last executing test programs: 2m6.565606595s ago: executing program 0 (id=23): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x20, 0xa8801) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$char_usb(r0, &(0x7f00000008c0)='-', 0x1) 2m6.565193713s ago: executing program 0 (id=24): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910faa9d6dc7b6ef915d564c90c2000000000000", 0x18) (rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="85000000a0000000270000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) recvmmsg(r1, &(0x7f000000c940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000500)=""/4096, 0x11}], 0x2}}], 0x1, 0x40000101, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x4000000000002, 0x300) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x4) (rerun: 64) setreuid(0xee01, 0xee01) (async) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0xff05, 0x2e, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m6.564845435s ago: executing program 0 (id=25): capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000332000/0x4000)=nil, 0x4000, &(0x7f0000012480)) syz_emit_vhci(&(0x7f0000001580)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x4, 0xc8, 0x9}}}, 0x7) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x2) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) mount$bind(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='./file0\x00', &(0x7f0000002140), 0x40, 0x0) 2m6.414675992s ago: executing program 0 (id=27): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x8001, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000180)=@ethtool_stats}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @rand_addr=0x64010101}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000340)) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x3085c80, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1a", 0x1, 0xffffffffffffffff) keyctl$update(0x2, r6, &(0x7f0000001080)="83", 0x1) r7 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000002840)=0x800000) listen(r1, 0x0) syz_emit_ethernet(0x66, &(0x7f00000018c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004502005800000000012f907800000000e0000001248086dd0000120010000800000086dd080088be0000008f5657f5ddafbc9b034f00100000040100000000000000080022eb00000000200000060200000000000000000d000008006558000000009a0dad995e4ca7c0d36777e9210cee5a68b81b14111c1ca34b2f263904a61f18e00d555ffd0faba54315407bdfac0d388d01521696ecc79748c52ac23b786a64089852f3e4241bbeb452ea732f995bd47fab0d43820b75d56f403d66e0e9cec29d38b1eae6"], 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r9 = eventfd2(0x0, 0x80800) io_submit(r8, 0x2, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x200, r1, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) io_getevents(r8, 0x0, 0x1, &(0x7f0000000040)=[{}], 0x0) shutdown(r1, 0x0) socket(0xa, 0x3, 0x3a) 2m6.314943149s ago: executing program 0 (id=31): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x50424752, 0x1, 0x81, 0x6, 0x2, 0xa, 0x0, 0x8, 0x0, 0x7}}) r1 = syz_open_dev$dmmidi(&(0x7f0000000040), 0xfffffffffffffefe, 0x71d280) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0x810c5701, &(0x7f0000000000)={0x0, 0x1}) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x69c, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x1b, 0x1, 0x1, "a701f6dd566a4ab69e1f83b4051d09a83971e3aece62c53bb500", 0x20385655}) 2m3.291009745s ago: executing program 0 (id=52): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f00000002c0), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)="03", 0xfffffffffffffd9f, 0x0, 0x0, 0x25) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x8, 0x302) ioctl$I2C_SLAVE_FORCE(r3, 0x706, 0x2d9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000069000b00000000000a0000000000b3dbc0c43e92d58f2de42b44867391920000000000000800010002"], 0x20}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0) 2m3.290778592s ago: executing program 32 (id=52): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f00000002c0), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)="03", 0xfffffffffffffd9f, 0x0, 0x0, 0x25) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x8, 0x302) ioctl$I2C_SLAVE_FORCE(r3, 0x706, 0x2d9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000069000b00000000000a0000000000b3dbc0c43e92d58f2de42b44867391920000000000000800010002"], 0x20}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0) 1m52.985092561s ago: executing program 1 (id=216): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, 0x0, 0x0) 1m52.984861079s ago: executing program 1 (id=217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) shutdown(r0, 0x2) 1m52.915419189s ago: executing program 1 (id=218): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xaa021}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0x2d8, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x10}, {0x8, 0xb, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xc8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xf}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x32}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0xabfa}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x92ce}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0xffffffae}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd47, 0xb, 0xa}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff231d}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x8000}, {0x8}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000150001002bbd7000ffdbdf250a0800ff", @ANYRES32=0x0, @ANYBLOB="140001002001000000000000000009000000c030f1f8f7323b280000000000001400b40200ff0100"/52], 0x40}}, 0x8080) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) truncate(&(0x7f0000000100)='./bus\x00', 0x10000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x0, 0x80, 0x0, 0xfffffffc}}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/166, 0xa6}], 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/49, 0x31, 0x40010000, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x5, 0x0, 0x4, 0x80008001, 0x3, 0xffffffff, 0x3, 0x0, 0x3}}) lseek(r0, 0x0, 0x1) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = syz_clone(0x28208000, 0x0, 0x9, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000080), 0x51) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000020a00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01080000000000000b000000080003000000", @ANYRES32=r12, @ANYBLOB="2000508009000100d155e6414700000005000200040000000800030006ac0f00"], 0x3c}}, 0x0) setsockopt$rose(r7, 0x104, 0x1, &(0x7f0000000440)=0x8000, 0x4) clock_adjtime(0x1, &(0x7f0000000440)={0x7fff, 0xffffffffffffff67, 0xa, 0x0, 0x8f49, 0x9, 0xff, 0x6f, 0x4, 0xfffffffffffffff7, 0x0, 0x2, 0x6, 0x3, 0xfffffffffffffffa, 0x1, 0x400000000000, 0x0, 0x5, 0x0, 0x40000002, 0x0, 0x4, 0x0, 0x0, 0x4}) 1m52.865483628s ago: executing program 1 (id=219): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000340)="580000001400", 0x6}], 0x1) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_SCAN_PARAM={{0x1}, 0x2}}}, 0x7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x8) listen(r0, 0x100101) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, r4, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'new '}, 0x1a, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(r5, &(0x7f0000000000)='\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f8481200000096a65e0c0000000000000e000a00140000000280000012", 0x2f}], 0x1}, 0x0) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000000080)) 1m51.964709918s ago: executing program 1 (id=230): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) (async) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000640), 0x10) (async) bind$can_raw(r1, &(0x7f0000000640), 0x10) bind$can_j1939(r1, &(0x7f0000000400)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000200)={&(0x7f00000007c0), &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xb0b0b0b0}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x4], [0x0, 0x0, 0x0, 0xffffffff]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x4], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[{}, {}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x2}) syz_open_dev$dri(&(0x7f0000000680), 0xfffb, 0x114e82) (async) r11 = syz_open_dev$dri(&(0x7f0000000680), 0xfffb, 0x114e82) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r11, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000240), 0x2, r12, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000001c0)=[r12], &(0x7f00000002c0)=[0x6], &(0x7f00000003c0)=[r13], &(0x7f0000000480), 0x0, 0x4}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000001c0)=[r12], &(0x7f00000002c0)=[0x6], &(0x7f00000003c0)=[r13], &(0x7f0000000480), 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000600)={0x500, 0x3, &(0x7f0000000280)=[r6, 0x0, r9], &(0x7f00000002c0)=[0x9, 0xe5b6, 0x0, 0x41, 0x6, 0x1f45, 0x6, 0x8, 0x0, 0x9], &(0x7f0000000580)=[r10, 0x0, 0x0, r13], &(0x7f00000005c0)=[0x50], 0x0, 0x7f}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000600)={0x500, 0x3, &(0x7f0000000280)=[r6, 0x0, r9], &(0x7f00000002c0)=[0x9, 0xe5b6, 0x0, 0x41, 0x6, 0x1f45, 0x6, 0x8, 0x0, 0x9], &(0x7f0000000580)=[r10, 0x0, 0x0, r13], &(0x7f00000005c0)=[0x50], 0x0, 0x7f}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delqdisc={0xd8, 0x25, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x2, 0xe}, {0x6, 0xfff2}, {0x1, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0xfff9, 0x7, 0x2, 0x390, 0x2, 0x4}}, {0xc, 0x2, [0xa, 0x41, 0x40, 0x8]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0x4c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfa46}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xc49}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x200}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x40000}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x400}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x5}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x5}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe7, 0xff}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0xd8}, 0x1, 0xf0ffffffffffff}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r14) (async) setuid(r14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000008900)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000008a00)=0xe8) r16 