last executing test programs: 1m14.271665878s ago: executing program 0 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbf4, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c4, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x32}}}}, [@NL80211_ATTR_TX_RATES={0x27c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xa, 0x8, 0x7, 0x2, 0xfffd, 0xa, 0xc]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x2}, {0x4, 0x8}, {0x6, 0x8}, {0x6, 0x4}, {0x3}, {0x4, 0x8}, {0x2, 0xa}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x0, 0x1f}, {0x7, 0x7}, {0x6, 0x7}, {0x4, 0xa}, {0x7, 0x1}, {0x5, 0x4}, {0x2, 0x4}, {0x3, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x3, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x5, 0x4}, {0x4, 0x8}, {0x3, 0x5}, {0x4, 0x4}, {0x1, 0x5}, {0x6, 0xa}, {0x4, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4}, {0x1}, {0x6}, {0x1, 0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x1, 0x4}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x1}, {}, {0x4, 0x4}, {0x4, 0x4}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0xa}, {0x7, 0x2}, {0x4, 0x2}, {0x5, 0x8}, {0x3, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x5}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x6}, {0x6, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0x9}, {0x0, 0x7}, {0x2, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x5}, {0x5, 0x8}, {0x0, 0x5}, {0x6, 0x6}, {0x6, 0x4}, {0x5, 0x5}, {0x3}, {0x3, 0x6}, {0x1, 0x6}, {0x6, 0x3}, {0x6, 0x2}, {0x6, 0x9}, {0x6, 0x4}, {0x1, 0x4}, {0x6, 0x8}, {0x2, 0x9}, {0x3, 0x2}, {0x7, 0x7}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x5}, {0x0, 0xa}, {0x7, 0x4}, {0x7}, {0x1, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x1000, 0x3, 0x0, 0xc, 0x4b, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xdc91, 0x8001, 0xefd, 0xb2, 0x4, 0x6, 0x3, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x7, 0x1, 0x5, 0x0, 0x8, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x7, 0x2, 0x101, 0x9, 0x200, 0x40]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xff, 0x1, 0xf34, 0x101, 0x7fff, 0x440, 0x5]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x69, 0x4]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf000, 0x8227, 0x401, 0x4, 0x1, 0x4, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0xf, 0xa99, 0x7, 0x1, 0x7fff, 0x4c]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4b, 0x401, 0x8, 0x3, 0x27bb, 0xdddc, 0x6, 0x2]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x4}, {0x4}, {0x5, 0x9}, {0x1, 0x9}, {0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x5}, {0x4, 0x9}, {0x5}, {0x6, 0x8}, {0x4, 0x9}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x4}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x1}, {0x2, 0x5}, {0x7, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x3, 0x8}, {0x4, 0x7}, {0x2, 0x3}, {0x7, 0x4}, {0x3, 0x9}, {0x0, 0x1}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0xa}, {0x1}, {0x0, 0x6}, {0x2, 0x5}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x1}, {0x7}, {0x3}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0x9}, {0x1, 0x8}, {0x4, 0x5}, {0x2}, {0x1, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x3}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x7}, {0x2, 0x7}, {0x6, 0x6}, {}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x6, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x7}, {0x4}, {0x7, 0xa}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x8}, {0x6}, {0x1, 0x5}, {0x3, 0x3}, {0x7, 0x2}, {0x2, 0x2}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x4, 0x8}, {0x6, 0x4}, {0x0, 0xa}, {0x3, 0x1}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x40, 0x7, 0xd, 0x9, 0x3, 0x5, 0x7f]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x5, 0x600, 0x8, 0xf4, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x9, 0xe, 0x0, 0x4, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x40000e4}, 0x40005) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) exit(0x0) ppoll(&(0x7f00000001c0)=[{r5, 0x40}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1m13.427856213s ago: executing program 0 (id=179): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, 0x1, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100000001}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000080}, 0x28000810) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x11) (async) r3 = accept4$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @none}, &(0x7f0000000380)=0xe, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000003c0)={0x20002018}) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) (async) r4 = add_key(&(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="f58f0fc9d725a7f91d07934e3ed54aa8dd1eaef647f3ad25ae770f6698ac43310860547cb8559bb0b1d756813503f9fd56e46e5f886dd86f48ada96f2a5187d961f805b894622178e563cf62d1ea6ecc1a665780cdc6708963f0d8cd51bd8ff86245c6eec0064ef06ad6292ce8c677", 0x6f, 0xfffffffffffffffa) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r5, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x71}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xc}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9b}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x80}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3b}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xab}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}]}, 0x58}}, 0x20000000) r6 = mq_open(&(0x7f0000000740)='{.!-', 0x1, 0x2, &(0x7f0000000780)={0x8, 0x8522, 0x5}) mq_getsetattr(r6, &(0x7f00000007c0)={0x4, 0x4, 0x7, 0x4}, &(0x7f0000000800)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x118, r5, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x12, 0x1e}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x10, 0x0, @random="bbbbca431d8267a4a97f649f"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x94, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x85, 0x0, "a57d65d7e8aeb21451a49eb203652b53e976cd918c736b9b41d56754b899ad344e617f500e014fbf2b8babb6fb8687d19fa67689aa295afc71f107de4f9ec256f9cfef0d4463e4cf1471d8b6283e5cede8bdc4a6aa50c2ac39aa4cd0d44dd5dc390f458a40d5e9e5274caf2aaae2ef5243ca6421eb49eff3cf7a70e77f095ea206"}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8000}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xd3}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfb}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x5}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40440d0}, 0x80) (async) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000b40)=""/134) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r7) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, r8, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) close_range(r6, r1, 0x2) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=@getspdinfo={0x14, 0x25, 0x10, 0x70bd26, 0x25dfdbfc, 0xfffffffe, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) (async) recvmsg(r0, &(0x7f0000000fc0)={&(0x7f0000000e40)=@ethernet, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000ec0)}], 0x1, &(0x7f0000000f40)=""/127, 0x7f}, 0x40) (async) mq_timedreceive(r0, &(0x7f0000001000)=""/62, 0x3e, 0xffff, &(0x7f0000001040)) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001080)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000001180)=0xe8) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000011c0)={0x0, 0x0, 0x0}, &(0x7f0000001200)=0xc) keyctl$chown(0x4, r4, r9, r10) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000001240)=0x5) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000001280)=0x8, 0x4) (async) add_key(&(0x7f00000012c0)='cifs.idmap\x00', &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)="2e6fbe85a18466ef9cc338", 0xb, 0x0) 1m13.344673673s ago: executing program 0 (id=180): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m13.340634802s ago: executing program 0 (id=182): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000070000004d000000000000004500000000000000950000000000000009c9bc6631c1248c81933e3784a658d0c4baeecff9b457e5a861fd3aa4037a72ab04501be580e00b22e241ad7bea36e2e3dfad39cc7e9db6f4e02b56989ec86839d86bc24762455d4efd69399a1c0712eb2dde"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x10000009, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000070000004d000000000000004500000000000000950000000000000009c9bc6631c1248c81933e3784a658d0c4baeecff9b457e5a861fd3aa4037a72ab04501be580e00b22e241ad7bea36e2e3dfad39cc7e9db6f4e02b56989ec86839d86bc24762455d4efd69399a1c0712eb2dde"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x10000009, 0x4) (async) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r3, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) (async) 1m13.251572985s ago: executing program 0 (id=184): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) ioctl$KDFONTOP_SET(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) 1m12.964542379s ago: executing program 0 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3c) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x1, 0x0, @ioapic={0x4000, 0x9, 0x10, 0x0, 0x0, [{0x7, 0x3, 0xe, '\x00', 0x10}, {0x1, 0x0, 0x0, '\x00', 0x2}, {0x0, 0x4c, 0x9, '\x00', 0xd}, {0x4, 0x1, 0xc9, '\x00', 0x2}, {0x8, 0x0, 0x3, '\x00', 0x3}, {0x4, 0x9, 0x4, '\x00', 0x1}, {0xb, 0x9, 0x2, '\x00', 0xe}, {0x6, 0x8, 0x67, '\x00', 0x7f}, {0x5, 0xd, 0x0, '\x00', 0xc}, {0x0, 0x2, 0xda, '\x00', 0xfa}, {0xbf, 0xd7, 0x6, '\x00', 0xb}, {0x5, 0xed, 0xe9}, {0x0, 0x4, 0x8, '\x00', 0x4}, {0x7a, 0xef, 0x5, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0x2}, {0x5, 0x3, 0xfb, '\x00', 0x9}, {0x7, 0x2, 0x7f, '\x00', 0x2a}, {0x9, 0x3, 0x9, '\x00', 0xb}, {0xff, 0x9, 0x1, '\x00', 0x3}, {0x76, 0x4, 0x8, '\x00', 0x4}, {0xf, 0x6, 0x0, '\x00', 0x8a}, {0x8, 0x5, 0x92, '\x00', 0x8}, {0x0, 0x2, 0x6, '\x00', 0x9}, {0xbe, 0xff, 0x8}]}}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="0f20e035010000000f22e06666f30f0966f3aa0f20c035000000800f22c0b805000000b9001800000f01c10f0db0ba000000b8010000000f01c1b92d0300000f320f01ca66ba200066ed", 0x4a}], 0x1, 0x11, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="18000000010005", 0x7) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f00000000c0)=""/23, &(0x7f0000000100)=0x17) 1m12.841702008s ago: executing program 32 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3c) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x1, 0x0, @ioapic={0x4000, 0x9, 0x10, 0x0, 0x0, [{0x7, 0x3, 0xe, '\x00', 0x10}, {0x1, 0x0, 0x0, '\x00', 0x2}, {0x0, 0x4c, 0x9, '\x00', 0xd}, {0x4, 0x1, 0xc9, '\x00', 0x2}, {0x8, 0x0, 0x3, '\x00', 0x3}, {0x4, 0x9, 0x4, '\x00', 0x1}, {0xb, 0x9, 0x2, '\x00', 0xe}, {0x6, 0x8, 0x67, '\x00', 0x7f}, {0x5, 0xd, 0x0, '\x00', 0xc}, {0x0, 0x2, 0xda, '\x00', 0xfa}, {0xbf, 0xd7, 0x6, '\x00', 0xb}, {0x5, 0xed, 0xe9}, {0x0, 0x4, 0x8, '\x00', 0x4}, {0x7a, 0xef, 0x5, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0x2}, {0x5, 0x3, 0xfb, '\x00', 0x9}, {0x7, 0x2, 0x7f, '\x00', 0x2a}, {0x9, 0x3, 0x9, '\x00', 0xb}, {0xff, 0x9, 0x1, '\x00', 0x3}, {0x76, 0x4, 0x8, '\x00', 0x4}, {0xf, 0x6, 0x0, '\x00', 0x8a}, {0x8, 0x5, 0x92, '\x00', 0x8}, {0x0, 0x2, 0x6, '\x00', 0x9}, {0xbe, 0xff, 0x8}]}}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="0f20e035010000000f22e06666f30f0966f3aa0f20c035000000800f22c0b805000000b9001800000f01c10f0db0ba000000b8010000000f01c1b92d0300000f320f01ca66ba200066ed", 0x4a}], 0x1, 0x11, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="18000000010005", 0x7) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f00000000c0)=""/23, &(0x7f0000000100)=0x17) 1m6.61484678s ago: executing program 1 (id=241): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) syz_open_pts(r0, 0x56b110c5e5aabff6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r4, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r4, 0xb}) r5 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}}) r6 = accept4(r1, 0x0, 0x0, 0x800) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r7 = gettid() r8 = getpid() rt_tgsigqueueinfo(r8, r7, 0x5, &(0x7f0000000400)={0x2, 0xffffffff, 0x1}) rt_tgsigqueueinfo(r8, r7, 0xe, &(0x7f0000001000)={0x21, 0x8, 0x900}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}, 0x2001) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1e, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KDMKTONE(r0, 0x4b30, 0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31030000000000000008f400020008000300d9a01cb848946457034f1e00e13c15e98bea62abe5606ffaec1dc286a0511847846c0fda931fa0b15d472c0b3df2b63249f33089a92797a51eb0c30927b1e5f5733d2cdb17bf4b622df1f669e252ffc4a778414c256d18424fb588436f610b9eab90150bbcaf257cc54d6f684aaf4e0b976ac6da8faa1b136d98ab05a5bef4621c435a6557", @ANYRES16=r12, @ANYBLOB="08000600ae84460ae0d597268b1f05dab13e50a87911e689ee7fa9ec90ebcdbd7e3054a87cbd701d926217c893d39bc412e8a5c1779389823a3a9a13b549a139db512f038d4e6b483b9f93e5679c5431f13f4d50f79f579185ac19d1a0574f89bd4580354789697ef1f2e5d882f3563ec8a7a187c32ab95be4bb609fb18ab9255ad6add52037aebb90c5a780d2041af3fc59f26f1966e140b3296080d0e00bd2abb73d0c1b4bcfa1909d71f74084a9433ecc24f1ca04294aeed1a515bfca52b28d513bb8fdd21a0d1aca2175767cf6cc756f206aaaff075e1bd34f5beaf6b0f66016ebf6828c8e8da7b9a152fd07ee54", @ANYRES32=0x0, @ANYBLOB, @ANYRES8=r8], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x800) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0400", @ANYRES16=r11, @ANYBLOB="000327bd7000fbdbdf25010000000500370001000000080039000000008008000b0007000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000000) 1m6.494028855s ago: executing program 1 (id=243): inotify_init1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x80044dfe, 0x1000000000000) syz_usb_disconnect(r0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x3e, 0x0) r3 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], 0x0) syz_usb_disconnect(r3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000002c0)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000500)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r7, 0x8004500f, &(0x7f0000000000)) inotify_add_watch(r7, &(0x7f0000000080)='.\x00', 0x2000434) r8 = syz_io_uring_setup(0x8088f, &(0x7f0000000480)={0x0, 0x9ae7, 0x0, 0xffffffff, 0x121}, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x905d}}) io_uring_enter(r8, 0x3f06, 0x955c, 0x41, 0x0, 0x0) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') 1m3.334671973s ago: executing program 1 (id=264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="d9d48db72e248db1d7441a8af3ac49ff", 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c000000480000012bbd7000fcdbdf250a003800", @ANYRES32=r3, @ANYBLOB="0000000014000100fc00000000000000000000000000000014000100fe8000000000000000000000000000bb080002000100000014000100fe8000000000000000000000000000aa080002000500000014000100ff0100000000000000000000000043b8c19502000c0000000800020002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m3.153505937s ago: executing program 1 (id=267): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "c0695eb4a5f9ea930d49aa86bc1cf79b4409fd95"}, 0x15, 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc03064ca, &(0x7f0000000200)={&(0x7f00000000c0)=[r4, 0x0], 0x0, 0x1, 0x2, 0x6}) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000000000009d12ab12"], 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x40000) syz_clone3(&(0x7f0000001400)={0x20000000, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x3b}, &(0x7f00000002c0)=""/217, 0xd9, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9, {r0}}, 0x58) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x41) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffd40) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x41, 0xb, 0x70bd27, 0x4000, {0x3}, [@nested={0x4, 0x1, 0x0, 0x1, [@generic]}]}, 0x18}}, 0x4040080) syz_fuse_handle_req(r6, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r7, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000001480)={0x40000007, 0x80000008, {r5}, {r7}, 0xf, 0x81}) 1m3.093774496s ago: executing program 1 (id=269): mkdir(&(0x7f0000000080)='./file1\x00', 0x18) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x401870cb, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010880}, 0x8000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r3}, './file0\x00'}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 1m2.924507958s ago: executing program 1 (id=270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000340)=0x4, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4004006) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a703001926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8000}], 0x30}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 47.339753368s ago: executing program 33 (id=270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000340)=0x4, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4004006) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a703001926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8000}], 0x30}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 18.591679753s ago: executing program 3 (id=620): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0xe, 0x6, 0x2644, 0x4, 0x6, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17.923346599s ago: executing program 3 (id=626): mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000080)={[{@quota}, {@size={'size', 0x3d, [0x2d, 0x37, 0x25, 0x6d, 0x36, 0x73]}}, {@huge_always}]}) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x20, 0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8000, 0x4) truncate(&(0x7f0000000140)='./file0\x00', 0x3ff) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) truncate(&(0x7f0000000240)='./file1\x00', 0x6000) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f00000002c0)={0x7fffffff, 0x3abc, 0xf, 0x0, 0x8000000000000000, 0x3, 0x3, 0x5, 0x1}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x144, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x8000000000000001}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xf90}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xd}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x9f2751eb1cdfaea8}, {0xc, 0x8f, 0x679}, {0xc, 0x90, 0x9}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r3 = accept$netrom(0xffffffffffffffff, &(0x7f00000005c0)={{0x3, @bcast}, [@bcast, @remote, @rose, @remote, @bcast, @default, @netrom, @null]}, &(0x7f0000000640)=0x48) close_range(r3, r1, 0x0) mount$pvfs2(&(0x7f0000000680), &(0x7f00000006c0)='./file1/file0\x00', &(0x7f0000000700), 0x60032, &(0x7f0000000740)={[{'0000:00:10.0\x00'}, {'netdevsim'}], [{@uid_lt={'uid<', r0}}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, 'pci\x00'}}, {@subj_type={'subj_type', 0x3d, '&'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x204500, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000800)={0x1, 0x1}) r5 = open(&(0x7f0000000840)='./file1/file0\x00', 0x0, 0x118) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000a00)=0xe8) mount$cgroup(0x0, &(0x7f0000000880)='./file1/file0\x00', &(0x7f00000008c0), 0x10040, &(0x7f0000000a40)={[{@cpuset_v2_mode}, {@none}, {@clone_children}, {@nofavordynmods}, {@none}, {@clone_children}, {@name={'name', 0x3d, ']'}}, {@cpuset_v2_mode}], [{@hash}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '+)\x96-:#[-'}}, {@fowner_lt={'fowner<', r6}}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef}, {@fsname={'fsname', 0x3d, 'system_u'}}]}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009, 0x8010, r4, 0xd9875000) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000b40)={0xa002, r3}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d00)={'veth0_to_hsr\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x4140, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3800004, 0x110, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x29}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000ec0)={0x0, 0x9}) 17.702592326s ago: executing program 3 (id=628): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000040), 0x1a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x4, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {0x1}, @result={0xffffffe0, 0xfffff001}}], 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick, {0x0, 0x1}, {}, @result}], 0x1c) socketpair(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r5, &(0x7f0000000180)=""/174, 