13832ab402542334da01514", 0xe3}], 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000000100100008c10ad16e5641eafff0f0000000000002deabb3027e277"], 0x18}}, {{&(0x7f0000000d40)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @local}, 0x4, 0x0, 0x3, 0x4}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000dc0)="215e55f8aedb963ec930c57644009194dc8ce6e4c776c1c745e8525122b6ce21dd56cedabfb6a513591b0ce970bd062aee9169945220646ebb", 0x39}, {&(0x7f0000000e00)="059e04e1459bfd499491d2b6f5337ce73bd3058c7860cab5cf8ec6c5e7c5f2ac7bb4f406adb9d9c1aad74befb26b9e2f5a382b671d0a37bf4b3f010be19e9c52cf6f92a23cb19991cacca21ac14218ec0985e87081265486bb0ef0cee181b5eeedac8fb49305b71a29474639fb5f8e5b8a94357e75d7ef5fc1292a7084dbe41feff20e69f328c3b36017dec1b04347d0d6b7e22931bc02b8774111c5a937b2a285b239b8594762b751d0b7992616fb0ace68c96dca1d69d84d0e7f2ed4e8b4ee19320241508b00a6da4b2115df12752808274ce9f268f38c3b29af0434699cdae6b22a", 0xe3}, {&(0x7f0000000f00)="d2cb46fe3d84ef29bee253dacc80ebc46272aba0954057ca4a3739c87028911d598aca108d1295b2fdb0a662938fad61e027c1dde81dbeedec334343464aa13e44a694c1d9f9f6d16d99a9fcef4035aaee80034a07998e6ff82d9c4b1fc9b26df4eda011f2bc69a8f7053bf403085da7", 0x70}, {&(0x7f0000000f80)="fe9f049a7d5b473c7a3a1207d832bad287c3079f9b1767807577c64c39ca6af511422670b9cd8feb2de5bcde12bef814a24baba0aba7fd9c25a8a35ff2c57498f72a7f682b1a82c1e3c69705836418cd0b15bca0279e69e38a781224f9b8a436947fb865e4c5dc7123d49d178b559c838d33c1612289ca03993258c6e73d66fa8002433201944a21112779d3ae991a6eb3f4d08de30b35e276eafa244ccad90383b23724f639d3de3426f9b4643c98ca40a8b24fe11d99a314e97adb963b8a01f4e4a598", 0xc4}, {&(0x7f0000001080)="33cf9bb4ee035a8f02581bb24d84643133d5d822d787230c1d56881ee149229050771ecd960384ad37a95e60b49b5969eaa2760e5a1b01460e0480ad69a28cfca43fd648a35bf0e15397b494371765961b4207b372d18e0248994dabcc92", 0x5e}, {&(0x7f0000001100)="757c247f26fa75414101f5910fe828c7179403c615d1093815ae2d4a", 0x1c}], 0x6}}, {{&(0x7f00000011c0)=@nl=@unspec, 0x80, &(0x7f0000001300)=[{&(0x7f0000001680)="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", 0x115}], 0x1, &(0x7f0000001340)=[{0xa8, 0x10f, 0x3, "b9b25c501bea5e4ae35e12f193aa536a0a5ada7847a02c766b1cf70991f976304dcceab52bfed393325bca072cb4a6cb579b1716606653325e37cf83a98482b2bf3cb57382244aa9da618da8f2b77722c32192447d3a2cf1900bb5b1cf6da6febf48da90658a3c8474e7e14670bb02711b2ad117d641423a6c7037258ca2bb498edf3fab691dc9549e42bc5b20f013dca8ebc4799355"}, {0x20, 0x112, 0x3, "f32ea33e34e5832b7d55"}, {0x70, 0xf51f49804e92a07a, 0x7, "9e644442de9e64b5621846fd3495a859aadda1fb944fc89b40dc9bef341b713b19c5a6aa691c602d533dfb2a3bb1287382be13fc722b1144b97c6cbac016da0bcf9f25ced2cffefe1d2242433896d7663dc54d58733baef98c3b"}, {0x30, 0x116, 0x2, "40c0ce59363d5e8456edbd92ff6e81730aaa9215ac6ecd914071f67f3a9648"}, {0xc0, 0x118, 0x34d2, "3f81c58601f9ebbe870414850adaee02f7e6557e7eb383653016c394784c40748e9fca7c69afd84cb5541bdda81da98f2bbef32726ebf53c62710210769bd83bb9623ee67942b8db807d840ee0427477c2cfb4e496a5f62f2daef35c76f597910bdbe9da0c7eb2b8b24058884bf523354d1c0e4a4311582b952d3c3715683fa4db63bcaf0d654a0a5b9cd53e6fa6951b2bf5c6033ea40f5999e5bc17f1f5687970db32c0dc5b6d462f51dd16b87fa48b"}], 0x228}}], 0x4, 0x4000000) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x1, r0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x79, 0xbc}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x4e, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0xc, &(0x7f0000000040)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) 15.155669251s ago: executing program 35 (id=663): r0 = getpgid(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) write$char_usb(r2, &(0x7f0000000140)="8df95fefca817bd6be83e8990a58f0c870c1acb9cebc578b5a8fa2a7986ccb97b61003fb580c26251d3979445480c8af5e659a61a54114c2f2977add6300d98a2f3388b781e25cdc0981e4d6dba078cd05d4421d9cc1a89e19fecf5878e6d690c65d8d117d076fe0454dd33ef90c49dba967020c6a5ec1ee35bdc239fae12ebced6f1b2cdb0cb379db76742ed3f7b73542628a0e20de05c4a9df9aa596053cffd647074c1e4f96a995794b621971e579d8b0c817d3a9bd761a26c7c5c81815af49a78d4dd1d33135b8b8e9589217baf23c48c2209102788e7c089b5593755cdf380bf2c777dc159273419b25e00fa0499c93e18c40f53a4a18", 0xf9) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) sendmmsg(r3, &(0x7f0000001580)=[{{&(0x7f0000000240)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="462be5ef31f2bf911caf8fcae67fb90e02ba1efdea14fa377fc57a4527687dd1b445dcb9300454fb971915721720c8742786712bd46dc5c40c2f79d48be99535c0fa094a777edfda477db68ded22042679947fbff01396736e597fb8899ac4574dce15467245e82d505cc2ee2ad5d3e18aa8eef1db0829d18aced85e17cb39093216b875d4d000831f2f2fcae0f576918619d5b96abd85706010502ff21e533a6e6dff789e580f961e45454632b8a10dd45ea531b3e9afeec92dcaffb5c62b409c4922530e72c88e917b12b0ddcdac3505b6941c86", 0xd5}, {&(0x7f00000003c0)="f3988dd805aa027ca579ade749211ab38fe4b64687369f3edb00e839359376b4137659f38c1342b28858365701fca6b065f648617b732cc4e33b903277bf63b91f150e7f9567fb8fcd86a2b8084204c2a74172", 0x53}, {&(0x7f0000000440)="bf092b43e783519dd0ecb2a81c11ca2346ed926100b67f5436742272c9da79ccfd58285875e6ae77586a097b066d0ed07fe02ffa78569a918c6379439b9d554b4362714c9e6ebe591c79f3ade9d36b3144b426d87b2debe852047bf1d0e4c9758c283ff0d8f16fb5febc718e4a5ba5eca8f06cfc8d038d6274bbb2c39b5e4fd12318e44e08a50fa3940e6d664c9264824e4aa34ea9084b24ce28c67af5e2d35f83a25ac211e81b268878d738096081b1fee1eebda0edaf9eb4fd8f3b5bad6a082391f9ad15027abe7dfaeb9ad67dbd634c31b11d9b0d1a4533bf51a757e633824e8ccb", 0xe3}, {&(0x7f0000000080)="bf1360b4ef0de6a8fd21", 0xa}, {&(0x7f0000000540)="afe8ec4e621ec9d596b2a3928b8a6cf799262c8bef57b703d0aa979c75d751733233bb617fa5dcb6763c29177184be75942f496376871cd48eb685494ea243830d47a7d86e0974199946ecedc8de819b4ef8636a94c80c29f488c305d21cf7a84d05cf721355b492091f00f334a66b3b9703509ab1ac5e34f4c65bcd5eab4d23483a4f704f8f463a271c387daa132285ecbb7e1723d5e314327c24f8142871e6fa947aebf7d1e56a2f5476673863d9f39240851074f659f79fd90cad0d", 0xbd}, {&(0x7f0000000600)="1337e5b81baaa8a70702e955f84284fac4770aaa340e150ee06b4eccbd4391fff826b35b89549b3f31e109355e71218f574f4ff7c934fded1ba60cac5fc2ead6eec2317c88a1f23002bec475a957668b52cc6ee75ab51261626fb84d95082fe6a4816f4ea5a2e69cb91632ce3bb3b3515b6b694ed834b9521069c93d59240d17abeb30460926ec121cef32f87612857f143fbf663c27298a2818dc54e958ac073d0601a56f57704d9b289da7c4dc483b90d1576c43ff075c", 0xb8}, {&(0x7f00000006c0)="243a2238cd3b4e82a4d026ced0fdce3f28cab6d4a5982ee8c6c8b999c240952b08fc8a421dfe43560fa4864e26b0cfd1703c7699be846853d40771c5925303c0a8aced89b26ebf2b6d6279714ac783a2823935a8a69004a79bb7d81b36f262a8d6fee8af8188c7046c1fefc1d9a93ebb1ff0d628e0089e3557f098c1018bc3468b84a91470395f9b74c5f1fb78e2fd796c2f011dade7d6dd570500792a39624075748a46242b3f7b0c9b57454ebc10d9c1712702ddfba7fc2ecb9f8e817237d3951a6c65d1ed6985af82988561a9f69c4b8be6f07c3ab5ab44a7bd15faf8c4ed54594bcf3567008e2185", 0xea}], 0x7, &(0x7f0000000840)=[{0x108, 0x107, 0x7fffffff, "fc275b40f833c4137e16507a6e4b32d7111fb67d98d8325ca8f997ccfc84b1f92becfa5d8783188dca0e3ae1ec400757d03dd332082c83f3e77e26911661aeebd8b0b043af73d5a48c331fe6c354db6729bc03ceb254f7f44f172821b6be59dc1ac1ad66102350012e8758f1e1df74f62bfe1243522be052e9206e9b3d07df28420203f455ce37cf4761bc227583892d28d502f156022b7eee5e9ca7b0bf700f6a1ee99a51efab86d5e5b930e4cd8ff902ada8802d23b738b7f9850a9b36eab01bb16625b90add97040226fa04af02868366dfbf627c6d32073cfcbc213d604fe37f85a107b6a2fb0e76bcde3e6b3133e5"}, {0x18, 0x88, 0xffffffff, "d5e7"}, {0x50, 0x272475d741e84bab, 0x7, "700e93e3c315572a02ffc73268abe6d89a0b0ccb72c7e762168b81b61042b82dcbba1f18ff174db97c8ea0508d4e21aca7447ef9c7fb4be5806d"}, {0x60, 0xff, 0x1c, "6b4c1a9a81d46eafb71bc01e663118b2e99c78311787e5646f38632a02e992ab35504c1bb8022cf120caa63db0c4c053d97d33dddd2c3d6cde931783af9129b4c3273e7345e01f418bc857"}, {0x20, 0x119, 0x5, "0a66dc2cd389dc69b01df471e5bc7e8c"}, {0xc8, 0x119, 0xfff, "21667a0ed2a0a3099fdd8a0f637429cd6d2de32f993906f31e44686a83a808f2db1cac351bbcb12641def7689f8122d2fd2b23a4b51bc336335ec4277af932ae21f2e503617ee283401ce6247007b78a6772ec389bc4cc83d72264364d2ac01c6c2c0356156c871ca3912c1cbe84ada27171324af7637172783413f8dc3a0ed6da7086f54eafcd2c4a7bb905c6f64d5fc39cdab3ce280903459e89777f305f99b0d14fddfaeaf3d23e1daeb18a1bf9212aae54e2e920"}], 0x2b8}}, {{&(0x7f0000000b00)=@can, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000100)="29f2e319312821777a83f7c97f5d711b5b03bd54cd8c", 0x16}, {&(0x7f0000000b80)="5fd4d82799cccba665c7e395662f804da1bc1aaaeb0bfaef9599c6c9c0b9479436427ad46ef6a06c156f6d29aa839445e46236c6", 0x34}, {&(0x7f0000000bc0)="d68f02b816b1c9e60ca3d1e0de9b43712f2a4f58b222662fc82136be6dae27f75077c35cf48bcc1c452a7849574a08f8b8b65c08724514c5e3dbdef14b3231eaa8a7fc813a4c2efd34a6429f2f4d9fbc8d8e6cf0e79d4b4feab6e1c6b3ba5dc75968e8259375bb6a9c293334d2617fbc182e5070b52996570b664cccb516d1ba96b19288cb3698a5c4b2dbe7fbe036bd6e0090a25186609ce609b4e021812f26cb197d35b594f5ff9db0e49613a0a67ad73af00d0fb4db51a8161494d3abdb7e67b74104c5d96c9f70427f43ae00cbbeafe067556cd3aac13832ab402542334da01514", 0xe3}], 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000000100100008c10ad16e5641eafff0f0000000000002deabb3027e277"], 0x18}}, {{&(0x7f0000000d40)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @local}, 0x4, 0x0, 0x3, 0x4}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000dc0)="215e55f8aedb963ec930c57644009194dc8ce6e4c776c1c745e8525122b6ce21dd56cedabfb6a513591b0ce970bd062aee9169945220646ebb", 0x39}, {&(0x7f0000000e00)="059e04e1459bfd499491d2b6f5337ce73bd3058c7860cab5cf8ec6c5e7c5f2ac7bb4f406adb9d9c1aad74befb26b9e2f5a382b671d0a37bf4b3f010be19e9c52cf6f92a23cb19991cacca21ac14218ec0985e87081265486bb0ef0cee181b5eeedac8fb49305b71a29474639fb5f8e5b8a94357e75d7ef5fc1292a7084dbe41feff20e69f328c3b36017dec1b04347d0d6b7e22931bc02b8774111c5a937b2a285b239b8594762b751d0b7992616fb0ace68c96dca1d69d84d0e7f2ed4e8b4ee19320241508b00a6da4b2115df12752808274ce9f268f38c3b29af0434699cdae6b22a", 0xe3}, {&(0x7f0000000f00)="d2cb46fe3d84ef29bee253dacc80ebc46272aba0954057ca4a3739c87028911d598aca108d1295b2fdb0a662938fad61e027c1dde81dbeedec334343464aa13e44a694c1d9f9f6d16d99a9fcef4035aaee80034a07998e6ff82d9c4b1fc9b26df4eda011f2bc69a8f7053bf403085da7", 0x70}, {&(0x7f0000000f80)="fe9f049a7d5b473c7a3a1207d832bad287c3079f9b1767807577c64c39ca6af511422670b9cd8feb2de5bcde12bef814a24baba0aba7fd9c25a8a35ff2c57498f72a7f682b1a82c1e3c69705836418cd0b15bca0279e69e38a781224f9b8a436947fb865e4c5dc7123d49d178b559c838d33c1612289ca03993258c6e73d66fa8002433201944a21112779d3ae991a6eb3f4d08de30b35e276eafa244ccad90383b23724f639d3de3426f9b4643c98ca40a8b24fe11d99a314e97adb963b8a01f4e4a598", 0xc4}, {&(0x7f0000001080)="33cf9bb4ee035a8f02581bb24d84643133d5d822d787230c1d56881ee149229050771ecd960384ad37a95e60b49b5969eaa2760e5a1b01460e0480ad69a28cfca43fd648a35bf0e15397b494371765961b4207b372d18e0248994dabcc92", 0x5e}, {&(0x7f0000001100)="757c247f26fa75414101f5910fe828c7179403c615d1093815ae2d4a", 0x1c}], 0x6}}, {{&(0x7f00000011c0)=@nl=@unspec, 0x80, &(0x7f0000001300)=[{&(0x7f0000001680)="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", 0x115}], 0x1, &(0x7f0000001340)=[{0xa8, 0x10f, 0x3, "b9b25c501bea5e4ae35e12f193aa536a0a5ada7847a02c766b1cf70991f976304dcceab52bfed393325bca072cb4a6cb579b1716606653325e37cf83a98482b2bf3cb57382244aa9da618da8f2b77722c32192447d3a2cf1900bb5b1cf6da6febf48da90658a3c8474e7e14670bb02711b2ad117d641423a6c7037258ca2bb498edf3fab691dc9549e42bc5b20f013dca8ebc4799355"}, {0x20, 0x112, 0x3, "f32ea33e34e5832b7d55"}, {0x70, 0xf51f49804e92a07a, 0x7, "9e644442de9e64b5621846fd3495a859aadda1fb944fc89b40dc9bef341b713b19c5a6aa691c602d533dfb2a3bb1287382be13fc722b1144b97c6cbac016da0bcf9f25ced2cffefe1d2242433896d7663dc54d58733baef98c3b"}, {0x30, 0x116, 0x2, "40c0ce59363d5e8456edbd92ff6e81730aaa9215ac6ecd914071f67f3a9648"}, {0xc0, 0x118, 0x34d2, "3f81c58601f9ebbe870414850adaee02f7e6557e7eb383653016c394784c40748e9fca7c69afd84cb5541bdda81da98f2bbef32726ebf53c62710210769bd83bb9623ee67942b8db807d840ee0427477c2cfb4e496a5f62f2daef35c76f597910bdbe9da0c7eb2b8b24058884bf523354d1c0e4a4311582b952d3c3715683fa4db63bcaf0d654a0a5b9cd53e6fa6951b2bf5c6033ea40f5999e5bc17f1f5687970db32c0dc5b6d462f51dd16b87fa48b"}], 0x228}}], 0x4, 0x4000000) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x1, r0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x79, 0xbc}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x4e, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0xc, &(0x7f0000000040)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) 8.294222328s ago: executing program 2 (id=128): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='soure\x00', &(0x7f0000000100)='[:]:/', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x48}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 2.331569667s ago: executing program 4 (id=751): r0 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000380)='\xab\x00\x1a\x9c\x0fv\x99\xd8PYcK\xb7\xe6!t\xa9\xcf\x8d\xbf\x1e\x9ea#\x94\x89\x81L\xd5a\xc1\x96X\\\xac\xfc\xed\x11 \xa9\xf8t\xef\x0eT\x82:6\x16xEw\x85\xbd\r\rt\xc6Jk\x04\xa8f\xde0\xbc\xbe^3\xce\xd1\x7f\xfaH\xdbQ\xea\xbd\xf5D\xf5', 0xfffffffffffffffe) keyctl$reject(0x13, r0, 0x1c000000000, 0x3, r0) add_key$user(&(0x7f0000000480), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="94", 0x1, 0xfffffffffffffffe) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000380)='\xab\x00\x1a\x9c\x0fv\x99\xd8PYcK\xb7\xe6!t\xa9\xcf\x8d\xbf\x1e\x9ea#\x94\x89\x81L\xd5a\xc1\x96X\\\xac\xfc\xed\x11 \xa9\xf8t\xef\x0eT\x82:6\x16xEw\x85\xbd\r\rt\xc6Jk\x04\xa8f\xde0\xbc\xbe^3\xce\xd1\x7f\xfaH\xdbQ\xea\xbd\xf5D\xf5', 0xfffffffffffffffe) (async) keyctl$reject(0x13, r0, 0x1c000000000, 0x3, r0) (async) add_key$user(&(0x7f0000000480), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="94", 0x1, 0xfffffffffffffffe) (async) 2.330792692s ago: executing program 4 (id=752): r0 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0x1, 0x70bd08, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0xd}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async, rerun: 32) splice(r1, 0x0, r3, 0x0, 0x200000000001, 0x0) (async, rerun: 32) write$P9_RSYMLINK(r2, &(0x7f0000000540)={0x14, 0x11, 0x2, {0x81, 0x0, 0x1}}, 0x14) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=0x0, @ANYBLOB="ae1e020000001f00"], 0x20}}, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) fanotify_init(0x2, 0x2) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001e000100000800000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000a0002000180c200006511000600050003"], 0x30}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29}]}}}}}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000000)={r8, 0xa56c, 0xfffffffffffffffe, 0x2}) modify_ldt$write(0x1, &(0x7f0000000080)={0x7, 0x20001000, 0x2000}, 0x10) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SET_THP_DISABLE(0x42, 0x0) (async) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 2.26079418s ago: executing program 6 (id=753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = getpid() r2 = syz_open_dev$vim2m(&(0x7f0000000780), 0x93f5, 0x2) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0xe, 0x1, 0x0, "74b8a82a86acc12fdd069e7e0a8dca3ddddc0000000000000000000000000009", 0x34363248}) r4 = syz_pidfd_open(r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r4}, 0x68) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$binder(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x1210006, &(0x7f0000000680)={[{@max={'max', 0x3d, 0x1}}, {@stats}], [{@euid_lt={'euid<', r5}}, {@context={'context', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '/dev/nbd'}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@seclabel}, {@euid_lt={'euid<', r6}}, {@smackfsroot={'smackfsroot', 0x3d, '*\x00'}}, {@uid_eq={'uid', 0x3d, r7}}]}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ocfs2\x00', 0x0, &(0x7f00000000c0)='\x00') execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000140)='\x00', &(0x7f00000001c0)='*/\x00']}, &(0x7f0000000380)={[&(0x7f0000000240)='\'\x00', &(0x7f0000000280)='&*(&{/).-[:D\xe5#&\x00', &(0x7f00000002c0)='\'\x00', &(0x7f0000000300)='):\x00', &(0x7f0000000340)='*\x00']}) 2.2604836s ago: executing program 6 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xc43, r0, 0x2}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'ip6_vti0\x00', 0x9a}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 2.136758947s ago: executing program 4 (id=755): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000040)={0x6, 0x1, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000001600)=""/4096}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002080)=ANY=[@ANYBLOB="e0000000150021"], 0xe0}], 0x1, 0x0, 0x0, 0x41}, 0x4000800) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000480)=0x9, 0x4) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x255}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_clone(0x80843711, 0x0, 0xfffffcf7, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000000c0)={0xea0, "03e20f9026af5d1f56df755b5813839dde09961fae85cb060b7add1ef8b59b60", 0x2, 0xfcb7, 0x1, 0x400000, 0x4010196, 0x2}) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80003, 0x5) r5 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') execveat$binfmt(r4, r5, &(0x7f00000002c0)={[&(0x7f00000001c0)='&\x00', &(0x7f0000000200)=')&\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='#[@%&\x00']}, &(0x7f0000000440)={[&(0x7f0000000300)='#\x00', &(0x7f0000000340)='$($\x00', &(0x7f0000000380)='}]\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='/dev/dri/card#\x00']}, 0x100) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) 2.136550307s ago: executing program 4 (id=756): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) syz_clone3(&(0x7f0000001240)={0xc0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 2.060393814s ago: executing program 6 (id=757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x1) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x10000, 0x399000, 0x8}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, 0x0, 0x473}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.900377216s ago: executing program 6 (id=758): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x200) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000200)=""/146) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000340), 0x100) 1.900047482s ago: executing program 6 (id=759): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0x541b, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xb2, 0x0, 0x7fff, 0x1, &(0x7f0000000340)="ee81f8a70f42b424b6e9588d76c9ae1fefacba37a3222c53f981a4ef70febfa283f3c5f41b11245fbf33d5f813165b03bd87b39c3b8913d3e7a8b876aa65c6ce4d9aab61ad6e18def928062d8ceca82db1aeba65dd5d49d3d2e44b987abf5468fefc4d9c0897250183250c003d673fad868665f4b9a389d1c4cde2f157c88d4e8339e2915e97917e19661ef1c0a8bd6295af1341f7763b161b2f79ea727d79144ea9cc1f66f245a45bde577bd305f065f4103dd6f2380121f21301e3f75605dc6d", 0x4, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001400030064756d6d793000000000000000000000050021"], 0x3c}}, 0x0) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180), &(0x7f0000000280)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) (async) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0x541b, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xb2, 0x0, 0x7fff, 0x1, &(0x7f0000000340)="ee81f8a70f42b424b6e9588d76c9ae1fefacba37a3222c53f981a4ef70febfa283f3c5f41b11245fbf33d5f813165b03bd87b39c3b8913d3e7a8b876aa65c6ce4d9aab61ad6e18def928062d8ceca82db1aeba65dd5d49d3d2e44b987abf5468fefc4d9c0897250183250c003d673fad868665f4b9a389d1c4cde2f157c88d4e8339e2915e97917e19661ef1c0a8bd6295af1341f7763b161b2f79ea727d79144ea9cc1f66f245a45bde577bd305f065f4103dd6f2380121f21301e3f75605dc6d", 0x4, 0x0, 0x0, {0x3}}) (async) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001400030064756d6d793000000000000000000000050021"], 0x3c}}, 0x0) (async) 1.821281615s ago: executing program 6 (id=760): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000500000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000000018000000ffffffd000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x48, &(0x7f0000000340)=""/222}, 0x90) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = syz_io_uring_setup(0x1fc5, &(0x7f0000000540)={0x0, 