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r17) sendmmsg$unix(r1, &(0x7f0000008b00)=[{{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000900)="dce86bde3601d988105afb2d36701a661469e54d69a047923dc1a5f1fffb2dd2cfe08445d7f2a8e7795b6cacbf1ec3d36b390fc74647bd749544b2a427ccbd7309b761590bbfbbff2b8d5140469edaa814f6d69d2e9538a9ae533da3affcc5c1b08fc2ca9ca041a6c0d5c296edc5389e75006488bd8904b7bd4484bfeec57774b7b1a5b743f8469e34f19d7492afa4d65c75f9138ca0f9ccdbf5989bc2761b018e71feb5d42c91b8c30951bb135bee633a1613ba951bce8815f02695dd2b75985ce113b193edf2cc41a86c918c5e80fa5005cc657f3b188a31fb63ecdc5f84e4e37bde3260635304bd45", 0xea}, {&(0x7f0000000880)="19a5aa6dbdfefa78ee0f4435420c7cc6bb80096305ea2ffe1ebb252b8e88264b912866e1250a8cefcaf600b189d64bdabd4a928d", 0x34}, {&(0x7f0000000a00)="859026a9c25fc740a2ab59120fe36f7960d7004f19850f7c503db49467f837703593e4f3915fadd0d44675c384b185c00eba2ad975bf409ed7d831f1e935315466639c09a065cb732bcd4fbb9f", 0x4d}, {&(0x7f0000000a80)="5ae6e545c58a068aa4f9a57cf30b65051dcb826ee6c0e4923c9f56f30fc4486f93f951228ff7a579a75d8002bf20ced3143d5c7fe03ccafcd5c4b9a5b0e3afae8e3404dd5e9aec6b4d0a9facad23d307736b5230dd1f2618d5f6eef40d5b4e42bccb901545917348463f0b8bf0e688dd5a4d84d8413f24e976b5698e46b025f1", 0x80}, {&(0x7f0000000b00)="027099159bb2781c237b15d9da70060dbcac6e94a00edcf7fa9c3cc12d6d1c2bc0a22226e363b60e62f9b94e5ecb77dbd4f063861b46ceff0e02f064dadf0863c95b42dd66a389572a2d970444155699ad821628", 0x54}, {&(0x7f0000000b80)="1ad28d4887890f64dacc2e9a", 0xc}, {&(0x7f0000000bc0)="f63052acf090bbc2e8423a3371ed760ef23f455b", 0x14}, {&(0x7f0000000c00)="f5adf5d9cb4657ca6f599f1e9b24c7a67303cd5fa13236c5a967cc10b602d2ab4dda3f17b299650c5ff9135faa701d542f4ef87dafe138eb18820595f995befd694ce70ad31ddf79f99a866a3472ae4b4ed0dac4b32131d93186a814ac11ac919077230f7462df14de4c6aa6a5b313923b0269c406e30605f8ea166800e9fa157e541a60cedadbe65f91b7f8004466fa1e68c7180bc15529f6a0", 0x9a}, {&(0x7f0000000cc0)="8fd06ef53f8f22acd30372cb837553dbb0ee551a60e86d690fb3b341e3b05e67c61ecd9ae4020dcf534f637bcab3e38ae123c53e330d210f62b9", 0x3a}, {&(0x7f0000000d00)="33c4e82c927d33259acff08e93ee3057167ed8777885a7ca89055ab7c045e93d5d1178b77c7f86b8e8f4c409bdc7335884cc0bc71c092a1b57b7399287f975c96bae020a9e287d7352", 0x49}], 0xa, &(0x7f0000002500)=[@rights={{0x18, 0x1, 0x1, [r4, r7]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}, @cred={{0x1c}}], 0xc0, 0x4000}}, {{&(0x7f00000025c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002640)="9d319da1760512d7692b30a27b53446c74922707f301372ac6a76fbbd6791a32a93f2f653fa0f404ebcd27f68fdccad9588f2c58fdf16bc3612cf78c9724d60910a88dfa5ea956caf11c77c6826f887d46c532341abfe66f279ab953cd12d841515e5edfe56e21f328f8bd62da75d81805a740398369a6cb21ebfc7ff9b458b9dff7a5e04d0406116b30a3a9954d2fc5eb7d65a47ea910a989b5b5edea453c04b520b72fe86a", 0xa6}, {&(0x7f0000002700)="d06515bc426579bcd6f972c5b9", 0xd}], 0x2, &(0x7f0000002d40)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r11, r2, r2, r4, r2, r7, r0, r4]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r7, r7]}}], 0x88, 0x80000}}, {{&(0x7f0000002e00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002e80)="653dcafb972584c58c697974e6ace56af11dd90ebd49849d957a53c9b0780d3732f8", 0x22}, {&(0x7f0000002ec0)="6bfc634c9ee59a498146ef7fc374d3633528f0f7171d429c5e901c24413d37a199f703247fc327142708e10ba50dec5b3a8c73ab53d2bc811985ca66bf4d9dc2cd168d97e637d61c87eeab8f83230d77be1aeea7fecfadcbb139f2833d07ba51d971995b563a680beb1c5851e7f9a5b73ea41a0ed21e122fe7144067d7400ab206469ad68452c2ffd03a1fd8db387d015aff48cd3fca93c3eddd8fd35be2b7405fb1c0c31b3e37cb9499381ab5c521cd3c74b729ad9e8069ae2662438e945c3aedd19844078f26d9", 0xc8}], 0x2, &(0x7f0000003240)=[@rights={{0x18, 0x1, 0x1, [r11, r4]}}, @rights={{0x18, 0x1, 0x1, [r7, r11]}}, @cred={{0x1c}}], 0x50, 0x4}}, {{&(0x7f00000032c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003340)="d98674f741efbc63d15f2d76fd0dd27ed18b505d0c20a079bd0459ae1f4abe50ccc0fae6e4e9fb111191b6d6a58b78382c31a4f915a9c85c2a524ac683fa296d717471096bb957182bff07133723bfeadd23d0c305563461b52f90b4e4fdea83982ff47a8fb640a3f53d4478c1c99077a9507bea2f8f7ab28746d4c3eb1499a8a8817b8919c2bb7a1af921", 0x8b}, {&(0x7f0000003400)="ddd381e1371aa891cd6a39cb2ace36604d6d4bb83b6571478db2c3b15a588386341aeed48f8f3278220d1a7f708a65e46a61e53da038d1c968594f9f03bf7f02a68e9945022810af69e6a9d862318bde292622d4478133fc5c6685c14a95874a3d40584e973f3c2700741a3d71d8bbdcd9e8cadc", 0x74}, {&(0x7f0000003480)="41f13af99e6c62d0938402252207bae7c1b3303634955666f524efc16de9e17a3161deb15e9d50b143c98178e0e803c7f08f08fd6dcc424950de4af4ae4b2ac47b6816f9ed1f61531be060448efc5fb5fa3d7b25a3bd2102df218f98a8d40ab588933c1c0609014d405424eba41a10d2e09d3a48ac7be992d09baf89d938902b9767bbbc394c1a5ec199eb6aa752b5a9f29df4f71b5420430eb3a7", 0x9b}], 0x3, &(0x7f0000005680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r5, r1, r2, r5]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff, r11, r1, r2, r2]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r5, r5, r0, r5, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x130}}, {{&(0x7f00000057c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006c40)=[{&(0x7f0000005840)="333afb18f6ce88ad2cfe97948fb020cd439f65b312f5746eacf9bf2a6992e873646a13f8d40fdbbdd54ce0fb2419ce5dd20ce127ad9757a9e091d38b3716cbce969fee55b9712f4a7825f888ff89fb44e9069ad87d44c0f5f4b6b065b8852a43ee359056d35f8c0d2dc005e6de13c925467c617c3bb7e1ed88db1dec4fc0d9638c2a6716511599725d4b29f7a8b6864868ba9512cf3433dba2161037e84dce39ffa7db1389b5a00845a807ab1d0ef345eea10875ef773e75d7539c173761e93eaa65a05bc991edbe3443a6eb4b1529eb95cb3e8c75293bd168a1292b53", 0xdd}, {&(0x7f0000005940)="f13b3929fb3b68ee743ff5bb330d084e3c5888e6b56d5118edbecc29807136059f28233c7fe39a6bbbc97e16e81f11e561e9c6bc9ef3974a5be4fbf8575b10f698c12a7b5a19379c0f5003c7b1cd01d281c542fb4f3d8ef69e9ff94480135209f88cf1f5dc0d48f3b53485f7923cfcc27fed6c13e4208b8fc0d737b56c45550e9de1656b69ea7a9f98b6b4acc9dd614b0cef93d2c8955460de7fa26d41d0de5ad122cbdedc35ae8bb6c0e5519b4d2aa9ab5dd1d92c4ab515922165a54dbcfb", 0xbf}, {&(0x7f0000005a00)="ee45e977acf1a9ce15df5a05fc4ef26acedb0e3911fc172bfc8ea1722131411448f5d1de2132994b357b0acd1e266b18c58b23f9483ace9dd9c0abc492023b8dc495c7b3045c5348c467609cbcaa7900bcc9a2ada0fec4f4cd8f1e83a2357ee584c7a7dbf8413f2c25b63278ab2c43f048affcef78b95c872f4e0927941311faacd25a4da6d1d6472fc43f1bd535598973f8ad0509c83e8ce35bc3ee4357dd9423e779d54f317cbf7a9c4834bb0adac0a4632f34847771f5267dbea71930fc7a0662e26cceb78e576cc6668d1398ae02947760de59269857e01e3eb251c5b520e868e1a452", 0xe5}, {&(0x7f0000005b00)="7bc687102eb066b349797634de8e1c8a4b1c68661cc14999b28b4b5c952e3b8aa9642f4900e565fabd6c89a96ca0a75934ce648449eb8382c0a23b9b463ebc1c11dba26a9768aea29183adb2cbaa0db637853be330ab51d32f17a0bc6ca585f7948276320dfbbdd1a094cafb8ea772647facb52ed5bc515514467e42b6e6a6cca0ea9e11c990d7875a733ee551cf94db435d171bb65691e44b1141eaadacfc02727b6433122adf508621fc961e0f720072829161dac67192b26f3416f47d", 0xbe}, {&(0x7f0000005bc0)="1769cb3c7faf667ad954caee3cf049e9fa0e7e3a5a33fdfd2447c9a03f41ef0b0f9dcf8d7a1ac337a45579b72a9b8950c4227684ac5ad97eef90977b69779c1f92eb4084d28bf81b", 0x48}, {&(0x7f0000005c40)="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", 0x1000}], 0x6, 0x0, 0x0, 0x14044010}}, {{&(0x7f0000006cc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000083c0)=[{&(0x7f0000006d40)="e0eb71c6e9c0b8da5f581d9ced18f2601a222fa52cb7e21e4b87f6a1303bb010a5c2b92d2d560eb200b9811171d4e9eeca7e5be325699cb0b6b409a090c36c0c535cd5f56c0a8cfcccc3914f6983d5dbc4e2dbc1d50fffdbbc6c36c14f249140fa1bf99bdb5c9ba9cc484dc8846b1b702c0506d3a515d2c3723c864312f2f9dd10289bf10964afd7089e8495f37713b0795ef8c70bc76caa15fc1c46cc139215f75949a86a7ee0a00d148fa46c0857315256f741f9809755da828b438cfa03d0857835a68e2b00f5bf8a0abb72aa601010610aa5720db371663e301ca3252d9cc92c4b60ed07987e30a800f538da", 0xee}, {&(0x7f0000006e40)="4d8d9dac28c070e1df55b79d8df813598583d6654c5c4ff252986811c8695b9f12478d8265faf6cbc67789397fcb821469313186adaafc60a9541d545a8f479bb5d6ccfa0cf8ebb10935ea13066775f3fd274a4768e530e4f9307d1f9a2932bb4a36186d9fca07a881b549a5de666a0963589d457e751caa48b0767bc02f26b23a37afe80992e9b7007cbb16595d07afb70b11ca99ee937da46a42e4b28d79b8859b1dc9c511b652c0504131809072d2a815b4832b26cdd3c8e24c7d759d457b0f3de7b96af56fef207806abe31fa7662b4f76efdbe411393ff0b9b1392aad", 0xdf}, {&(0x7f0000006f40)="11c8f4eba38baf09743a82c71acf5aa2380eff9ab1471e862e21fd9b4ad999b1df1bfe40be14d7e87231dc19d6bc887cb6db93db9f5539a2851e02834ee83f2caf11708e0e58fb330553717b6c8b5e42f6863dea88163b4d82207b1a00002cb7ac85ad58452ac426f7c2ef97b45c159b665428fb9c3f1fd488ab52801d182b50284f07a55cf0ce30404f4a88091d2c111fd8267a295fc61ea262973f818c39088454289cc0a3a1e9e1b12bd0d5e86b686406f7bc92", 0xb5}, {&(0x7f0000007000)="ed8f004827850b9a307a674aa5478745fb06", 0x12}, {&(0x7f0000007040)="d68e7b072855c2dd79e40fb9c5065c5454ae69eac48207e23a098931710fb5976074aa19445414c2b73ce9fc71c6544cac6dfef48cc19f564dbf8303acab163bd5d5a2bf7578ccf3410f44fcec4e324178c722ad007aa9b0ad63655342b31293a423411c5efc9e4dd3a37c547a880e6c2db3c9763673e8b521e07c2e8021d209c71de5badb12664e9863b6a5afb3818ccd9503b5033aae51c74757f0a74e17e42c4b8ca5b31e2c88ed2ab95fd2c7de7601e9b3488f1598dd7c95d67215a366daa39b02b675ac5797ae89374109b9a6281c65ba9484d31c45f0d74f58222d1a53ea", 0xe1}, {&(0x7f0000007140)="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", 0x1000}, {&(0x7f0000008140)="bd4bb26385f7f396ffa012953dc2c20df13e63e8f947cf9fcee3152b4ac9421bd62cc6d968fd09d385bd5efbef73bc602fec71fc0e0038e82b00c18813793caafd2acad1e6eeb709a9e3220b7cab65516416749082e316f5f7a1d5b259f3b6f35de44fbac7024daffd1c11f3be3b803eeaacf49d93e8d67a2bb94a6156956ba9f3905e937fdcb1c6a2082b6033596125fb66e2936309a6d640c71ee3b6d2b566932f793dfc41d6c9f7665938f766c09e7bd5b036c725eeb69788d627", 0xbc}, {&(0x7f0000008200)="d37133ff06b5964c4e510969ed22d73269414061628732156ce0a8c8522c3ce75dbfb55a2b456b20b05e8699bb9b213bc3310f5ab235531866f6894e56b8b9e48a1f1f650ae3bb8a15b085b365370c40c4a6608ce96b9e122e83218cc1fac988d0e0ef9588dae06388ecb6f5c3e7b3fdd29bd2e5546aa7ecaf6071e75b8d9a27da", 0x81}, {&(0x7f00000082c0)="8ae2625fb4400bb35a9d8bd0bc6d64981ffa61abebe7ce5c6184b90a25bcd99c2e2ee5e0a5f3e31a37622130cb162ba08e21729bfb2c3865444d71cf41dfc57e64d66ac78d824de84104cd5b12cd4e4e41f2dd35f4b3523a4972eae3ca2fb55a6b706dfdab6e968220383c8e2e8817147415b0adcb07ca0203830a1a486c0cbd0cc6d4d86e9473158be6b72302a3e30a80263e166094bbc81fe8b0fc4d5ac81407317b9abd28e2ea25e0ac0661e764f0f63e5c4e8d24c2d7642636db84fcf918fc522a05b2d7b54d3b2a88c829e7dd7af387070bf7a49c1282cf9fdb7405a462ea490c12fe36af94dd2cf22b914d31a0cd00e1a69f58bd", 