0xae) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)}) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="c72d26d07c9fb2825c424e00432deb10626c83fef4e423c20df907114a032b70146d7e36cc5fe6844e3975db3a47af3f07ee06d67f86b8de317b80e81d0782257881db5c6d9c21a87b9048595cdd55650ccf60a6e21afe88506d93ef415460de02f3b98f9056", 0x66}, {&(0x7f0000000100)="3af8230042d89e0bcca7387ecfd7", 0xe}, {&(0x7f0000000140)="5b1d458dd6b48ae231950039e30d7efd34459fdecd88bc3a8fe88639bdda5ae83107b12ecb47b3d92018d0ae6393641ec283430e15591b5569d8ed7c2a2ebfc851736d79b02122", 0x47}], 0x3, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}], 0x18}, 0x4c800) 16.847736358s ago: executing program 3 (id=631): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) lseek(r1, 0x8000000000000000, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) sendto$inet6(r0, &(0x7f00000001c0)="8269b66e", 0x1f, 0x4000084, 0x0, 0x0) 16.722176363s ago: executing program 3 (id=632): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fe80000000000000000000000000003bfe8000000000000000000000000000aa0000000000000c9c0a00603000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000007f00000000000000070000000000000003000000000000080000000000000000fdfeffffffffffff0500000000000200ffffffffffffffffffffffff0000000000000000000000020000000000000000050000000037d61f0e0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xfffffffffffffff4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x7, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1}}, 0xb8}}, 0xc0e1ed0507c55408) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x7, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1}}, 0xb8}}, 0xc0e1ed0507c55408) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a0500000000000000000002000000040003800900797a3000000000140000001100060000000000000000000300000a0cbc81fb0a9f498f96fc011516803a5e986fd67ee26a70c7b19ed7e877e06ddef30bf90c85f5c6c8a71a48690e5cde20764bc7bb0da6c919edf9bd41c1af43150e83c2bbb1d48c"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c000280080002400000000c0500030000000000080001400000000d0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c000280080002400000000c0500030000000000080001400000000d0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 16.454168653s ago: executing program 3 (id=633): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0xe4}}, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000000000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0xf2ff) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000240)=[0x80, 0xfffc, 0x115], &(0x7f0000000280)=[0x1, 0x2, 0x1, 0x1000, 0x200, 0x37ac, 0x401, 0x5, 0x7], &(0x7f0000000380)=[0xa], &(0x7f00000003c0)=[0x3, 0x0, 0xc5, 0xfff5, 0x7fff, 0x2]}) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$dsp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) 14.241917715s ago: executing program 4 (id=641): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x144, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x106, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r0}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x8, 0x3d, 0x0, 0x0, @u32}]}, @typed={0x8, 0xe7, 0x0, 0x0, @u32=0x10000}, @nested={0x24, 0x2c, 0x0, 0x1, [@nested={0x1f, 0x11c, 0x0, 0x1, [@generic="015db01b19b208f45a549893830cffcd397a3c3a64038c6d32740e"]}]}]}, 0x144}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) 13.409255677s ago: executing program 4 (id=644): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000011f40)={0x0, 0x0, &(0x7f0000011f00)={&(0x7f0000011e80)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x4000000) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xde}], 0x1}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r6, @in={{0x2, 0x4e20, @empty}}, 0x4, 0xef7, 0xffff, 0xfffffffe, 0x4, 0x7fff, 0x1}, 0x9c) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={r8, @in6={{0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x12}, 0xffffffff}}, 0x3, 0x3}, 0x90) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 13.242259082s ago: executing program 4 (id=645): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:5.0'], 0x13) r1 = inotify_init() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000000)="639df0e741f7ffff8afe2902bff7c14e90", 0x0, 0x2df86471, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x502, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000010000af"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.313667173s ago: executing program 4 (id=653): r0 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) map_shadow_stack(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x42802) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000a40)={0x268, 0x1, 0x5, 0x5, 0x0, 0x0, {0xe, 0x0, 0x8}, [{{0x254, 0x1, {{0x2, 0x80000000}, 0x5, 0x0, 0x0, 0xfff3, 0x4, 'syz1\x00', "068d56d8c91c2ff074c8a20b8b06ad166494215e2dc01b7fd2889c2f7ec16e95", "bbc8c1e71e40bcebfc15352d496b0d66fdc65d5febb87b9d4a238dee022fc382", [{0x3, 0x0, {0x0, 0x9fef}}, {0xb3f, 0x7, {0x2, 0x4}}, {0x8, 0x5, {0x1, 0x400}}, {0x5, 0x5, {0x2, 0x3}}, {0x8855, 0x1, {0x2, 0x1}}, {0x9, 0x0, {0x3, 0x4}}, {0x8, 0x0, {0x2, 0x100}}, {0x800, 0x0, {0x2, 0x1000}}, {0xf50, 0x7, {0x1}}, {0x7, 0x5, {0xfd06d9b7a1289b9f, 0x7}}, {0x4, 0x6, {0x2, 0x3}}, {0x33f8, 0x3, {0x3, 0x101}}, {0xd139, 0xe28, {0x0, 0x8}}, {0x0, 0x1, {0x9a6db7f2d83cbac, 0xf}}, {0x10, 0x5, {0x3}}, {0x7f, 0xf000, {0x2, 0x7}}, {0x8000, 0x9c67, {0x0, 0x1}}, {0x5, 0x2, {0x2, 0x3}}, {0x0, 0x2, {0x3, 0x4}}, {0x6, 0x67, {0x3, 0x4}}, {0x3, 0xe2, {0x3}}, {0xff, 0xa, {0x1, 0x4}}, {0x9baf, 0x6, {0x3, 0x2d14}}, {0x4, 0x4, {0x2, 0x1}}, {0x5e4, 0x4, {0x3, 0x214}}, {0x8, 0xfffe, {0x1, 0x6}}, {0x0, 0x44e6, {0x3, 0x4}}, {0xb8, 0x8000, {0x2, 0x8}}, {0xffff, 0x2, {0x1}}, {0x2, 0xfffb, {0x0, 0x1}}, {0x3, 0xf3, {0x3, 0x101}}, {0x1, 0x7, {0x3, 0x7}}, {0x3, 0xfffc, {0x2, 0xf49}}, {0xd077, 0x6, {0x2, 0x2}}, {0x8, 0x4827, {0x1, 0x1}}, {0x401, 0xc57, {0x0, 0x3}}, {0x2df2, 0x8190, {0x2, 0x11}}, {0x2, 0x0, {0x2, 0x7ff}}, {0x6, 0x4}, {0x3ff, 0x4, {0x3, 0x80000000}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x240040d5}, 0x8040) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x0, 0x6, 0x6}) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000000)={0xfffeffff}) r4 = shmat(r0, &(0x7f0000ff5000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) open$dir(&(0x7f0000000100)='./file0\x00', 0x8802, 0x0) acct(&(0x7f0000000000)='./file0\x00') r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe133, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00', &(0x7f0000000200)='./bus\x00', 0xffffffffffffffff, 0x1200, 0x1}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) shmdt(r4) 11.307681142s ago: executing program 4 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 11.307402243s ago: executing program 4 (id=656): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r3, 0xc020660b, 0x0) getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000002}}}, 0x10) bind$tipc(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0f0125bd7000fcdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="837396070f844f9989cbdc9b08d515c90104f001e336febe9b050bc669bc5b5fe58d11cadc115323b80cbdbc5877108509f352d500cb7a31a1c5017cd45b88528e58348ecfc8e9ff9fd0df5f19257b677342c9cab0808e859fbb10a575d572d9030b8f7bb3285fffa9906a84efca9e96f624726415d51ba00bcf646589d37c69865310de845b0e975f90b113ed3189e24dbd270de6196637d23ee21aac1c34f91cf702412f9fa61a9c43731e6b0e91ebf5bf5aa38ec59275ec218741299a64fd781d392a68354f946a0bee26943c914507a89d5936dc2740438ce5602c5b09e87b795da11b2cd93eb1d757e634372ec1c14624022eaaad3e372e550f9833df90ff1c229679244e9abce98de4014bc55a6daf6b322dfc38bd28b1f9838d79ab9fa6145c9f1c2f69d05ac6c69ddf6ca480cbcaf63c1e2ce8c55a8f6fbd8c4610851a7a35d71da91e0d4e5fbdd23913c3eab7aa454aa504ea6b3112bbb0afe399ebd95f38e873bb9913d01c2cf3ff045e73f9480d0b2ba430b4ea46d00778b7ae1ab98906b625af44ab02c62e9817339e5ef6a4affc6090dc40c658ebf4e3b06e8695b29a3bae947528a02a79798e14dc607da13932e2abfae5cc305f815f6d95d07ead3e0f56f54caaafe6e65450410fa2aee5af55b7e507595f886617ef64c30e034893cdd9cee7750152650ee47b6a67457eadecaba194c853ee619ec5d8b20b9c1ef9f1536c5f1aefe3eeb242acc99d0714b74d4fa181006c06e312d4c561d018d6d1e33efc9a5872f26c1a9f3169efe675b53f64446b3d1e55c8d0721be949c074d5e9a5b5372d2e2117e30fe82d91a3566e4122d39d8ec753b31a606f06ee5c33f6f2af6e7e9ef7a0c8f544d3a127249bf93d4623"], 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x4000) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r9, 0xae80, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 10.166698976s ago: executing program 2 (id=670): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b1b, &(0x7f0000000040)) 10.033943715s ago: executing program 2 (id=671): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0xd, 0xa, 0x18b, &(0x7f0000000080)="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"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) 9.722657688s ago: executing program 2 (id=672): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) memfd_secret(0x0) pipe2$9p(&(0x7f0000000140), 0x80000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r7, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) r9 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRES8=r6, @ANYRES32=r2, @ANYRES64=r7, @ANYRESOCT=r4, @ANYRES8=r1, @ANYRES32=r9, @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r10}, 0x38) r11 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000100fdfffffffcdbdf2502000000", @ANYRES32=r12, @ANYBLOB="140003"], 0x2c}, 0x1, 0x0, 0x0, 0x4091}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x6125}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file4\x00', 0x2644a0, 0x2) 9.626819019s ago: executing program 2 (id=673): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 9.49671641s ago: executing program 2 (id=674): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/18, @ANYRES32, @ANYBLOB="01000000000002004c0012"], 0x6c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 9.496255722s ago: executing program 2 (id=675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000001c0)=""/89, 0x59}], 0x1, 0x7, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xc9b1, r2}, 0x38) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$unix(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x18, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c051}, 0x2004c0c4) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, &(0x7f0000001340)="5f28583ab50b57b72130cd88133a558c17011ca961e05569a5c441e527b263a0628ac9abc5968035b5fb7784167724ba9dfe2cbb3e2da131022248545d112300c862efc93ea0aae64c7d46c3c52c664837ea9645a212ef9bd8d18869f7c1f8eb961848ef13590f2a8d8eef3ae6c384288ee963765c44dfc8e9d4c83dc52f69d51a1510c51840c1613fbca9ed31e63212d77fd895be29cb339f3c67ae07c8d5e9d4c073957a8bc5e247f3c1dc2e4a9e551fa5692b55107badac703d943471b3fcec78f25513e2172128a6a6ecf6e5e029ee833b7a3732287d719f22582ef4ba46a7918faacd58a809fbd490b7afdde95cfd52c497dde796c304567f6520e5a8e02a2dd02899ff2acd3d4619bfbefe55338c5a3b6d126732b73d7c0fbb2ad4aab863995b8d03b055c08a923c773ec1eb320ca41f4d24bf011a7394dbfb1952c7e52ef34d7e54acb35195a1182ece4e9d656bdf78b5913b8fe2ca1eaaa40747386eb423e910f73d4585054667cc0eee015a30326b457ab2716ca990234e020faf1e6b15a140143b6f28bcf62ca992f784f6f72bdaff5e558aada485e7842a4e0e619fcd42d63ffd1b3a265aaa8c780f006566052893f1eaade249b1b6465d4a30e538893aa405e5a70e7139e3c99f5587c0f878307064b325791d69e2dc10adb4e85657131422057d092e167422f069b81429c2b57a637fb4ffd5c11843f650ee6d90b8a93621b43748c2d8f8db633f1d3b52d12445b8a1e42c438905c59cc9459792331d0e0f53432a05fa5fe502e48ab1aa0e2469f6f29ca25c396a4a8170a5b56ffdf8ac5d0645a4d8870471faba9053d24220fb87c114dd46b9ccec6584f1fc8ec41a2ec1e8f3b11298a6bdde5dd45070d0cc4af14ca6eb49462c8e7e718f64e5f9de31dbfae7266821153ac626ca4d1d98d1e06db56c724a044a89bbb6f84c58e7f5199f083cd62aeb48adb19197454c3612e4e92f98f40cafc4a24d70fb967eaff43bed00143a7038eb9c0ae272bfce9b0096e8e5ae91e33976a9f9092aa1d5083e48b125146435c65614c242c08b672fedd13dee391c4696c47bebc6538cd59d5730052861fbf3969e468e94a60d13fae3ff479c62e4b9ff6c2d4c163c09b445273828cfc20cd3e975fcab7cf3341aceae544038d0b4ca28538ed9bc2b324239b9f2c19ffb9877edf11a276acca3073395d593f4ca4afb57ed2457a29bbb81a26abafab18e512360798aebbab77d56ca312c95f3a0302e2253d092891638eacc5ed0fb460c317d85bd6b5069a49c08054702f1dd155aba441c2f8d8d0cf8406a16268c21060214633319d8581c632cd19c86552fea07f4d48f50f4ea004b6935470a222eb49d3b737bd2904fcb2bc9eaf46fee5e6dbecb9487eeacba01ded470dc14d2580d6a870fe309a17eff21cdb0079c9e3cd2b8ea1c4b8162d0a36058a9062cce59295f77f0223c8aeb2bba92fd30491bb30aaaada9ddfc90be79df964d9ee9e5efaad31d9cc90c82d3d63481e5b68ceb4d48e075b5c685a95f644a8b2de2d15abd42fecb3e4b43f891d054f4f8b31c71769fd15a8f31e76b16d75d5cb16ab68acb3c8c23f432506474deee8ca5e8235bdeddd2da2825155431524ab173d8417fd91ea52b8d0755b41c3ac0470e3555c397e9686be8d03edbf51f139901b1a4093782ede1bfb616ea1de1de3b60659de7a0fe4dbce050989ec954ab2846ff5d6f48e1fc9f9a926eaec93a701c35803856c819fee46802f9441fb4b025a71bd06ad585d6e0e0ce4d1576071e77a65149c93fca586fd2989ec099ca5808c3c9a7a4da12fda333c9fd13fa16f0976b8eef5c674e350e3c9270ad8682aa6987391d4a2fee7be29946e8de037d477b96e487ce93808d0d9446c316ad75ac3dc02d68b2ffb27ea7ccca88c76aeacb7a79ff1fbf93da889490ba36094b1ea6f24c29b945d2729268f9d5bf7b1223eb5840b0b152ecaff58c90217f66a07d9333b4dd10f21eebb1bc4f24d09148656c185fc8187a4f8de8ce7e1ce112e04e7dfa0000f6f4bf3060565d02f8a9a89826462fd64598d3817e45cee40db985d86281a61b604f75f221ae356b3b535646ab755a7295510f790f1ff36b25f7c501243c7b057b7f62fa9684a2d35263e8bcbdb56caa0dae7f2f401bfc105bdb226f47898dccde6bd041debba2ec71f7dcfdf72aa54a1ed68fe207d23383bee713467f25de75b01d100589a98a0f23bf78b14c945ef6277cb8eeb9106988f2a2e0e252b857abb6dfdbfd079df09ee74116ce435c445ccba484b89c9bf24e2c596bcb437580a6ce79e9f35278b7cd45223506b1a32395446d4f7d1f3c46f5667ef5f1ba38f72995a0fdc0cd92569ca4523cd4ff78ea40c85e3bff616682d4ce2ff692f19afb3022d6bc4e592719c11473e3354376ad1d726d94908bf087446e0e8006f5d7b0e56110d560a572781e48829873650869c9773f2d47cc4ad34bbf6da5a0f71e4d9cf26e6fb5a49d264820423285483372d0c81368cb667e54e1af4882fb55be6711b445306d11ffd113fa79bc00aaa8ee2bb37e6a1efebe0b3b8a3a4c88253d2a02b967b78c82a264a13287218362b4a617cc79360fe9f1ab8353437328d7f4b02e60fc018ece9adfb69d68a9fe59f809a174f5a9336dda368f5e810c6fd70625ec01a6b6825bcf64f061276f5b62af04700235c71e028e0b277acba4df6f38dc40e0745bcb5fb9832ed46afc3d6d511c7ef729218bce62d919b351c8e811bfa552f2c810b9a62e300a9c381ac20d6a991bf0b6b045e3e9e24fcb609189278f9f676245df27f884c546c080326b5e358862384dbfcbec3594f784e9002ba719e67abc962ade031c6ea4dd08d212b957e6661641fc588423b9075a0090b07f483469c58744c921c3814d8a57e1a9428595aca988c7aeb2e0e3dfcc7f511f8251c44f7a29718ccc342a478fe180f7fd80b0bf53c9e0c7ab750d8a99f78946c0ddba22962e74cd938cc5fee73cff31de439ebddce02c41aacbab3b92c0d8f188e7c5e70c453788ee0fc6a7873b7e03997d5044c39089be548e5323d7756def814125b58d133b50c78c9e2ee7f27df173cd2f03bd986215dbc94175d1b44d4ff5c4fcd35dd3272828bf00c05bc9200b45561c71f67780ad54987d5d6307045e388d106894d9aa02bd9ab627720066422c4a25e4d4b2c2ff643e792cc5b572eca4555e1e03350e8d5e43d2384ac1be00a3915aafd8f7958c4585f03dd4d39bc3acb587093cd39055809de4ce7a3d35d4262d66a6d65918cfb9a908ef5c0a5dd680f36af6bc7fe96c212bff2c6165f2b627eb1b3b8ea8703dd6a07feab4348178164b1ca22ec37f8564d1be2dcccb7dd17932ae8336fffada4be86d74466a3854ef455553030d4e3d407bdea5b44ec0839a7613796677643547fa4a50e1d3c3a441c37f0aab7b1c0b60b93085abf9f9cfa42858f12fc42225427310f2715b1b54e523fc9000be2731b0ba80dfde7bb3a748ff6671c8070794035e4f5e416838f8126a431d18adfadc7cb989df84d363660d3cfe129e5bf8ac91c8c130f317e0d67b098b0558307d22b8e76d4e97c1f2df3dc1d4564724c1ddef375c858a12aad0bf49e44d77e9b13bbb76908d76ef95a82d46d077c0ed18733e62edb02e0cc65d63c694c8ebb68010537ff0c86f8e76bc0b0856a3447c4ad6a1b522831562909ad00d65d7d1b986745a45455df286473bcffdb132e42a1c03a81dd8192e5d7bfd1aad9c730b7ac81c9ecc36f7cb27137bd984f1ffdccabc011e245bab24056e43d45ec68da2d703306a7141d93262cac024f183d3d48c42c7816e43c97d3440b9ad5e4aef20a391b6b10871f72e708cf99884e1d9712cffd1fc5bf5129fb66c3b8e0de672b6008ff6a3c905d699c06bd17562af06aea26b4e6bcfdd6154f1c2e4a732f28c25d9acc0382ff7a822700853a4ab0d489ebb4659ebf95c3e03e410e8a43a94322a6e4de99ceff7b84eab1eef27dcbbdac4f89605d438d4f3957a4dce363eae65516aefd60ef48a5fb1954ff3a889aa697baeb5e44fcdacb57ee27b1b126a2659d95209a81973ee6c45d462342b2abc3ece6645cbfa4b821a308d4af3f05706ee0674809da08deb53566331a22b805472cc244982c5a6bc920229fe946e447aae7ec537dd2c1d50bc1017bc952eef9954351315d9d1ea5bf60eb4dbe00c4093b1975312a6993f9b0f95fa05b9ec5ce280ef1a7edd9e1f7cb86267c57b3eedd7e4e7bf6a404dda00a961603907b2a1864de91b36d6f0ee1ae7aa5c64ac95f56d5b81cbadcc089b55885a4dc1660c0023215048ffef33492268033dc5ed77a13b0d07c5ecf6146bd83ab9b68b58e70aab5c3931025047eb4e392087a3305a6afad488bed412bf5d1859c6f8e05b0a34504dc14917819fcf257d76916ccafc348f0399f8d06dcbbc1b437670c1b9dce6c16e7e9a30f8df75f9797ff0a4227e0f7734277fa101428ad8f809c636783ac1cfc6db1ee8bf008e3e1a5f1dc19568bf4940284d349d02b56e2c2178e50a9dc4e7be2ac99bd8934ea1661fa0b18ca394c76b0dbc886f1f16474d7c55efaaddbe7377dcb357bac47258c96d11f81f6788cfeefbb7371caad41648e075e29fff30ecb4afa3c08864a88625afcfa30d66782f2925ed4ba04832c84c49751d899d18c841e7c4932f3a4b65d3bc9b076fc557f043c5e2feb0f7a54050d890375e71587aac3a0797e852097e77f126f21a66cd7d625dc927a61a4dc2e7f98b5919930a71a876f30d3fe29cbe6c4b89dd888efdc076266d0a50b1967847ee7fe510760a7d2dbedf52bb6728fa1f28865866f37018ebdccc83cce8d72e47249de0cbfe39ea3c2cbd85763a167e6d7357946cb6e9262031cbf5f6b48aedefafae11691e1329c4eede31846bae6aec0e9d93f774c41ec1113371b44c81bbe63a81d5ddb760d295d1538882baa13077dbc749e002e4ac79eb5d51f848b0c5af2d9eb423a0bbfb9c12453afdc366671871de0950e37ade6b79e681eda6b465963d6c65d1fd00cd653d3ac71d8aa328d700245629c931ca6095fa6a2c6ed55bfbcec255f4cba7d7df5e44bf9dcf745da3b89d0b754b493d626ca547e4c353b3dfd72a2da5bbed1b677d93a0189434346c445d38ee0e0065f27424c015db382519ba0defe989b11f11bf255d3d99d3fe7c85b46c5cb2b21884f3aad666273f63b3d5b3df40709fcd521cde1dcbb836104ecfc8ce3b36f90e72fb00d045d3526f456554b39fa10736e76a484c94c6d90864801c790e9dae16c3bdbe4bfd4087f2e15dd05670de35329d5b412b512a45fb3ad7dea353ed2f94f9157354ca0d939a3a3e113f84a1d1ab8798d41c518686ca25cdee331de3e9fb24e947e23cb23192889157e8a715cb39083415bf143b471a8437eef90865c46bda21c5aae633d2f1a52df0cf34e73ca8a613edb52f9fc79fc80dc6e2bc7c9b96d39795606a72e6bc3d189a3c0ba638fdec062c2eab8d4a7863ae7b38931dea164054c933e84b5d807ee262e6d607d7424db60753fa61410be1b4c17cb44179f5e4f3bed655e3da24d70cbc12deb52d5e528b8a932870a5b754d9c8ce450eee012a1b448437197b1e09da28e26245a7a184660940b2e192bebbce43dc419c617e5c557498fd2a3e21f7e3662cf0181adbd4a30f7ab2253ba61a68b6364ae0f6210e6ade0e1428588d1fd8b7aaa28dd86cc1b69be98ee18b000d92d37ef56dc8f2dd538dcad0db74757ad4df5852300caeea021bcc4deb1d1ea126254f5c6b", &(0x7f0000000080)=""/74, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff85000000cf0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) 9.082386798s ago: executing program 5 (id=679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000340)="04", 0x34000, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @loopback}, 0x1c) 8.993527259s ago: executing program 5 (id=680): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x4000000) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) (async) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)=@hci={0x1f, 0x1, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)="4e31d1cd995d09d6845e34191e87a5385ab4d9153f93e3e6e32c069eb1ce022b1fbcbbe13c905b76e1f50f47c3d778dc3e5e83668727b5f89501b4470b6ad1cb749edd6b759edea85f38b64f5de7037780f3859160ffee7e728c742591a012f0a0c830a808e879a36e5dff8b7327ed3f29973267bc7d2f2cb1ce15b2a5e559b911b37601c868fc5327", 0x89}, {&(0x7f00000003c0)="f67832da5f58722949b2b433ed7b3b758af75d994d8994d655b9ccb346d2ecbaab65ceff445f364d03550c17c9a93f7c23fb416649e2d1046154fc07df79d6b28211d51b25cfeafc8bc8d83059b10829971fe031", 0x54}], 0x2, &(0x7f0000000640)=[{0x20, 0x10b, 0x80000001, "7432d70c7ae3f651cd836e9225bf21dd"}, {0x88, 0x10c, 0x0, "db4179e1bf2dd33e528f9117e6fcbb257319e5c8e2c87524ebedf1b2a174f728778b577b7a77db0b663bf6f8bbf6b2a73070c4226f5bb683cc65be0de265bd607027df51daf57163048c50dd61ba7b31cdc1e6d99f818a7b4d854659028e9c227f88d1f4084e748c32cbb0cbd7b2a3ab09e520aa25f1736e"}, {0xa8, 0x114, 0x8, "1405d78c47e6d66d7b25ccc84ed7df272f370564319737b2db7f77bf7570d1cf1751668b1b448d3c0c2dc12cf2d1d284848bb19ca4ff63a0d6a255d1db3e400969d499622dc8ccd2d9e8d783e0666c08ca86b1217067c90d44ba5a9530a037cca3b56eb73563d6bd46f597b484e2c154eddaf63b3907a14bc3586110e85b8f49486d42b13321fbed6d787d795bc1c10c137a03"}, {0xf8, 0x6, 