0x935c, 0x20, 0x2, 0x2ae, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000640)={0x101, 0xffffffffffffffff, 0x14, {0x6, 0x71}, 0x4}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1fffffffffffffaa, &(0x7f0000000200)=[{0x30, 0x9, 0x0, 0x6}]}, 0xfffffffffffffdf1) r4 = syz_usb_connect$cdc_ncm(0x1, 0x8d, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x8f, 0xa0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "e385f0f7d3"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x3f, 0xa2}, {0x6, 0x24, 0x1a, 0x5, 0x4}, [@obex={0x5, 0x24, 0x15, 0xa022}, @mdlm={0x15, 0x24, 0x12, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x7, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xd, 0xe, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xd, 0x8, 0x8}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0xa, 0x1, 0xbf, 0x5}, 0x16, &(0x7f0000000040)={0x5, 0xf, 0x16, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x3, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x1, 0xd, 0xe}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x380a}}, {0xd3, &(0x7f0000000300)=@string={0xd3, 0x3, "6b70c99437ce9d6d5ac95a1a3be80fd5d6ba94182797c3dc0b77e781f036fe8700fb533dd859d7e098e91d7d4e15ad00c126c49c1a5821f791f5c97c7fec779dc0b1e1df0a682809d59ba32f1ad7001fc07b7ef75d8c5f52a929a1579d36b92707f0bf5fcd7e34855ed0dd03b5d5b1b8f548d80d6a37ba557286eca65eae93425c6f14a149b14bcbbf404d5e9c14f65391ed79ebaf0eefce4b368d43cff27d437d8e06dc25b509680166e3f2067fd2177bb1e87c7747ff1dbc2407f98d50c047adba59aeae930580312e866beb80fc4f2b"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_disconnect(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb08004600007c00000000400190780a010102ac1414aa000000000b0090780100000047000000000000000011000000000000e0000002440c0001ac1414bb4e210019443c0001e000000100000000ac1414bb000000000a0101010000000000000000000000000000000000000000ac1e0001000000000a01010100000000"], 0x0) 1.3301468s ago: executing program 7 (id=763): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000) r1 = socket$kcm(0x21, 0x2, 0x2) syz_clone(0x2000, &(0x7f0000000180)="aa7aad621990bf8a3f98a456fb2a0a822043df35e8747d372db299f90cd8a3614bf85585bbdf64b3d49e0fd57a1e96f7294deead35326b26c1cb65e911988ffc143a7e36e84f91627fc9f525a7c9f2b3b095643335ce1d96ae1cbd8780857070e2b7818e68d3d4ac6340cb372c2f8a0d1121d88725fab241fcb113da1a8bf5b9bc0bfaa1b21419d492bee75adafc1864a08841469cdec6b7bafb73bafe6062f9843a0dcec6248e80ca4db6c6282c8f2a527a528ce1d4e00dd2f1f529a9efaaed723c5fe6771ae42234f5401e0c2384c0099da13f8caf7fd762fab541b0a432c2cd27e4b2633b058fc1ce91bfcd", 0xed, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000280)="21711e3291b544ced51fc071ab8fc756a91b9c76d5f99452b00be387bae04b6ce67567db181d114699721038448009bbb9d7370b53af621d98b0782df25af074aa680a8bfe69b91c4bdac4253a155fe5baf076cb60dc16f3132051c215564836599e0422ce62a045dadb0d485734b0e38102c99a5dc6c4bb52792bff879d64a5f53637c4d1f751192d77211119e8e6e4c41071aab991bd1097bb8aa2a6d63639086ce7d7567c473fdfa018697dc704") (async) syz_clone(0x2000, &(0x7f0000000180)="aa7aad621990bf8a3f98a456fb2a0a822043df35e8747d372db299f90cd8a3614bf85585bbdf64b3d49e0fd57a1e96f7294deead35326b26c1cb65e911988ffc143a7e36e84f91627fc9f525a7c9f2b3b095643335ce1d96ae1cbd8780857070e2b7818e68d3d4ac6340cb372c2f8a0d1121d88725fab241fcb113da1a8bf5b9bc0bfaa1b21419d492bee75adafc1864a08841469cdec6b7bafb73bafe6062f9843a0dcec6248e80ca4db6c6282c8f2a527a528ce1d4e00dd2f1f529a9efaaed723c5fe6771ae42234f5401e0c2384c0099da13f8caf7fd762fab541b0a432c2cd27e4b2633b058fc1ce91bfcd", 0xed, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000280)="21711e3291b544ced51fc071ab8fc756a91b9c76d5f99452b00be387bae04b6ce67567db181d114699721038448009bbb9d7370b53af621d98b0782df25af074aa680a8bfe69b91c4bdac4253a155fe5baf076cb60dc16f3132051c215564836599e0422ce62a045dadb0d485734b0e38102c99a5dc6c4bb52792bff879d64a5f53637c4d1f751192d77211119e8e6e4c41071aab991bd1097bb8aa2a6d63639086ce7d7567c473fdfa018697dc704") sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 1.230326058s ago: executing program 7 (id=764): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 1.171323109s ago: executing program 7 (id=765): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSBRK(r0, 0x5409, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$TCSBRK(r0, 0x5409, 0x8) (async) 1.170814477s ago: executing program 4 (id=766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x1) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x10000, 0x399000, 0x8}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, 0x0, 0x473}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.095379276s ago: executing program 7 (id=767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000000)) syz_emit_ethernet(0x12, &(0x7f0000000240)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@generic={0x4305}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x48, 0x0, "ddb3175fb9a57f7428f9be2e0e1c6d2242589ed18774f4de09c3b4956f90561e3858bb873caf5e3d7858c41e7d739cc8b923842426289f23e0317f4627e25ea3abda79cfe4dc161596c65991d787f5e0"}, 0xd8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040b00000000000000ff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x8, 0x100, 0xffff, 0x6, 0x9, 0x1, 0x5, 0xfffffe00}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x3}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f00000000c0)={0x6, 0x7, 0x8b423cbc7743994e, 0x5, 0x0, [0x7fffffff, 0x800, 0x6, 0x3ff]}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010000000000000a2cd00000002000000", @ANYRES32=0x0, @ANYBLOB="0000000000040000200012800b0001006272696467650000100002800c002000c86d000000000000"], 0x40}}, 0x0) 877.604398ms ago: executing program 7 (id=768): syz_io_uring_setup(0xd5, &(0x7f0000000480)={0x0, 0x96b9, 0x1, 0x81000, 0x200}, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 872.107281ms ago: executing program 2 (id=128): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='soure\x00', &(0x7f0000000100)='[:]:/', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x48}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 1.151017ms ago: executing program 4 (id=769): r0 = syz_open_dev$dri(&(0x7f0000000140), 0xeaf7, 0x80000) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000740)=""/212) r1 = getpgrp(0x0) r2 = syz_open_dev$ndb(&(0x7f0000000880), 0x0, 0x20040) r3 = socket$nl_route(0x10, 0x3, 0x0) kcmp(r1, r1, 0x0, r2, r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) splice(r4, 0x0, r5, &(0x7f00000002c0)=0xe, 0xffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000190000042cbd7000fcdbdf251c30107ffc00fe00000000001400120005005c6ca899710c00090005002508000000000000000000", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB="08000100000000000800010000000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r13 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r14 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r15, 0x0) fsetxattr$system_posix_acl(r13, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000010002000000000002000500", @ANYRES32=r15, @ANYBLOB="040000000000ff9e274d5e37cd0acd932bbc0806c81ff90111c4fe663ac84d61f325ae8375406ed50d284b7f5b9305274b11996d3444ca35281ab460d0"], 0x2c, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x16f, 0x0, {r1}, {r15}, 0x1, 0x8}) 0s ago: executing program 7 (id=770): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xc, 0xffff}, {0x3, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffff0000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa72e34ab7e483ce3}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): fs_t tclass=blk_file permissive=1 [ 98.655971][ T40] audit: type=1400 audit(1750958021.064:531): avc: denied { unmount } for pid=7402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 98.661768][ T7484] netlink: 'syz.4.414': attribute type 9 has an invalid length. [ 98.686755][ T7487] Cannot find add_set index 4 as target [ 98.710656][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.415'. [ 100.121138][ T63] Bluetooth: hci3: command tx timeout [ 100.253882][ T40] audit: type=1400 audit(1750958022.664:532): avc: denied { connect } for pid=7494 comm="syz.5.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.326080][ T7500] sctp: [Deprecated]: syz.5.420 (pid 7500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.326080][ T7500] Use struct sctp_sack_info instead [ 100.521231][ T63] Bluetooth: hci4: command tx timeout [ 100.631033][ T838] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 100.761137][ T63] Bluetooth: hci2: command 0x1003 tx timeout [ 100.761169][ T5942] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 100.784407][ T7490] can0: slcan on ptm0. [ 100.788977][ T838] usb 10-1: config 2 has an invalid interface number: 58 but max is 2 [ 100.792837][ T838] usb 10-1: config 2 has an invalid interface number: 175 but max is 2 [ 100.795889][ T838] usb 10-1: config 2 has an invalid interface number: 228 but max is 2 [ 100.798425][ T838] usb 10-1: config 2 has an invalid interface number: 144 but max is 2 [ 100.801324][ T838] usb 10-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 100.804398][ T838] usb 10-1: config 2 has no interface number 0 [ 100.806397][ T838] usb 10-1: config 2 has no interface number 1 [ 100.808467][ T838] usb 10-1: config 2 has no interface number 2 [ 100.810394][ T838] usb 10-1: config 2 has no interface number 3 [ 100.812659][ T838] usb 10-1: config 2 interface 58 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 100.815934][ T838] usb 10-1: config 2 interface 58 altsetting 9 has an endpoint descriptor with address 0x1C, changing to 0xC [ 100.819430][ T838] usb 10-1: config 2 interface 58 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 100.823527][ T838] usb 10-1: config 2 interface 58 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 100.826819][ T838] usb 10-1: config 2 interface 58 altsetting 9 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 100.830250][ T838] usb 10-1: config 2 interface 58 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 100.833740][ T838] usb 10-1: config 2 interface 58 altsetting 9 endpoint 0x88 has invalid maxpacket 44503, setting to 64 [ 100.837231][ T838] usb 10-1: config 2 interface 58 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 100.840581][ T838] usb 10-1: config 2 interface 58 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 100.842541][ T7489] can0 (unregistered): slcan off ptm0. [ 100.844048][ T838] usb 10-1: config 2 interface 58 altsetting 9 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 100.850258][ T838] usb 10-1: config 2 interface 175 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.854514][ T838] usb 10-1: config 2 interface 175 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 100.857842][ T838] usb 10-1: config 2 interface 175 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 100.861179][ T838] usb 10-1: config 2 interface 175 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 100.864503][ T838] usb 10-1: config 2 interface 175 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 100.867806][ T838] usb 10-1: config 2 interface 175 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 100.871071][ T838] usb 10-1: config 2 interface 228 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 100.874381][ T838] usb 10-1: config 2 interface 228 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 100.877728][ T838] usb 10-1: config 2 interface 228 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 100.881636][ T838] usb 10-1: config 2 interface 228 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 100.885629][ T838] usb 10-1: too many endpoints for config 2 interface 144 altsetting 150: 123, using maximum allowed: 30 [ 100.889146][ T838] usb 10-1: config 2 interface 144 altsetting 150 has a duplicate endpoint with address 0x8, skipping [ 100.892734][ T838] usb 10-1: config 2 interface 144 altsetting 150 has a duplicate endpoint with address 0xF, skipping [ 100.896167][ T838] usb 10-1: config 2 interface 144 altsetting 150 has an invalid descriptor for endpoint zero, skipping [ 100.899475][ T838] usb 10-1: config 2 interface 144 altsetting 150 has a duplicate endpoint with address 0x1, skipping [ 100.903075][ T838] usb 10-1: config 2 interface 144 altsetting 150 has 6 endpoint descriptors, different from the interface descriptor's value: 123 [ 100.907170][ T838] usb 10-1: config 2 interface 58 has no altsetting 0 [ 100.909260][ T838] usb 10-1: config 2 interface 228 has no altsetting 0 [ 100.911422][ T838] usb 10-1: config 2 interface 144 has no altsetting 0 [ 100.916267][ T838] usb 10-1: New USB device found, idVendor=12d1, idProduct=e325, bcdDevice=8b.1c [ 100.919251][ T838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.921751][ T838] usb 10-1: Product: à ‰ [ 100.923106][ T838] usb 10-1: Manufacturer: ã¹ŸêŒ˜äŽ [ 100.924771][ T838] usb 10-1: SerialNumber: ۾舧ꃿ咒岰㿩`䅛ꎊ始脟쌘寑ï°ê—«ç¤Œî“¸è—³î²‡ë°›èŠäºœã³‘ം硰굣웭뭡鰔儲邽ï—Ꭸ觙ᬲ⽥ì¤ã‡¦î’µäŸ³ì›á»Šì·™ä¦¦ç„ƒêŽ„晴ﰩ舜韌寉졳å¯ì™™ë‡²æ†„ãœæ‡˜ížáµ²âŸ’î…žà­šë°â–»ê·­è—¿ë¶¼á·“韃ìšè„˜ë¿€è® â¹‘ã¡Ä²í£êŒ´â¾å©‰ã¥­ï›é¸‘헢橩譪䘹滢扔赬Ëඬ䞜눶嗧ᄪ爤娖럽 [ 100.940577][ T7502] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 101.147578][ T838] option 10-1:2.58: GSM modem (1-port) converter detected [ 101.170833][ T838] usb 10-1: USB disconnect, device number 2 [ 101.176104][ T838] option 10-1:2.58: device disconnected [ 101.603515][ T7521] Falling back ldisc for ptm0. [ 101.752519][ T7529] loop6: detected capacity change from 0 to 524287999 [ 101.756067][ T7529] buffer_io_error: 23 callbacks suppressed [ 101.756081][ T7529] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.766242][ T7529] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.769564][ T7529] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.773187][ T7529] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.777530][ T7529] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.780758][ T7529] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.784747][ T7529] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.788145][ T7529] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.790762][ T7529] ldm_validate_partition_table(): Disk read failed. [ 101.793008][ T7529] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.795466][ T7529] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.797921][ T7529] Dev loop6: unable to read RDB block 0 [ 101.799809][ T7529] loop6: unable to read partition table [ 101.802072][ T7529] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 101.911978][ T7529] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 101.914780][ T7529] overlayfs: missing 'lowerdir' [ 102.115194][ T7539] netlink: 'syz.5.428': attribute type 5 has an invalid length. [ 102.515425][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.433'. [ 102.612653][ T5942] Bluetooth: hci4: command tx timeout [ 103.302840][ T7584] Invalid ELF header type: 0 != 1 [ 103.302977][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 103.302990][ T40] audit: type=1400 audit(1750958025.714:538): avc: denied { module_load } for pid=7582 comm="syz.5.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 103.303993][ T7583] Invalid ELF header type: 0 != 1 [ 103.415833][ T7589] tty tty1: ldisc open failed (-12), clearing slot 0 [ 104.026019][ T7602] binder: 7601:7602 ioctl c0306201 200000000640 returned -22 [ 104.195384][ T5937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.198765][ T5937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.201672][ T5937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.205156][ T5937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.208206][ T5937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.240871][ T7611] QAT: Stopping all acceleration devices. [ 104.380195][ T7607] chnl_net:caif_netlink_parms(): no params data found [ 104.405228][ T95] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.408670][ T95] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.409774][ T7622] program syz.4.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.481515][ T95] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.484847][ T95] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.570875][ T95] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.574517][ T95] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.579999][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.586516][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.589634][ T7607] bridge_slave_0: entered allmulticast mode [ 104.595283][ T7607] bridge_slave_0: entered promiscuous mode [ 104.599821][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.602893][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.606059][ T7607] bridge_slave_1: entered allmulticast mode [ 104.609910][ T7607] bridge_slave_1: entered promiscuous mode [ 104.669975][ T7607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.676708][ T7607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.691093][ T5937] Bluetooth: hci4: command tx timeout [ 104.765529][ T95] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.768787][ T95] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.779323][ T7607] team0: Port device team_slave_0 added [ 104.788801][ T7607] team0: Port device team_slave_1 added [ 104.789711][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 104.827566][ T7607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.830343][ T7607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.840767][ T7607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.851223][ T7607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.854024][ T7607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.864873][ T7607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.905078][ T7607] hsr_slave_0: entered promiscuous mode [ 104.907328][ T7607] hsr_slave_1: entered promiscuous mode [ 104.909424][ T7607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.912641][ T7607] Cannot create hsr debugfs directory [ 105.023846][ T95] bridge_slave_1: left allmulticast mode [ 105.025710][ T95] bridge_slave_1: left promiscuous mode [ 105.027546][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.036100][ T95] bridge_slave_0: left allmulticast mode [ 105.038475][ T95] bridge_slave_0: left promiscuous mode [ 105.040635][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.045141][ T7643] netlink: 'syz.4.456': attribute type 2 has an invalid length. [ 105.047501][ T7643] netlink: 32 bytes leftover after parsing attributes in process `syz.4.456'. [ 105.333245][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.336761][ T95] bond_slave_0: left promiscuous mode [ 105.339004][ T95] bond_slave_0: left allmulticast mode [ 105.342674][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.346283][ T95] bond_slave_1: left promiscuous mode [ 105.348087][ T95] bond_slave_1: left allmulticast mode [ 105.350517][ T95] bond0 (unregistering): Released all slaves [ 105.401116][ T5937] Bluetooth: hci2: command 0x1003 tx timeout [ 105.403956][ T5942] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 105.451380][ T40] audit: type=1400 audit(1750958027.864:539): avc: denied { write } for pid=7646 comm="syz.5.457" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.502052][ T7607] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 105.506295][ T7607] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 105.513609][ T7607] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 105.518940][ T7607] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 105.609429][ T7607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.623672][ T7607] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.630472][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.632762][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.646414][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.648615][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.735636][ T95] hsr_slave_0: left promiscuous mode [ 105.737853][ T95] hsr_slave_1: left promiscuous mode [ 