0xf7}], 0x9, 0x0, 0x0, 0x800}}, {{&(0x7f0000008480)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000008880)=[{&(0x7f0000008500)="8ef53b55ea45e4968d488d071fc81e17edf8ab8bf9649a2447c6fc641fc29675fd85af88080e6501a53c07f8dc05088c2b4620b88b3354b709d2fe2e51c18d640e52f38d44d5fbba4178583d98203530aae7dfd8d65eb6f4d83c47e0a345dd4e8763f44d4448db13ef2feb12d7d2db76635faae818bec03e044805f561a951f59c4f0327dfd56c21526017920176895dd704b868c01bfb784ad5f8b33c5c7710d852db8546c6a0f796139a9061a2ed37142546f37efbcfcbe6d5565aad30df2241e09c3baedc909cac5c3a5de6e33089d4555c000d89355a01081db46606ea", 0xdf}, {&(0x7f0000008600)="f2a6fe02c11a1350eb46a75ce53820920525f1786d61d01af5ffdded10dff6c34af69f065978fab76c39c509f6146aa4a6c109507cf0d751efed930834bc291c7ccc18ba5e63ad17a7ebfaa89d76d88571657dccf619ff77d8d9dd3170b078daa6929fe6c1efdfe4680126dba4efc3c292fe409f73868afde5", 0x79}, {&(0x7f0000008680)="1a96db96cfae3438e370fffef8217cd273c22e2c56d8687caafd43ba4517b265f44e125e8ce24e5c0b320d4628ca73c580bbbd2ad1500f20d9397c652e66e143696792cbb80ba3098de65b1405ad0ea7cce50d84c1710767fedc85c49bb2a4d5b79de4e02d10f6817ed9e52f426318baf6b4faaf75105139c347bfaf001d6767096ea034ea17c82c72e5564f63e6c86d3865b71ca2d59024e26d20743850379e9a4187aeb7c7fd569fa43c5517ef17d9403be4a99bff44da", 0xb8}, {&(0x7f0000008740)="249f49b3b991fd1f614842d48b201ccc4b5693507d5241ce27522b61f5e7518f3f65d88cc7a87e1d78de2e38bd614dddeffa13b4690fce04e42a56335efdee3bfa", 0x41}, {&(0x7f00000087c0)="7ebb32e4ff187d43253500cf18050486f4cf07", 0x13}, {&(0x7f0000008800)="c812cf5c2a36fb6218e313477048ddb45ee7cd7d4f394ab2221dbbf21f9533171716", 0x22}, {&(0x7f0000008840)="050c74798c012a8e0eb0b716260ada1bb2d5a2c686", 0x15}], 0x7, &(0x7f0000008a40)=[@rights={{0x18, 0x1, 0x1, [r2, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15, r17}}}], 0x90, 0x18}}], 0x7, 0x200048c0) 1m51.654672625s ago: executing program 1 (id=232): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, "12848098"}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x42, 0x0, "bd1c790806ed6dcd18899f9ea77ca9fb5184ff0ba54b7dfe784d2f6b7dcd9474d9b295588ac0b991d5c66461eca3f1ff5543acc6c970d0ad22d692e84d692972368e64c272da633a217b45fcc8b1ff3b"}, 0xd8) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3) sendfile(r2, r3, &(0x7f0000000100)=0x6, 0x100000000010001) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) 1m51.647118266s ago: executing program 33 (id=232): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, "12848098"}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x42, 0x0, "bd1c790806ed6dcd18899f9ea77ca9fb5184ff0ba54b7dfe784d2f6b7dcd9474d9b295588ac0b991d5c66461eca3f1ff5543acc6c970d0ad22d692e84d692972368e64c272da633a217b45fcc8b1ff3b"}, 0xd8) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3) sendfile(r2, r3, &(0x7f0000000100)=0x6, 0x100000000010001) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) 1m14.084311256s ago: executing program 5 (id=699): r0 = socket$packet(0x11, 0x3, 0x300) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r1 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)='$', 0x1}], 0x1, 0x6, 0x4) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000100)={0x20, 0xffffffffffffffda, 0x0, {0xfffffffc, 0x0, 0x6, 0x8}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 1m14.079059108s ago: executing program 5 (id=701): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300002c0000000007f73c23001c0000000cd87f39c73dd387b70f6e719a7692e28ab36c487b6ec811df459424ded57e4b3ffe7e8ed14ecbb995983d9dc2b6a9233da1b0cdc06bca3bed0aba7711e77655907f40c48cce247373a0cb5645fe1f631a9c99f2973c061aa95bc218bc6a4ebed2597c0233dfd6ac5ed6ce4c98e2e1c94c7adae2227565378c525855274bb7844dbc9d0709065a52e1d9b1a87f7aa70946bf747e02c0b6c4c7698ebedc1f2721fa4baffb689a4e29b942ea2696e353ecef8ebc275c8280097ddd836ea76beb8a5e210c6e6a858616d9a5"], 0x20}}, 0x0) 1m13.963323188s ago: executing program 5 (id=706): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r2, 0x301, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0100000000000000000017000000500006804c00040067636d2861657329", @ANYRES16=r4, @ANYBLOB='d\x00\x00\x00', @ANYRES32=r1], 0x64}}, 0x40) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x68, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57ae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9ad3}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2400c044}, 0x20040000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x28, r5, 0x200cc68957cbaa35, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r5, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20006080}, 0x80d4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x270, 0x168, 0x9, 0x0, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00'}, 0x6000000, 0x228, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'veth1_to_team\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r9) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x948, 0x230, 0x738, 0x438, 0x738, 0x438, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}]}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8) 1m13.948832264s ago: executing program 5 (id=708): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x30) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x30) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x1080000, &(0x7f0000002140)=ANY=[]) 1m13.853787453s ago: executing program 5 (id=710): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, "0400655800000200"}}}}}, 0x0) (async, rerun: 32) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x10001, 0xb, 0xdddd1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1m13.593700291s ago: executing program 5 (id=718): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f00000029c0)=0x1, 0x4) 1m13.564238563s ago: executing program 34 (id=718): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f00000029c0)=0x1, 0x4) 1m10.925044732s ago: executing program 2 (id=743): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, 0x0, 0x0}, 0x20) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept$nfc_llcp(r2, &(0x7f0000000440), &(0x7f0000000380)=0x60) (async, rerun: 64) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0), 0x4202, 0x0) (rerun: 64) sendfile(r3, r4, 0x0, 0x9) (async) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./bus\x00', 0x0, 0x10}, 0x18) ppoll(&(0x7f00000001c0)=[{r2}, {r3, 0x10}, {r3, 0x19}, {r5, 0x1200}], 0x4, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x7f]}, 0x8) r6 = openat(r3, &(0x7f0000000140)='./file0\x00', 0x40, 0x12a) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000200)={0x71e5b316, 0xfffffffc}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc3}}) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) read$FUSE(r8, &(0x7f0000000440)={0x2020}, 0x526) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4840) 1m10.854922543s ago: executing program 2 (id=744): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 1m10.854658109s ago: executing program 2 (id=745): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x104, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @private}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "17a84e246226dc8310387a1224cf94da"}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @link_local}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x104}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000000)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0x500}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="514b61b41f1c784a6a68f679907887f04247d7e797376f85af3fd58b9a6b925d686bf3d8e005175c56f10be4fcdcf6f342ce86ec61b542f69ee51b1b2ba67e780ec6262ef0641e474ae71a57c13d88f26aa5dc64c804", 0x56}], 0x1, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14}}], 0x30}, 0x20000000) 1m10.805007492s ago: executing program 2 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x90040, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x40002, 0x44) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r2, r1, &(0x7f0000002700)=0x1, 0x8) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) 1m10.803604157s ago: executing program 2 (id=748): userfaultfd(0x1) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) 1m10.53492693s ago: executing program 2 (id=751): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m10.534309973s ago: executing program 35 (id=751): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 23.623716015s ago: executing program 3 (id=1363): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) 23.562025756s ago: executing program 3 (id=1365): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20e0000a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) 23.561149921s ago: executing program 3 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180201000004000000000000000000008500000020f18710fb8c48252a00000007ffbd6e8e4279c8dbe4f30d8d24deda1fd869304ba8d4569bfea8dfff68766e6579ee18db9fb3e8ef02be62eaeab7e0c2ebadc9ac5427e077eb300103000000000000002d65830fb8cb03"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)={0x2200, 0x40}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}, @IPSET_ATTR_SKBPRIO={0x8}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x80}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20005}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000180a05000000000000000000020000000900010073797a300000f9ff08000200"], 0x58}}, 0x0) 23.498712666s ago: executing program 3 (id=1369): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 32) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (rerun: 64) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000240)='./bus\x00') 23.498297646s ago: executing program 3 (id=1370): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/157, 0x9d}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000440)={0x8f, 0x0, 0x5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000880)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0xe}}}]}]}]}}]}, 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x682481, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@RTM_GETNSID={0x1c, 0x5a, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.424047357s ago: executing program 3 (id=1371): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@rthdrdstopts={{0x18, 