0x8, "e41ce5b348afc3f8b409efc41043a2a23f2afd80ebb1ffebf6f9121982d0786fa1e3fd977d7b5603b7b6ddbbd51fee7ad93262b6699f0bc63ffc61962662bfef944f55671f33545ba0bbe1682d3d2e943bd34e8afd13c40955c8c22727acccc1ea6fe05efce88475d9f6b0c54f9287a2d8265f64e07a766ab35c754c2385057e9e34c62aa6b8f8e9c3f737a15af203349a0272e107f22fbcc34c75b5af9b1e2c7d44fa72c4b548ce0bbbe1d0035424e68ee3256222e64dd92f9134cf2c104e2b345ce43ba5e60a9499b17bc278a8d5d0a52b2f293d02f74b0bb89089f93b6aa13f8e2723ec1f"}], 0x248}}], 0x1, 0x20004800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, &(0x7f0000000100)) 8.759529527s ago: executing program 5 (id=681): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000380)) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x1b, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000462205720000000009000000181100007084a2fcfecbe88bbc8c5f17e923095fa215598f5676d16dcf2f80dd1526805dcc141e3bbb5dc49612180e45a346470560b64b864a5fb4a9b4c24ca62b1899d054e8fb8da22ca3554dc25a6bb5c8e5933a6015f67462c9b80ae6589a8c30f6051c10e8954634f32dc1a8a54ca141e2e41441980e94365295f21d654dd44bbf74c6759f925d9ed21780299edf6ed05a4afc40f291006e2eec6e10c5e81fc5fa92f19d2048d85089", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000184000000000000000000000000000008510000007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x40, 0xd7, &(0x7f0000000a00)=""/215, 0x41100, 0x48, '\x00', 0x0, @fallback=0x6, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x4, 0x4, 0x4, 0xa58}, 0x10, 0xffffffffffffffff, r0, 0x2, &(0x7f0000000780)=[r0, r0, r0, r0, r0], &(0x7f0000000840)=[{0x3, 0x0, 0xe, 0x6}, {0x3, 0x4, 0x10, 0x1}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r2, r0, 0x10, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x7, 0x0, &(0x7f0000000640)=[0x4, 0xe38a, 0x4, 0x4, 0xff, 0xffff, 0x40000000000], 0x5}}, 0x30) (async, rerun: 32) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x24d00) (async, rerun: 32) syz_clone(0x8000000, &(0x7f0000000580)="26837d1e7c4d5754946245857b0029fafe65a3a791912c636a3cd8a1445bac7861fb44090b5e4d3e2ff8b3190e401e0c9618c67a75893f2bf133ddf71fafa3b3a20f339a0f8aa36bee82d3f19b987fb8dd8137a7cd8b505767af475b171ae2c5b0ff749de7e38e2de7847cb3861b2938272adc70263d54e9f8164ff30186ff0266ee5224e5b081752b7c1705ee7a094f8437eedcd920ecf59b0487dbbedf582f8287cf3e25e6", 0xa6, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000004c0)="ae0443945a7d00c5a5b4d72636e2296a6fde37e200affcb67ede387a8203ab79ffa57d0ad49147aa7781bc309059b4ff8d443f182dd8de2e1f23164dcdccaab8bdfcb288147f3080011e6499acaa7f52ff7a6499b2eb415134bdbf51ee7007d4b47b52239b23ffc425a3b8cc61ae54071f1f585eb529710d9c961181fab2c5e05fba224f9b056b61") (async) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000180)=0x80, 0x4) (async) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4603248095028000000000000002e13e0001010000940200000000000040000000000000004d02000000000000f6ffffff00003800010001007f000700030000000400000001000000ffffffff0a000000000000000101000000000000060000000000000007000000000000000d0000000000000037e12f189a9b065be076cac7c7ee39c6343c6b772adbae5c9fc0cc64e21fe501c319dc3d4a519766e934356198c871c2f89ef6d74aab135bdefe5db9c1e052"], 0x78) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000007c0)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x7fff, {0x0, 0xea60}, {0x1, 0xc, 0x2, 0x4, 0xb, 0xff, "e657ccec"}, 0x3, 0x1, {}, 0x2, 0x0, r0}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000010000000000000feffffff009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) (rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x2, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x32315559}) close(r0) r7 = fsopen(&(0x7f0000000140)='dax\x00', 0x1) (async) close(r0) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000000)={0x1d, r9, 0x3, {0x1, 0xf0, 0x1}}, 0x18) (async) bind$can_j1939(r10, &(0x7f0000000180)={0x1d, r9, 0x1, {0x0, 0x1, 0x4}, 0xff}, 0x18) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000bc0)='\xd8\'\x8b\xe8\xae$\xcc\x91\xa4\xfdpsO\xb7\xcb\xb0\xabO4+\xc3.\xb4*\xb60#H\xa0\x8c\xfe\xf5h\x84KC\xbb\xce?Z\xfa\x83\x0f\x10\xa8\xa8\xa7\x89\x1f\xd8>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 8.480025157s ago: executing program 5 (id=682): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:5.0'], 0x13) inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x502, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000010000af"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.369370067s ago: executing program 5 (id=683): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x3, 0x1000, 0x200, 0x4000, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) readv(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/106, 0x6a}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000001c0)=[0x10001, 0xa0000000]) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000340)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x9, 0x6, 0x9, 0x6}, {0x8, 0xe, 0x7, 0x9}, {0x0, 0xe, 0x7, 0x1}]}, 0x10) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) sendmsg$can_raw(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@canfd={{0x1}, 0x38, 0x2, 0x0, 0x0, "bb53fbd7a56cf0107fab51e19d3203ad912176d20b759bdd229c33f62c67430059297e206348d20625b713aa6a47271567d52a58fa0091a7e2920bb5281ba0f1"}, 0x48}, 0x1, 0x0, 0x0, 0x40400c4}, 0x20000010) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000540)=""/4096) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) fcntl$setstatus(r2, 0x4, 0x40400) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000001540)=@generic={0x0, 0xfffffffffffffffd, 0x4}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001580)={0x9}, 0x1) r7 = creat(&(0x7f00000015c0)='./file0\x00', 0xd0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000001600)={0x200, 0x1, 0x2, 0x800, 0x1, 0x0, 0xe}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000001640)={&(0x7f0000ffe000/0x1000)=nil}) syz_io_uring_setup(0x47cc, &(0x7f0000001680)={0x0, 0xe01, 0x10000, 0x1, 0x1ea, 0x0, r7}, &(0x7f0000001700)=0x0, &(0x7f0000001740)) syz_io_uring_setup(0x3, &(0x7f0000001780)={0x0, 0x238a, 0x0, 0x3, 0x32f, 0x0, r2}, &(0x7f0000001800), &(0x7f0000001840)=0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x3, r10, 0x0, 0x0, 0x0, 0x100, 0x0, {0x1, r3}}) r11 = open$dir(&(0x7f00000018c0)='./file0/file0\x00', 0x0, 0x4) fanotify_mark(r2, 0x200, 0x1008, r11, &(0x7f0000001900)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001940)={'veth0_to_bridge\x00'}) 8.009303286s ago: executing program 5 (id=684): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000191407"], 0x10}}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x400000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00100001000fc0100000000eeffffff00ffffff0000ac1414bb00"/51, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc0100"/112], 0x1a0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x400001) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r8 = socket$inet6(0xa, 0x80801, 0x0) r9 = dup3(r8, r7, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000140)={0x33, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)={0x24, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}}, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xa}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 0s ago: executing program 34 (id=633): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0xe4}}, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000000000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0xf2ff) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000240)=[0x80, 0xfffc, 0x115], &(0x7f0000000280)=[0x1, 0x2, 0x1, 0x1000, 0x200, 0x37ac, 0x401, 0x5, 0x7], &(0x7f0000000380)=[0xa], &(0x7f00000003c0)=[0x3, 0x0, 0xc5, 0xfff5, 0x7fff, 0x2]}) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$dsp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) kernel console output (not intermixed with test programs): ed USB device number 3 using dummy_hcd [ 61.789849][ T6346] netlink: 96 bytes leftover after parsing attributes in process `syz.1.109'. [ 61.807822][ T40] audit: type=1400 audit(1750705244.355:304): avc: denied { mount } for pid=6361 comm="syz.2.114" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.927751][ T6371] fuse: Bad value for 'rootmode' [ 61.939856][ T838] usb 5-1: Using ep0 maxpacket: 16 [ 61.943919][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 61.950215][ T838] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 61.953951][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.957307][ T838] usb 5-1: Product: syz [ 61.959063][ T838] usb 5-1: Manufacturer: syz [ 61.961723][ T838] usb 5-1: SerialNumber: syz [ 61.967356][ T838] usb 5-1: config 0 descriptor?? [ 61.973992][ T838] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 61.977971][ T838] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 62.216348][ T40] audit: type=1400 audit(1750705244.765:305): avc: denied { setattr } for pid=6380 comm="syz.2.118" name="vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 62.259009][ T40] audit: type=1400 audit(1750705244.805:306): avc: denied { create } for pid=6385 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 62.271585][ T40] audit: type=1400 audit(1750705244.825:307): avc: denied { sys_admin } for pid=6385 comm="syz.2.119" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 62.478890][ T6407] FAULT_INJECTION: forcing a failure. [ 62.478890][ T6407] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.486483][ T6407] CPU: 2 UID: 0 PID: 6407 Comm: syz.2.125 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 62.486504][ T6407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.486512][ T6407] Call Trace: [ 62.486517][ T6407] [ 62.486522][ T6407] dump_stack_lvl+0x16c/0x1f0 [ 62.486547][ T6407] should_fail_ex+0x512/0x640 [ 62.486567][ T6407] _copy_to_user+0x32/0xd0 [ 62.486587][ T6407] simple_read_from_buffer+0xcb/0x170 [ 62.486606][ T6407] proc_fail_nth_read+0x197/0x270 [ 62.486624][ T6407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.486641][ T6407] ? rw_verify_area+0xcf/0x680 [ 62.486655][ T6407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.486671][ T6407] vfs_read+0x1e4/0xc60 [ 62.486690][ T6407] ? __pfx___mutex_lock+0x10/0x10 [ 62.486710][ T6407] ? __pfx_vfs_read+0x10/0x10 [ 62.486731][ T6407] ? __fget_files+0x20e/0x3c0 [ 62.486754][ T6407] ksys_read+0x12a/0x250 [ 62.486769][ T6407] ? __pfx_ksys_read+0x10/0x10 [ 62.486786][ T6407] ? fput+0x70/0xf0 [ 62.486808][ T6407] do_syscall_64+0xcd/0x4c0 [ 62.486829][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.486843][ T6407] RIP: 0033:0x7fbf7038d33c [ 62.486854][ T6407] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 62.486866][ T6407] RSP: 002b:00007fbf7117a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.486880][ T6407] RAX: ffffffffffffffda RBX: 00007fbf705b5fa0 RCX: 00007fbf7038d33c [ 62.486888][ T6407] RDX: 000000000000000f RSI: 00007fbf7117a0a0 RDI: 0000000000000005 [ 62.486896][ T6407] RBP: 00007fbf7117a090 R08: 0000000000000000 R09: 0000000000000000 [ 62.486903][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.486911][ T6407] R13: 0000000000000000 R14: 00007fbf705b5fa0 R15: 00007ffd55fbcbd8 [ 62.486928][ T6407] [ 62.575059][ T838] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 62.606382][ T6411] overlay: filesystem on ./bus not supported [ 62.774233][ T6416] netlink: 152 bytes leftover after parsing attributes in process `syz.1.128'. [ 62.924462][ T6433] fuseblk: Bad value for 'rootmode' [ 62.987145][ T838] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 62.990535][ T838] em28xx 5-1:0.0: board has no eeprom [ 63.180388][ T53] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 63.332359][ T53] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 63.338324][ T53] usb 6-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.349719][ T53] usb 6-1: config 1 interface 0 has no altsetting 0 [ 63.354804][ T53] usb 6-1: New USB device found, idVendor=046d, idProduct=4002, bcdDevice= 0.40 [ 63.357594][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.369945][ T53] usb 6-1: Product: syz [ 63.371480][ T53] usb 6-1: Manufacturer: syz [ 63.373416][ T53] usb 6-1: SerialNumber: syz [ 63.377567][ T6433] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.801155][ T53] usbhid 6-1:1.0: can't add hid device: -22 [ 63.804345][ T53] usbhid 6-1:1.0: probe with driver usbhid failed with error -22 [ 63.811091][ T53] usb 6-1: USB disconnect, device number 2 [ 64.121262][ T6343] em28xx 5-1:0.0: writing to i2c device at 0x8 failed (error=-5) [ 64.179822][ T838] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 64.182466][ T838] em28xx 5-1:0.0: dvb set to bulk mode. [ 64.185123][ T53] em28xx 5-1:0.0: Binding DVB extension [ 64.191746][ T838] usb 5-1: USB disconnect, device number 3 [ 64.197449][ T838] em28xx 5-1:0.0: Disconnecting em28xx [ 64.216087][ T53] em28xx 5-1:0.0: Registering input extension [ 64.218513][ T838] em28xx 5-1:0.0: Closing input extension [ 64.230343][ T838] em28xx 5-1:0.0: Freeing device [ 64.907141][ T6469] tmpfs: Bad value for 'mpol' [ 65.456509][ T6471] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 65.561150][ T6478] syzkaller1: entered promiscuous mode [ 65.563348][ T6478] syzkaller1: entered allmulticast mode [ 65.826400][ T6489] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 65.853444][ T6489] syz_tun: entered promiscuous mode [ 65.857967][ T6489] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.862749][ T6489] hsr1: entered allmulticast mode [ 65.864389][ T6489] syz_tun: entered allmulticast mode [ 65.866180][ T6489] batadv_slave_0: entered allmulticast mode [ 65.888912][ T6499] jfs: Unknown parameter 'usrquotas/net/ipv4/vs/sloppy_tcp' [ 65.936715][ T6505] dlm: non-version read from control device 0 [ 65.994375][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 66.002979][ T6513] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 66.029964][ T6516] autofs: Bad value for 'fd' [ 66.293406][ T6541] QAT: Stopping all acceleration devices. [ 66.349824][ T6003] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.413726][ T6545] Illegal XDP return value 4294967274 on prog (id 25) dev syz_tun, expect packet loss! [ 66.462689][ T6547] 9pnet_virtio: no channels available for device syz [ 66.465433][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 66.465450][ T40] audit: type=1400 audit(1750705249.015:342): avc: denied { mounton } for pid=6546 comm="syz.1.171" path="/29/file1" dev="9p" ino=35913868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.475142][ T40] audit: type=1400 audit(1750705249.025:343): avc: denied { watch_sb watch_reads } for pid=6548 comm="syz.2.172" path="/52" dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.485917][ T40] audit: type=1400 audit(1750705249.025:344): avc: denied { read } for pid=6548 comm="syz.2.172" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 66.490292][ T6003] usb 8-1: device descriptor read/64, error -71 [ 66.496013][ T40] audit: type=1400 audit(1750705249.025:345): avc: denied { open } for pid=6548 comm="syz.2.172" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 66.505968][ T40] audit: type=1400 audit(1750705249.045:346): avc: denied { ioctl } for pid=6548 comm="syz.2.172" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 66.606945][ T6556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6556 comm=syz.2.175 [ 66.732555][ T6003] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.742692][ T40] audit: type=1400 audit(1750705249.295:347): avc: denied { create } for pid=6559 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.749982][ T40] audit: type=1400 audit(1750705249.295:348): avc: denied { connect } for pid=6559 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.756268][ T40] audit: type=1400 audit(1750705249.305:349): avc: denied { unmount } for pid=6559 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 66.764536][ T40] audit: type=1400 audit(1750705249.305:350): avc: denied { create } for pid=6559 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 66.859834][ T6003] usb 8-1: device descriptor read/64, error -71 [ 66.951375][ T40] audit: type=1326 audit(1750705249.505:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.0.180" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702e38e929 code=0x7ffc0000 [ 66.971179][ T6003] usb usb8-port1: attempt power cycle [ 67.000029][ T6579] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 67.004621][ T6579] netlink: 4070 bytes leftover after parsing attributes in process `syz.0.182'. [ 67.085863][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.185'. [ 67.256606][ T6590] netlink: 'syz.2.187': attribute type 11 has an invalid length. [ 67.260680][ T6590] netlink: 'syz.2.187': attribute type 11 has an invalid length. [ 67.264512][ T6590] netlink: 224 bytes leftover after parsing attributes in process `syz.2.187'. [ 67.321119][ T6003] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 67.351168][ T6003] usb 8-1: device descriptor read/8, error -71 [ 67.364376][ T6593] 9p: Unknown access argument 18446744073709551615: -34 [ 67.401642][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.419061][ T6597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=6597 comm=syz.2.189 [ 67.484880][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.518674][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 67.569618][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.600077][ T6003] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 67.620549][ T6003] usb 8-1: device descriptor read/8, error -71 [ 67.664484][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.668931][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.679431][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.683987][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.686669][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.699397][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.744629][ T6003] usb usb8-port1: unable to enumerate USB device [ 67.805445][ T6615] tun0: tun_chr_ioctl cmd 1074025675 [ 67.807844][ T6615] tun0: persist enabled [ 67.813866][ T6615] tun0: tun_chr_ioctl cmd 1074025675 [ 67.813889][ T6615] tun0: persist enabled [ 67.816726][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 67.916595][ T6607] chnl_net:caif_netlink_parms(): no params data found [ 67.981614][ T6632] trusted_key: encrypted_key: insufficient parameters specified [ 68.242756][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 68.287012][ T13] bond0 (unregistering): Released all slaves [ 68.400753][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 68.406482][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 68.407953][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.411683][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.412667][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.417408][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.417442][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.419814][ T6607] bridge_slave_0: entered allmulticast mode [ 68.424043][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.427052][ T6607] bridge_slave_0: entered promiscuous mode [ 68.428426][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.438231][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.472675][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.476026][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.479909][ T6607] bridge_slave_1: entered allmulticast mode [ 68.484470][ T6607] bridge_slave_1: entered promiscuous mode [ 68.563635][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.575661][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.658671][ T9] usb 6-1: usb_control_msg returned -32 [ 68.664218][ T9] usbtmc 6-1:16.0: can't read capabilities [ 68.717152][ T6607] team0: Port device team_slave_0 added [ 68.731615][ T13] hsr_slave_0: left promiscuous mode [ 68.734699][ T13] hsr_slave_1: left promiscuous mode [ 68.767990][ T13] veth1_macvtap: left promiscuous mode [ 68.771602][ T13] veth0_macvtap: left promiscuous mode [ 68.774322][ T13] veth1_vlan: left promiscuous mode [ 68.776855][ T13] veth0_vlan: left promiscuous mode [ 69.034683][ T6649] usbtmc 6-1:16.0: usb_bulk_msg returned -71 [ 69.104105][ T6653] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 69.167524][ T6660] ufs: You didn't specify the type of your ufs filesystem [ 69.167524][ T6660] [ 69.167524][ T6660] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 69.167524][ T6660] [ 69.167524][ T6660] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 69.182457][ T6660] ufs: ufstype=old is supported read-only [ 69.185405][ T6660] ufs: ufs_fill_super(): bad magic number [ 69.720934][ T63] Bluetooth: hci3: command tx timeout [ 70.008194][ T6607] team0: Port device team_slave_1 added [ 70.023856][ T9] usb 6-1: USB disconnect, device number 3 [ 70.117649][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.120572][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.132137][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.142319][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.145557][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.157203][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.257413][ T6607] hsr_slave_0: entered promiscuous mode [ 70.259875][ T6607] hsr_slave_1: entered promiscuous mode [ 70.262488][ T6607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.265661][ T6607] Cannot create hsr debugfs directory [ 70.495216][ T6607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.505953][ T6607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.518423][ T6607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.532332][ T6607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.537004][ T6691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 70.540833][ T6690] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 70.638181][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.652012][ T6607] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.660228][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.663432][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.672978][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.676380][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.747759][ T6716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7952 sclass=netlink_route_socket pid=6716 comm=syz.1.211 [ 70.773935][ T6715] vlan2: entered allmulticast mode [ 70.776033][ T6715] vlan1: entered allmulticast mode [ 70.778077][ T6715] veth0_vlan: entered allmulticast mode [ 70.898159][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.898453][ T6728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.214'. [ 70.924499][ T6728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.214'. [ 71.035027][ T6744] binder_alloc: binder_alloc_mmap_handler: 6737 200000ffd000-200001000000 already mapped failed -16 [ 71.130856][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.133302][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.136117][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.142632][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.145305][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.148294][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.151747][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.154197][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.157073][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.159458][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.163741][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.164923][ T6607] veth0_vlan: entered promiscuous mode [ 71.166242][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.168335][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.171701][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.173570][ T6607] veth1_vlan: entered promiscuous mode [ 71.178720][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.181750][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.185567][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.187954][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.190670][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.192918][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.195287][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.197551][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.200163][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.202649][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.203836][ T6607] veth0_macvtap: entered promiscuous mode [ 71.204903][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.209272][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.212465][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.212912][ T6607] veth1_macvtap: entered promiscuous mode [ 71.215593][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.221262][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.224475][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.227235][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.230408][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.233136][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.235907][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.238842][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.238887][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.241383][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.246537][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.248790][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.251149][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.252666][ T6003] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 71.253428][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.253465][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.262160][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.265113][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.267860][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.268235][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.270709][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.270803][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.277217][ T6607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.279324][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.282575][ T6607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.285350][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.288441][ T6607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.291150][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 71.294753][ T6607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.297057][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.303320][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.305596][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.307798][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.310769][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.312878][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.315173][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.318036][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.320393][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.323424][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.326565][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.329226][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.331760][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.333991][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.336899][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.340165][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.342560][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.366000][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.368561][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.392431][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.395658][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.412083][ T6003] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.415984][ T6003] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 71.419033][ T6003] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 71.424406][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.432644][ T6003] usb 6-1: config 0 descriptor?? [ 71.460266][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 71.467798][ T34] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 71.473316][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.476424][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.479633][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.483452][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.488214][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.492248][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.688392][ T6785] syzkaller0: entered promiscuous mode [ 71.691794][ T6785] syzkaller0: entered allmulticast mode [ 71.703072][ T34] usb 7-1: GET_CAPABILITIES returned 0 [ 71.705041][ T34] usbtmc 7-1:16.0: can't read capabilities [ 71.801185][ T5940] Bluetooth: hci3: command tx timeout [ 71.903863][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 71.903873][ T40] audit: type=1400 audit(1750705254.455:386): avc: denied { create } for pid=6737 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 71.907775][ T6738] binder: 6737:6738 ioctl 4018620d 200000000040 returned -22 [ 71.912942][ T40] audit: type=1400 audit(1750705254.455:387): avc: denied { bind } for pid=6737 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 71.916388][ T6738] binder: 6737:6738 ioctl c0306201 2000000003c0 returned -14 [ 71.925971][ T6738] binder: 6737:6738 ioctl c0306201 200000000180 returned -14 [ 71.929403][ T6738] binder: 6737:6738 ioctl c0306201 200000000180 returned -14 [ 71.948188][ T6003] usb 7-1: USB disconnect, device number 2 [ 72.651715][ T40] audit: type=1400 audit(1750705255.205:388): avc: denied { create } for pid=6801 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.934021][ T29] usb 6-1: USB disconnect, device number 4 [ 72.936218][ T6815] bridge0: port 3(syz_tun) entered blocking state [ 72.938564][ T6815] bridge0: port 3(syz_tun) entered disabled state [ 72.942737][ T6815] syz_tun: entered allmulticast mode [ 72.945420][ T6815] syz_tun: entered promiscuous mode [ 72.947340][ T6815] bridge0: port 3(syz_tun) entered blocking state [ 72.949366][ T6815] bridge0: port 3(syz_tun) entered forwarding state [ 72.957963][ T6815] syz_tun: left allmulticast mode [ 72.961017][ T6815] syz_tun: left promiscuous mode [ 72.963131][ T6815] bridge0: port 3(syz_tun) entered disabled state [ 72.973928][ T6815] bridge_slave_0: left allmulticast mode [ 72.975715][ T6815] bridge_slave_0: left promiscuous mode [ 72.977967][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.984966][ T6815] bridge_slave_1: left allmulticast mode [ 72.987698][ T6815] bridge_slave_1: left promiscuous mode [ 72.990207][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.004515][ T6815] bond0: (slave bond_slave_0): Releasing backup interface [ 73.017131][ T6815] bond0: (slave bond_slave_1): Releasing backup interface [ 73.030083][ T6815] team0: Port device team_slave_0 removed [ 73.042222][ T6815] team0: Port device team_slave_1 removed [ 73.045510][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.048611][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.056471][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.059296][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.062404][ T40] audit: type=1400 audit(1750705255.615:389): avc: denied { write } for pid=6820 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.179177][ T6833] syzkaller0: entered promiscuous mode [ 73.182837][ T6833] syzkaller0: entered allmulticast mode [ 73.199066][ T40] audit: type=1400 audit(1750705255.745:390): avc: denied { map } for pid=6831 comm="syz.4.231" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.215192][ T6834] kvm: Disabled LAPIC found during irq injection [ 73.266642][ T40] audit: type=1400 audit(1750705255.815:391): avc: denied { read } for pid=6832 comm="syz.2.232" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 73.277194][ T40] audit: type=1400 audit(1750705255.815:392): avc: denied { open } for pid=6832 comm="syz.2.232" path="/82/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 73.281270][ T6835] block device autoloading is deprecated and will be removed. [ 73.290259][ T40] audit: type=1400 audit(1750705255.845:393): avc: denied { ioctl } for pid=6832 comm="syz.2.232" path="/82/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 73.478940][ T40] audit: type=1400 audit(1750705256.025:394): avc: denied { read write } for pid=6845 comm="syz.1.234" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.487159][ T40] audit: type=1400 audit(1750705256.025:395): avc: denied { open } for pid=6845 comm="syz.1.234" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.495867][ T9] hid-generic 3730:1B2E:07FF.0002: unknown main item tag 0x6 [ 73.498554][ T9] hid-generic 3730:1B2E:07FF.0002: item fetching failed at offset 3/4 [ 73.502099][ T9] hid-generic 3730:1B2E:07FF.0002: probe with driver hid-generic failed with error -22 [ 73.570069][ T5940] Bluetooth: hci0: command 0x0406 tx timeout [ 73.889903][ T63] Bluetooth: hci3: command tx timeout [ 73.927792][ T6885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 74.060325][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.180081][ T6903] ./cgroup: Can't lookup blockdev [ 74.182466][ T6901] SELinux: failed to load policy [ 74.210898][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 74.214948][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.217642][ T24] usb 6-1: config 0 has no interface number 0 [ 74.221392][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.225001][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.228362][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.233824][ T24] usb 6-1: config 0 descriptor?? [ 74.237130][ T24] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 74.395418][ T6908] netlink: 176 bytes leftover after parsing attributes in process `syz.3.256'. [ 74.438416][ T24] usb 6-1: USB disconnect, device number 5 [ 74.879962][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 75.019959][ T34] usb 6-1: device descriptor read/64, error -71 [ 75.269927][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 75.399827][ T34] usb 6-1: device descriptor read/64, error -71 [ 75.510099][ T34] usb usb6-port1: attempt power cycle [ 75.859809][ T34] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 75.881174][ T34] usb 6-1: device descriptor read/8, error -71 [ 75.959929][ T5940] Bluetooth: hci3: command tx timeout [ 76.139828][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 76.160305][ T34] usb 6-1: device descriptor read/8, error -71 [ 76.271601][ T34] usb usb6-port1: unable to enumerate USB device [ 76.955464][ T6951] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 76.988959][ T6951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.110826][ T6951] bond1: (slave geneve2): making interface the new active one [ 77.115221][ T6951] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 77.187772][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 77.187787][ T40] audit: type=1400 audit(1750705259.735:417): avc: denied { read } for pid=6961 comm="syz.4.268" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.197661][ T40] audit: type=1400 audit(1750705259.735:418): avc: denied { open } for pid=6961 comm="syz.4.268" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.240301][ T40] audit: type=1400 audit(1750705259.785:419): avc: denied { mount } for pid=6963 comm="syz.1.269" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 77.249341][ T40] audit: type=1400 audit(1750705259.795:420): avc: denied { read } for pid=6963 comm="syz.1.269" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.257683][ T40] audit: type=1400 audit(1750705259.795:421): avc: denied { open } for pid=6963 comm="syz.1.269" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.267110][ T40] audit: type=1400 audit(1750705259.795:422): avc: denied { ioctl } for pid=6963 comm="syz.1.269" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.277908][ T40] audit: type=1400 audit(1750705259.795:423): avc: denied { mounton } for pid=6963 comm="syz.1.269" path="/44/file1/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 77.280971][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.268'. [ 77.284973][ T40] audit: type=1400 audit(1750705259.835:424): avc: denied { ioctl } for pid=6961 comm="syz.4.268" path="socket:[13873]" dev="sockfs" ino=13873 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 77.292477][ T6966] usb usb8: usbfs: process 6966 (syz.3.266) did not claim interface 0 before use [ 77.303395][ T40] audit: type=1400 audit(1750705259.855:425): avc: denied { ioctl } for pid=6957 comm="syz.3.266" path="socket:[16522]" dev="sockfs" ino=16522 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.348380][ T40] audit: type=1400 audit(1750705259.895:426): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 77.410210][ T6968] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 77.961111][ T5940] block nbd3: Receive control failed (result -32) [ 77.962210][ T6958] block nbd3: shutting down sockets [ 77.994731][ T6977] trusted_key: syz.3.274 sent an empty control message without MSG_MORE. [ 78.039818][ T5940] Bluetooth: hci3: command 0x0405 tx timeout [ 78.217152][ T6985] bridge2: entered allmulticast mode [ 78.391472][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.278'. [ 78.394611][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.278'. [ 78.401574][ T6991] gretap0: entered promiscuous mode [ 78.404798][ T6991] gretap0: left promiscuous mode [ 78.704568][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 78.709855][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 78.832837][ T7006] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 78.835467][ T7006] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 78.839446][ T7006] vhci_hcd vhci_hcd.0: Device attached [ 78.947321][ T7010] netlink: 'syz.4.282': attribute type 10 has an invalid length. [ 78.967370][ T7010] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 79.088107][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'. [ 79.091354][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 79.095828][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'. [ 79.106953][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 79.140668][ T34] usb 44-1: SetAddress Request (2) to port 0 [ 79.143976][ T34] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 79.164226][ T7019] nilfs2: Unknown parameter 'barrierp1' [ 79.441462][ T7007] vhci_hcd: connection reset by peer [ 79.445394][ T12] vhci_hcd: stop threads [ 79.447734][ T12] vhci_hcd: release socket [ 79.452679][ T12] vhci_hcd: disconnect device [ 79.983407][ T7032] bridge0: port 1(syz_tun) entered blocking state [ 79.986345][ T7032] bridge0: port 1(syz_tun) entered disabled state [ 79.989258][ T7032] syz_tun: entered allmulticast mode [ 79.992943][ T7032] syz_tun: entered promiscuous mode [ 79.995794][ T7032] bridge0: port 1(syz_tun) entered blocking state [ 79.999033][ T7032] bridge0: port 1(syz_tun) entered forwarding state [ 80.013022][ T7032] syz_tun: left allmulticast mode [ 80.015145][ T7032] syz_tun: left promiscuous mode [ 80.017443][ T7032] bridge0: port 1(syz_tun) entered disabled state [ 80.123007][ T7036] netlink: 'syz.2.290': attribute type 5 has an invalid length. [ 80.126378][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 80.155539][ T7038] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 80.159091][ T7038] binder: 7037:7038 ioctl 4018620d 0 returned -22 [ 80.164435][ T7038] raw_sendmsg: syz.3.291 forgot to set AF_INET. Fix it! [ 80.209893][ T63] Bluetooth: hci3: command 0x0405 tx timeout [ 80.308501][ T7064] bridge0: port 1(syz_tun) entered blocking state [ 80.310993][ T7064] bridge0: port 1(syz_tun) entered disabled state [ 80.313473][ T7064] syz_tun: entered allmulticast mode [ 80.315922][ T7064] syz_tun: entered promiscuous mode [ 80.318038][ T7064] bridge0: port 1(syz_tun) entered blocking state [ 80.320130][ T7064] bridge0: port 1(syz_tun) entered forwarding state [ 80.385752][ T7072] input: syz0 as /devices/virtual/input/input7 [ 80.437237][ T7075] syz.2.303: attempt to access beyond end of device [ 80.437237][ T7075] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 80.444814][ T7075] syz.2.303: attempt to access beyond end of device [ 80.444814][ T7075] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 80.450568][ T7075] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 80.456116][ T7075] syz.2.303: attempt to