105.739776][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.744994][ T95] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.747644][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.750014][ T95] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.752381][ T5998] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 105.775423][ T95] veth1_macvtap: left promiscuous mode [ 105.777246][ T95] veth0_macvtap: left promiscuous mode [ 105.779307][ T95] veth1_vlan: left promiscuous mode [ 105.801149][ T837] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 105.929210][ T5998] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 105.932158][ T5998] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.934891][ T5998] usb 9-1: Product: syz [ 105.936217][ T5998] usb 9-1: Manufacturer: syz [ 105.937694][ T5998] usb 9-1: SerialNumber: syz [ 105.943328][ T5998] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 105.961457][ T95] team0 (unregistering): Port device vlan0 removed [ 105.963755][ T837] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.966495][ T837] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.969660][ T837] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.981716][ T40] audit: type=1400 audit(1750958028.384:540): avc: denied { firmware_load } for pid=5961 comm="kworker/1:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 105.981795][ T837] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.994518][ T837] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.004824][ T837] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.008381][ T837] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.011186][ T837] usb 10-1: Product: syz [ 106.012676][ T837] usb 10-1: Manufacturer: syz [ 106.017169][ T40] audit: type=1400 audit(1750958028.424:541): avc: denied { execmem } for pid=7673 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 106.025128][ T5961] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 106.032308][ T837] cdc_wdm 10-1:1.0: skipping garbage [ 106.034060][ T837] cdc_wdm 10-1:1.0: skipping garbage [ 106.041148][ T837] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 106.044102][ T837] cdc_wdm 10-1:1.0: Unknown control protocol [ 106.136509][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.140538][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.150806][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.154040][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.160307][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.229442][ T7664] cdc_wdm 10-1:1.0: Error submitting int urb - -90 [ 106.236852][ T7664] netlink: 'syz.5.459': attribute type 10 has an invalid length. [ 106.281695][ T5295] Bluetooth: hci5: command tx timeout [ 106.295505][ T40] audit: type=1804 audit(1750958028.704:542): pid=7653 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.458" name="/newroot/48/file1" dev="fuse" ino=1 res=1 errno=0 [ 106.351856][ T95] team0 (unregistering): Port device team_slave_1 removed [ 106.410561][ T95] team0 (unregistering): Port device team_slave_0 removed [ 106.862930][ T7664] lo: entered promiscuous mode [ 106.867291][ T7664] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.878527][ T2302] usb 10-1: USB disconnect, device number 3 [ 106.958724][ T7607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.014810][ T7674] chnl_net:caif_netlink_parms(): no params data found [ 107.091406][ T5961] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 107.094502][ T5961] ath9k_htc: Failed to initialize the device [ 107.116623][ T5961] usb 9-1: ath9k_htc: USB layer deinitialized [ 107.125025][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.127324][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.130113][ T7674] bridge_slave_0: entered allmulticast mode [ 107.135840][ T7674] bridge_slave_0: entered promiscuous mode [ 107.140639][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.143619][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.146208][ T7674] bridge_slave_1: entered allmulticast mode [ 107.149436][ T7674] bridge_slave_1: entered promiscuous mode [ 107.189921][ T7674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.202214][ T7674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.237322][ T7674] team0: Port device team_slave_0 added [ 107.240718][ T7674] team0: Port device team_slave_1 added [ 107.276544][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.278682][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.287767][ T7674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.293523][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.295709][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.305056][ T7674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.363419][ T7674] hsr_slave_0: entered promiscuous mode [ 107.365626][ T7674] hsr_slave_1: entered promiscuous mode [ 107.367621][ T7674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.369931][ T7674] Cannot create hsr debugfs directory [ 107.372679][ T7607] veth0_vlan: entered promiscuous mode [ 107.424400][ T95] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.459467][ T7607] veth1_vlan: entered promiscuous mode [ 107.463204][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.460'. [ 107.533166][ T95] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.579014][ T7607] veth0_macvtap: entered promiscuous mode [ 107.590929][ T95] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.598271][ T7607] veth1_macvtap: entered promiscuous mode [ 107.613622][ T7607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.620308][ T7607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.626838][ T7607] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.629575][ T7607] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.632994][ T7607] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.636080][ T7607] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.677621][ T95] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.709060][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.715631][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.729798][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.738670][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.753238][ T40] audit: type=1400 audit(1750958030.154:543): avc: denied { mounton } for pid=7607 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 107.794942][ T95] bridge_slave_1: left allmulticast mode [ 107.797008][ T95] bridge_slave_1: left promiscuous mode [ 107.799041][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.801533][ T40] audit: type=1400 audit(1750958030.204:544): avc: denied { ioctl } for pid=7723 comm="syz.5.463" path="socket:[19959]" dev="sockfs" ino=19959 ioctlcmd=0x64cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.812216][ T95] bridge_slave_0: left allmulticast mode [ 107.814162][ T95] bridge_slave_0: left promiscuous mode [ 107.817541][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.826324][ T40] audit: type=1400 audit(1750958030.234:545): avc: denied { listen } for pid=7723 comm="syz.5.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.972757][ T40] audit: type=1400 audit(1750958030.384:546): avc: denied { map } for pid=7732 comm="syz.6.464" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 108.085825][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.095788][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.101112][ T95] bond0 (unregistering): Released all slaves [ 108.202466][ T5295] Bluetooth: hci0: command tx timeout [ 108.361289][ T5295] Bluetooth: hci5: command tx timeout [ 108.517807][ T95] hsr_slave_0: left promiscuous mode [ 108.526148][ T95] hsr_slave_1: left promiscuous mode [ 108.529321][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.531751][ T95] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.534920][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.537679][ T95] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.563823][ T95] veth1_macvtap: left promiscuous mode [ 108.565827][ T95] veth0_macvtap: left promiscuous mode [ 108.567532][ T95] veth1_vlan: left promiscuous mode [ 108.569324][ T95] veth0_vlan: left promiscuous mode [ 108.649563][ T837] usb 9-1: USB disconnect, device number 2 [ 108.776359][ T40] audit: type=1400 audit(1750958031.184:547): avc: denied { read write } for pid=7766 comm="syz.6.470" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.783453][ T40] audit: type=1400 audit(1750958031.184:548): avc: denied { open } for pid=7766 comm="syz.6.470" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.971594][ T7793] nft_compat: unsupported protocol 0 [ 109.230649][ T95] team0 (unregistering): Port device team_slave_1 removed [ 109.340609][ T95] team0 (unregistering): Port device team_slave_0 removed [ 110.281156][ T5295] Bluetooth: hci0: command tx timeout [ 110.441208][ T5295] Bluetooth: hci5: command tx timeout [ 110.719698][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.472'. [ 110.913396][ T7791] netlink: 40 bytes leftover after parsing attributes in process `syz.5.471'. [ 110.960520][ T40] audit: type=1400 audit(1750958033.364:549): avc: denied { create } for pid=7805 comm="syz.5.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.986338][ T40] audit: type=1400 audit(1750958033.364:550): avc: denied { write } for pid=7805 comm="syz.5.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.002132][ T40] audit: type=1400 audit(1750958033.364:551): avc: denied { nlmsg_write } for pid=7805 comm="syz.5.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.119517][ T7674] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.134400][ T7674] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.145134][ T7674] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.154548][ T7674] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.204308][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.214631][ T7674] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.227846][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.230064][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.239898][ T7816] netlink: 36 bytes leftover after parsing attributes in process `syz.6.478'. [ 111.257366][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.259561][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.318163][ T7842] loop6: detected capacity change from 0 to 524287999 [ 111.331507][ T5945] buffer_io_error: 7 callbacks suppressed [ 111.331521][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.338494][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.346556][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.348995][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.353253][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.355760][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.358159][ T40] audit: type=1400 audit(1750958033.764:552): avc: denied { write } for pid=7839 comm="syz.4.481" name="file0" dev="9p" ino=37617699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.358304][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.368570][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.371003][ T40] audit: type=1400 audit(1750958033.774:553): avc: denied { open } for pid=7840 comm="syz.6.482" path="/dev/ptyr0" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 111.372846][ T5945] ldm_validate_partition_table(): Disk read failed. [ 111.380261][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.383706][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.386285][ T5945] Dev loop6: unable to read RDB block 0 [ 111.388262][ T5945] loop6: unable to read partition table [ 111.390672][ T40] audit: type=1400 audit(1750958033.784:554): avc: denied { ioctl } for pid=7840 comm="syz.6.482" path="/dev/ptyr0" dev="devtmpfs" ino=143 ioctlcmd=0x5443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 111.432974][ T7842] ldm_validate_partition_table(): Disk read failed. [ 111.435764][ T7842] Dev loop6: unable to read RDB block 0 [ 111.438095][ T7842] loop6: unable to read partition table [ 111.441175][ T7842] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 111.445284][ T7846] ldm_validate_partition_table(): Disk read failed. [ 111.447551][ T7846] Dev loop6: unable to read RDB block 0 [ 111.448426][ T7674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.449398][ T7846] loop6: unable to read partition table [ 111.453310][ T7846] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 111.461102][ T6197] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 111.485304][ T7674] veth0_vlan: entered promiscuous mode [ 111.490087][ T7674] veth1_vlan: entered promiscuous mode [ 111.514741][ T7674] veth0_macvtap: entered promiscuous mode [ 111.518707][ T7674] veth1_macvtap: entered promiscuous mode [ 111.529154][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.543550][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.549742][ T7674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.553369][ T7674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.556080][ T7674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.558817][ T7674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.603795][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.607095][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.631452][ T6197] usb 10-1: Using ep0 maxpacket: 8 [ 111.635024][ T6197] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 111.635476][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.637349][ T6197] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.639681][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.656345][ T6197] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.660018][ T6197] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.666833][ T6197] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.671233][ T6197] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 111.673591][ T6197] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.674069][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.485'. [ 111.681099][ T6197] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.691004][ T6197] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.694477][ T6197] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.699120][ T6197] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 111.699146][ T6197] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.699160][ T6197] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.699173][ T6197] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.699186][ T6197] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.701459][ T6197] usb 10-1: string descriptor 0 read error: -22 [ 111.701520][ T6197] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 111.701532][ T6197] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.703063][ T40] audit: type=1400 audit(1750958034.114:555): avc: denied { accept } for pid=7860 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.714620][ T6197] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 111.826702][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.829691][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.833856][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.836154][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.838566][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.840896][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.843392][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.845966][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.848287][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.851544][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.854120][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.856658][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.858940][ T40] audit: type=1400 audit(1750958034.254:556): avc: denied { attach_queue } for pid=7866 comm="syz.6.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.865117][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.867452][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.869866][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.872796][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.876240][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.878662][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.881750][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.883957][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.886380][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.888786][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.891388][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.893971][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.896303][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.898710][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.901610][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.904500][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.906863][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.909155][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.911916][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.912749][ T10] usb 10-1: USB disconnect, device number 4 [ 111.915013][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.918977][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.926598][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.929036][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.931625][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.934148][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.936600][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.938957][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.942005][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.944387][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.946725][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.949108][ T53] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 111.956172][ T53] hid-generic 0000:007F:FFFFFFFE.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 112.004200][ T29] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 112.023355][ T7870] fido_id[7870]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.203980][ T29] usb 9-1: not running at top speed; connect to a high speed hub [ 112.207240][ T29] usb 9-1: config 1 interface 0 altsetting 64 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 112.210505][ T29] usb 9-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.214819][ T29] usb 9-1: config 1 interface 0 has no altsetting 0 [ 112.218438][ T29] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 112.221681][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.224157][ T29] usb 9-1: Product: syz [ 112.225457][ T29] usb 9-1: Manufacturer: syz [ 112.226924][ T29] usb 9-1: SerialNumber: syz [ 112.231770][ T7863] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.439741][ T7863] dlm: no local IP address has been set [ 112.442655][ T7863] dlm: cannot start dlm midcomms -107 [ 112.521922][ T5295] Bluetooth: hci5: command tx timeout [ 112.649553][ T7863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.658600][ T7863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.665158][ T7863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.487'. [ 112.670822][ T53] usb 9-1: USB disconnect, device number 3 [ 112.941037][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 113.092275][ T9] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.095593][ T9] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 113.099202][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.102991][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 113.107347][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 113.112896][ T9] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.116275][ T9] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.119234][ T9] usb 10-1: Product: syz [ 113.120805][ T9] usb 10-1: Manufacturer: syz [ 113.126921][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 113.128599][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 113.134565][ T9] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 113.136819][ T9] cdc_wdm 10-1:1.0: Unknown control protocol [ 113.265479][ T7902] SELinux: syz.4.499 (7902) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 113.395311][ T7894] binder: 7893:7894 ioctl 400c620e 200000001580 returned -22 [ 113.411034][ T5961] usb 10-1: USB disconnect, device number 5 [ 113.437308][ T7911] futex_wake_op: syz.4.503 tries to shift op by -1; fix this program [ 113.489543][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.505'. [ 113.493715][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.505'. [ 113.496739][ T7915] netlink: 'syz.5.505': attribute type 20 has an invalid length. [ 113.684359][ T7922] exFAT-fs (nullb0): invalid boot record signature [ 113.686482][ T7922] exFAT-fs (nullb0): failed to read boot sector [ 113.688462][ T7922] exFAT-fs (nullb0): failed to recognize exfat type [ 113.896465][ T7931] netlink: 64 bytes leftover after parsing attributes in process `syz.5.508'. [ 113.937759][ T7938] netlink: 'syz.5.511': attribute type 12 has an invalid length. [ 113.979408][ T7941] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 113.987920][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.989330][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 114.047915][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.511'. [ 114.108241][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 114.108251][ T40] audit: type=1400 audit(1750958036.514:567): avc: denied { create } for pid=7949 comm="syz.6.