0x29, 0x43}}], 0x18}}], 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltclass={0x58, 0x29, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0x3}, {0x6, 0x3}, {0x1, 0xffff}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}, @tclass_kind_options=@c_htb={{0x8}, {0x18, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7}, @TCA_HTB_OFFLOAD={0x4}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004091}, 0x0) 23.416547557s ago: executing program 36 (id=1371): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@rthdrdstopts={{0x18, 0x29, 0x43}}], 0x18}}], 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltclass={0x58, 0x29, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0x3}, {0x6, 0x3}, {0x1, 0xffff}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}, @tclass_kind_options=@c_htb={{0x8}, {0x18, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7}, @TCA_HTB_OFFLOAD={0x4}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004091}, 0x0) 17.99393383s ago: executing program 8 (id=1372): r0 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x182c4bbe093e49dc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x182c4bbe093e49dc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) (async) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) 11.72464153s ago: executing program 4 (id=1590): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000180)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x180000, @empty}, 0x1c) 11.724228517s ago: executing program 4 (id=1591): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r3, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0}}, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r4, r5, 0x4, r1}, 0x10) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000040)={0x200000, 0x200000}) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}}) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000, 0x80, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, 0xee01, r6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000a00), 0x80402, 0x0) write$cgroup_int(r8, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9b}}, './file0\x00'}) 11.664382705s ago: executing program 4 (id=1593): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\trust\xe3c*swO\x00\x00\xee\x02\x00\x00', 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xf2e}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) 11.603446792s ago: executing program 4 (id=1596): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = fsopen(&(0x7f00000002c0)='devpts\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000001300)={0x2020}, 0x2020) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000500)='$\xdc\x00', &(0x7f0000000540)='./file0\x00', r2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0x0, 0x3, {0x1, @pix_mp={0x2, 0x9, 0x34325241, 0x3, 0x2, [{0x3}, {0x10, 0x633}, {0x40, 0x8000}, {0x8, 0xfffe}, {0xfffffffa}, {0x3, 0xfffffff2}, {0xf, 0x6}, {0x8, 0x4}], 0x8, 0xee, 0x4, 0x1, 0x4}}, 0x80}) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) r4 = eventfd(0x4) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0xd, 0x4, 0x1, 'queue1\x00', 0x6}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) memfd_secret(0x80000) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) (async) getsockopt$MRT6(r5, 0x29, 0xd0, 0x0, &(0x7f0000000140)) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r5, 0x8002af76, &(0x7f0000000340)) 11.544476162s ago: executing program 4 (id=1598): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snddsp(r5, &(0x7f0000000740)=""/56, 0x38) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0x20, &(0x7f0000000f00)={&(0x7f00000002c0)=""/108, 0x6c, 0x0, &(0x7f0000000040)=""/47, 0x2f}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x33df82a24b33d9c4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 11.543937785s ago: executing program 4 (id=1599): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0xfd}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 11.284218633s ago: executing program 37 (id=1599): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0xfd}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 11.084499124s ago: executing program 7 (id=1606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000980)={0x4, 0x0, @pic={0x6, 0x3, 0x7, 0xe3, 0x2, 0x3, 0x6, 0x6, 0x6, 0x4, 0x5, 0x9, 0x4, 0x8, 0x5, 0xc8}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x55}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r3, 0x4b30, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000980)={0x4, 0x0, @pic={0x6, 0x3, 0x7, 0xe3, 0x2, 0x3, 0x6, 0x6, 0x6, 0x4, 0x5, 0x9, 0x4, 0x8, 0x5, 0xc8}}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x55}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDMKTONE(r3, 0x4b30, 0x1) (async) 10.874270431s ago: executing program 7 (id=1607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="643ef0b05152180012e39fb1903b", @ANYRES16=r1, @ANYBLOB="01000000000000000000340000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x24000091}, 0x8800) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES16=r0, @ANYBLOB="7a8391428ff26e8ae7c2a1d9cff8691522e9bbdb1bcf92986ba92b616599738789367a037d451a46424ba7440e36f9cb498d6ae2bf40d2721f0da8bb2256f3254fe91b7a3e55bc3e610f6e7694dae418bda7db6001a059dc1d22cc67050af90bc65a6951e60062cf15327a736659bdfef923a63d59adcd7ddd6242d181efca5a6000a8091e141b1ed9415be0792a4618", @ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRESHEX=r3], 0x4c}}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x100000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x18, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x0, 0xc, 0x5, 0x2, 0xfffffffffffffff8, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @ldst={0x2, 0x1, 0x2, 0x7, 0x3, 0x2, 0xfffffffffffffff0}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000480)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xc, 0x5ba, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x3, 0x3}, {0x3, 0x3, 0xf, 0xc}, {0x0, 0x1, 0x1, 0x6}, {0x5, 0x1, 0x8, 0x9}], 0x10, 0x9, @void, @value}, 0x94) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) personality(0xeaffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x7c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6a, 0xa}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2b, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x48044) 10.873793717s ago: executing program 7 (id=1608): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000240)={0x2, r4, 0x0, 0x7fffffff}) 10.813656098s ago: executing program 7 (id=1609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000a00)=0x27, 0x4) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000240)={0xcc, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 10.602679185s ago: executing program 7 (id=1612): io_setup(0x3, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_pgetevents(r0, 0x0, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000140)={r1, r2+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r5, 0x7}}]}, 0x144}}, 0x0) clock_settime(0x7, &(0x7f00000003c0)={0x0, 0x989680}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_destroy(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000100000000009500000000000000fe3a672d4e691f0107be0ebda1bd62b5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)=',:::\x00', 0x0) 10.433173412s ago: executing program 7 (id=1614): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040), &(0x7f0000000300)) (async) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x44, 0x0, r1, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0, 0x4000941, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000000)=0x8) (async) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000000)=0x8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0xc, 0x80, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x15, 0xfff6}, @sadb_sa={0x2, 0x1, 0x4d2, 0x3, 0x48, 0xa6, 0x3, 0x1}]}, 0x28}}, 0x8000) (async) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0xc, 0x80, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x15, 0xfff6}, @sadb_sa={0x2, 0x1, 0x4d2, 0x3, 0x48, 0xa6, 0x3, 0x1}]}, 0x28}}, 0x8000) 9.923246859s ago: executing program 8 (id=1372): r0 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x182c4bbe093e49dc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x182c4bbe093e49dc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) (async) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) 5.06752031s ago: executing program 9 (id=1602): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x20920c57) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.804927295s ago: executing program 9 (id=1602): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x20920c57) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.544668216s ago: executing program 9 (id=1602): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x20920c57) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.326572388s ago: executing program 9 (id=1602): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x20920c57) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.76883319s ago: executing program 6 (id=1636): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180000044000280080001400000000c080003400000000008000240000000140800014000000003080001400000000b08000140000000120800024000000018080003400000001100"/120], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000300)='./file1\x00', 0x0) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='efs\x00', 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x402) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000400)) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) lstat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f00000007c0)=0xe8) mount$fuse(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0xc0, &(0x7f0000000a40)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x7b28f692}}, {@allow_other}, {@allow_other}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '('}}, {@uid_lt={'uid<', r6}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@permit_directio}, {@flag='dirsync'}, {@pcr={'pcr', 0x3d, 0x12}}, {@euid_eq={'euid', 0x3d, r7}}]}}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x6c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)={0x238, r8, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x2, 