access beyond end of device [ 80.456116][ T7075] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 80.463234][ T7075] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 80.466743][ T7075] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 80.470393][ T7075] UDF-fs: Scanning with blocksize 512 failed [ 80.473385][ T7075] syz.2.303: attempt to access beyond end of device [ 80.473385][ T7075] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 80.478284][ T7075] syz.2.303: attempt to access beyond end of device [ 80.478284][ T7075] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 80.484046][ T7075] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 80.486607][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 80.488105][ T7075] syz.2.303: attempt to access beyond end of device [ 80.488105][ T7075] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 80.495884][ T7075] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 80.499125][ T7075] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 80.502382][ T7075] UDF-fs: Scanning with blocksize 1024 failed [ 80.504912][ T7075] syz.2.303: attempt to access beyond end of device [ 80.504912][ T7075] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 80.510409][ T7075] syz.2.303: attempt to access beyond end of device [ 80.510409][ T7075] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 80.516248][ T7075] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 80.522937][ T7075] syz.2.303: attempt to access beyond end of device [ 80.522937][ T7075] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 80.528443][ T7075] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 80.532432][ T7075] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 80.535178][ T7075] UDF-fs: Scanning with blocksize 2048 failed [ 80.537537][ T7075] syz.2.303: attempt to access beyond end of device [ 80.537537][ T7075] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 80.542252][ T7075] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 80.546213][ T7075] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 80.549362][ T7075] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 80.552060][ T7075] UDF-fs: Scanning with blocksize 4096 failed [ 80.554184][ T7075] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 80.594039][ T7080] SELinux: syz.2.304 (7080) set checkreqprot to 1. This is no longer supported. [ 80.602415][ T7081] SELinux: syz.2.304 (7081) set checkreqprot to 1. This is no longer supported. [ 80.750497][ T10] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 80.889898][ T10] usb 8-1: device descriptor read/64, error -71 [ 80.903848][ T7096] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.308'. [ 80.908464][ T7096] tipc: Started in network mode [ 80.911025][ T7096] tipc: Node identity ac14140f, cluster identity 4711 [ 80.913692][ T7096] tipc: New replicast peer: 255.255.255.255 [ 80.915942][ T7096] tipc: Enabled bearer , priority 10 [ 80.971598][ T7098] IPVS: persistence engine module ip_vs_pe_s not found [ 81.159938][ T10] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 81.310356][ T10] usb 8-1: device descriptor read/64, error -71 [ 81.410335][ T60] cfg80211: failed to load regulatory.db [ 81.431018][ T10] usb usb8-port1: attempt power cycle [ 81.630083][ T7116] gretap0: mtu less than device minimum [ 81.770864][ T10] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 81.774326][ T7124] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 81.800575][ T10] usb 8-1: device descriptor read/8, error -71 [ 81.809395][ T7126] batadv_slave_0: entered promiscuous mode [ 82.044388][ T9] tipc: Node number set to 2886997007 [ 82.072766][ T10] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 82.100300][ T10] usb 8-1: device descriptor read/8, error -71 [ 82.168388][ T7151] EXT4-fs (sr0): unable to read superblock [ 82.203100][ T7153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.210243][ T10] usb usb8-port1: unable to enumerate USB device [ 82.824272][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 82.824282][ T40] audit: type=1326 audit(1750705265.375:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.2.330" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7038e929 code=0x0 [ 82.846417][ T7161] tls_set_device_offload: netdev not found [ 83.537675][ T40] audit: type=1400 audit(1750705266.085:452): avc: denied { listen } for pid=7164 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.538621][ T7165] tmpfs: Bad value for 'mpol' [ 83.547577][ T7165] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 83.551231][ T40] audit: type=1400 audit(1750705266.105:453): avc: denied { write } for pid=7164 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 83.571732][ T7165] netlink: 10 bytes leftover after parsing attributes in process `syz.3.331'. [ 83.625551][ T40] audit: type=1400 audit(1750705266.175:454): avc: denied { listen } for pid=7170 comm="syz.3.332" lport=44563 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.675585][ T7181] netlink: 'syz.3.332': attribute type 1 has an invalid length. [ 83.701392][ T7181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.731279][ T7171] bond1: (slave veth3): Enslaving as an active interface with a down link [ 83.741499][ T7171] vlan2: entered allmulticast mode [ 83.743215][ T7171] veth1: entered allmulticast mode [ 83.745195][ T7171] veth1: entered promiscuous mode [ 83.747338][ T7171] veth1: left promiscuous mode [ 83.752621][ T7171] bond1: (slave vlan2): making interface the new active one [ 83.755475][ T7171] veth1: entered promiscuous mode [ 83.757391][ T7171] vlan2: entered promiscuous mode [ 83.759331][ T7171] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 83.764852][ T40] audit: type=1400 audit(1750705266.315:455): avc: denied { accept } for pid=7170 comm="syz.3.332" lport=44563 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.774797][ T40] audit: type=1400 audit(1750705266.315:456): avc: denied { write } for pid=7170 comm="syz.3.332" lport=44563 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.784847][ T40] audit: type=1400 audit(1750705266.315:457): avc: denied { setopt } for pid=7170 comm="syz.3.332" lport=44563 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.078882][ T40] audit: type=1400 audit(1750705266.625:458): avc: denied { append } for pid=7205 comm="syz.3.338" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.135995][ T40] audit: type=1400 audit(1750705266.685:459): avc: denied { getopt } for pid=7208 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 84.139880][ T7209] tmpfs: Unknown parameter '' [ 84.145014][ T7209] netlink: 'syz.3.339': attribute type 9 has an invalid length. [ 84.178529][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 84.200981][ T34] usb 44-1: device descriptor read/8, error -110 [ 84.216302][ T40] audit: type=1326 audit(1750705266.765:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7213 comm="syz.3.341" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46c238e929 code=0x0 [ 84.281489][ T7217] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 84.602417][ T34] usb usb44-port1: attempt power cycle [ 84.711770][ T7235] use of bytesused == 0 is deprecated and will be removed in the future, [ 84.714619][ T7235] use the actual size instead. [ 84.834825][ T7240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 84.837522][ T7240] netlink: 'syz.3.341': attribute type 7 has an invalid length. [ 84.839992][ T7240] netlink: 'syz.3.341': attribute type 8 has an invalid length. [ 84.842436][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 85.180869][ T34] usb usb44-port1: unable to enumerate USB device [ 85.269804][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 85.271204][ T7265] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 85.278994][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 85.464853][ T7294] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 85.469580][ T7294] Error validating options; rc = [-22] [ 85.633102][ T7313] netlink: 'syz.4.366': attribute type 39 has an invalid length. [ 85.640206][ T24] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 85.752401][ T7324] ip6gretap1: entered promiscuous mode [ 85.754250][ T7324] ip6gretap1: entered allmulticast mode [ 85.758844][ T7325] ip6tnl2: entered allmulticast mode [ 85.801514][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.807438][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.813818][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.817944][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.943488][ T7335] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 85.952514][ T7335] cramfs: wrong magic [ 85.996596][ T7346] xt_TCPMSS: Only works on TCP SYN packets [ 86.003110][ T7347] xt_TCPMSS: Only works on TCP SYN packets [ 86.029468][ T24] usb 8-1: usb_control_msg returned -32 [ 86.031777][ T24] usbtmc 8-1:16.0: can't read capabilities [ 86.036330][ T7351] binder: 7350:7351 ioctl c018620c 200000000300 returned -22 [ 86.389525][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 86.392592][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 86.403734][ T7376] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.406904][ T7376] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.409832][ T7376] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.412710][ T7376] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.419949][ T7376] netlink: 172 bytes leftover after parsing attributes in process `syz.2.382'. [ 86.593174][ T6003] usb 8-1: USB disconnect, device number 10 [ 86.618636][ T7387] block nbd4: NBD_DISCONNECT [ 86.644553][ T7393] sctp: [Deprecated]: syz.2.388 (pid 7393) Use of int in maxseg socket option. [ 86.644553][ T7393] Use struct sctp_assoc_value instead [ 86.680833][ T7398] overlayfs: unescaped trailing colons in lowerdir mount option. [ 86.685587][ T7398] 9pnet_fd: p9_fd_create_tcp (7398): problem connecting socket to 127.0.0.1 [ 86.716258][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 86.722910][ T7401] bridge0: entered promiscuous mode [ 86.725006][ T7401] macsec1: entered promiscuous mode [ 86.728635][ T7401] bridge0: port 3(macsec1) entered blocking state [ 86.730907][ T7401] bridge0: port 3(macsec1) entered disabled state [ 86.733065][ T7401] macsec1: entered allmulticast mode [ 86.734790][ T7401] bridge0: entered allmulticast mode [ 86.737547][ T7401] macsec1: left allmulticast mode [ 86.739161][ T7401] bridge0: left allmulticast mode [ 86.744642][ T7401] bridge0: left promiscuous mode [ 86.803432][ T7404] xt_hashlimit: size too large, truncated to 1048576 [ 86.834328][ T7407] bridge0: port 3(veth0_to_bridge) entered blocking state [ 86.836604][ T7407] bridge0: port 3(veth0_to_bridge) entered disabled state [ 86.838855][ T7407] veth0_to_bridge: entered allmulticast mode [ 86.842209][ T7407] veth0_to_bridge: entered promiscuous mode [ 86.844196][ T7407] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.848376][ T7407] bridge0: port 3(veth0_to_bridge) entered blocking state [ 86.851067][ T7407] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 86.871968][ T7407] bond0: entered promiscuous mode [ 86.873831][ T7407] bond_slave_0: entered promiscuous mode [ 86.875762][ T7407] bond_slave_1: entered promiscuous mode [ 86.878805][ T7407] batadv0: entered promiscuous mode [ 86.882023][ T7407] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 86.886665][ T7407] bond0: left promiscuous mode [ 86.888285][ T7407] bond_slave_0: left promiscuous mode [ 86.890674][ T7407] bond_slave_1: left promiscuous mode [ 86.893745][ T7407] batadv0: left promiscuous mode [ 87.122419][ T7430] bio_check_eod: 3 callbacks suppressed [ 87.122437][ T7430] syz.4.400: attempt to access beyond end of device [ 87.122437][ T7430] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 87.134797][ T7430] vxfs: unable to read disk superblock at 1 [ 87.138441][ T7430] syz.4.400: attempt to access beyond end of device [ 87.138441][ T7430] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 87.140011][ T7432] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7432 comm=syz.3.401 [ 87.142683][ T7430] vxfs: unable to read disk superblock at 8 [ 87.146705][ T7432] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7432 comm=syz.3.401 [ 87.148979][ T7430] vxfs: can't find superblock. [ 87.154554][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.399'. [ 87.154577][ T7428] openvswitch: netlink: Flow key attr not present in new flow. [ 87.163387][ T7432] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7432 comm=syz.3.401 [ 87.479987][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 87.484310][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 87.489002][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 87.494025][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 87.497970][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 87.502011][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 87.506189][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 87.510369][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 87.514739][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 88.389878][ T10] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 88.441439][ T7461] netlink: 'syz.4.412': attribute type 3 has an invalid length. [ 88.452966][ T7461] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.457797][ T7461] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.461371][ T7461] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.464883][ T7461] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.553307][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.557580][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.561239][ T7468] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7468 comm=syz.3.415 [ 88.575060][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.578935][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.793473][ T10] usb 7-1: usb_control_msg returned -32 [ 88.795350][ T10] usbtmc 7-1:16.0: can't read capabilities [ 88.892293][ T7514] syz.4.425: attempt to access beyond end of device [ 88.892293][ T7514] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 88.897664][ T7514] vxfs: unable to read disk superblock at 1 [ 88.901036][ T7514] syz.4.425: attempt to access beyond end of device [ 88.901036][ T7514] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 88.905297][ T7514] vxfs: unable to read disk superblock at 8 [ 88.907525][ T7514] vxfs: can't find superblock. [ 88.947759][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 88.947770][ T40] audit: type=1400 audit(1750705271.495:475): avc: denied { create } for pid=7520 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 88.966797][ T40] audit: type=1400 audit(1750705271.505:476): avc: denied { ioctl } for pid=7520 comm="syz.4.428" path="socket:[17904]" dev="sockfs" ino=17904 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 88.985233][ T40] audit: type=1400 audit(1750705271.535:477): avc: denied { checkpoint_restore } for pid=7520 comm="syz.4.428" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.353255][ T60] usb 7-1: USB disconnect, device number 3 [ 89.392750][ T7541] __nla_validate_parse: 7 callbacks suppressed [ 89.392773][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 89.398975][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 89.403520][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 89.407154][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 89.422658][ T7541] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 89.503916][ T40] audit: type=1400 audit(1750705272.055:478): avc: denied { bind } for pid=7538 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.529007][ T7546] kernel profiling enabled (shift: 7) [ 89.664765][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.433'. [ 89.668790][ T7539] netlink: 40 bytes leftover after parsing attributes in process `syz.4.433'. [ 89.688375][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 89.770762][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.440'. [ 89.921277][ T7564] kvm: MWAIT instruction emulated as NOP! [ 90.031421][ T7574] block device autoloading is deprecated and will be removed. [ 90.041572][ T7577] tmpfs: Cannot change global quota limit on remount [ 90.403485][ T7583] mmap: syz.2.448 (7583) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.573156][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 90.675169][ T40] audit: type=1400 audit(1750705273.225:479): avc: denied { map } for pid=7594 comm="syz.2.452" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.685795][ T40] audit: type=1400 audit(1750705273.225:480): avc: denied { execute } for pid=7594 comm="syz.2.452" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.731022][ T40] audit: type=1400 audit(1750705273.275:481): avc: denied { connect } for pid=7596 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.781748][ T40] audit: type=1400 audit(1750705273.335:482): avc: denied { write } for pid=7596 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.781819][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.454'. [ 90.793192][ T40] audit: type=1400 audit(1750705273.345:483): avc: denied { write } for pid=7596 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.069879][ T6003] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 91.209827][ T6003] usb 9-1: device descriptor read/64, error -71 [ 91.450850][ T6003] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 91.579853][ T6003] usb 9-1: device descriptor read/64, error -71 [ 91.707341][ T6003] usb usb9-port1: attempt power cycle [ 92.154756][ T6003] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 92.159750][ C1] net_ratelimit: 39031 callbacks suppressed [ 92.159753][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 92.159764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 92.161752][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 92.166886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 92.170555][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 92.170665][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 92.174772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 92.179006][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 92.182952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 92.186858][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 92.253597][ T7615] cgroup2: Unknown parameter 'euid' [ 92.317483][ T6003] usb 9-1: device descriptor read/8, error -71 [ 92.318389][ T40] audit: type=1400 audit(1750705274.865:484): avc: denied { map } for pid=7617 comm="syz.2.461" path="socket:[18127]" dev="sockfs" ino=18127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.318506][ T7618] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 92.350097][ T7618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.618474][ T6003] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 92.695665][ T6003] usb 9-1: device descriptor read/8, error -71 [ 92.858062][ T6003] usb usb9-port1: unable to enumerate USB device [ 92.888219][ T7618] bond2: (slave gretap1): making interface the new active one [ 92.903192][ T7618] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 93.230217][ T7633] syz.2.466: attempt to access beyond end of device [ 93.230217][ T7633] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 93.245911][ T7633] efs: cannot read volume header [ 93.278573][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.285258][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.288788][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.324861][ T5940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.336753][ T5940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.728376][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.842350][ T7666] random: crng reseeded on system resumption [ 93.886877][ T7665] Invalid logical block size (2) [ 93.912790][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.042920][ T7634] chnl_net:caif_netlink_parms(): no params data found [ 94.101288][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.163818][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054736400: rx timeout, send abort [ 94.171860][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 94.171871][ T40] audit: type=1400 audit(1750705276.725:486): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 