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 114.155615][ T7958] tmpfs: Bad value for 'mpol' [ 114.195998][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.200831][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.204589][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.208730][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.213165][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.295381][ T7971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7971 comm=syz.6.520 [ 114.300320][ T7971] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 114.313340][ T7971] overlayfs: missing 'lowerdir' [ 114.354372][ T7961] chnl_net:caif_netlink_parms(): no params data found [ 114.387095][ T40] audit: type=1400 audit(1750958036.794:568): avc: denied { create } for pid=7976 comm="syz.6.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 114.393715][ T40] audit: type=1400 audit(1750958036.794:569): avc: denied { write } for pid=7976 comm="syz.6.522" path="socket:[24615]" dev="sockfs" ino=24615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 114.498065][ T40] audit: type=1400 audit(1750958036.894:570): avc: denied { write } for pid=7987 comm="syz.6.526" lport=40343 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 114.506522][ T40] audit: type=1400 audit(1750958036.894:571): avc: denied { connect } for pid=7987 comm="syz.6.526" lport=40343 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 114.514523][ T40] audit: type=1400 audit(1750958036.914:572): avc: denied { read } for pid=7989 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.538683][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.541574][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.544174][ T7961] bridge_slave_0: entered allmulticast mode [ 114.547146][ T7961] bridge_slave_0: entered promiscuous mode [ 114.560602][ T40] audit: type=1800 audit(1750958036.964:573): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.528" name="bus" dev="overlay" ino=247 res=0 errno=0 [ 114.572735][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.575728][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.578279][ T7961] bridge_slave_1: entered allmulticast mode [ 114.582230][ T7961] bridge_slave_1: entered promiscuous mode [ 114.609192][ T7996] binder: 7989:7996 ioctl c0306201 200000000080 returned -14 [ 114.617222][ T7996] binder: 7989:7996 ioctl 330f 7 returned -22 [ 114.661926][ T7961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.668050][ T7961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.673090][ T8001] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 114.735037][ T7961] team0: Port device team_slave_0 added [ 114.741024][ T7961] team0: Port device team_slave_1 added [ 114.770086][ T40] audit: type=1400 audit(1750958037.174:574): avc: denied { write } for pid=8007 comm="syz.4.533" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.791303][ T40] audit: type=1400 audit(1750958037.174:575): avc: denied { open } for pid=8007 comm="syz.4.533" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.806339][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.808466][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.816585][ T7961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.820701][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.821849][ T40] audit: type=1400 audit(1750958037.234:576): avc: denied { ioctl } for pid=8006 comm="syz.6.532" path="socket:[20375]" dev="sockfs" ino=20375 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.823115][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.838202][ T7961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.893590][ T7961] hsr_slave_0: entered promiscuous mode [ 114.894041][ T7961] hsr_slave_1: entered promiscuous mode [ 114.897526][ T7961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.897560][ T7961] Cannot create hsr debugfs directory [ 115.294894][ T5996] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 115.444716][ T5996] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 115.448433][ T5996] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.451946][ T5996] usb 10-1: Product: syz [ 115.453656][ T5996] usb 10-1: Manufacturer: syz [ 115.455693][ T5996] usb 10-1: SerialNumber: syz [ 115.465777][ T5996] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 115.478427][ T5996] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 115.682848][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.686019][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.699797][ T5961] usb 10-1: USB disconnect, device number 6 [ 115.800540][ T8049] binder: BINDER_SET_CONTEXT_MGR already set [ 115.803598][ T8049] binder: 8048:8049 ioctl 4018620d 200000000040 returned -16 [ 115.829143][ T8051] __nla_validate_parse: 3 callbacks suppressed [ 115.829154][ T8051] netlink: 22 bytes leftover after parsing attributes in process `syz.4.544'. [ 115.834107][ T8052] netlink: 22 bytes leftover after parsing attributes in process `syz.4.544'. [ 115.899664][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.023124][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.122395][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.228331][ T12] bridge_slave_1: left allmulticast mode [ 116.230208][ T12] bridge_slave_1: left promiscuous mode [ 116.233137][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.248983][ T12] bridge_slave_0: left allmulticast mode [ 116.251445][ T12] bridge_slave_0: left promiscuous mode [ 116.254009][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.291304][ T5942] Bluetooth: hci0: command tx timeout [ 116.415515][ T8073] netlink: 'syz.5.548': attribute type 1 has an invalid length. [ 116.421148][ T8073] netlink: 780 bytes leftover after parsing attributes in process `syz.5.548'. [ 116.471065][ T72] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 116.621097][ T72] usb 9-1: Using ep0 maxpacket: 16 [ 116.625594][ T72] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.629040][ T72] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.632438][ T72] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 116.635794][ T72] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.638799][ T72] usb 9-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 116.644084][ T72] usb 9-1: config 7 interface 0 has no altsetting 0 [ 116.646277][ T72] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 116.649142][ T72] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.649468][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.659211][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.665065][ T12] bond0 (unregistering): Released all slaves [ 116.762051][ T5996] usb 10-1: Service connection timeout for: 256 [ 116.764505][ T5996] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 116.767419][ T5996] ath9k_htc: Failed to initialize the device [ 116.771036][ T5961] usb 10-1: ath9k_htc: USB layer deinitialized [ 117.081576][ T72] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:7.0/0003:0458:5010.0004/input/input10 [ 117.101525][ T12] hsr_slave_0: left promiscuous mode [ 117.103565][ T5961] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 117.107317][ T12] hsr_slave_1: left promiscuous mode [ 117.109531][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.116422][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.119122][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.121669][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.143837][ T12] veth1_macvtap: left promiscuous mode [ 117.145655][ T12] veth0_macvtap: left promiscuous mode [ 117.147397][ T12] veth1_vlan: left promiscuous mode [ 117.149128][ T12] veth0_vlan: left promiscuous mode [ 117.175256][ T72] kye 0003:0458:5010.0004: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 117.175375][ T8099] fuse: Unknown parameter '' [ 117.180764][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.550'. [ 117.183801][ T8098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.550'. [ 117.254301][ T5961] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 117.257098][ T5961] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.259670][ T5961] usb 10-1: Product: syz [ 117.261611][ T5961] usb 10-1: Manufacturer: syz [ 117.263132][ T5961] usb 10-1: SerialNumber: syz [ 117.267459][ T5961] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 117.290165][ T5961] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 117.369515][ T8110] netlink: 'syz.4.547': attribute type 4 has an invalid length. [ 117.422330][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.426077][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.429992][ T5942] Bluetooth: hci3: Unknown advertising packet type: 0x79 [ 117.430024][ T5942] Bluetooth: hci3: Malformed LE Event: 0x0d [ 117.494517][ T5996] usb 10-1: USB disconnect, device number 7 [ 117.759552][ T12] team0 (unregistering): Port device team_slave_1 removed [ 117.818787][ T12] team0 (unregistering): Port device team_slave_0 removed [ 118.117117][ T8120] netlink: 'syz.5.552': attribute type 2 has an invalid length. [ 118.217324][ C0] kye 0003:0458:5010.0004: usb_submit_urb(ctrl) failed: -1 [ 118.361184][ T5942] Bluetooth: hci0: command tx timeout [ 118.361351][ T5961] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 118.364008][ T72] usb 9-1: reset high-speed USB device number 4 using dummy_hcd [ 118.366083][ T5961] ath9k_htc: Failed to initialize the device [ 118.374023][ T5996] usb 10-1: ath9k_htc: USB layer deinitialized [ 118.390177][ T8098] geneve2: entered promiscuous mode [ 118.392536][ T8098] geneve2: entered allmulticast mode [ 118.503600][ T7961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.511266][ T72] usb 9-1: device descriptor read/64, error -32 [ 118.513243][ T7961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.524319][ T7961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.533828][ T7961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.613745][ T7961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.628573][ T7961] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.641209][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.643463][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.650930][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.653329][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.555'. [ 118.653333][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.663999][ T8143] ptrace attach of "/syz-executor exec"[8144] was attempted by "/syz-executor exec"[8143] [ 118.679297][ T8143] ceph: No source [ 118.818413][ T7961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.848893][ T7961] veth0_vlan: entered promiscuous mode [ 118.855207][ T7961] veth1_vlan: entered promiscuous mode [ 118.871391][ T7961] veth0_macvtap: entered promiscuous mode [ 118.875815][ T7961] veth1_macvtap: entered promiscuous mode [ 118.885426][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.893889][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.898854][ T7961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.902486][ T7961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.905330][ T7961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.908099][ T7961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.956943][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.959396][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.975762][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.978744][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.032769][ T8167] syz.6.561 (8167) used greatest stack depth: 19640 bytes left [ 119.159851][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 119.159862][ T40] audit: type=1400 audit(1750958041.564:580): avc: denied { mounton } for pid=8179 comm="syz.6.565" path="/39/file0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 119.173678][ T40] audit: type=1400 audit(1750958041.584:581): avc: denied { unmount } for pid=7607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.404505][ T10] usb 9-1: USB disconnect, device number 4 [ 119.536794][ T8207] netlink: 'syz.4.574': attribute type 21 has an invalid length. [ 119.539237][ T8207] netlink: 156 bytes leftover after parsing attributes in process `syz.4.574'. [ 119.576259][ T8212] netlink: 32 bytes leftover after parsing attributes in process `syz.4.575'. [ 119.613846][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.576'. [ 119.633584][ T8214] fuse: Bad value for 'fd' [ 119.664111][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.577'. [ 119.667063][ T8217] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 119.670097][ T8217] afs: Unknown parameter 'local' [ 119.922041][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 119.961215][ T5996] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 120.071128][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 120.074928][ T10] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 120.078030][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 120.079356][ T40] audit: type=1400 audit(1750958042.484:582): avc: denied { accept } for pid=8233 comm="syz.6.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.083146][ T10] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.094106][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.098193][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.103852][ T10] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 120.106657][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 120.110014][ T10] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.113802][ T5996] usb 9-1: Using ep0 maxpacket: 8 [ 120.115435][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.118990][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.123575][ T5996] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 120.126143][ T5996] usb 9-1: config 179 has no interface number 0 [ 120.128126][ T5996] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 120.131646][ T5996] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 120.135202][ T5996] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.138664][ T5996] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.142895][ T10] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 120.145234][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 120.148662][ T5996] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 120.151492][ T10] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.155025][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.158465][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.162049][ T5996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.167305][ T8224] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 120.176817][ T10] usb 10-1: string descriptor 0 read error: -22 [ 120.178896][ T10] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 120.181803][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.190554][ T10] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 120.385234][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input12 [ 120.396391][ T8222] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 120.423336][ T8222] tipc: Started in network mode [ 120.425022][ T8222] tipc: Node identity 2e57f40bb68c, cluster identity 4711 [ 120.427941][ T8222] tipc: Enabled bearer , priority 0 [ 120.433138][ T8222] syzkaller0: MTU too low for tipc bearer [ 120.435195][ T8222] tipc: Disabling bearer [ 120.443822][ T24] usb 10-1: USB disconnect, device number 8 [ 120.575340][ T53] usb 9-1: USB disconnect, device number 5 [ 120.575340][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 120.580560][ T53] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 120.777025][ T8240] program syz.5.584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.831390][ T1112] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 120.834445][ T1112] ata1.00: irq_stat 0x40000000 [ 120.836358][ T1112] ata1.00: failed command: ZAC MANAGEMENT OUT [ 120.838813][ T1112] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 23 [ 120.838813][ T1112] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 120.845952][ T1112] ata1.00: status: { DRDY ERR } [ 120.847939][ T1112] ata1.00: error: { ABRT } [ 120.849837][ T1112] ata1.00: device reported invalid CHS sector 0 [ 120.953520][ T8251] xt_hashlimit: invalid interval [ 121.030024][ T40] audit: type=1400 audit(1750958043.434:583): avc: denied { map } for pid=8263 comm="syz.5.589" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.041028][ T40] audit: type=1400 audit(1750958043.434:584): avc: denied { execute } for pid=8263 comm="syz.5.589" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.242940][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.771394][ T40] audit: type=1400 audit(1750958044.174:585): avc: denied { listen } for pid=8295 comm="syz.6.595" path=2F35302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 121.842381][ T8307] Attempt to restore checkpoint with obsolete wellknown handles [ 121.866381][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.598'. [ 121.882822][ T8307] IPVS: Error joining to the multicast group [ 121.925434][ T5295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.928092][ T8317] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 121.930063][ T5295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.932011][ T8317] macvtap1: entered allmulticast mode [ 121.935375][ T5295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.939676][ T8317] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 121.939733][ T40] audit: type=1400 audit(1750958044.344:586): avc: denied { unmount } for pid=7402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 121.944045][ T8317] batman_adv: batadv0: Adding interface: macvtap1 [ 121.954614][ T5295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.955652][ T5295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.957510][ T8317] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.976124][ T8317] batman_adv: batadv0: Interface activated: macvtap1 [ 122.117790][ T8328] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 122.150255][ T8322] chnl_net:caif_netlink_parms(): no params data found [ 122.245100][ T8322] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.247454][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.249865][ T8322] bridge_slave_0: entered allmulticast mode [ 122.253079][ T8322] bridge_slave_0: entered promiscuous