0x8f, 0x97d}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0xfffffffffffffffd}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0x800}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x400000000000001}, {0xc, 0x90, 0x40000000000004}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xae5f}, {0xc, 0x90, 0x401}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xffff}, {0xc, 0x90, 0x1}}]}, 0x238}, 0x1, 0x0, 0x0, 0x4004815}, 0x4000000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x2, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x845) 3.766994209s ago: executing program 6 (id=1637): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x24008800) (async) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x14) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000003140100004b7d268fc3a9bbb400020077797a31000020000800410072786500140033007465616d5f736c6176655f30000000009aa3942ee07149f310f4a229cc5817092b093bb3036ba260d1051ee7e7007678e6b71d622daada47c2bfad16efba147e25b05b3042"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x54}}, 0x20004090) 3.697107563s ago: executing program 6 (id=1638): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="890704faf3", 0x5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) migrate_pages(r1, 0x1ff, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) prlimit64(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0x1a) 2.878261068s ago: executing program 6 (id=1639): io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffc}) (async) r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffc}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[], 0x0) 1.037996ms ago: executing program 6 (id=1640): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000007600010400000000000000000000000000000000080001000000f1"], 0x20}}, 0x0) (async) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfeno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlinkprop={0x40, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x8}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)="4e05265e7ed23e8c5209175a837e1b262d1c4a37c1ef3fbbd27400ef8a3f8f83cd859eb183330d93c157c14dea014b21fc5c3cb63f2e73b935ea415c42d2714c2b8aab19983c1f4417d41d3aee444593e4473419f1623e60fa5cd42cfb562e8e7f10aea310aac60fafb13cf0209ea7bd4606d25407437d05443afb84d2d0d9bf0e8c885f1a2168da1af299c6a646e7a1424013000000000000000000"}, 0x38) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'binder0\x00'}) 0s ago: executing program 6 (id=1641): r0 = userfaultfd(0x801) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000100)={{0x0, 0x3ff}, 0x100, './file0\x00'}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000005c0), 0x10) read(r4, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000000)=0x4, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r6, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) kernel console output (not intermixed with test programs): oc_value instead [ 91.793902][ T8480] 9pnet_fd: p9_fd_create_unix (8480): problem connecting socket: ./file0: -111 [ 91.907959][ T8485] binder: 8484:8485 ioctl 8933 20000140 returned -22 [ 91.911915][ T8485] binder_alloc: 8484: binder_alloc_buf, no vma [ 91.914707][ T8485] netlink: 404 bytes leftover after parsing attributes in process `syz.5.679'. [ 91.936019][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 91.939253][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.681'. [ 91.943819][ T8494] netlink: 'syz.4.681': attribute type 20 has an invalid length. [ 91.989290][ T8506] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 92.053399][ T8507] sd 0:0:0:0: PR command failed: 1026 [ 92.056322][ T8507] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 92.058089][ T8507] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 92.114012][ T8530] overlayfs: missing 'lowerdir' [ 92.138752][ T8534] can0: slcan on ptm0. [ 92.160804][ T8534] kAFS: No cell specified [ 92.190480][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 92.226757][ T8533] can0 (unregistered): slcan off ptm0. [ 92.242156][ T8542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.698'. [ 92.390634][ T8560] xt_connbytes: Forcing CT accounting to be enabled [ 92.391615][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 92.393037][ T8560] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 92.393363][ T8560] xt_bpf: check failed: parse error [ 92.396963][ T8561] macsec1: entered promiscuous mode [ 92.402817][ T8561] dummy0: entered promiscuous mode [ 92.404793][ T8561] macsec1: entered allmulticast mode [ 92.407712][ T8561] dummy0: entered allmulticast mode [ 92.417142][ T8561] dummy0: left allmulticast mode [ 92.419362][ T8561] dummy0: left promiscuous mode [ 92.448060][ T8568] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 92.461399][ T8572] 9pnet_fd: Insufficient options for proto=fd [ 92.616719][ T8580] lo speed is unknown, defaulting to 1000 [ 92.763335][ T8317] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.898044][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.909796][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.914104][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.914814][ T8317] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.916513][ T5951] Bluetooth: hci1: command tx timeout [ 92.924088][ T8609] tmpfs: Bad value for 'nr_inodes' [ 92.924156][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.929820][ T5951] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.931843][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.969229][ T8605] lo speed is unknown, defaulting to 1000 [ 93.012547][ T8317] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.082291][ T8627] SELinux: policydb string  does not match my string SE Linux [ 93.084596][ T8627] SELinux: failed to load policy [ 93.144689][ T8317] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.150944][ T8605] chnl_net:caif_netlink_parms(): no params data found [ 93.195966][ T8641] xt_hashlimit: size too large, truncated to 1048576 [ 93.233242][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.235080][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.237234][ T8605] bridge_slave_0: entered allmulticast mode [ 93.239225][ T8605] bridge_slave_0: entered promiscuous mode [ 93.257752][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.259655][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.261589][ T8605] bridge_slave_1: entered allmulticast mode [ 93.263536][ T8605] bridge_slave_1: entered promiscuous mode [ 93.297319][ T8605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.309528][ T8605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.331295][ T8317] bridge_slave_1: left allmulticast mode [ 93.332816][ T8317] bridge_slave_1: left promiscuous mode [ 93.334438][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.338981][ T8317] bridge_slave_0: left allmulticast mode [ 93.340546][ T8317] bridge_slave_0: left promiscuous mode [ 93.342103][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.398764][ T8662] fuse: Unknown parameter 'permit_directio' [ 93.652318][ T8317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.656442][ T8317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.660120][ T8317] bond0 (unregistering): Released all slaves [ 93.742759][ T8317] bond1 (unregistering): Released all slaves [ 93.750329][ T8605] team0: Port device team_slave_0 added [ 93.765884][ T8605] team0: Port device team_slave_1 added [ 93.788390][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.790813][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.798066][ T8605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.801751][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.807592][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.816893][ T8605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.847113][ T8317] IPVS: stopping master sync thread 8048 ... [ 93.851015][ T8605] hsr_slave_0: entered promiscuous mode [ 93.853117][ T8605] hsr_slave_1: entered promiscuous mode [ 93.870600][ T8667] lo speed is unknown, defaulting to 1000 [ 93.977808][ T8605] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 93.981409][ T8605] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 93.984453][ T8605] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 93.996601][ T8605] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.031331][ T8317] hsr_slave_0: left promiscuous mode [ 94.033375][ T8317] hsr_slave_1: left promiscuous mode [ 94.035367][ T8317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.037587][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.039997][ T8317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.042292][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.068854][ T8317] veth1_macvtap: left promiscuous mode [ 94.070430][ T8317] veth0_macvtap: left promiscuous mode [ 94.072065][ T8317] veth1_vlan: left promiscuous mode [ 94.073479][ T8317] veth0_vlan: left promiscuous mode [ 94.388290][ T8675] /dev/sr0: Can't open blockdev [ 94.732641][ T8317] team0 (unregistering): Port device team_slave_1 removed [ 94.805687][ T8317] team0 (unregistering): Port device team_slave_0 removed [ 95.006392][ T5951] Bluetooth: hci0: command tx timeout [ 95.309798][ T8605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.311705][ T8673] __nla_validate_parse: 2 callbacks suppressed [ 95.311715][ T8673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.737'. [ 95.340196][ T8605] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.341555][ T39] kauditd_printk_skb: 1084 callbacks suppressed [ 95.341569][ T39] audit: type=1400 audit(1732097528.651:1693): avc: denied { create } for pid=8692 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 95.351969][ T39] audit: type=1400 audit(1732097528.661:1694): avc: denied { create } for pid=8692 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 95.353668][ T8605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.359571][ T39] audit: type=1400 audit(1732097528.661:1695): avc: denied { write } for pid=8692 comm="syz.2.742" path="socket:[25856]" dev="sockfs" ino=25856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 95.362092][ T8605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.366211][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.374996][ T8298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.378084][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.380040][ T8298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.388033][ T39] audit: type=1400 audit(1732097528.661:1696): avc: denied { nlmsg_read } for pid=8692 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 95.442018][ T39] audit: type=1400 audit(1732097528.741:1697): avc: denied { egress } for pid=5990 comm="kworker/1:3" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 95.449738][ T39] audit: type=1400 audit(1732097528.751:1698): avc: denied { sendto } for pid=5990 comm="kworker/1:3" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 95.461876][ T8605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.485965][ T8707] overlayfs: missing 'lowerdir' [ 95.574835][ T8605] veth0_vlan: entered promiscuous mode [ 95.603220][ T8605] veth1_vlan: entered promiscuous mode [ 95.621547][ T8605] veth0_macvtap: entered promiscuous mode [ 95.625408][ T8605] veth1_macvtap: entered promiscuous mode [ 95.631961][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.635240][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.637902][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.640554][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.643523][ T8605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.651885][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.654222][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.657285][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.660784][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.663943][ T8605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.667273][ T8722] netlink: 56 bytes leftover after parsing attributes in process `syz.3.747'. [ 95.669834][ T8722] netlink: 56 bytes leftover after parsing attributes in process `syz.3.747'. [ 95.674249][ T8605] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.677125][ T8605] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.679520][ T8605] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.681720][ T8605] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.719198][ T8298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.721469][ T8298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.733065][ T8298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.735785][ T8298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.813497][ T8317] IPVS: stop unused estimator thread 0... [ 95.856386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.858598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.859426][ T8733] /dev/sg0: Can't lookup blockdev [ 95.860718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.902619][ T8317] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.917216][ T8735] dummy0: entered promiscuous mode [ 95.919265][ T8735] macsec1: entered promiscuous mode [ 95.921079][ T8735] macsec1: entered allmulticast mode [ 95.922799][ T8735] dummy0: entered allmulticast mode [ 95.924594][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.929725][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.932142][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.932237][ T8735] dummy0: left allmulticast mode [ 95.935773][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.936631][ T8735] dummy0: left promiscuous mode [ 95.940085][ T65] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.947244][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.975805][ T8317] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.996507][ T39] audit: type=1400 audit(1732097529.301:1699): avc: denied { create } for pid=8742 comm="syz.4.756" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.997431][ T8737] lo speed is unknown, defaulting to 1000 [ 96.014230][ T39] audit: type=1400 audit(1732097529.311:1700): avc: denied { write } for pid=8742 comm="syz.4.756" name="file0" dev="tmpfs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.020345][ T39] audit: type=1400 audit(1732097529.321:1701): avc: denied { open } for pid=8742 comm="syz.4.756" path="/165/file0" dev="tmpfs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.033825][ T39] audit: type=1400 audit(1732097529.321:1702): avc: denied { ioctl } for pid=8742 comm="syz.4.756" path="/165/file0" dev="tmpfs" ino=900 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.071846][ T8317] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.124248][ T8737] chnl_net:caif_netlink_parms(): no params data found [ 96.181488][ T8317] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.211830][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.214438][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.219098][ T8737] bridge_slave_0: entered allmulticast mode [ 96.221184][ T8737] bridge_slave_0: entered promiscuous mode [ 96.224611][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.229045][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.231508][ T8737] bridge_slave_1: entered allmulticast mode [ 96.235184][ T8737] bridge_slave_1: entered promiscuous mode [ 96.262619][ T8737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.266765][ T8737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.286029][ T8737] team0: Port device team_slave_0 added [ 96.290669][ T8737] team0: Port device team_slave_1 added [ 96.331311][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.333431][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.340765][ T8737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.368992][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.370878][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.378009][ T8737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.398047][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.760'. [ 96.400492][ T8764] netlink: 'syz.6.760': attribute type 3 has an invalid length. [ 96.457389][ T8317] bridge_slave_1: left promiscuous mode [ 96.457499][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.475259][ T8317] bridge_slave_0: left allmulticast mode [ 96.476916][ T8317] bridge_slave_0: left promiscuous mode [ 96.478555][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.498205][ T8779] SELinux: syz.3.766 (8779) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 96.636680][ T8786] nbd6: detected capacity change from 0 to 8 [ 96.661161][ T8800] block nbd6: shutting down sockets [ 96.661231][ T8241] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.669875][ T8241] Buffer I/O error on dev nbd6, logical block 0, async page read [ 96.672806][ T2410] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.678184][ T2410] Buffer I/O error on dev nbd6, logical block 0, async page read [ 96.680957][ T8241] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.683976][ T8241] Buffer I/O error on dev nbd6, logical block 0, async page read [ 96.686074][ T8241] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.692356][ T8241] Buffer I/O error on dev nbd6, logical block 0, async page read [ 96.694862][ T8241] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.698684][ T8241] Buffer I/O error on dev nbd6, logical block 0, async page read [ 96.704151][ T8241] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.706625][ T8241] Buffer I/O error on dev nbd6, logical block 0, async page read [ 96.708722][ T8241] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.711034][ T8241] Buffer I/O error on dev nbd6, logical block 0, async page read [ 96.713189][ T8241] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.715573][ T8241] Buffer I/O error on dev nbd6, logical block 0, async page read [ 96.717840][ T8241] ldm_validate_partition_table(): Disk read failed. [ 96.719871][ T8241] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.722261][ T8241] Buffer I/O error on dev nbd6, logical block 0, async page read [ 96.724404][ T8241] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.726818][ T8241] Buffer I/O error on dev nbd6, logical block 0, async page read [ 96.728987][ T8241] Dev nbd6: unable to read RDB block 0 [ 96.730566][ T8241] nbd6: unable to read partition table [ 96.732046][ T8241] nbd6: partition table beyond EOD, truncated [ 96.735713][ T8241] ldm_validate_partition_table(): Disk read failed. [ 96.737689][ T8241] Dev nbd6: unable to read RDB block 0 [ 96.739253][ T8241] nbd6: unable to read partition table [ 96.740846][ T8241] nbd6: partition table beyond EOD, truncated [ 96.824123][ T8317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.830037][ T8317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.833342][ T8317] bond0 (unregistering): Released all slaves [ 96.837630][ T8317] bond1 (unregistering): Released all slaves [ 96.843309][ T8737] hsr_slave_0: entered promiscuous mode [ 96.845147][ T8737] hsr_slave_1: entered promiscuous mode [ 96.849638][ T8737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.851614][ T8737] Cannot create hsr debugfs directory [ 96.861472][ T8795] lo speed is unknown, defaulting to 1000 [ 97.009346][ T8737] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 97.014964][ T8737] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 97.019989][ T8737] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 97.048434][ T8737] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 97.077365][ T5951] Bluetooth: hci0: command tx timeout [ 97.079811][ T8737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.091115][ T8737] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.095181][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.097152][ T8316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.103318][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.105171][ T8316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.193992][ T8737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.251962][ T8317] hsr_slave_0: left promiscuous mode [ 97.254365][ T8317] hsr_slave_1: left promiscuous mode [ 97.259228][ T8317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.261464][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.264617][ T8317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.267522][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.316692][ T8317] veth1_macvtap: left promiscuous mode [ 97.318836][ T8317] veth0_macvtap: left promiscuous mode [ 97.320727][ T8317] veth1_vlan: left promiscuous mode [ 97.322201][ T8317] veth0_vlan: left promiscuous mode [ 97.639600][ T1112] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 97.642407][ T1112] sr 2:0:0:0: [sr0] tag#22 Sense Key : Illegal Request [current] [ 97.644480][ T1112] sr 2:0:0:0: [sr0] tag#22 Add. Sense: Invalid command operation code [ 97.646884][ T1112] sr 2:0:0:0: [sr0] tag#22 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 97.959174][ T5951] Bluetooth: hci2: command tx timeout [ 98.073390][ T8317] team0 (unregistering): Port device team_slave_1 removed [ 98.159107][ T8317] team0 (unregistering): Port device team_slave_0 removed [ 98.691468][ T8279] smc: removing ib device syz1 [ 98.707967][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.775'. [ 98.711123][ T8828] netlink: 24 bytes leftover after parsing attributes in process `syz.6.775'. [ 98.732034][ T8840] veth0_to_batadv: entered promiscuous mode [ 98.733631][ T8840] veth0_to_batadv: entered allmulticast mode [ 98.785582][ T8737] veth0_vlan: entered promiscuous mode [ 98.802550][ T8737] veth1_vlan: entered promiscuous mode [ 98.827095][ T8737] veth0_macvtap: entered promiscuous mode [ 98.829783][ T8737] veth1_macvtap: entered promiscuous mode [ 98.842269][ T8860] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 98.844204][ T8860] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 98.853421][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.858683][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.862247][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.865959][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.877531][ T8737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.887532][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.890949][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.893405][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.896077][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.902787][ T8737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.909317][ T8737] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.912967][ T8737] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.915176][ T8737] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.917982][ T8737] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.967516][ T8868] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 99.023802][ T8298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.025884][ T8298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.039551][ T8873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=8873 comm=syz.6.788 [ 99.043021][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.788'. [ 99.045439][ T8873] netlink: 32 bytes leftover after parsing attributes in process `syz.6.788'. [ 99.052308][ T8873] netlink: 24 bytes leftover after parsing attributes in process `syz.6.788'. [ 99.055174][ T8870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.787'. [ 99.068740][ T8291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.070914][ T8291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.162320][ T5951] Bluetooth: hci0: command tx timeout [ 99.390999][ T5951] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 99.570487][ T8915] usb usb1: usbfs: process 8915 (syz.7.799) did not claim interface 0 before use [ 99.630116][ T8918] openvswitch: netlink: IP tunnel dst address not specified [ 99.727530][ T8913] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 99.748637][ T8922] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 100.030065][ T8942] overlayfs: failed to resolve './file0': -2 [ 100.039106][ T5951] Bluetooth: hci2: command tx timeout [ 100.977254][ T8952] __nla_validate_parse: 2 callbacks suppressed [ 100.977266][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.7.811'. [ 100.981293][ T8952] netlink: 52 bytes leftover after parsing attributes in process `syz.7.811'. [ 101.008429][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 101.008439][ T39] audit: type=1400 audit(1732097534.321:1715): avc: denied { bind } for pid=8961 comm="syz.4.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.039647][ T8968] netlink: 36 bytes leftover after parsing attributes in process `syz.3.816'. [ 101.040845][ T8971] loop2: detected capacity change from 0 to 7 [ 101.050499][ T8971] Dev loop2: unable to read RDB block 7 [ 101.051979][ T8971] loop2: unable to read partition table [ 101.053643][ T8971] loop2: partition table beyond EOD, truncated [ 101.055722][ T8971] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 101.059652][ T8971] overlayfs: workdir and upperdir must be separate subtrees [ 101.078551][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 101.118225][ T8982] IPVS: Unknown mcast interface: rose0 [ 101.150781][ T8989] netlink: 'syz.4.822': attribute type 1 has an invalid length. [ 101.153473][ T8989] IPVS: length: 162 != 8 [ 101.179102][ T39] audit: type=1400 audit(1732097534.491:1716): avc: denied { write } for pid=8993 comm="syz.4.824" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.200015][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.825'. [ 101.226300][ T9001] netlink: 32 bytes leftover after parsing attributes in process `syz.4.827'. [ 101.297397][ T9001] nbd: socks must be embedded in a SOCK_ITEM attr [ 101.328962][ T9003] syz.7.828 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.549947][ T9030] netlink: 16 bytes leftover after parsing attributes in process `syz.7.835'. [ 101.555746][ T39] audit: type=1800 audit(1732097534.861:1717): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.829" name="/" dev="fuse" ino=1 res=0 errno=0 [ 101.605287][ T39] audit: type=1400 audit(1732097534.911:1718): avc: denied { getopt } for pid=9036 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.608674][ T9037] kvm: kvm [9036]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000006f) [ 101.616752][ T39] audit: type=1400 audit(1732097534.931:1719): avc: denied { write } for pid=5348 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.622400][ T39] audit: type=1400 audit(1732097534.931:1720): avc: denied { remove_name } for pid=5348 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.628698][ T39] audit: type=1400 audit(1732097534.931:1721): avc: denied { add_name } for pid=5348 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.657173][ T9039] overlayfs: conflicting lowerdir path [ 101.663177][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 101.888807][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.837'. [ 102.061118][ T9058] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 102.066374][ T9060] ip6gre1: entered allmulticast mode [ 102.117086][ T5951] Bluetooth: hci2: command tx timeout [ 102.121286][ T9060] netlink: 'syz.4.844': attribute type 10 has an invalid length. [ 102.124303][ T9060] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 102.130317][ T9060] team0: Port device netdevsim0 added [ 102.158138][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.846'. [ 102.161510][ T39] audit: type=1400 audit(1732097535.471:1722): avc: denied { listen } for pid=9069 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 102.168152][ T39] audit: type=1400 audit(1732097535.471:1723): avc: denied { accept } for pid=9069 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 102.212457][ T9072] bridge_slave_1: left allmulticast mode [ 102.213969][ T9072] bridge_slave_1: left promiscuous mode [ 102.215468][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.218480][ T9072] bridge_slave_0: left allmulticast mode [ 102.220009][ T9072] bridge_slave_0: left promiscuous mode [ 102.221553][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.255701][ T9073] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 102.912740][ T39] audit: type=1400 audit(1732097536.221:1724): avc: denied { mount } for pid=9101 comm="syz.7.855" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 102.943370][ T9106] Bluetooth: MGMT ver 1.23 [ 102.948006][ T9106] vlan2: entered promiscuous mode [ 103.206067][ T9115] program syz.3.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.234846][ T9119] netlink: 'syz.7.863': attribute type 11 has an invalid length. [ 103.253476][ T9123] sctp: [Deprecated]: syz.4.864 (pid 9123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.253476][ T9123] Use struct sctp_sack_info instead [ 103.258322][ T9123] sctp: [Deprecated]: syz.4.864 (pid 9123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.258322][ T9123] Use struct sctp_sack_info instead [ 103.301992][ T9128] ip6tnl1: entered promiscuous mode [ 103.389478][ T9139] Bluetooth: MGMT ver 1.23 [ 103.437602][ T9139] netlink: 'syz.7.870': attribute type 1 has an invalid length. [ 103.696375][ T5997] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 103.846308][ T5997] usb 9-1: Using ep0 maxpacket: 32 [ 103.849576][ T5997] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 103.851834][ T5997] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 103.860824][ T5997] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 103.863799][ T5997] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 103.867509][ T5997] usb 9-1: config 0 interface 0 has no altsetting 0 [ 103.872564][ T5997] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 103.875021][ T5997] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 103.881020][ T5997] usb 9-1: Product: syz [ 103.882181][ T5997] usb 9-1: Manufacturer: syz [ 103.883446][ T5997] usb 9-1: SerialNumber: syz [ 103.891016][ T5997] usb 9-1: config 0 descriptor?? [ 103.893707][ T5997] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 103.898104][ T5997] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 103.952637][ T9173] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 103.955249][ T9173] NCSI netlink: No device for ifindex 0 [ 104.107185][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.109510][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.114973][ T5997] usb 9-1: USB disconnect, device number 17 [ 104.117702][ T5997] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 104.196629][ T5951] Bluetooth: hci2: command tx timeout [ 104.596399][ T5951] Bluetooth: hci0: command 0x080f tx timeout [ 104.656091][ T9198] syzkaller1: entered promiscuous mode [ 104.658044][ T9198] syzkaller1: entered allmulticast mode [ 104.775340][ T9201] veth1_to_bond: entered allmulticast mode [ 105.026746][ T9214] program syz.3.