94.181693][ T40] audit: type=1400 audit(1750705276.725:487): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.189357][ T40] audit: type=1400 audit(1750705276.725:488): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.197630][ T40] audit: type=1400 audit(1750705276.725:489): avc: denied { add_name } for pid=5329 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.206249][ T40] audit: type=1400 audit(1750705276.725:490): avc: denied { create } for pid=5329 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.214714][ T40] audit: type=1400 audit(1750705276.725:491): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.225062][ T40] audit: type=1400 audit(1750705276.725:492): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.287066][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.354398][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.362042][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.365206][ T7634] bridge_slave_0: entered allmulticast mode [ 94.377066][ T7634] bridge_slave_0: entered promiscuous mode [ 94.390837][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.393396][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.395705][ T7634] bridge_slave_1: entered allmulticast mode [ 94.403610][ T7634] bridge_slave_1: entered promiscuous mode [ 94.504416][ T7681] Bluetooth: MGMT ver 1.23 [ 94.506092][ T7681] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 94.513719][ T7680] input: syz0 as /devices/virtual/input/input8 [ 94.623707][ T46] bridge_slave_1: left allmulticast mode [ 94.627146][ T46] bridge_slave_1: left promiscuous mode [ 94.635262][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.654364][ T46] bridge_slave_0: left allmulticast mode [ 94.657402][ T46] bridge_slave_0: left promiscuous mode [ 94.664389][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802dbe0c00: rx timeout, send abort [ 94.667892][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.671702][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054736400: abort rx timeout. Force session deactivation [ 94.675051][ T7688] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 94.805835][ T7693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.890419][ T7694] __nla_validate_parse: 2 callbacks suppressed [ 94.890435][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 94.998065][ T46] bond1 (unregistering): (slave geneve2): Releasing active interface [ 95.167148][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802dbe0c00: abort rx timeout. Force session deactivation [ 95.339171][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.349013][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.358004][ T46] bond0 (unregistering): Released all slaves [ 95.399844][ T5940] Bluetooth: hci4: command tx timeout [ 95.570926][ T46] bond1 (unregistering): Released all slaves [ 95.633540][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.648432][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.689894][ T7696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.480'. [ 95.802730][ T7696] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7696 comm=syz.2.480 [ 95.833015][ T7634] team0: Port device team_slave_0 added [ 95.931383][ T7634] team0: Port device team_slave_1 added [ 96.010164][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.015084][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.030358][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.128538][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.137974][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.155645][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.284755][ T7634] hsr_slave_0: entered promiscuous mode [ 96.287136][ T7634] hsr_slave_1: entered promiscuous mode [ 96.294293][ T7634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.297537][ T7634] Cannot create hsr debugfs directory [ 96.325910][ T46] hsr_slave_0: left promiscuous mode [ 96.348450][ T46] hsr_slave_1: left promiscuous mode [ 96.355604][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.358912][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.383961][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.388685][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.393301][ T40] audit: type=1400 audit(1750705278.945:493): avc: denied { write } for pid=7715 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 96.454486][ T46] veth1_macvtap: left promiscuous mode [ 96.456752][ T46] veth0_macvtap: left promiscuous mode [ 96.458985][ T46] veth1_vlan: left promiscuous mode [ 96.470063][ T46] veth0_vlan: left promiscuous mode [ 97.169770][ C3] net_ratelimit: 64661 callbacks suppressed [ 97.169783][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 97.169950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 97.171810][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 97.176777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 97.180405][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 97.185260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 97.188720][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 97.193956][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 97.197752][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 97.202609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 97.480122][ T5940] Bluetooth: hci4: command tx timeout [ 97.720100][ T24] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 97.872404][ T24] usb 8-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 97.876550][ T24] usb 8-1: config 1 interface 0 has no altsetting 0 [ 97.880274][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.883207][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.886901][ T24] usb 8-1: Product: syz [ 97.888380][ T24] usb 8-1: Manufacturer: syz [ 97.893613][ T24] usb 8-1: SerialNumber: syz [ 97.903923][ T7728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.019200][ T46] team0 (unregistering): Port device team_slave_1 removed [ 98.139280][ T24] usb 8-1: USB disconnect, device number 11 [ 98.196398][ T46] team0 (unregistering): Port device team_slave_0 removed [ 99.287397][ T7721] veth5: entered promiscuous mode [ 99.573814][ T5940] Bluetooth: hci4: command tx timeout [ 99.660569][ T1146] vlan2: left promiscuous mode [ 99.664360][ T7634] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.692282][ T7634] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.724041][ T7634] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.772624][ T7634] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.010779][ T7760] ipt_REJECT: TCP_RESET invalid for non-tcp [ 100.014619][ T40] audit: type=1400 audit(1750705282.565:494): avc: denied { bind } for pid=7759 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.113946][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.133506][ T40] audit: type=1400 audit(1750705282.685:495): avc: denied { accept } for pid=7759 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.135425][ T7634] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.156339][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.159252][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.180428][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.184042][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.496306][ T7783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.492'. [ 100.576140][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.847322][ T7803] loop2: detected capacity change from 0 to 7 [ 100.877497][ T5949] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 100.879450][ T5949] loop2: partition table partially beyond EOD, truncated [ 100.899583][ T5949] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 100.938380][ T7803] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 100.940160][ T7803] loop2: partition table partially beyond EOD, truncated [ 100.943669][ T7803] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 101.007534][ T5949] udevd[5949]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 101.043804][ T7634] veth0_vlan: entered promiscuous mode [ 101.075487][ T7634] veth1_vlan: entered promiscuous mode [ 101.079226][ T5949] udevd[5949]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 101.130960][ T7634] veth0_macvtap: entered promiscuous mode [ 101.139458][ T7634] veth1_macvtap: entered promiscuous mode [ 101.166879][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.190894][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.213513][ T7634] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.217331][ T7634] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.222871][ T7634] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.226190][ T7634] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.228795][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'. [ 101.234967][ T7821] netlink: 48 bytes leftover after parsing attributes in process `syz.3.498'. [ 101.348963][ T7821] Can't find a SQUASHFS superblock on nullb0 [ 101.367785][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.372245][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.451439][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.455387][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.640271][ T5940] Bluetooth: hci4: command tx timeout [ 101.668169][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.462'. [ 102.109217][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.501'. [ 102.144198][ T7838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.148812][ T7838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.179733][ C3] net_ratelimit: 64591 callbacks suppressed [ 102.179748][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 102.179768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 102.181816][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 102.185748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 102.189405][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 102.193214][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 102.197270][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 102.201538][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 102.205847][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 102.209830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 102.299544][ T7845] netlink: 'syz.3.502': attribute type 11 has an invalid length. [ 102.306642][ T7845] netlink: 'syz.3.502': attribute type 11 has an invalid length. [ 102.309313][ T7845] netlink: 224 bytes leftover after parsing attributes in process `syz.3.502'. [ 102.319966][ T7845] binder: 7844:7845 ioctl 0 200000000740 returned -22 [ 102.323791][ T7845] binder: 7844:7845 ioctl c0306201 2000000003c0 returned -14 [ 102.326688][ T40] audit: type=1400 audit(1750705284.875:496): avc: denied { transfer } for pid=7844 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.560586][ T7838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.575201][ T7838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.620839][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 103.123979][ T7838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.128419][ T7838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.389679][ C1] sched: DL replenish lagged too much [ 106.661949][ T7838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.665607][ T7838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.189942][ C3] net_ratelimit: 66085 callbacks suppressed [ 107.189964][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 107.190365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 107.192939][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 107.197013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 107.201101][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 107.204835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 107.209611][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 107.213238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 107.218237][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 107.221874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 107.921319][ T7903] tmpfs: Unknown parameter '0x000000000000000418446744073709551615' [ 107.952778][ T40] audit: type=1400 audit(1750705290.495:497): avc: denied { ioctl } for pid=7902 comm="syz.3.508" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.005353][ T7903] syz.3.508 (7903) used greatest stack depth: 20792 bytes left [ 108.076255][ T7905] kvm: pic: non byte write [ 108.427947][ T7838] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.432027][ T7838] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.448199][ T7838] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.451824][ T7838] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.466254][ T7838] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.470031][ T7838] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.470053][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 108.479929][ T7838] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.482759][ T7838] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.489821][ T1473] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 108.533110][ T40] audit: type=1400 audit(1750705291.085:498): avc: denied { setopt } for pid=7925 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.600277][ T9] usb 8-1: device descriptor read/64, error -71 [ 108.652352][ T1473] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.656535][ T1473] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.662365][ T1473] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.666214][ T1473] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.849953][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 108.885862][ T1473] usb 9-1: usb_control_msg returned -32 [ 108.892322][ T1473] usbtmc 9-1:16.0: can't read capabilities [ 108.989904][ T9] usb 8-1: device descriptor read/64, error -71 [ 109.100735][ T9] usb usb8-port1: attempt power cycle [ 109.421828][ T7943] bridge0: port 3(syz_tun) entered blocking state [ 109.424096][ T7943] bridge0: port 3(syz_tun) entered disabled state [ 109.426461][ T7943] syz_tun: entered allmulticast mode [ 109.432178][ T7943] syz_tun: entered promiscuous mode [ 109.434214][ T7943] bridge0: port 3(syz_tun) entered blocking state [ 109.436397][ T7943] bridge0: port 3(syz_tun) entered forwarding state [ 109.440051][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 109.460597][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.518'. [ 109.470280][ T9] usb 8-1: device descriptor read/8, error -71 [ 109.710391][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 109.756042][ T9] usb 8-1: device descriptor read/8, error -71 [ 109.811504][ T40] audit: type=1400 audit(1750705292.365:499): avc: denied { connect } for pid=7957 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.870911][ T9] usb usb8-port1: unable to enumerate USB device [ 110.146342][ T7974] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.250732][ T7974] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.351516][ T7974] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.481859][ T7974] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.579120][ T7974] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.591805][ T7974] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.599192][ T7974] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.606592][ T7974] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.659642][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.527'. [ 110.720721][ T7988] syz.5.528 (7988): /proc/7987/oom_adj is deprecated, please use /proc/7987/oom_score_adj instead. [ 111.244139][ T6256] usb 9-1: USB disconnect, device number 6 [ 111.807886][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.536'. [ 112.177843][ T8031] netlink: 'syz.4.540': attribute type 1 has an invalid length. [ 112.185857][ T8031] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.540'. [ 112.199713][ C3] net_ratelimit: 60998 callbacks suppressed [ 112.199724][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 112.199753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 112.201847][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 112.205531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 112.209239][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 112.212911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 112.216650][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 112.220300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 112.224034][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 112.227618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 112.358431][ T8040] 9pnet: Unknown protocol version 9p2000.uiɸ:AbWG Ń\ҸKPbn [ 112.419083][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.545'. [ 112.485009][ T40] audit: type=1400 audit(1750705295.035:500): avc: denied { create } for pid=8043 comm="syz.5.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.489883][ T1473] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 112.500968][ T40] audit: type=1400 audit(1750705295.045:501): avc: denied { ioctl } for pid=8043 comm="syz.5.546" path="socket:[23730]" dev="sockfs" ino=23730 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.549820][ T6256] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 112.604818][ T8051] kvm: kvm [8050]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x0 [ 112.640945][ T1473] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.644092][ T1473] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.648071][ T1473] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.651256][ T1473] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.713861][ T6256] usb 7-1: config 1 interface 0 has no altsetting 0 [ 112.718054][ T6256] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 112.721235][ T6256] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.723772][ T6256] usb 7-1: Product: syz [ 112.725129][ T6256] usb 7-1: Manufacturer: syz [ 112.726701][ T6256] usb 7-1: SerialNumber: syz [ 112.858627][ T1473] usb 8-1: usb_control_msg returned -32 [ 112.860549][ T1473] usbtmc 8-1:16.0: can't read capabilities [ 113.039818][ T24] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 113.202235][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.205715][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 113.209144][ T24] usb 10-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 113.216324][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.220976][ T24] usb 10-1: config 0 descriptor?? [ 113.225312][ T8053] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 113.235305][ T8069] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 113.338766][ T6256] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 113.440856][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 113.442845][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 113.450339][ T24] usb 10-1: USB disconnect, device number 2 [ 113.530624][ T40] audit: type=1400 audit(1750705296.085:502): avc: denied { create } for pid=8080 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.537117][ T40] audit: type=1400 audit(1750705296.085:503): avc: denied { write } for pid=8080 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.559118][ T40] audit: type=1400 audit(1750705296.085:504): avc: denied { nlmsg_write } for pid=8080 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.566185][ T40] audit: type=1400 audit(1750705296.105:505): avc: denied { connect } for pid=8080 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.668828][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 113.724199][ T40] audit: type=1400 audit(1750705296.275:506): avc: denied { mounton } for pid=8087 comm="syz.4.555" path="/bus" dev="ramfs" ino=23977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 113.730502][ T8088] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 113.735751][ T8088] overlayfs: failed to set xattr on upper [ 113.738161][ T8088] overlayfs: ...falling back to redirect_dir=nofollow. [ 113.741078][ T8088] overlayfs: ...falling back to metacopy=off. [ 113.743596][ T8088] overlayfs: ...falling back to index=off. [ 113.745955][ T8088] overlayfs: ...falling back to uuid=null. [ 113.976124][ T8098] netlink: 'syz.4.557': attribute type 10 has an invalid