mode [ 122.257264][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.259682][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.262753][ T8322] bridge_slave_1: entered allmulticast mode [ 122.267169][ T8322] bridge_slave_1: entered promiscuous mode [ 122.309782][ T8322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.314737][ T8322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.354356][ T8359] overlay: ./file0 is not a directory [ 122.369132][ T8322] team0: Port device team_slave_0 added [ 122.384611][ T8322] team0: Port device team_slave_1 added [ 122.450771][ T8322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.454754][ T8322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.465574][ T8322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.470115][ T8322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.472862][ T8322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.481331][ T8322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.534088][ T8322] hsr_slave_0: entered promiscuous mode [ 122.536826][ T8322] hsr_slave_1: entered promiscuous mode [ 122.539086][ T8322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.542046][ T8322] Cannot create hsr debugfs directory [ 122.567085][ T8374] netlink: 'syz.5.607': attribute type 2 has an invalid length. [ 122.578380][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.607'. [ 122.660660][ T8374] team0: Port device team_slave_0 removed [ 123.050580][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.114186][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.184076][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.221227][ T5961] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 123.277513][ T1142] bridge_slave_1: left allmulticast mode [ 123.279845][ T1142] bridge_slave_1: left promiscuous mode [ 123.281829][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.286756][ T1142] bridge_slave_0: left allmulticast mode [ 123.288494][ T1142] bridge_slave_0: left promiscuous mode [ 123.290350][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.382705][ T5961] usb 11-1: Using ep0 maxpacket: 32 [ 123.386986][ T5961] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 123.389602][ T5961] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 123.393115][ T5961] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 123.396733][ T5961] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 123.400661][ T5961] usb 11-1: config 0 interface 0 has no altsetting 0 [ 123.404471][ T5961] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 123.407265][ T5961] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 123.409817][ T5961] usb 11-1: Product: syz [ 123.411583][ T5961] usb 11-1: Manufacturer: syz [ 123.413088][ T5961] usb 11-1: SerialNumber: syz [ 123.417671][ T5961] usb 11-1: config 0 descriptor?? [ 123.422225][ T5961] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 123.426548][ T5961] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 123.563573][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.567836][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.571744][ T1142] bond0 (unregistering): Released all slaves [ 123.728952][ T40] audit: type=1400 audit(1750958046.134:587): avc: denied { create } for pid=8395 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 123.751023][ T40] audit: type=1400 audit(1750958046.154:588): avc: denied { sys_admin } for pid=8395 comm="syz.5.610" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 123.877130][ T40] audit: type=1400 audit(1750958046.284:589): avc: denied { create } for pid=8402 comm="syz.5.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 123.911229][ T1142] hsr_slave_0: left promiscuous mode [ 123.919382][ T1142] hsr_slave_1: left promiscuous mode [ 123.921625][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.924135][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.926911][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.929227][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.967494][ T1142] veth1_macvtap: left promiscuous mode [ 123.969315][ T1142] veth0_macvtap: left promiscuous mode [ 123.971344][ T1142] veth1_vlan: left promiscuous mode [ 123.973093][ T1142] veth0_vlan: left promiscuous mode [ 124.041582][ T5942] Bluetooth: hci0: command tx timeout [ 124.062503][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 124.066580][ T1112] ata1: failed to read log page 10h (errno=-5) [ 124.069110][ T1112] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 124.072381][ T1112] ata1.00: irq_stat 0x40000000 [ 124.074374][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 124.076955][ T1112] ata1.00: cmd 61/70:f0:b6:08:10/00:00:00:00:00/40 tag 30 ncq dma 57344 out [ 124.076955][ T1112] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 124.084087][ T1112] ata1.00: status: { DRDY } [ 124.095233][ T1112] ata1.00: configured for UDMA/100 [ 124.103676][ T1112] ata1: EH complete [ 124.550818][ T40] audit: type=1400 audit(1750958046.954:590): avc: denied { read } for pid=8433 comm="syz.5.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.600617][ T40] audit: type=1400 audit(1750958047.004:591): avc: denied { setopt } for pid=8433 comm="syz.5.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.615598][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.617'. [ 124.800849][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 124.885387][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 125.445750][ T8435] bridge_slave_1: left allmulticast mode [ 125.448154][ T8435] bridge_slave_1: left promiscuous mode [ 125.450584][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.457366][ T8435] bridge_slave_0: left allmulticast mode [ 125.459645][ T8435] bridge_slave_0: left promiscuous mode [ 125.463203][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.651376][ T8322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.668842][ T8322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.676509][ T8322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.680536][ T8322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.750099][ T8322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.761319][ T8322] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.767980][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.770559][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.776541][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.779487][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.791603][ T8452] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 125.794254][ T8452] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 125.801056][ T8452] vhci_hcd vhci_hcd.0: Device attached [ 125.812154][ T8322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.961361][ T8322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.987651][ T837] usb 11-1: USB disconnect, device number 2 [ 125.990033][ C1] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 125.997163][ T837] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 126.015584][ T8322] veth0_vlan: entered promiscuous mode [ 126.025503][ T8322] veth1_vlan: entered promiscuous mode [ 126.051072][ T5961] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 126.051389][ T5996] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 126.051960][ T8322] veth0_macvtap: entered promiscuous mode [ 126.053961][ T8322] veth1_macvtap: entered promiscuous mode [ 126.071927][ T8322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.079318][ T8322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.083628][ T8322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.086395][ T8322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.089071][ T8322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.092514][ T8322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.127018][ T5942] Bluetooth: hci0: command tx timeout [ 126.132604][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.135120][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.157852][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.160483][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.201159][ T5961] usb 10-1: Using ep0 maxpacket: 8 [ 126.206293][ T5961] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 126.213567][ T5961] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.217032][ T5961] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.220214][ T5961] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.223731][ T5961] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.228116][ T5961] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.231148][ T5961] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.335255][ T40] audit: type=1400 audit(1750958048.744:592): avc: denied { lock } for pid=8475 comm="syz.6.622" path="socket:[25904]" dev="sockfs" ino=25904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.437732][ T5961] usb 10-1: GET_CAPABILITIES returned 0 [ 126.439521][ T5961] usbtmc 10-1:16.0: can't read capabilities [ 126.471068][ T40] audit: type=1400 audit(1750958048.874:593): avc: denied { checkpoint_restore } for pid=8483 comm="syz.6.626" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.655731][ T40] audit: type=1400 audit(1750958049.064:594): avc: denied { read append open } for pid=8497 comm="syz.6.629" path="/63/file0/cgroup.controllers" dev="9p" ino=37617720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.668021][ T40] audit: type=1400 audit(1750958049.074:595): avc: denied { map } for pid=8497 comm="syz.6.629" path="/63/file0/cgroup.controllers" dev="9p" ino=37617720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.677696][ T40] audit: type=1400 audit(1750958049.074:596): avc: denied { write } for pid=8497 comm="syz.6.629" path="/63/file0/cgroup.controllers" dev="9p" ino=37617720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.736600][ T40] audit: type=1400 audit(1750958050.144:597): avc: denied { create } for pid=8516 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 127.748716][ T40] audit: type=1400 audit(1750958050.154:598): avc: denied { write } for pid=8516 comm="syz.6.632" path="socket:[25922]" dev="sockfs" ino=25922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 128.193084][ T1143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.735080][ T8453] vhci_hcd: connection reset by peer [ 128.735879][ T2302] usb 10-1: USB disconnect, device number 9 [ 128.737609][ T95] vhci_hcd: stop threads [ 128.741491][ T95] vhci_hcd: release socket [ 128.743310][ T95] vhci_hcd: disconnect device [ 128.902443][ T8524] could not allocate digest TFM handle blake2s-160-generic [ 128.923258][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 128.939229][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'. [ 128.977143][ T8537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8537 comm=syz.5.639 [ 129.028296][ T5295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.032051][ T5295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.035276][ T5295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.038706][ T5295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.043729][ T5295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.192145][ T8542] chnl_net:caif_netlink_parms(): no params data found [ 129.314305][ T8565] fuse: Unknown parameter 'fR50x0000000000000004' [ 129.318649][ T8565] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 129.319264][ T8565] netlink: 'syz.4.645': attribute type 21 has an invalid length. [ 129.323372][ T8565] netlink: 'syz.4.645': attribute type 6 has an invalid length. [ 129.323389][ T8565] netlink: 132 bytes leftover after parsing attributes in process `syz.4.645'. [ 129.323946][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.324026][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.324147][ T8542] bridge_slave_0: entered allmulticast mode [ 129.331786][ T8542] bridge_slave_0: entered promiscuous mode [ 129.333376][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.333420][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.333487][ T8542] bridge_slave_1: entered allmulticast mode [ 129.334179][ T8542] bridge_slave_1: entered promiscuous mode [ 129.466088][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.473329][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.649'. [ 129.474096][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.606563][ T8586] hsr_slave_1 (unregistering): left promiscuous mode [ 129.696808][ T8542] team0: Port device team_slave_0 added [ 129.704047][ T8542] team0: Port device team_slave_1 added [ 129.740007][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.652'. [ 129.799070][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.801933][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.813761][ T8542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.819242][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.822748][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.833097][ T8542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.899224][ T8542] hsr_slave_0: entered promiscuous mode [ 129.904141][ T8542] hsr_slave_1: entered promiscuous mode [ 129.906702][ T8542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.909589][ T8542] Cannot create hsr debugfs directory [ 129.983303][ T8612] xfrm1: entered allmulticast mode [ 130.045053][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.657'. [ 130.048694][ T8614] mmap: syz.6.657 (8614) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.125026][ T1143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.176479][ T8621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.181431][ T8621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.214689][ T1143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.268017][ T1143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.425084][ T1143] bridge_slave_1: left allmulticast mode [ 130.430024][ T1143] bridge_slave_1: left promiscuous mode [ 130.433356][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.439230][ T1143] bridge_slave_0: left allmulticast mode [ 130.441971][ T1143] bridge_slave_0: left promiscuous mode [ 130.444378][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.505386][ T8629] fuse: Unknown parameter 'f:ç0x0000000000000007' [ 130.566217][ T40] audit: type=1400 audit(1750958052.974:599): avc: denied { ioctl } for pid=8628 comm="syz.6.662" path="socket:[28193]" dev="sockfs" ino=28193 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.771491][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.778471][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.782469][ T1143] bond0 (unregistering): Released all slaves [ 130.814825][ T8634] netlink: 'syz.4.665': attribute type 4 has an invalid length. [ 130.817252][ T8634] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.665'. [ 130.825427][ T40] audit: type=1400 audit(1750958053.234:600): avc: denied { connect } for pid=8633 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.844912][ T5295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.849191][ T5295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.854493][ T5295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.859372][ T5295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.864314][ T5295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.883694][ T40] audit: type=1400 audit(1750958053.294:601): avc: denied { bind } for pid=8633 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.889057][ T40] audit: type=1400 audit(1750958053.294:602): avc: denied { listen } for pid=8633 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 131.081090][ T5295] Bluetooth: hci0: command tx timeout [ 131.151226][ T8636] chnl_net:caif_netlink_parms(): no params data found [ 131.151585][ T5996] vhci_hcd: vhci_device speed not set [ 131.205447][ T1143] hsr_slave_0: left promiscuous mode [ 131.208145][ T1143] hsr_slave_1: left promiscuous mode [ 131.210923][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.214186][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.217687][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.220002][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.239246][ T1143] veth1_macvtap: left promiscuous mode [ 131.241108][ T1143] veth0_macvtap: left promiscuous mode [ 131.242858][ T1143] veth1_vlan: left promiscuous mode [ 131.244545][ T1143] veth0_vlan: left promiscuous mode [ 131.249311][ T40] audit: type=1400 audit(1750958053.654:603): avc: denied { write } for pid=8656 comm="syz.6.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 131.333193][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 131.491547][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 131.499291][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.504031][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.514995][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 131.518663][ T24] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 131.522665][ T24] usb 9-1: Product: syz [ 131.524393][ T24] usb 9-1: Manufacturer: syz [ 131.526330][ T24] usb 9-1: SerialNumber: syz [ 131.539911][ T24] input: appletouch as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input13 [ 131.966490][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 132.051223][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 132.527915][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.530143][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.684857][ T838] usb 9-1: USB disconnect, device number 6 [ 132.707061][ T838] appletouch 9-1:1.0: input: appletouch disconnected [ 132.721185][ T8636] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.723453][ T8636] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.725708][ T8636] bridge_slave_0: entered allmulticast mode [ 132.728421][ T8636] bridge_slave_0: entered promiscuous mode [ 132.745394][ T8636] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.747608][ T8636] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.749959][ T8636] bridge_slave_1: entered allmulticast mode [ 132.752772][ T8636] bridge_slave_1: entered promiscuous mode [ 132.795275][ T8636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.802532][ T8636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.853701][ T8636] team0: Port device team_slave_0 added [ 132.857847][ T8636] team0: Port device team_slave_1 added [ 132.889960][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.892277][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.900082][ T8636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.905602][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.907772][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.916843][ T8636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.931216][ T5295] Bluetooth: hci1: command tx timeout [ 132.982117][ T8636] hsr_slave_0: entered promiscuous mode [ 132.985323][ T8636] hsr_slave_1: entered promiscuous mode [ 132.988000][ T8636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.990898][ T8636] Cannot create hsr debugfs directory [ 132.997057][ T8542] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.031339][ T8542] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.046511][ T8542] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.053353][ T8542] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.161455][ T5295] Bluetooth: hci0: command tx timeout [ 133.212611][ T1199] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.266855][ T8542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.271267][ T40] audit: type=1400 audit(1750958055.674:604): avc: denied { ioctl } for pid=8683 comm="syz.4.671" path="socket:[29356]" dev="sockfs" ino=29356 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 133.279580][ T8636] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 133.290728][ T8636] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 133.342721][ T1199] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.352632][ T8636] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 