length. [ 113.976487][ T40] audit: type=1400 audit(1750705296.525:507): avc: denied { read write } for pid=8097 comm="syz.5.558" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 113.996371][ T40] audit: type=1400 audit(1750705296.525:508): avc: denied { open } for pid=8097 comm="syz.5.558" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 113.999381][ T8098] overlayfs: failed to resolve './file1:/': -2 [ 114.012290][ T40] audit: type=1400 audit(1750705296.535:509): avc: denied { map } for pid=8097 comm="syz.5.558" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.026772][ T40] audit: type=1400 audit(1750705296.535:510): avc: denied { execute } for pid=8097 comm="syz.5.558" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.113597][ T40] audit: type=1400 audit(1750705296.655:511): avc: denied { execute } for pid=8103 comm="syz.4.559" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 114.220191][ T8104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.559'. [ 114.515338][ T8117] netlink: 816 bytes leftover after parsing attributes in process `syz.5.562'. [ 114.593098][ T8112] FAULT_INJECTION: forcing a failure. [ 114.593098][ T8112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.602676][ T8112] CPU: 2 UID: 0 PID: 8112 Comm: syz.4.561 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 114.602696][ T8112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.602705][ T8112] Call Trace: [ 114.602710][ T8112] [ 114.602715][ T8112] dump_stack_lvl+0x16c/0x1f0 [ 114.602764][ T8112] should_fail_ex+0x512/0x640 [ 114.602786][ T8112] _copy_to_user+0x32/0xd0 [ 114.602802][ T8112] simple_read_from_buffer+0xcb/0x170 [ 114.602817][ T8112] proc_fail_nth_read+0x197/0x270 [ 114.602832][ T8112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.602846][ T8112] ? rw_verify_area+0xcf/0x680 [ 114.602857][ T8112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.602869][ T8112] vfs_read+0x1e4/0xc60 [ 114.602884][ T8112] ? __pfx___mutex_lock+0x10/0x10 [ 114.602900][ T8112] ? __pfx_vfs_read+0x10/0x10 [ 114.602916][ T8112] ? __fget_files+0x20e/0x3c0 [ 114.602933][ T8112] ksys_read+0x12a/0x250 [ 114.602946][ T8112] ? __pfx_ksys_read+0x10/0x10 [ 114.602962][ T8112] do_syscall_64+0xcd/0x4c0 [ 114.602978][ T8112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.602989][ T8112] RIP: 0033:0x7f907878d33c [ 114.602998][ T8112] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 114.603009][ T8112] RSP: 002b:00007f9079588030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.603019][ T8112] RAX: ffffffffffffffda RBX: 00007f90789b5fa0 RCX: 00007f907878d33c [ 114.603026][ T8112] RDX: 000000000000000f RSI: 00007f90795880a0 RDI: 0000000000000004 [ 114.603032][ T8112] RBP: 00007f9079588090 R08: 0000000000000000 R09: 0000000000000000 [ 114.603038][ T8112] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 114.603044][ T8112] R13: 0000000000000000 R14: 00007f90789b5fa0 R15: 00007fff28a218e8 [ 114.603056][ T8112] [ 114.879383][ T8141] afs: Unknown parameter 'dM]yn' [ 114.893209][ T8138] hugetlbfs: Unknown parameter '}a1 `?mhV} +_;]' [ 114.904603][ T8144] netlink: 64 bytes leftover after parsing attributes in process `syz.5.566'. [ 115.178736][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.571'. [ 115.180824][ T8168] afs: Unknown parameter 'dy?e0' [ 115.238879][ T5988] usb 8-1: USB disconnect, device number 16 [ 115.308090][ T24] usb 7-1: USB disconnect, device number 4 [ 115.319161][ T24] usblp1: removed [ 115.421965][ T8187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8187 comm=syz.5.574 [ 115.435092][ T8187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8187 comm=syz.5.574 [ 115.444850][ T63] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 115.578433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 115.604215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.616542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.625377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.636618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.681859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 115.684417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 115.760153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 115.769158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 115.783137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 116.079779][ T6256] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 116.234057][ T6256] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.238287][ T6256] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.246507][ T6256] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.251000][ T6256] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.553818][ T6256] usb 9-1: usb_control_msg returned -32 [ 116.555618][ T6256] usbtmc 9-1:16.0: can't read capabilities [ 117.010772][ T8267] serio: Serial port ptm0 [ 117.066979][ T8274] netlink: 'syz.2.591': attribute type 12 has an invalid length. [ 117.090790][ T6213] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 117.209702][ C1] net_ratelimit: 68352 callbacks suppressed [ 117.209713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 117.209715][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 117.209872][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 117.211780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 117.215536][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 117.219238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 117.223087][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 117.226840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 117.230524][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 117.234232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 117.269777][ T6213] usb 10-1: Using ep0 maxpacket: 16 [ 117.273720][ T6213] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 117.280035][ T6213] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 117.282872][ T6213] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.285411][ T6213] usb 10-1: Product: syz [ 117.286759][ T6213] usb 10-1: Manufacturer: syz [ 117.292558][ T6213] usb 10-1: SerialNumber: syz [ 117.299463][ T6213] usb 10-1: config 0 descriptor?? [ 117.307370][ T6213] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 117.312522][ T6213] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 117.904078][ T6213] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 118.318919][ T6213] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 118.321988][ T6213] em28xx 10-1:0.0: board has no eeprom [ 118.399805][ T6213] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 118.402496][ T6213] em28xx 10-1:0.0: dvb set to bulk mode. [ 118.405839][ T5988] em28xx 10-1:0.0: Binding DVB extension [ 118.411982][ T6213] usb 10-1: USB disconnect, device number 3 [ 118.423318][ T6213] em28xx 10-1:0.0: Disconnecting em28xx [ 118.521298][ T5988] em28xx 10-1:0.0: Registering input extension [ 118.523614][ T6213] em28xx 10-1:0.0: Closing input extension [ 118.539578][ T6213] em28xx 10-1:0.0: Freeing device [ 118.543194][ T40] kauditd_printk_skb: 8759 callbacks suppressed [ 118.543204][ T40] audit: type=1326 audit(1750705301.095:9271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.2.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7038e929 code=0x50000 [ 118.559982][ T40] audit: type=1326 audit(1750705301.095:9272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.2.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7038e929 code=0x50000 [ 118.570275][ T40] audit: type=1326 audit(1750705301.095:9273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.2.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7038e929 code=0x50000 [ 118.583785][ T40] audit: type=1326 audit(1750705301.095:9274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.2.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7038e929 code=0x50000 [ 118.599705][ T40] audit: type=1326 audit(1750705301.095:9275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.2.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7038e929 code=0x50000 [ 118.607001][ T40] audit: type=1326 audit(1750705301.095:9276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.2.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7038e929 code=0x50000 [ 118.620007][ T40] audit: type=1326 audit(1750705301.095:9277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.2.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7038e929 code=0x50000 [ 118.637309][ T40] audit: type=1326 audit(1750705301.095:9278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.2.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7038e929 code=0x50000 [ 118.644500][ T40] audit: type=1326 audit(1750705301.095:9279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.2.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7038e929 code=0x50000 [ 118.659715][ T40] audit: type=1326 audit(1750705301.095:9280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.2.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7038e929 code=0x50000 [ 118.868933][ T6256] usb 9-1: USB disconnect, device number 7 [ 119.426718][ T8311] wg2: entered promiscuous mode [ 119.457055][ T8311] team0: Port device wg2 added [ 119.611725][ T5932] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 119.618441][ T8316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.633244][ T8316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.983827][ T8316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.987076][ T8316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.036832][ T5932] usb 10-1: config 1 has an invalid interface number: 19 but max is 3 [ 120.039331][ T5932] usb 10-1: config 1 has an invalid interface number: 221 but max is 3 [ 120.047711][ T5932] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 120.056197][ T5932] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.059383][ T5932] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 4 [ 120.080018][ T5932] usb 10-1: config 1 has no interface number 0 [ 120.081956][ T5932] usb 10-1: config 1 has no interface number 1 [ 120.084310][ T5932] usb 10-1: config 1 interface 19 altsetting 9 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 120.087552][ T5932] usb 10-1: config 1 interface 19 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 120.101338][ T5932] usb 10-1: config 1 interface 19 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 120.104691][ T5932] usb 10-1: config 1 interface 19 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 1023 [ 120.108099][ T5932] usb 10-1: config 1 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 120.131141][ T5932] usb 10-1: config 1 interface 19 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 120.134459][ T5932] usb 10-1: config 1 interface 19 altsetting 9 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 120.137676][ T5932] usb 10-1: config 1 interface 19 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 120.213153][ T5932] usb 10-1: config 1 interface 221 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 120.217170][ T5932] usb 10-1: config 1 interface 19 has no altsetting 0 [ 120.317115][ T5932] usb 10-1: config 1 interface 221 has no altsetting 0 [ 120.398466][ T5932] usb 10-1: New USB device found, idVendor=f740, idProduct=76f7, bcdDevice=2d.ef [ 120.405646][ T5932] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.408180][ T5932] usb 10-1: Product: syz [ 120.409533][ T5932] usb 10-1: Manufacturer: 兩悮줈篞ﶾ썺埈䕶ự衚玴鋡煑剗碮ᫍ㐕贼⍿㦁蚭턨歍๰㛩臖〚仩誡舔＾邴㮙✊皧燰䧷ᆹ浌竄嘧凣鵎醑ㅲ䏎僘㊍趍鶇춴㼐䏣迮倝꩞剓樇ኇ뾂쭍ﱊ䉞凙싶柟ﴢ꠾▫貉伎峃ꈉ躮黋胲鴢՘艋妫ể醺盏ヶ㲎蔒达媖킆傯놤ᑭ狑௅ô永詬檢ꗑ澐숷⡝遗燐ꐀ믑ꚯ嗄 [ 120.443022][ T5932] usb 10-1: SerialNumber: syz [ 120.502066][ T8309] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 120.504491][ T8309] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 120.706721][ T8316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.713140][ T8316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.745477][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.757126][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.917034][ T8320] trusted_key: encrypted_key: keylen parameter is missing [ 120.936733][ T8316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.941384][ T8316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.020161][ T8324] tipc: Failed to remove unknown binding: 66,1,1/0:2174981523/2174981525 [ 121.023119][ T8324] tipc: Failed to remove unknown binding: 66,1,1/0:2174981523/2174981525 [ 121.175992][ T8316] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.181652][ T8316] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.189413][ T8316] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.196080][ T8316] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.209274][ T8316] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.211960][ T8316] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.220584][ T8316] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.223294][ T8316] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.369739][ T8341] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 121.551681][ T8348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8348 comm=syz.4.618 [ 121.655041][ T8351] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 122.053593][ T5932] usb-storage 10-1:1.19: USB Mass Storage device detected [ 122.189082][ T5932] usb 10-1: USB disconnect, device number 4 [ 122.204183][ T8365] tmpfs: Bad value for 'mpol' [ 122.219707][ C3] net_ratelimit: 57271 callbacks suppressed [ 122.219716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 122.219720][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 122.219844][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 122.221734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 122.224966][ T8370] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 122.225476][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 122.229097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 122.232717][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 122.236385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 122.238809][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 122.285006][ T8367] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.302997][ T8367] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.319382][ T8372] dlm: non-version read from control device 8224 [ 122.652089][ T8384] hfs: Unknown parameter 'norecovery' [ 123.312610][ T8367] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.320889][ T8367] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.516084][ T8391] program syz.5.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.533081][ T8367] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.536237][ T8367] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.567246][ T8393] program syz.5.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.595273][ T40] kauditd_printk_skb: 1418 callbacks suppressed [ 123.595286][ T40] audit: type=1400 audit(1750705306.145:10699): avc: denied { ioctl } for pid=8386 comm="syz.4.630" path="socket:[19717]" dev="sockfs" ino=19717 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 123.632038][ T8392] netlink: 'syz.4.630': attribute type 10 has an invalid length. [ 123.643730][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.632'. [ 125.011263][ T8392] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 125.055925][ T8367] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.059231][ T8367] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.288979][ T8387] bond0: (slave bridge0): Releasing backup interface [ 125.376192][ T8404] IPVS: Error connecting to the multicast addr [ 125.451189][ T8367] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.453903][ T8367] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.469109][ T8367] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.471987][ T8367] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.481932][ T8367] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.484929][ T8367] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.492065][ T8367] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.495063][ T8367] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.511027][ T40] audit: type=1400 audit(1750705308.065:10700): avc: denied { lock } for pid=8410 comm="syz.5.635" path="socket:[19720]" dev="sockfs" ino=19720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 125.665485][ T8411] netlink: 'syz.5.635': attribute type 15 has an invalid length. [ 125.667966][ T8411] netlink: 24 bytes leftover after parsing attributes in process `syz.5.635'. [ 125.671230][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.635'. [ 126.163488][ T8425] netlink: 'syz.4.641': attribute type 11 has an invalid length. [ 126.226054][ T8425] netlink: 'syz.4.641': attribute type 5 has an invalid length. [ 126.401023][ T8425] ip6erspan0: entered promiscuous mode [ 126.798844][ T8433] pimreg: entered allmulticast mode [ 126.850029][ T8436] netlink: 'syz.4.644': attribute type 29 has an invalid length. [ 126.858471][ T8436] netlink: 'syz.4.644': attribute type 29 has an invalid length. [ 126.873645][ T8433] pimreg: left allmulticast mode [ 127.229790][ C1] net_ratelimit: 66809 callbacks suppressed [ 127.229804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 127.229811][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 127.231840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 127.236866][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 127.240499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 127.245522][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 127.249121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.254284][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 127.258021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 127.261797][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 128.494676][ T40] audit: type=1400 audit(1750705311.015:10701): avc: denied { setattr } for pid=8470 comm="syz.5.652" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.582521][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 128.633333][ T8482] ubi31: attaching mtd0 [ 128.637588][ T8482] ubi31: scanning is finished [ 128.639247][ T8482] ubi31: empty MTD device detected [ 129.069573][ T40] audit: type=1400 audit(1750705311.615:10702): avc: denied { mount } for pid=8496 comm="syz.2.660" name="/" dev="configfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 129.113526][ T40] audit: type=1400 audit(1750705311.635:10703): avc: denied { search } for pid=8496 comm="syz.2.660" name="/" dev="configfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.142060][ T40] audit: type=1400 audit(1750705311.635:10704): avc: denied { search } for pid=8496 comm="syz.2.660" name="/" dev="configfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.163694][ T40] audit: type=1400 audit(1750705311.635:10705): avc: denied { setattr } for pid=8496 comm="syz.2.660" name="/" dev="configfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.201086][ T8482] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 129.220257][ T8482] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 129.230101][ T8482] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 129.232543][ T8482] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 129.236666][ T8482] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 129.241710][ T8482] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 129.248809][ T8482] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3658782065 [ 129.278574][ T8482] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 129.293161][ T8498] ubi31: background thread "ubi_bgt31d" started, PID 8498 [ 129.448038][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 129.473920][ T40] audit: type=1400 audit(1750705311.965:10706): avc: denied { create } for pid=8504 comm="syz.2.662" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.573701][ T40] audit: type=1400 audit(1750705312.125:10707): avc: denied { unlink } for pid=5931 comm="syz-executor" name="file0" dev="tmpfs" ino=1197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.783230][ T40] audit: type=1400 audit(1750705312.335:10708): avc: denied { append } for pid=8513 comm="syz.2.665" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 129.831916][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 129.844304][ T40] audit: type=1800 audit(1750705312.395:10709): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.666" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 129.989909][ T9] usb 10-1: config 0 has no interfaces? [ 129.992397][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.996056][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.029985][ T9] usb 10-1: config 0 descriptor?? [ 130.238798][ T9] usb 10-1: USB disconnect, device number 5 [ 130.726434][ T8538] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.674'. [ 130.978884][ T40] audit: type=1400 audit(1750705313.525:10710): avc: denied { accept } for pid=8540 comm="syz.2.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.621031][ T5988] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 132.239714][ C1] net_ratelimit: 64751 callbacks suppressed [ 132.239727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 132.239740][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 132.241818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 132.245546][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 132.249292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 132.253020][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 132.256798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 132.260680][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 132.264486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 132.268146][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 132.563364][ T40] audit: type=1400 audit(1750705315.115:10711): avc: denied { mount } for pid=8573 comm="syz.5.684" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 132.613766][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.615862][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.249800][ C3] net_ratelimit: 69072 callbacks suppressed [ 137.249812][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 137.249812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 137.249938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 137.252007][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 137.256583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 137.260255][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 137.264980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.268664][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 137.273563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.277058][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 142.259783][ C1] net_ratelimit: 65467 callbacks suppressed [ 142.259802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.259826][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 142.262342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.266021][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 142.269869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 142.273644][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 142.277356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 142.281546][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 142.286595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 142.291024][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 147.269737][ C3] net_ratelimit: 53752 callbacks suppressed [ 147.269751][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 147.269776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 147.271822][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 147.275590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 147.279770][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 147.283477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 147.287259][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 147.290998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.294829][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:10:8d:c4:11:04, vlan:0) [ 147.298615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.821550][ T1473] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 60 sec [ 151.015727][ T1421] ================================================================== [ 151.018111][ T1421] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 151.020249][ T1421] Read of size 8 at addr ffff8880368df020 by task aoe_tx0/1421 [ 151.023917][ T1421] [ 151.025783][ T1421] CPU: 0 UID: 0 PID: 1421 Comm: aoe_tx0 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 151.025799][ T1421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.025806][ T1421] Call Trace: [ 151.025811][ T1421] [ 151.025815][ T1421] dump_stack_lvl+0x116/0x1f0 [ 151.025835][ T1421] print_report+0xcd/0x680 [ 151.025850][ T1421] ? __virt_addr_valid+0x81/0x610 [ 151.025863][ T1421] ? __phys_addr+0xe8/0x180 [ 151.025874][ T1421] ? handle_tx+0x5a5/0x630 [ 151.025889][ T1421] kasan_report+0xe0/0x110 [ 151.025903][ T1421] ? handle_tx+0x5a5/0x630 [ 151.025918][ T1421] handle_tx+0x5a5/0x630 [ 151.025934][ T1421] dev_hard_start_xmit+0x97/0x740 [ 151.025949][ T1421] __dev_queue_xmit+0x7eb/0x43e0 [ 151.025962][ T1421] ? rcu_is_watching+0x12/0xc0 [ 151.025975][ T1421] ? irqentry_exit+0x3b/0x90 [ 151.025990][ T1421] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.026004][ T1421] ? __pfx___dev_queue_xmit+0x10/0x10 [ 151.026017][ T1421] ? __lock_acquire+0xb8a/0x1c90 [ 151.026037][ T1421] ? __lock_acquire+0xb8a/0x1c90 [ 151.026060][ T1421] ? do_raw_spin_lock+0x12c/0x2b0 [ 151.026077][ T1421] ? find_held_lock+0x2b/0x80 [ 151.026095][ T1421] ? skb_dequeue+0x126/0x180 [ 151.026111][ T1421] ? find_held_lock+0x2b/0x80 [ 151.026129][ T1421] ? rcu_is_watching+0x12/0xc0 [ 151.026149][ T1421] tx+0xcc/0x190 [ 151.026163][ T1421] ? __pfx_tx+0x10/0x10 [ 151.026174][ T1421] kthread+0x1e1/0x3e0 [ 151.026194][ T1421] ? find_held_lock+0x2b/0x80 [ 151.026210][ T1421] ? __pfx_kthread+0x10/0x10 [ 151.026230][ T1421] ? __pfx_default_wake_function+0x10/0x10 [ 151.026249][ T1421] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.026267][ T1421] ? __kthread_parkme+0x19e/0x250 [ 151.026285][ T1421] ? __pfx_kthread+0x10/0x10 [ 151.026302][ T1421] kthread+0x3c2/0x780 [ 151.026314][ T1421] ? __pfx_kthread+0x10/0x10 [ 151.026326][ T1421] ? rcu_is_watching+0x12/0xc0 [ 151.026341][ T1421] ? __pfx_kthread+0x10/0x10 [ 151.026353][ T1421] ret_from_fork+0x5d4/0x6f0 [ 151.026372][ T1421] ? __pfx_kthread+0x10/0x10 [ 151.026384][ T1421] ret_from_fork_asm+0x1a/0x30 [ 151.026402][ T1421] [ 151.026407][ T1421] [ 151.094649][ T1421] Allocated by task 7240: [ 151.096050][ T1421] kasan_save_stack+0x33/0x60 [ 151.097731][ T1421] kasan_save_track+0x14/0x30 [ 151.099627][ T1421] __kasan_kmalloc+0xaa/0xb0 [ 151.101114][ T1421] alloc_tty_struct+0x96/0x8c0 [ 151.102688][ T1421] tty_init_dev.part.0+0x1e/0x500 [ 151.104317][ T1421] tty_open+0xa50/0xf90 [ 151.105694][ T1421] chrdev_open+0x234/0x6a0 [ 151.107139][ T1421] do_dentry_open+0x744/0x1c10 [ 151.108821][ T1421] vfs_open+0x82/0x3f0 [ 151.110150][ T1421] path_openat+0x1de4/0x2cb0 [ 151.111652][ T1421] do_filp_open+0x20b/0x470 [ 151.113274][ T1421] do_sys_openat2+0x11b/0x1d0 [ 151.115167][ T1421] __x64_sys_openat+0x174/0x210 [ 151.117062][ T1421] do_syscall_64+0xcd/0x4c0 [ 151.118851][ T1421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.121157][ T1421] [ 151.122103][ T1421] Freed by task 1473: [ 151.123415][ T1421] kasan_save_stack+0x33/0x60 [ 151.124922][ T1421] kasan_save_track+0x14/0x30 [ 151.126679][ T1421] kasan_save_free_info+0x3b/0x60 [ 151.128501][ T1421] __kasan_slab_free+0x51/0x70 [ 151.130086][ T1421] kfree+0x2b4/0x4d0 [ 151.131508][ T1421] process_one_work+0x9cc/0x1b70 [ 151.133096][ T1421] worker_thread+0x6c8/0xf10 [ 151.134581][ T1421] kthread+0x3c2/0x780 [ 151.135883][ T1421] ret_from_fork+0x5d4/0x6f0 [ 151.137365][ T1421] ret_from_fork_asm+0x1a/0x30 [ 151.138863][ T1421] [ 151.139770][ T1421] Last potentially related work creation: [ 151.142197][ T1421] kasan_save_stack+0x33/0x60 [ 151.143925][ T1421] kasan_record_aux_stack+0xa7/0xc0 [ 151.145697][ T1421] insert_work+0x36/0x230 [ 151.147071][ T1421] __queue_work+0x97e/0x10f0 [ 151.148534][ T1421] queue_work_on+0x1a4/0x1f0 [ 151.150028][ T1421] release_tty+0x4de/0x5d0 [ 151.151597][ T1421] tty_release_struct+0xb7/0xe0 [ 151.153432][ T1421] tty_release+0xe2d/0x1430 [ 151.155088][ T1421] __fput+0x402/0xb70 [ 151.156451][ T1421] task_work_run+0x150/0x240 [ 151.157941][ T1421] do_exit+0x86c/0x2bd0 [ 151.159486][ T1421] do_group_exit+0xd3/0x2a0 [ 151.161087][ T1421] get_signal+0x2673/0x26d0 [ 151.162562][ T1421] arch_do_signal_or_restart+0x8f/0x7d0 [ 151.164369][ T1421] exit_to_user_mode_loop+0x84/0x110 [ 151.166064][ T1421] do_syscall_64+0x3f6/0x4c0 [ 151.167599][ T1421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.169550][ T1421] [ 151.170361][ T1421] The buggy address belongs to the object at ffff8880368df000 [ 151.170361][ T1421] which belongs to the cache kmalloc-cg-2k of size 2048 [ 151.175252][ T1421] The buggy address is located 32 bytes inside of [ 151.175252][ T1421] freed 2048-byte region [ffff8880368df000, ffff8880368df800) [ 151.180338][ T1421] [ 151.181263][ T1421] The buggy address belongs to the physical page: [ 151.183540][ T1421] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x368d8 [ 151.186466][ T1421] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 151.189849][ T1421] memcg:ffff888053208a81 [ 151.191391][ T1421] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 151.193921][ T1421] page_type: f5(slab) [ 151.195502][ T1421] raw: 00fff00000000040 ffff88801b84c140 ffffea000154da00 dead000000000002 [ 151.198748][ T1421] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888053208a81 [ 151.202845][ T1421] head: 00fff00000000040 ffff88801b84c140 ffffea000154da00 dead000000000002 [ 151.206239][ T1421] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888053208a81 [ 151.209585][ T1421] head: 00fff00000000003 ffffea0000da3601 00000000ffffffff 00000000ffffffff [ 151.212220][ T1421] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 151.215226][ T1421] page dumped because: kasan: bad access detected [ 151.217284][ T1421] page_owner tracks the page as allocated [ 151.219064][ T1421] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5931, tgid 5931 (syz-executor), ts 51711968232, free_ts 51393049304 [ 151.226299][ T1421] post_alloc_hook+0x1c0/0x230 [ 151.227880][ T1421] get_page_from_freelist+0x1321/0x3890 [ 151.229664][ T1421] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 151.231682][ T1421] alloc_pages_mpol+0x1fb/0x550 [ 151.233331][ T1421] new_slab+0x23b/0x330 [ 151.234676][ T1421] ___slab_alloc+0xd9c/0x1940 [ 151.236168][ T1421] __slab_alloc.constprop.0+0x56/0xb0 [ 151.237902][ T1421] __kmalloc_noprof+0x2f2/0x510 [ 151.239437][ T1421] __register_sysctl_table+0xb3/0x1900 [ 151.241335][ T1421] __devinet_sysctl_register+0x1b9/0x360 [ 151.243365][ T1421] devinet_sysctl_register+0x17b/0x200 [ 151.245095][ T1421] inetdev_init+0x2b8/0x5a0 [ 151.246669][ T1421] inetdev_event+0xc5f/0x18a0 [ 151.248248][ T1421] notifier_call_chain+0xb9/0x410 [ 151.250047][ T1421] call_netdevice_notifiers_info+0xbe/0x140 [ 151.252130][ T1421] register_netdevice+0x182e/0x2270 [ 151.253917][ T1421] page last free pid 0 tgid 0 stack trace: [ 151.256022][ T1421] __free_frozen_pages+0x7fe/0x1180 [ 151.258059][ T1421] __folio_put+0x329/0x450 [ 151.259828][ T1421] skb_release_data+0x7fb/0x9c0 [ 151.261647][ T1421] napi_consume_skb+0x15a/0x220 [ 151.263508][ T1421] net_rx_action+0x47f/0xfe0 [ 151.265055][ T1421] handle_softirqs+0x216/0x8e0 [ 151.266705][ T1421] __irq_exit_rcu+0x109/0x170 [ 151.268371][ T1421] irq_exit_rcu+0x9/0x30 [ 151.269898][ T1421] common_interrupt+0xbf/0xe0 [ 151.271444][ T1421] asm_common_interrupt+0x26/0x40 [ 151.273113][ T1421] [ 151.273911][ T1421] Memory state around the buggy address: [ 151.275763][ T1421] ffff8880368def00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 151.278298][ T1421] ffff8880368def80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 151.280912][ T1421] >ffff8880368df000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.283603][ T1421] ^ [ 151.285318][ T1421] ffff8880368df080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.287923][ T1421] ffff8880368df100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.290907][ T1421] ================================================================== [ 151.294423][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.296353][ T1421] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 151.298788][ T1421] CPU: 0 UID: 0 PID: 1421 Comm: aoe_tx0 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 151.302446][ T1421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.306259][ T1421] Call Trace: [ 151.307411][ T1421] [ 151.308426][ T1421] dump_stack_lvl+0x3d/0x1f0 [ 151.310080][ T1421] panic+0x71c/0x800 [ 151.311454][ T1421] ? __pfx_panic+0x10/0x10 [ 151.312969][ T1421] ? irqentry_exit+0x3b/0x90 [ 151.314546][ T1421] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.316220][ T1421] ? handle_tx+0x5a5/0x630 [ 151.317674][ T1421] ? check_panic_on_warn+0x1f/0xb0 [ 151.319306][ T1421] ? handle_tx+0x5a5/0x630 [ 151.320737][ T1421] check_panic_on_warn+0xab/0xb0 [ 151.322376][ T1421] end_report+0x107/0x170 [ 151.323798][ T1421] kasan_report+0xee/0x110 [ 151.325231][ T1421] ? handle_tx+0x5a5/0x630 [ 151.326667][ T1421] handle_tx+0x5a5/0x630 [ 151.328033][ T1421] dev_hard_start_xmit+0x97/0x740 [ 151.329659][ T1421] __dev_queue_xmit+0x7eb/0x43e0 [ 151.331342][ T1421] ? rcu_is_watching+0x12/0xc0 [ 151.332869][ T1421] ? irqentry_exit+0x3b/0x90 [ 151.334407][ T1421] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.335976][ T1421] ? __pfx___dev_queue_xmit+0x10/0x10 [ 151.337702][ T1421] ? __lock_acquire+0xb8a/0x1c90 [ 151.339319][ T1421] ? __lock_acquire+0xb8a/0x1c90 [ 151.340905][ T1421] ? do_raw_spin_lock+0x12c/0x2b0 [ 151.342545][ T1421] ? find_held_lock+0x2b/0x80 [ 151.344088][ T1421] ? skb_dequeue+0x126/0x180 [ 151.345540][ T1421] ? find_held_lock+0x2b/0x80 [ 151.347005][ T1421] ? rcu_is_watching+0x12/0xc0 [ 151.348492][ T1421] tx+0xcc/0x190 [ 151.349634][ T1421] ? __pfx_tx+0x10/0x10 [ 151.350954][ T1421] kthread+0x1e1/0x3e0 [ 151.352314][ T1421] ? find_held_lock+0x2b/0x80 [ 151.354071][ T1421] ? __pfx_kthread+0x10/0x10 [ 151.355867][ T1421] ? __pfx_default_wake_function+0x10/0x10 [ 151.358395][ T1421] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.360672][ T1421] ? __kthread_parkme+0x19e/0x250 [ 151.362895][ T1421] ? __pfx_kthread+0x10/0x10 [ 151.364936][ T1421] kthread+0x3c2/0x780 [ 151.366785][ T1421] ? __pfx_kthread+0x10/0x10 [ 151.368616][ T1421] ? rcu_is_watching+0x12/0xc0 [ 151.370268][ T1421] ? __pfx_kthread+0x10/0x10 [ 151.371805][ T1421] ret_from_fork+0x5d4/0x6f0 [ 151.373406][ T1421] ? __pfx_kthread+0x10/0x10 [ 151.374884][ T1421] ret_from_fork_asm+0x1a/0x30 [ 151.376417][ T1421] [ 151.378227][ T1421] Kernel Offset: disabled [ 151.379599][ T1421] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:02:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b8a55 RDI=ffffffff9b087320 RBP=ffffffff9b0872e0 RSP=ffffc9000702f458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0872e0 R15=ffffffff855b89f0 RIP=ffffffff855b8a7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c366e2b CR3=000000004fafe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000030300 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd55fbcf60 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf70411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf70411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf70411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf70411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf70411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf70411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000009c30 00000000000002ca 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000023478f RBX=0000000000000001 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de19d38 RDI=ffffffff8c157a20 RBP=ffffed1003c53488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801e29a440 R14=ffffffff90a81150 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055df93fb2620 CR3=00000000394b9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000fff Opmask02=00000000003fefff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055df94035980 000055df94035980 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055df940139c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055df93dda970 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f310bdf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bafe85c19095048a 737326a9ba8bcb0c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373a2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00006364755f796d 6d75643d454d414e 5f4344555f425355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005e59485f4450 50485900454d414e 5f4344555f425355 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a756b733a322e 392d3533712d6370 7276633a3174633a 554d45516e76633a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000010 RBX=ffffc900006484b0 RCX=ffffffff8a572462 RDX=0000000000000000 RSI=ffffffff8cf6c620 RDI=000000000000dd86 RBP=ffffffff8cf6c620 RSP=ffffc900006481c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=000000000000dd86 R13=ffff88802a56cd80 R14=000000000000dd86 R15=ffffc90000648490 RIP=ffffffff81bc1956 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055df94073340 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff89dc1e54 0000000100000004 0000000600040008 000602000000000c ZMM18=1e4fc8fd18596e6a 1818daa6e33e967b 1e4fc8fd18596e6a 1818daa6e33e967b 1e4fc8fd18596e6a 1818daa6e33e967b 1e4fc8fd18596e6a 1818daa6e33e967b ZMM19=3904000000000000 0000000000000005 3904000000000000 0000000000000004 3904000000000000 0000000000000003 3904000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00f80000010c0000 0120000001340000 00f80000014c0000 01640000017c0000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0194000001a80000 01bc000001d00000 01e4000001f80000 020c000000880000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0224000002440000 025c000002700000 02900000001e0000 0000000000000000 ZMM24=6a51afb66a51afb6 6a51afb66a51afb6 6a51afb66a51afb6 6a51afb66a51afb6 6a51afb66a51afb6 6a51afb66a51afb6 6a51afb66a51afb6 6a51afb66a51afb6 ZMM25=c67473ecc67473ec c67473ecc67473ec c67473ecc67473ec c67473ecc67473ec c67473ecc67473ec c67473ecc67473ec c67473ecc67473ec c67473ecc67473ec ZMM26=27a7e1fd27a7e1fd 27a7e1fd27a7e1fd 27a7e1fd27a7e1fd 27a7e1fd27a7e1fd 27a7e1fd27a7e1fd 27a7e1fd27a7e1fd 27a7e1fd27a7e1fd 27a7e1fd27a7e1fd ZMM27=765d41c3765d41c3 765d41c3765d41c3 765d41c3765d41c3 765d41c3765d41c3 765d41c3765d41c3 765d41c3765d41c3 765d41c3765d41c3 765d41c3765d41c3 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ce060000ce060000 ce060000ce060000 ce060000ce060000 ce060000ce060000 ce060000ce060000 ce060000ce060000 ce060000ce060000 ce060000ce060000 info registers vcpu 3 CPU#3 RAX=ffffffff91d7d447 RBX=0000000000000002 RCX=ffffffff91d7d442 RDX=dffffc0000000000 RSI=0000000000000000 RDI=1ffffffff23afa88 RBP=ffffc900006f83a0 RSP=ffffc900006f82e8 R8 =ffffffff91d7d446 R9 =0000000000000000 R10=0000000000000000 R11=000000000008fbc2 R12=ffffc900006f83a8 R13=ffffc900006f8358 R14=ffffc900006f8b98 R15=ffffc900006f838c RIP=ffffffff816ad322 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005628368d7ee0 CR3=00000000335bc000 CR4=00352ef0 DR0=0000000000000008 DR1=00000000000000ff DR2=fffffffffffffffb DR3=3e00000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000041004040 Opmask01=0000000000000000 Opmask02=00000000e0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff28a21c70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9078811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9078811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9078811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9078811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9078811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9078811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003a800000006 00000260000001c8 0000013000000098 0000000000000260 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c69614600646574 7563657845006574 7563657845006465 74746f687370616e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5300796461655200 656b616873646e61 48006c616974696e 4900656c676e616d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000