133.361231][ T8686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.672'. [ 133.362606][ T8542] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.364698][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 133.371856][ T8636] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 133.466269][ T40] audit: type=1400 audit(1750958055.874:605): avc: denied { ioctl } for pid=8685 comm="syz.4.672" path="socket:[26160]" dev="sockfs" ino=26160 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.484507][ T1199] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.494369][ T1247] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.497401][ T1247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.512585][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.515302][ T1247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.580052][ T1199] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.646822][ T8636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.651731][ T8699] binder: BINDER_SET_CONTEXT_MGR already set [ 133.654340][ T8699] binder: 8698:8699 ioctl 4018620d 200000000040 returned -16 [ 133.670363][ T40] audit: type=1400 audit(1750958056.074:606): avc: denied { listen } for pid=8700 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.675998][ T8636] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.687803][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.690163][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.701360][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.704348][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.787037][ T8713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8713 comm=syz.4.676 [ 133.792763][ T8713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8713 comm=syz.4.676 [ 133.798191][ T8713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8713 comm=syz.4.676 [ 133.809581][ T8713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8713 comm=syz.4.676 [ 133.833325][ T8713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8713 comm=syz.4.676 [ 133.839139][ T8713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8713 comm=syz.4.676 [ 133.856501][ T8713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8713 comm=syz.4.676 [ 133.863426][ T8713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8713 comm=syz.4.676 [ 133.868492][ T8713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8713 comm=syz.4.676 [ 134.114361][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.120342][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.126691][ T1199] bond0 (unregistering): Released all slaves [ 134.139793][ T8542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.229746][ T8542] veth0_vlan: entered promiscuous mode [ 134.238925][ T8542] veth1_vlan: entered promiscuous mode [ 134.261659][ T1199] tipc: Left network mode [ 134.299774][ T8542] veth0_macvtap: entered promiscuous mode [ 134.310379][ T8542] veth1_macvtap: entered promiscuous mode [ 134.405113][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.419872][ T8636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.427128][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.440833][ T8542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.446348][ T8542] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.456422][ T8542] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.458865][ T8542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.612684][ T1199] hsr_slave_0: left promiscuous mode [ 134.615540][ T1199] hsr_slave_1: left promiscuous mode [ 134.618306][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.627577][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.642364][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.646108][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.655087][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.683'. [ 134.695392][ T1199] veth1_macvtap: left promiscuous mode [ 134.697779][ T1199] veth0_macvtap: left promiscuous mode [ 134.700121][ T1199] veth1_vlan: left promiscuous mode [ 134.702940][ T1199] veth0_vlan: left promiscuous mode [ 134.961523][ T10] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 135.011228][ T5295] Bluetooth: hci1: command tx timeout [ 135.134853][ T10] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 135.137676][ T10] usb 9-1: config 0 has no interface number 0 [ 135.139532][ T10] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.143224][ T10] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 135.146501][ T10] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 135.149936][ T10] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 135.153323][ T10] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 135.156626][ T10] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.160864][ T10] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 135.164726][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.168372][ T10] usb 9-1: config 0 descriptor?? [ 135.170825][ T8774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 135.173194][ T8774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 135.177902][ T10] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 135.241146][ T5295] Bluetooth: hci0: command tx timeout [ 135.377341][ T8774] warn_alloc: 1 callbacks suppressed [ 135.377352][ T8774] syz.4.683: vmalloc error: size 3335753728, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.385079][ T8774] CPU: 0 UID: 0 PID: 8774 Comm: syz.4.683 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 135.385107][ T8774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.385119][ T8774] Call Trace: [ 135.385126][ T8774] [ 135.385134][ T8774] dump_stack_lvl+0x16c/0x1f0 [ 135.385190][ T8774] warn_alloc+0x248/0x3a0 [ 135.385234][ T8774] ? __pfx_warn_alloc+0x10/0x10 [ 135.385251][ T8774] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.385266][ T8774] ? stack_depot_save_flags+0x3e0/0xa40 [ 135.385290][ T8774] ? kasan_save_stack+0x42/0x60 [ 135.385303][ T8774] ? kasan_save_stack+0x33/0x60 [ 135.385316][ T8774] ? kasan_save_track+0x14/0x30 [ 135.385329][ T8774] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 135.385341][ T8774] ? __vb2_queue_alloc+0x8c9/0x1280 [ 135.385358][ T8774] ? vb2_core_create_bufs+0x559/0xab0 [ 135.385377][ T8774] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 135.385388][ T8774] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 135.385406][ T8774] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 135.385419][ T8774] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.385436][ T8774] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 135.385446][ T8774] vmalloc_user_noprof+0x9e/0xe0 [ 135.385457][ T8774] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 135.385468][ T8774] vb2_vmalloc_alloc+0x135/0x3f0 [ 135.385478][ T8774] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 135.385488][ T8774] __vb2_queue_alloc+0x8c9/0x1280 [ 135.385512][ T8774] vb2_core_create_bufs+0x559/0xab0 [ 135.385543][ T8774] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 135.385572][ T8774] ? __pfx___mutex_trylock_common+0x10/0x10 [ 135.385603][ T8774] ? __pfx___might_resched+0x10/0x10 [ 135.385624][ T8774] ? rcu_is_watching+0x12/0xc0 [ 135.385647][ T8774] vb2_create_bufs+0x5e8/0x840 [ 135.385674][ T8774] ? __pfx_vb2_create_bufs+0x10/0x10 [ 135.385700][ T8774] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.385719][ T8774] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.385743][ T8774] v4l_create_bufs+0x159/0x270 [ 135.385767][ T8774] __video_do_ioctl+0xb3d/0xfc0 [ 135.385794][ T8774] ? __might_fault+0xe3/0x190 [ 135.385815][ T8774] ? __pfx___video_do_ioctl+0x10/0x10 [ 135.385837][ T8774] video_usercopy+0x4cd/0x1720 [ 135.385852][ T8774] ? __pfx___video_do_ioctl+0x10/0x10 [ 135.385864][ T8774] ? selinux_kernel_read_file+0xa0/0x130 [ 135.385880][ T8774] ? __pfx_video_usercopy+0x10/0x10 [ 135.385903][ T8774] v4l2_ioctl+0x1ba/0x250 [ 135.385915][ T8774] ? __pfx_v4l2_ioctl+0x10/0x10 [ 135.385928][ T8774] __x64_sys_ioctl+0x18b/0x210 [ 135.385943][ T8774] do_syscall_64+0xcd/0x4c0 [ 135.385960][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.385972][ T8774] RIP: 0033:0x7f280f18e929 [ 135.385982][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.385993][ T8774] RSP: 002b:00007f280ffcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.386003][ T8774] RAX: ffffffffffffffda RBX: 00007f280f3b6080 RCX: 00007f280f18e929 [ 135.386010][ T8774] RDX: 0000200000000040 RSI: 00000000c100565c RDI: 0000000000000005 [ 135.386017][ T8774] RBP: 00007f280f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 135.386023][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.386029][ T8774] R13: 0000000000000000 R14: 00007f280f3b6080 R15: 00007ffd37a1aac8 [ 135.386043][ T8774] [ 135.386064][ T8774] Mem-Info: [ 135.517341][ T8774] active_anon:26137 inactive_anon:0 isolated_anon:0 [ 135.517341][ T8774] active_file:15715 inactive_file:3574 isolated_file:0 [ 135.517341][ T8774] unevictable:1768 dirty:45 writeback:0 [ 135.517341][ T8774] slab_reclaimable:12106 slab_unreclaimable:80688 [ 135.517341][ T8774] mapped:24847 shmem:18759 pagetables:1297 [ 135.517341][ T8774] sec_pagetables:305 bounce:0 [ 135.517341][ T8774] kernel_misc_reclaimable:0 [ 135.517341][ T8774] free:453430 free_pcp:26602 free_cma:0 [ 135.535022][ T8774] Node 0 active_anon:104548kB inactive_anon:0kB active_file:62792kB inactive_file:14156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99332kB dirty:156kB writeback:0kB shmem:71500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14096kB pagetables:4988kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 135.547980][ T8774] Node 1 active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:24kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.560355][ T8774] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.573402][ T8774] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 135.575729][ T8774] Node 0 DMA32 free:205096kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104504kB inactive_anon:0kB active_file:62792kB inactive_file:14156kB unevictable:3536kB writepending:156kB present:2080628kB managed:1264708kB mlocked:0kB bounce:0kB free_pcp:77048kB local_pcp:19408kB free_cma:0kB [ 135.587906][ T8774] lowmem_reserve[]: 0 0 0 0 0 [ 135.589865][ T8774] Node 1 Normal free:1593260kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:140kB unevictable:3536kB writepending:24kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:29324kB local_pcp:7112kB free_cma:0kB [ 135.602361][ T8774] lowmem_reserve[]: 0 0 0 0 0 [ 135.604346][ T8774] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 135.613444][ T8774] Node 0 DMA32: 1548*4kB (UME) 486*8kB (UME) 396*16kB (UME) 228*32kB (UME) 296*64kB (UME) 42*128kB (UM) 56*256kB (UM) 21*512kB (UME) 27*1024kB (UME) 13*2048kB (UM) 19*4096kB (M) = 205216kB [ 135.620526][ T8774] Node 1 Normal: 44*4kB (UE) 40*8kB (UME) 52*16kB (UE) 42*32kB (UME) 13*64kB (UE) 6*128kB (ME) 3*256kB (UM) 8*512kB (UM) 1*1024kB (E) 3*2048kB (UME) 385*4096kB (UM) = 1593264kB [ 135.621295][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 135.627784][ T8774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.634544][ T8774] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.638096][ T8774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.641798][ T8774] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.645485][ T8774] 38045 total pagecache pages [ 135.647405][ T8774] 0 pages in swap cache [ 135.649022][ T8774] Free swap = 124996kB [ 135.650660][ T8774] Total swap = 124996kB [ 135.652588][ T8774] 1048443 pages RAM [ 135.654143][ T8774] 0 pages HighMem/MovableOnly [ 135.656020][ T8774] 282937 pages reserved [ 135.657731][ T8774] 0 pages cma reserved [ 136.128274][ T24] usb 9-1: USB disconnect, device number 7 [ 136.138917][ T24] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 136.147333][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.149785][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.175153][ T8636] veth0_vlan: entered promiscuous mode [ 136.179977][ T8636] veth1_vlan: entered promiscuous mode [ 136.195194][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.197751][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.199857][ T40] audit: type=1400 audit(1750958058.604:607): avc: denied { map } for pid=8778 comm="syz.6.685" path="/dev/tty32" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 136.208208][ T40] audit: type=1400 audit(1750958058.604:608): avc: denied { execute } for pid=8778 comm="syz.6.685" path="/dev/tty32" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 136.249946][ T8636] veth0_macvtap: entered promiscuous mode [ 136.259296][ T8636] veth1_macvtap: entered promiscuous mode [ 136.326633][ T8636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.339671][ T8636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.363831][ T8636] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.367182][ T40] audit: type=1400 audit(1750958058.774:609): avc: denied { mounton } for pid=8790 comm="syz.6.688" path="/94/file0/file0" dev="9p" ino=37617699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.375074][ T8636] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.377991][ T8636] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.380707][ T8636] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.456359][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.459506][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.488698][ T7252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.491805][ T7252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.699025][ T8810] fuseblk: Unknown parameter 'obj_user' [ 136.706641][ T8810] ufs: You didn't specify the type of your ufs filesystem [ 136.706641][ T8810] [ 136.706641][ T8810] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 136.706641][ T8810] [ 136.706641][ T8810] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 136.721574][ T8810] ufs: ufstype=old is supported read-only [ 136.725252][ T8810] syz.4.691: attempt to access beyond end of device [ 136.725252][ T8810] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 136.777943][ T40] audit: type=1400 audit(1750958059.184:610): avc: denied { remount } for pid=8812 comm="syz.7.693" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 136.799503][ T8813] option changes via remount are deprecated (pid=8812 comm=syz.7.693) [ 137.029161][ T8837] syzkaller0: entered allmulticast mode [ 137.050592][ T8837] syzkaller0 (unregistering): left allmulticast mode [ 137.091075][ T5295] Bluetooth: hci1: command tx timeout [ 137.518203][ T1199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.558349][ T8866] netlink: 52 bytes leftover after parsing attributes in process `syz.6.704'. [ 138.178274][ T1199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.208722][ T8888] netlink: 132 bytes leftover after parsing attributes in process `syz.6.706'. [ 138.235742][ T8892] selinux_netlink_send: 24 callbacks suppressed [ 138.235759][ T8892] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=8892 comm=syz.4.705 [ 138.272916][ T1199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.296082][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.707'. [ 138.298876][ T8887] bond0: entered promiscuous mode [ 138.300469][ T8887] bond_slave_0: entered promiscuous mode [ 138.303923][ T8887] bond_slave_1: entered promiscuous mode [ 138.305696][ T8887] bond0: entered allmulticast mode [ 138.307245][ T8887] bond_slave_0: entered allmulticast mode [ 138.308994][ T8887] bond_slave_1: entered allmulticast mode [ 138.344485][ T40] audit: type=1400 audit(1750958060.754:611): avc: denied { read } for pid=8893 comm="syz.6.708" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 138.360057][ T40] audit: type=1400 audit(1750958060.754:612): avc: denied { open } for pid=8893 comm="syz.6.708" path="/100/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 138.360095][ T40] audit: type=1400 audit(1750958060.764:613): avc: denied { ioctl } for pid=8893 comm="syz.6.708" path="/100/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 138.372408][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.373581][ T1199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.387881][ T8894] xt_hashlimit: size too large, truncated to 1048576 [ 138.389815][ T40] audit: type=1400 audit(1750958060.784:614): avc: denied { getopt } for pid=8902 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 138.398933][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.400630][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.401770][ T40] audit: type=1400 audit(1750958060.814:615): avc: denied { lock } for pid=8902 comm="syz.4.710" path="/125/file0/cpuset.effective_cpus" dev="9p" ino=37617723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.416216][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.419565][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.566334][ T8915] netlink: 52 bytes leftover after parsing attributes in process `syz.4.713'. [ 138.569049][ T8915] tipc: Invalid UDP bearer configuration [ 138.569074][ T8915] tipc: Enabling of bearer rejected, failed to enable media [ 138.582064][ T40] audit: type=1400 audit(1750958060.994:616): avc: denied { link } for pid=8914 comm="syz.4.713" name="file1" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.616585][ T1199] bridge_slave_1: left allmulticast mode [ 138.618944][ T1199] bridge_slave_1: left promiscuous mode [ 138.621612][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.953070][ T1199] bridge_slave_0: left allmulticast mode [ 138.955462][ T1199] bridge_slave_0: left promiscuous mode [ 138.957984][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.001179][ T8928] netlink: 24 bytes leftover after parsing attributes in process `syz.7.716'. [ 139.057667][ T8931] netlink: 'syz.7.716': attribute type 64 has an invalid length. [ 139.061083][ T8931] netlink: 'syz.7.716': attribute type 4 has an invalid length. [ 139.064428][ T8931] netlink: 152 bytes leftover after parsing attributes in process `syz.7.716'. [ 139.161043][ T5942] Bluetooth: hci1: command tx timeout [ 139.270024][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.275783][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.279438][ T1199] bond0 (unregistering): Released all slaves [ 139.298935][ T8922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.302667][ T8922] bond2: entered promiscuous mode [ 139.304429][ T8922] bond2: entered allmulticast mode [ 139.306508][ T8922] bond0: (slave bond2): Enslaving as an active interface with an up link [ 139.354963][ T8897] chnl_net:caif_netlink_parms(): no params data found [ 139.419428][ T8952] ata1.00: invalid multi_count 128 ignored [ 139.471062][ T10] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 139.509441][ T8954] No control pipe specified [ 139.560796][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.727'. [ 139.563956][ T8969] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 139.566453][ T8969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.621346][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 139.631113][ T10] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.635183][ T10] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 139.639150][ T10] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 139.645670][ T10] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 139.649068][ T10] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 139.652338][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.672561][ T10] hub 11-1:1.0: bad descriptor, ignoring hub [ 139.675154][ T10] hub 11-1:1.0: probe with driver hub failed with error -5 [ 139.679493][ T10] cdc_wdm 11-1:1.0: skipping garbage [ 139.681887][ T10] cdc_wdm 11-1:1.0: skipping garbage [ 139.691574][ T10] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 139.694236][ T10] cdc_wdm 11-1:1.0: Unknown control protocol [ 139.717233][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.722775][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.725790][ T8897] bridge_slave_0: entered allmulticast mode [ 139.732030][ T8897] bridge_slave_0: entered promiscuous mode [ 139.738337][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.744573][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.747533][ T8897] bridge_slave_1: entered allmulticast mode [ 139.751373][ T8897] bridge_slave_1: entered promiscuous mode [ 139.824005][ T1199] hsr_slave_0: left promiscuous mode [ 139.826488][ T1199] hsr_slave_1: left promiscuous mode [ 139.828493][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.830747][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.835475][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.837775][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.857050][ T1199] veth1_macvtap: left promiscuous mode [ 139.858795][ T1199] veth0_macvtap: left promiscuous mode [ 139.862446][ T1199] veth1_vlan: left promiscuous mode [ 139.864152][ T1199] veth0_vlan: left promiscuous mode [ 140.452909][ T5942] Bluetooth: hci0: command tx timeout [ 140.595579][ T8944] usb 11-1: reset high-speed USB device number 3 using dummy_hcd [ 140.634957][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 140.706358][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 140.741165][ T8944] usb 11-1: device descriptor read/64, error -71 [ 141.001924][ T8944] usb 11-1: reset high-speed USB device number 3 using dummy_hcd [ 141.134129][ T8944] usb 11-1: device descriptor read/64, error -71 [ 141.233588][ T8897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.240049][ T8897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.319763][ T8897] team0: Port device team_slave_0 added [ 141.330243][ T8897] team0: Port device team_slave_1 added [ 141.375505][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.377865][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.387083][ T8897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.394326][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.396664][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.405716][ T8944] usb 11-1: reset high-speed USB device number 3 using dummy_hcd [ 141.411454][ T8897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.431599][ T8944] usb 11-1: device descriptor read/8, error -71 [ 141.497873][ T8897] hsr_slave_0: entered promiscuous mode [ 141.501156][ T8897] hsr_slave_1: entered promiscuous mode [ 141.503834][ T8897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.507395][ T8897] Cannot create hsr debugfs directory [ 141.671123][ T8944] usb 11-1: reset high-speed USB device number 3 using dummy_hcd [ 141.703246][ T8944] usb 11-1: device descriptor read/8, error -71 [ 141.761396][ T9004] overlay: ./file0 is not a directory [ 141.822755][ T10] usb 11-1: USB disconnect, device number 3 [ 141.831638][ T8944] cdc_wdm 11-1:1.0: Error autopm - -16 [ 141.837292][ T9007] tmpfs: Bad value for 'mpol' [ 141.857162][ T9011] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 141.991377][ T10] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 142.141033][ T10] usb 11-1: device descriptor read/64, error -71 [ 142.159182][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.7.736'. [ 142.173940][ T8897] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.176607][ T9036] overlayfs: failed to resolve './file1': -2 [ 142.182353][ T8897] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.189421][ T8897] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.197158][ T8897] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.250921][ T8897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.260459][ T8897] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.275727][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.278144][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.283342][ T9050] ufs: You didn't specify the type of your ufs filesystem [ 142.283342][ T9050] [ 142.283342][ T9050] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 142.283342][ T9050] [ 142.283342][ T9050] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 142.284918][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.292924][ T9050] ufs: ufstype=old is supported read-only [ 142.294730][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.296420][ T9050] syz.4.739: attempt to access beyond end of device [ 142.296420][ T9050] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 142.314455][ T9050] netlink: 156 bytes leftover after parsing attributes in process `syz.4.739'. [ 142.329241][ T8897] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.333080][ T8897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.454140][ T8897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.475224][ T8897] veth0_vlan: entered promiscuous mode [ 142.484698][ T8897] veth1_vlan: entered promiscuous mode [ 142.507855][ T8897] veth0_macvtap: entered promiscuous mode [ 142.514561][ T8897] veth1_macvtap: entered promiscuous mode [ 142.522234][ T5942] Bluetooth: hci0: command tx timeout [ 142.532276][ T8897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.541800][ T8897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.547903][ T8897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.551225][ T8897] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.554418][ T8897] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.557569][ T8897] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.609908][ T1247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.613432][ T1247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.634363][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.636929][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.092477][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 143.092487][ T40] audit: type=1400 audit(1750958065.504:627): avc: denied { getopt } for pid=9091 comm="syz.4.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 143.274296][ T9106] SELinux: policydb magic number 0x8a5aa9c9 does not match expected magic number 0xf97cff8c [ 143.278495][ T9106] SELinux: failed to load policy [ 143.342309][ T40] audit: type=1400 audit(1750958065.754:628): avc: denied { listen } for pid=9113 comm="syz.7.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.438494][ T40] audit: type=1400 audit(1750958065.844:629): avc: denied { watch } for pid=9123 comm="syz.4.752" path="/145/file0" dev="tmpfs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.465508][ T9130] netlink: 'syz.6.753': attribute type 1 has an invalid length. [ 143.473255][ T9130] syz.6.753: attempt to access beyond end of device [ 143.473255][ T9130] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 143.477190][ T9130] (syz.6.753,9130,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 143.479502][ T9130] (syz.6.753,9130,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 143.481994][ T9130] (syz.6.753,9130,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 143.484555][ T9130] (syz.6.753,9130,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 143.517271][ T9132] bond0: entered promiscuous mode [ 143.518942][ T9132] bond_slave_0: entered promiscuous mode [ 143.520789][ T9132] bond_slave_1: entered promiscuous mode [ 143.525051][ T9132] batadv0: entered promiscuous mode [ 143.528572][ T9132] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 143.532312][ T9132] bond0: left promiscuous mode [ 143.533798][ T9132] bond_slave_0: left promiscuous mode [ 143.535538][ T9132] bond_slave_1: left promiscuous mode [ 143.537633][ T9132] batadv0: left promiscuous mode [ 143.631889][ T40] audit: type=1400 audit(1750958066.044:630): avc: denied { bind } for pid=9136 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.663391][ T10] libceph: connect (1)[c::]:6789 error -101 [ 143.665732][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 143.670199][ T10] libceph: connect (1)[c::]:6789 error -101 [ 143.672553][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 143.707934][ T6197] libceph: connect (1)[c::]:6789 error -101 [ 143.710016][ T6197] libceph: mon0 (1)[c::]:6789 connect error [ 143.867908][ T9150] dummy0: entered promiscuous mode [ 143.877600][ T9152] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 143.951245][ T10] libceph: connect (1)[c::]:6789 error -101 [ 143.953744][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 143.981332][ T6197] libceph: connect (1)[c::]:6789 error -101 [ 143.983377][ T6197] libceph: mon0 (1)[c::]:6789 connect error [ 144.161385][ T838] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 144.238688][ T9157] can0: slcan on ptm0. [ 144.291906][ T838] usb 11-1: device descriptor read/64, error -71 [ 144.372555][ T9156] can0 (unregistered): slcan off ptm0. [ 144.453266][ T40] audit: type=1400 audit(1750958066.854:631): avc: denied { write } for pid=9164 comm="syz.7.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.463444][ T9137] ceph: No mds server is up or the cluster is laggy [ 144.471163][ T9143] ceph: No mds server is up or the cluster is laggy [ 144.472468][ T10] libceph: connect (1)[c::]:6789 error -101 [ 144.477875][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 144.501351][ T6197] libceph: connect (1)[c::]:6789 error -101 [ 144.508106][ T6197] libceph: mon0 (1)[c::]:6789 connect error [ 144.561720][ T838] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 144.645146][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.7.767'. [ 144.649400][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.7.767'. [ 144.691339][ T838] usb 11-1: device descriptor read/64, error -71 [ 144.801549][ T838] usb usb11-port1: attempt power cycle [ 144.923412][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.161345][ T838] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 145.184318][ T838] usb 11-1: device descriptor read/8, error -71 [ 145.431134][ T838] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 145.451979][ T838] usb 11-1: device descriptor read/8, error -71 [ 145.571637][ T838] usb usb11-port1: unable to enumerate USB device [ 145.733977][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.769'. [ 145.765143][ T9186] netlink: 40 bytes leftover after parsing attributes in process `syz.4.769'. [ 145.769022][ T9186] vlan2: left promiscuous mode [ 145.770540][ T9186] bond0: left promiscuous mode [ 145.772048][ T9186] bond_slave_0: left promiscuous mode [ 145.773979][ T9186] bond_slave_1: left promiscuous mode [ 145.775742][ T9186] bond2: left promiscuous mode [ 145.777241][ T9186] [ 145.778018][ T9186] ===================================================== [ 145.780127][ T9186] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 145.783137][ T9186] 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 Not tainted [ 145.786710][ T9186] ----------------------------------------------------- [ 145.790846][ T9186] syz.4.769/9186 [HC0[0]:SC0[2]:HE1:SE0] is trying to acquire: [ 145.791907][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.7.770'. [ 145.793203][ T9186] ffff888059d58e18 (&bond->stats_lock){+.+.}-{3:3} [ 145.796955][ T9190] netlink: 'syz.7.770': attribute type 5 has an invalid length. [ 145.801474][ T9186] , at: bond_get_stats+0x115/0x550 [ 145.803109][ T9186] [ 145.803109][ T9186] and this task is already holding: [ 145.805392][ T9186] ffff888033900d98 (&br->lock){+.-.}-{3:3}, at: br_port_slave_changelink+0x3e/0x190 [ 145.808430][ T9186] which would create a new lock dependency: [ 145.810449][ T9186] (&br->lock){+.-.}-{3:3} -> (&bond->stats_lock){+.+.}-{3:3} [ 145.812697][ T9186] [ 145.812697][ T9186] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 145.815474][ T9186] (&br->lock){+.-.}-{3:3} [ 145.815489][ T9186] [ 145.815489][ T9186] ... which became SOFTIRQ-irq-safe at: [ 145.819260][ T9186] lock_acquire+0x179/0x350 [ 145.820793][ T9186] _raw_spin_lock+0x2e/0x40 [ 145.822271][ T9186] br_forward_delay_timer_expired+0x4f/0x560 [ 145.824159][ T9186] call_timer_fn+0x19a/0x620 [ 145.825610][ T9186] __run_timers+0x6ef/0x960 [ 145.827466][ T9186] run_timer_base+0x114/0x190 [ 145.829460][ T9186] run_timer_softirq+0x1a/0x40 [ 145.831413][ T9186] handle_softirqs+0x216/0x8e0 [ 145.833337][ T9186] __irq_exit_rcu+0x109/0x170 [ 145.834913][ T9186] irq_exit_rcu+0x9/0x30 [ 145.836304][ T9186] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 145.838217][ T9186] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 145.840273][ T9186] pv_native_safe_halt+0xf/0x20 [ 145.841833][ T9186] default_idle+0x13/0x20 [ 145.843140][ T5295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.843220][ T9186] default_idle_call+0x6d/0xb0 [ 145.843232][ T9186] do_idle+0x391/0x510 [ 145.846198][ T5295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.847305][ T9186] cpu_startup_entry+0x4f/0x60 [ 145.847322][ T9186] start_secondary+0x21d/0x2b0 [ 145.847337][ T9186] common_startup_64+0x13e/0x148 [ 145.848931][ T5295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.850787][ T9186] [ 145.850787][ T9186] to a SOFTIRQ-irq-unsafe lock: [ 145.850794][ T9186] (&bond->stats_lock){+.+.}-{3:3} [ 145.850806][ T9186] [ 145.850806][ T9186] ... which became SOFTIRQ-irq-unsafe at: [ 145.850811][ T9186] ... [ 145.850813][ T9186] lock_acquire+0x179/0x350 [ 145.853402][ T5295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.853899][ T9186] _raw_spin_lock_nested+0x31/0x40 [ 145.855976][ T5295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.857813][ T9186] bond_get_stats+0x115/0x550 [ 145.873707][ T9186] dev_get_stats+0xb0/0xa40 [ 145.875163][ T9186] rtnl_fill_stats+0x48/0xa90 [ 145.876663][ T9186] rtnl_fill_ifinfo.constprop.0+0x167d/0x4ca0 [ 145.878830][ T9186] rtmsg_ifinfo_build_skb+0x151/0x280 [ 145.880802][ T9186] rtmsg_ifinfo+0x9f/0x1a0 [ 145.882302][ T9186] register_netdevice+0x1bd9/0x2270 [ 145.883973][ T9186] bond_create+0xb9/0x120 [ 145.885360][ T9186] bonding_init+0xc1/0x140 [ 145.886764][ T9186] do_one_initcall+0x120/0x6e0 [ 145.888339][ T9186] kernel_init_freeable+0x5c2/0x900 [ 145.889948][ T9186] kernel_init+0x1c/0x2b0 [ 145.891506][ T9186] ret_from_fork+0x5d4/0x6f0 [ 145.893183][ T9186] ret_from_fork_asm+0x1a/0x30 [ 145.894746][ T9186] [ 145.894746][ T9186] other info that might help us debug this: [ 145.894746][ T9186] [ 145.898080][ T9186] Possible interrupt unsafe locking scenario: [ 145.898080][ T9186] [ 145.900967][ T9186] CPU0 CPU1 [ 145.902680][ T9186] ---- ---- [ 145.904336][ T9186] lock(&bond->stats_lock); [ 145.905810][ T9186] local_irq_disable(); [ 145.908281][ T9186] lock(&br->lock); [ 145.910480][ T9186] lock(&bond->stats_lock); [ 145.912694][ T9186] [ 145.913801][ T9186] lock(&br->lock); [ 145.915118][ T9186] [ 145.915118][ T9186] *** DEADLOCK *** [ 145.915118][ T9186] [ 145.917674][ T9186] 3 locks held by syz.4.769/9186: [ 145.919428][ T9186] #0: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 145.922150][ T9186] #1: ffff888033900d98 (&br->lock){+.-.}-{3:3}, at: br_port_slave_changelink+0x3e/0x190 [ 145.925064][ T9186] #2: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: bond_get_stats+0xc8/0x550 [ 145.927858][ T9186] [ 145.927858][ T9186] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 145.930952][ T9186] -> (&br->lock){+.-.}-{3:3} { [ 145.932419][ T9186] HARDIRQ-ON-W at: [ 145.933648][ T9186] lock_acquire+0x179/0x350 [ 145.935494][ T9186] _raw_spin_lock_bh+0x33/0x40 [ 145.937403][ T9186] br_add_if+0xff1/0x1b70 [ 145.939241][ T9186] do_set_master+0x40f/0x730 [ 145.941147][ T9186] do_setlink.constprop.0+0xbd8/0x4380 [ 145.943272][ T9186] rtnl_newlink+0x1446/0x2000 [ 145.945174][ T9186] rtnetlink_rcv_msg+0x95e/0xe90 [ 145.947162][ T9186] netlink_rcv_skb+0x158/0x420 [ 145.949052][ T9186] netlink_unicast+0x53a/0x7f0 [ 145.951048][ T9186] netlink_sendmsg+0x8d1/0xdd0 [ 145.953057][ T9186] __sys_sendto+0x4a0/0x520 [ 145.954980][ T9186] __x64_sys_sendto+0xe0/0x1c0 [ 145.956993][ T9186] do_syscall_64+0xcd/0x4c0 [ 145.958923][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.961282][ T9186] IN-SOFTIRQ-W at: [ 145.962545][ T9186] lock_acquire+0x179/0x350 [ 145.964458][ T9186] _raw_spin_lock+0x2e/0x40 [ 145.966326][ T9186] br_forward_delay_timer_expired+0x4f/0x560 [ 145.968689][ T9186] call_timer_fn+0x19a/0x620 [ 145.970587][ T9186] __run_timers+0x6ef/0x960 [ 145.972451][ T9186] run_timer_base+0x114/0x190 [ 145.974389][ T9186] run_timer_softirq+0x1a/0x40 [ 145.976359][ T9186] handle_softirqs+0x216/0x8e0 [ 145.978321][ T9186] __irq_exit_rcu+0x109/0x170 [ 145.980284][ T9186] irq_exit_rcu+0x9/0x30 [ 145.982088][ T9186] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 145.984295][ T9186] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 145.986634][ T9186] pv_native_safe_halt+0xf/0x20 [ 145.988783][ T9186] default_idle+0x13/0x20 [ 145.991150][ T9186] default_idle_call+0x6d/0xb0 [ 145.993051][ T9186] do_idle+0x391/0x510 [ 145.994802][ T9186] cpu_startup_entry+0x4f/0x60 [ 145.996764][ T9186] start_secondary+0x21d/0x2b0 [ 145.998744][ T9186] common_startup_64+0x13e/0x148 [ 146.000988][ T9186] INITIAL USE at: [ 146.002517][ T9186] lock_acquire+0x179/0x350 [ 146.004558][ T9186] _raw_spin_lock_bh+0x33/0x40 [ 146.006419][ T9186] br_add_if+0xff1/0x1b70 [ 146.008041][ T9186] do_set_master+0x40f/0x730 [ 146.009904][ T9186] do_setlink.constprop.0+0xbd8/0x4380 [ 146.012036][ T9186] rtnl_newlink+0x1446/0x2000 [ 146.013917][ T9186] rtnetlink_rcv_msg+0x95e/0xe90 [ 146.015933][ T9186] netlink_rcv_skb+0x158/0x420 [ 146.017917][ T9186] netlink_unicast+0x53a/0x7f0 [ 146.019883][ T9186] netlink_sendmsg+0x8d1/0xdd0 [ 146.021865][ T9186] __sys_sendto+0x4a0/0x520 [ 146.023707][ T9186] __x64_sys_sendto+0xe0/0x1c0 [ 146.025761][ T9186] do_syscall_64+0xcd/0x4c0 [ 146.028160][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.030698][ T9186] } [ 146.031521][ T9186] ... key at: [] __key.7+0x0/0x40 [ 146.033707][ T9186] [ 146.033707][ T9186] the dependencies between the lock to be acquired [ 146.033713][ T9186] and SOFTIRQ-irq-unsafe lock: [ 146.037861][ T9186] -> (&bond->stats_lock){+.+.}-{3:3} { [ 146.039567][ T9186] HARDIRQ-ON-W at: [ 146.040774][ T9186] lock_acquire+0x179/0x350 [ 146.042679][ T9186] _raw_spin_lock_nested+0x31/0x40 [ 146.044732][ T9186] bond_get_stats+0x115/0x550 [ 146.046643][ T9186] dev_get_stats+0xb0/0xa40 [ 146.048570][ T9186] rtnl_fill_stats+0x48/0xa90 [ 146.050528][ T9186] rtnl_fill_ifinfo.constprop.0+0x167d/0x4ca0 [ 146.052831][ T9186] rtmsg_ifinfo_build_skb+0x151/0x280 [ 146.055020][ T9186] rtmsg_ifinfo+0x9f/0x1a0 [ 146.056880][ T9186] register_netdevice+0x1bd9/0x2270 [ 146.058947][ T9186] bond_create+0xb9/0x120 [ 146.060713][ T9186] bonding_init+0xc1/0x140 [ 146.062559][ T9186] do_one_initcall+0x120/0x6e0 [ 146.064546][ T9186] kernel_init_freeable+0x5c2/0x900 [ 146.066570][ T9186] kernel_init+0x1c/0x2b0 [ 146.068397][ T9186] ret_from_fork+0x5d4/0x6f0 [ 146.070316][ T9186] ret_from_fork_asm+0x1a/0x30 [ 146.072302][ T9186] SOFTIRQ-ON-W at: [ 146.073560][ T9186] lock_acquire+0x179/0x350 [ 146.075468][ T9186] _raw_spin_lock_nested+0x31/0x40 [ 146.077504][ T9186] bond_get_stats+0x115/0x550 [ 146.079450][ T9186] dev_get_stats+0xb0/0xa40 [ 146.081351][ T9186] rtnl_fill_stats+0x48/0xa90 [ 146.083274][ T9186] rtnl_fill_ifinfo.constprop.0+0x167d/0x4ca0 [ 146.085686][ T9186] rtmsg_ifinfo_build_skb+0x151/0x280 [ 146.087788][ T9186] rtmsg_ifinfo+0x9f/0x1a0 [ 146.089631][ T9186] register_netdevice+0x1bd9/0x2270 [ 146.091696][ T9186] bond_create+0xb9/0x120 [ 146.093558][ T9186] bonding_init+0xc1/0x140 [ 146.095501][ T9186] do_one_initcall+0x120/0x6e0 [ 146.097513][ T9186] kernel_init_freeable+0x5c2/0x900 [ 146.099633][ T9186] kernel_init+0x1c/0x2b0 [ 146.101537][ T9186] ret_from_fork+0x5d4/0x6f0 [ 146.103458][ T9186] ret_from_fork_asm+0x1a/0x30 [ 146.105434][ T9186] INITIAL USE at: [ 146.106633][ T9186] lock_acquire+0x179/0x350 [ 146.108538][ T9186] _raw_spin_lock_nested+0x31/0x40 [ 146.110507][ T9186] bond_get_stats+0x115/0x550 [ 146.112463][ T9186] dev_get_stats+0xb0/0xa40 [ 146.114352][ T9186] rtnl_fill_stats+0x48/0xa90 [ 146.116612][ T9186] rtnl_fill_ifinfo.constprop.0+0x167d/0x4ca0 [ 146.118881][ T9186] rtmsg_ifinfo_build_skb+0x151/0x280 [ 146.121312][ T9186] rtmsg_ifinfo+0x9f/0x1a0 [ 146.123124][ T9186] register_netdevice+0x1bd9/0x2270 [ 146.125200][ T9186] bond_create+0xb9/0x120 [ 146.127036][ T9186] bonding_init+0xc1/0x140 [ 146.128927][ T9186] do_one_initcall+0x120/0x6e0 [ 146.130860][ T9186] kernel_init_freeable+0x5c2/0x900 [ 146.132921][ T9186] kernel_init+0x1c/0x2b0 [ 146.134718][ T9186] ret_from_fork+0x5d4/0x6f0 [ 146.136639][ T9186] ret_from_fork_asm+0x1a/0x30 [ 146.138606][ T9186] } [ 146.139419][ T9186] ... key at: [] __key.9+0x0/0x40 [ 146.141661][ T9186] ... acquired at: [ 146.142863][ T9186] lock_acquire+0x179/0x350 [ 146.144366][ T9186] _raw_spin_lock_nested+0x31/0x40 [ 146.145964][ T9186] bond_get_stats+0x115/0x550 [ 146.147459][ T9186] dev_get_stats+0xb0/0xa40 [ 146.148901][ T9186] rtnl_fill_stats+0x48/0xa90 [ 146.150411][ T9186] rtnl_fill_ifinfo.constprop.0+0x167d/0x4ca0 [ 146.152349][ T9186] rtmsg_ifinfo_build_skb+0x151/0x280 [ 146.154214][ T9186] rtmsg_ifinfo+0x9f/0x1a0 [ 146.156078][ T9186] __dev_notify_flags+0x24c/0x2e0 [ 146.157713][ T9186] __dev_set_promiscuity+0x26b/0x590 [ 146.159369][ T9186] netif_set_promiscuity+0x52/0x150 [ 146.161017][ T9186] dev_set_promiscuity+0xb2/0x260 [ 146.162705][ T9186] bond_change_rx_flags+0x22b/0x740 [ 146.164874][ T9186] __dev_set_promiscuity+0x214/0x590 [ 146.167055][ T9186] netif_set_promiscuity+0x52/0x150 [ 146.169241][ T9186] dev_set_promiscuity+0xb2/0x260 [ 146.170894][ T9186] vlan_dev_change_rx_flags+0x123/0x150 [ 146.172679][ T9186] __dev_set_promiscuity+0x214/0x590 [ 146.174394][ T9186] netif_set_promiscuity+0x52/0x150 [ 146.176074][ T9186] dev_set_promiscuity+0xb2/0x260 [ 146.177670][ T9186] br_manage_promisc+0x3da/0x4f0 [ 146.179241][ T9186] br_port_flags_change+0x184/0x1d0 [ 146.180917][ T9186] br_setport+0xb7d/0x17d0 [ 146.182391][ T9186] br_port_slave_changelink+0xcf/0x190 [ 146.184148][ T9186] rtnl_newlink+0x1409/0x2000 [ 146.185656][ T9186] rtnetlink_rcv_msg+0x95e/0xe90 [ 146.187182][ T9186] netlink_rcv_skb+0x158/0x420 [ 146.188664][ T9186] netlink_unicast+0x53a/0x7f0 [ 146.190219][ T9186] netlink_sendmsg+0x8d1/0xdd0 [ 146.191783][ T9186] ____sys_sendmsg+0xa95/0xc70 [ 146.193341][ T9186] ___sys_sendmsg+0x134/0x1d0 [ 146.194882][ T9186] __sys_sendmsg+0x16d/0x220 [ 146.196284][ T9186] do_syscall_64+0xcd/0x4c0 [ 146.197780][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.199737][ T9186] [ 146.200482][ T9186] [ 146.200482][ T9186] stack backtrace: [ 146.202270][ T9186] CPU: 1 UID: 0 PID: 9186 Comm: syz.4.769 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 146.202284][ T9186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.202292][ T9186] Call Trace: [ 146.202297][ T9186] [ 146.202302][ T9186] dump_stack_lvl+0x116/0x1f0 [ 146.202320][ T9186] check_irq_usage+0x7dc/0x920 [ 146.202339][ T9186] ? check_path.constprop.0+0x24/0x50 [ 146.202356][ T9186] ? __lock_acquire+0x1285/0x1c90 [ 146.202373][ T9186] __lock_acquire+0x1285/0x1c90 [ 146.202391][ T9186] lock_acquire+0x179/0x350 [ 146.202407][ T9186] ? bond_get_stats+0x115/0x550 [ 146.202420][ T9186] _raw_spin_lock_nested+0x31/0x40 [ 146.202437][ T9186] ? bond_get_stats+0x115/0x550 [ 146.202446][ T9186] bond_get_stats+0x115/0x550 [ 146.202455][ T9186] ? __kernel_text_address+0xd/0x40 [ 146.202468][ T9186] ? lock_acquire+0x179/0x350 [ 146.202484][ T9186] ? __pfx_bond_get_stats+0x10/0x10 [ 146.202493][ T9186] ? find_held_lock+0x2b/0x80 [ 146.202506][ T9186] ? dev_get_alias+0xfa/0x2a0 [ 146.202521][ T9186] ? devlink_compat_switch_id_get+0xa8/0xd0 [ 146.202534][ T9186] dev_get_stats+0xb0/0xa40 [ 146.202546][ T9186] ? __pfx_dev_get_port_parent_id+0x10/0x10 [ 146.202563][ T9186] ? skb_put+0x138/0x1b0 [ 146.202573][ T9186] ? __asan_memset+0x23/0x50 [ 146.202585][ T9186] ? __nla_reserve+0x9c/0xc0 [ 146.202601][ T9186] ? nla_reserve_64bit+0x105/0x140 [ 146.202617][ T9186] rtnl_fill_stats+0x48/0xa90 [ 146.202630][ T9186] rtnl_fill_ifinfo.constprop.0+0x167d/0x4ca0 [ 146.202651][ T9186] ? __pfx_rtnl_fill_ifinfo.constprop.0+0x10/0x10 [ 146.202669][ T9186] ? trace_kmalloc+0x2b/0xd0 [ 146.202685][ T9186] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 146.202701][ T9186] ? __alloc_skb+0x166/0x380 [ 146.202715][ T9186] ? __build_skb_around+0x278/0x3b0 [ 146.202729][ T9186] rtmsg_ifinfo_build_skb+0x151/0x280 [ 146.202742][ T9186] rtmsg_ifinfo+0x9f/0x1a0 [ 146.202752][ T9186] __dev_notify_flags+0x24c/0x2e0 [ 146.202767][ T9186] ? __pfx___dev_notify_flags+0x10/0x10 [ 146.202781][ T9186] ? lockdep_rtnl_is_held+0x26/0x40 [ 146.202793][ T9186] ? bond_change_rx_flags+0x415/0x740 [ 146.202809][ T9186] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 146.202826][ T9186] ? lock_acquire+0x179/0x350 [ 146.202843][ T9186] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 146.202859][ T9186] __dev_set_promiscuity+0x26b/0x590 [ 146.202874][ T9186] ? __local_bh_enable_ip+0xa4/0x120 [ 146.202887][ T9186] netif_set_promiscuity+0x52/0x150 [ 146.202902][ T9186] dev_set_promiscuity+0xb2/0x260 [ 146.202920][ T9186] bond_change_rx_flags+0x22b/0x740 [ 146.202937][ T9186] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 146.202955][ T9186] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 146.202971][ T9186] __dev_set_promiscuity+0x214/0x590 [ 146.202987][ T9186] netif_set_promiscuity+0x52/0x150 [ 146.203002][ T9186] dev_set_promiscuity+0xb2/0x260 [ 146.203019][ T9186] vlan_dev_change_rx_flags+0x123/0x150 [ 146.203032][ T9186] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 146.203045][ T9186] __dev_set_promiscuity+0x214/0x590 [ 146.203059][ T9186] ? __local_bh_enable_ip+0xa4/0x120 [ 146.203072][ T9186] netif_set_promiscuity+0x52/0x150 [ 146.203087][ T9186] dev_set_promiscuity+0xb2/0x260 [ 146.203104][ T9186] br_manage_promisc+0x3da/0x4f0 [ 146.203120][ T9186] br_port_flags_change+0x184/0x1d0 [ 146.203138][ T9186] br_setport+0xb7d/0x17d0 [ 146.203151][ T9186] ? __pfx_br_setport+0x10/0x10 [ 146.203162][ T9186] ? do_raw_spin_lock+0x12c/0x2b0 [ 146.203173][ T9186] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 146.203186][ T9186] br_port_slave_changelink+0xcf/0x190 [ 146.203199][ T9186] ? __pfx_br_port_slave_changelink+0x10/0x10 [ 146.203213][ T9186] rtnl_newlink+0x1409/0x2000 [ 146.203231][ T9186] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.203246][ T9186] ? find_held_lock+0x2b/0x80 [ 146.203258][ T9186] ? avc_has_perm_noaudit+0x117/0x3b0 [ 146.203277][ T9186] ? avc_has_perm_noaudit+0x149/0x3b0 [ 146.203294][ T9186] ? cred_has_capability.isra.0+0x193/0x2f0 [ 146.203313][ T9186] ? find_held_lock+0x2b/0x80 [ 146.203325][ T9186] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.203340][ T9186] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.203355][ T9186] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 146.203371][ T9186] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.203387][ T9186] rtnetlink_rcv_msg+0x95e/0xe90 [ 146.203403][ T9186] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.203420][ T9186] ? ref_tracker_free+0x37c/0x830 [ 146.203439][ T9186] netlink_rcv_skb+0x158/0x420 [ 146.203450][ T9186] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.203466][ T9186] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.203479][ T9186] ? netlink_deliver_tap+0x1ae/0xd30 [ 146.203497][ T9186] netlink_unicast+0x53a/0x7f0 [ 146.203508][ T9186] ? __pfx_netlink_unicast+0x10/0x10 [ 146.203519][ T9186] netlink_sendmsg+0x8d1/0xdd0 [ 146.203531][ T9186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.203543][ T9186] ____sys_sendmsg+0xa95/0xc70 [ 146.203554][ T9186] ? copy_msghdr_from_user+0x10a/0x160 [ 146.203569][ T9186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.203581][ T9186] ? __pfx_futex_wake_mark+0x10/0x10 [ 146.203593][ T9186] ___sys_sendmsg+0x134/0x1d0 [ 146.203608][ T9186] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.203622][ T9186] ? __lock_acquire+0x622/0x1c90 [ 146.203645][ T9186] __sys_sendmsg+0x16d/0x220 [ 146.203660][ T9186] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.203674][ T9186] ? __x64_sys_futex+0x1e0/0x4c0 [ 146.203694][ T9186] do_syscall_64+0xcd/0x4c0 [ 146.203710][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.203722][ T9186] RIP: 0033:0x7f280f18e929 [ 146.203730][ T9186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.203741][ T9186] RSP: 002b:00007f280ffed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.203751][ T9186] RAX: ffffffffffffffda RBX: 00007f280f3b5fa0 RCX: 00007f280f18e929 [ 146.203758][ T9186] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 146.203765][ T9186] RBP: 00007f280f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 146.203771][ T9186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.203777][ T9186] R13: 0000000000000000 R14: 00007f280f3b5fa0 R15: 00007ffd37a1aac8 [ 146.203787][ T9186] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 146.398743][ T9190] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.401825][ T9190] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.404833][ T9190] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.408020][ T9190] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.436963][ T9190] vxlan0: entered promiscuous mode [ 147.115478][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.165600][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.237924][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.316093][ T1142] bridge_slave_1: left allmulticast mode [ 147.318398][ T1142] bridge_slave_1: left promiscuous mode [ 147.320792][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.325153][ T1142] bridge_slave_0: left allmulticast mode [ 147.327473][ T1142] bridge_slave_0: left promiscuous mode [ 147.329849][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.479746][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.484914][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.489366][ T1142] bond0 (unregistering): Released all slaves [ 147.742892][ T1142] hsr_slave_0: left promiscuous mode [ 147.744954][ T1142] hsr_slave_1: left promiscuous mode [ 147.747496][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.750485][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.756254][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.759137][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.765411][ T1142] veth1_macvtap: left promiscuous mode [ 147.767749][ T1142] veth0_macvtap: left promiscuous mode [ 147.770039][ T1142] veth1_vlan: left promiscuous mode [ 147.773451][ T1142] veth0_vlan: left promiscuous mode [ 147.966183][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 147.972912][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 148.628504][ T1142] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.718072][ T1142] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.792833][ T1142] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.845781][ T1142] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.936274][ T1142] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.939350][ T1142] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.006025][ T1142] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.010231][ T1142] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.076592][ T1142] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.080795][ T1142] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.164910][ T1142] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.168146][ T1142] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.260017][ T1142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.325981][ T1142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.393849][ T1142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.478897][ T1142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.546479][ T1142] bridge_slave_1: left allmulticast mode [ 149.548914][ T1142] bridge_slave_1: left promiscuous mode [ 149.551082][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.555226][ T1142] bridge_slave_0: left allmulticast mode [ 149.557551][ T1142] bridge_slave_0: left promiscuous mode [ 149.559793][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.566963][ T1142] bridge_slave_1: left allmulticast mode [ 149.568970][ T1142] bridge_slave_1: left promiscuous mode [ 149.571491][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.575036][ T1142] bridge_slave_0: left allmulticast mode [ 149.576960][ T1142] bridge_slave_0: left promiscuous mode [ 149.579027][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.584231][ T1142] vlan2: left allmulticast mode [ 149.585815][ T1142] bond0: left allmulticast mode [ 149.587428][ T1142] bond_slave_0: left allmulticast mode [ 149.589359][ T1142] bond_slave_1: left allmulticast mode [ 149.591272][ T1142] bond2: left allmulticast mode [ 149.592990][ T1142] bridge0: port 3(vlan2) entered disabled state [ 149.596132][ T1142] bridge_slave_1: left allmulticast mode [ 149.597909][ T1142] bridge_slave_1: left promiscuous mode [ 149.599768][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.826515][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.830553][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.835438][ T1142] bond0 (unregistering): Released all slaves [ 150.036398][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.040084][ T1142] bond_slave_0: left promiscuous mode [ 150.042895][ T1142] bond_slave_0: left allmulticast mode [ 150.046379][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.049354][ T1142] bond_slave_1: left promiscuous mode [ 150.051620][ T1142] bond_slave_1: left allmulticast mode [ 150.054323][ T1142] bond0 (unregistering): Released all slaves [ 150.208543][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.213770][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.218435][ T1142] bond0 (unregistering): (slave bond2): Releasing backup interface [ 150.222105][ T1142] bond0 (unregistering): Released all slaves [ 150.227926][ T1142] bond1 (unregistering): Released all slaves [ 150.298932][ T1142] bond2 (unregistering): Released all slaves [ 150.792130][ T1142] batman_adv: batadv0: Interface deactivated: macvtap1 [ 150.795379][ T1142] mac80211_hwsim hwsim13 wlan0 (unregistering): left allmulticast mode [ 150.801869][ T1142] batman_adv: batadv0: Removing interface: macvtap1 [ 150.865781][ T1142] hsr_slave_0: left promiscuous mode [ 150.868333][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.872551][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.875823][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.878798][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.885148][ T1142] hsr_slave_0: left promiscuous mode [ 150.887648][ T1142] hsr_slave_1: left promiscuous mode [ 150.889565][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.892237][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.894768][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.897402][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.903567][ T1142] hsr_slave_0: left promiscuous mode [ 150.906228][ T1142] hsr_slave_1: left promiscuous mode [ 150.908757][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.911873][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.915317][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.918275][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.928238][ T1142] veth1_macvtap: left promiscuous mode [ 150.930527][ T1142] veth0_macvtap: left promiscuous mode [ 150.933038][ T1142] veth1_vlan: left promiscuous mode [ 150.935179][ T1142] veth0_vlan: left promiscuous mode [ 150.937825][ T1142] veth1_macvtap: left promiscuous mode [ 150.940045][ T1142] veth0_macvtap: left promiscuous mode [ 150.942411][ T1142] veth1_vlan: left promiscuous mode [ 150.944606][ T1142] veth0_vlan: left promiscuous mode [ 150.947189][ T1142] veth1_macvtap: left promiscuous mode [ 150.949479][ T1142] veth0_macvtap: left promiscuous mode [ 150.951910][ T1142] veth1_vlan: left promiscuous mode [ 150.954013][ T1142] veth0_vlan: left promiscuous mode [ 151.221214][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 151.259599][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 151.598666][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 151.629923][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 151.969218][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 152.003048][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 153.137010][ T1142] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 17:14:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a53fe20 RCX=ffffffff81b001cd RDX=ffff888022ac2440 RSI=ffffffff81b001a9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900016af8a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4a7fc5 R15=ffff88806a43b580 RIP=ffffffff81b001ab RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f078464ee9c CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeec2c3d40 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feecaa11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feecaa11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feecaa11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feecaa11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feecaa11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feecaa11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bb115 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc90003d5e1f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b0882e0 R15=ffffffff855bb0b0 RIP=ffffffff855bb13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f280ffed6c0 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000081fe CR3=000000002a370000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5c1c0630 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1914411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1914411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1914411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1914411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1914411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1914411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001b8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 00000000000001b8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000008fca4 RBX=0000000000000002 RCX=ffffffff8b808c59 RDX=ffffed100d4c6646 RSI=ffffffff8c157b20 RDI=ffffffff8191fc31 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90a81250 R15=0000000000000000 RIP=ffffffff8b8077bf RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbf2e9b6038 CR3=0000000033215000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0040000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561058080600 0000561058080600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef78f5fe0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f53203e2d206566 61732d5152495446 4f53203a474e494e 524157205d363831 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d7265702074656b 636f735f63707278 723d7373616c6374 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20745f6d64617379 733a725f6d646173 79733a746f6f723d 747865746e6f6374 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20745f6d64617379 733a725f6d646173 79733a746f6f723d 747865746e6f6373 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20223336372e372e 7a7973223d6d6d6f 6320343631393d64 69702020726f6620 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc90004d1f590 RCX=ffffc90004d20001 RDX=1ffff920009a3ebb RSI=ffffffff8c157b20 RDI=ffffffff821f75cb RBP=ffffc90004d1f5d8 RSP=ffffc90004d1f570 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90004d1f590 R11=000000000001160b R12=ffffffff81a78010 R13=ffffc90004d1f650 R14=0000000000000000 R15=ffff88805945a440 RIP=ffffffff81852f70 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556ebc6500 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c28a1bf CR3=0000000049dc6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf2f4ed100 00007fbf2e984440 00007fbf2e984458 00007fbf2e9844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000