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.104826][ T9217] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 105.107533][ T9217] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 105.171801][ T9223] netlink: 'syz.3.894': attribute type 10 has an invalid length. [ 105.173878][ T9223] macvlan0: entered promiscuous mode [ 105.175274][ T9223] macvlan0: entered allmulticast mode [ 105.177301][ T9223] veth1_vlan: entered allmulticast mode [ 105.179743][ T9223] : (slave macvlan0): Enslaving as an active interface with an up link [ 105.268731][ T9232] usb usb4: usbfs: process 9232 (syz.4.896) did not claim interface 0 before use [ 105.674502][ T9296] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.677859][ T9296] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 105.680795][ T9296] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 105.768663][ T9301] xt_hashlimit: size too large, truncated to 1048576 [ 105.878875][ T9311] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 105.975060][ T9319] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 106.368394][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 106.368405][ T39] audit: type=1400 audit(1732097539.681:1751): avc: denied { map } for pid=9325 comm="syz.4.925" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.376215][ T39] audit: type=1400 audit(1732097539.681:1752): avc: denied { execute } for pid=9325 comm="syz.4.925" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.394335][ T9330] can0: slcan on pty35. [ 106.395964][ T9330] __nla_validate_parse: 16 callbacks suppressed [ 106.395972][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.926'. [ 106.430913][ T9334] netlink: 'syz.4.928': attribute type 9 has an invalid length. [ 106.432842][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 106.440403][ T9329] can0 (unregistered): slcan off pty35. [ 106.786352][ T6017] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 106.809449][ T39] audit: type=1400 audit(1732097540.121:1753): avc: denied { create } for pid=9356 comm="syz.3.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 106.817000][ T39] audit: type=1400 audit(1732097540.131:1754): avc: denied { sys_admin } for pid=9356 comm="syz.3.936" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 106.946575][ T6017] usb 9-1: Using ep0 maxpacket: 8 [ 106.949749][ T6017] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.953423][ T6017] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 106.959469][ T6017] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.966830][ T6017] usb 9-1: config 0 descriptor?? [ 106.972049][ T39] audit: type=1400 audit(1732097540.281:1755): avc: denied { setopt } for pid=9363 comm="syz.3.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.976367][ T57] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 107.011494][ T39] audit: type=1400 audit(1732097540.321:1756): avc: denied { sqpoll } for pid=9366 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.157862][ T57] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 107.159917][ T57] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 107.162832][ T57] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.165999][ T57] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 107.169122][ T57] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 107.172879][ T57] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 107.174978][ T57] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 107.178558][ T6017] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 107.182003][ T57] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.185147][ T57] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 107.188101][ T57] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 107.191642][ T57] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 107.193542][ T57] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 107.196771][ T57] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.199817][ T57] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 107.202683][ T57] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 107.207677][ T57] usb 11-1: string descriptor 0 read error: -22 [ 107.209347][ T57] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 107.211697][ T57] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.216214][ T57] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 107.404012][ T9] usb 9-1: USB disconnect, device number 18 [ 107.406965][ T9] iowarrior 9-1:0.0: I/O-Warror #0 now disconnected [ 107.420009][ T9374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.422892][ T9374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.430801][ T6011] usb 11-1: USB disconnect, device number 2 [ 119.110897][ T9382] SELinux: truncated policydb string identifier [ 119.112670][ T9382] SELinux: failed to load policy [ 119.132892][ T39] audit: type=1400 audit(1732097552.441:1757): avc: denied { connect } for pid=9389 comm="syz.7.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.141286][ T39] audit: type=1400 audit(1732097552.451:1758): avc: denied { setopt } for pid=9396 comm="syz.6.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.190196][ T39] audit: type=1400 audit(1732097552.501:1759): avc: denied { listen } for pid=9389 comm="syz.7.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.208086][ T39] audit: type=1400 audit(1732097552.521:1760): avc: denied { bind } for pid=9406 comm="syz.3.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.268611][ T39] audit: type=1400 audit(1732097552.571:1761): avc: denied { mounton } for pid=9412 comm="syz.6.953" path="mnt:[4026533304]" dev="nsfs" ino=4026533304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.293336][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.956'. [ 119.349584][ T39] audit: type=1400 audit(1732097552.661:1762): avc: denied { ioctl } for pid=9427 comm="syz.3.958" path="socket:[30377]" dev="sockfs" ino=30377 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 119.387181][ T9430] fuse: Unknown parameter 'g£#E…øõžv00000000000000000000' [ 119.414540][ T9432] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 119.423157][ T9432] netlink: 52 bytes leftover after parsing attributes in process `syz.6.960'. [ 119.425558][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.960'. [ 119.425650][ T9435] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 119.428235][ T6011] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 119.431707][ T9435] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.961'. [ 119.435443][ T9435] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 119.439976][ T9435] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 119.441982][ T9435] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.961'. [ 119.444398][ T9435] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 119.448963][ T9435] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 119.451136][ T9435] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.961'. [ 119.453511][ T9435] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 119.455700][ T9435] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 119.457945][ T9435] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.961'. [ 119.460304][ T9435] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 119.462481][ T9435] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 119.464464][ T9435] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.961'. [ 119.467212][ T9435] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 119.469625][ T9435] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 119.473421][ T9435] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.961'. [ 119.475903][ T9435] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 119.479335][ T9435] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 119.481732][ T9435] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.961'. [ 119.484258][ T9435] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 119.486504][ T9435] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 119.488505][ T9435] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 119.490809][ T9435] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 119.492811][ T9435] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 119.494902][ T9435] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 119.497348][ T9435] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 119.576967][ T6011] usb 12-1: Using ep0 maxpacket: 8 [ 119.585427][ T6011] usb 12-1: config 0 has no interfaces? [ 119.587732][ T6011] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.590988][ T6011] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.599011][ T6011] usb 12-1: config 0 descriptor?? [ 119.756341][ T57] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 119.805264][ T39] audit: type=1400 audit(1732097553.111:1763): avc: denied { write } for pid=9389 comm="syz.7.947" path="socket:[32790]" dev="sockfs" ino=32790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.814818][ T35] usb 12-1: USB disconnect, device number 2 [ 119.928165][ T57] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.931254][ T57] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 119.934207][ T57] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 119.937365][ T57] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.940810][ T57] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.943262][ T57] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.946421][ T57] usb 11-1: config 0 descriptor?? [ 119.948220][ T9439] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 120.132676][ T9459] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 120.256591][ T39] audit: type=1400 audit(1732097553.571:1764): avc: denied { create } for pid=9462 comm="syz.4.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 120.355739][ T57] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 120.359982][ T57] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 120.370286][ T57] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 120.490581][ T9471] IPVS: Error connecting to the multicast addr [ 120.648528][ T57] usb 11-1: USB disconnect, device number 3 [ 120.769130][ T39] audit: type=1400 audit(1732097554.081:1765): avc: denied { ioctl } for pid=9488 comm="syz.7.978" path="socket:[32223]" dev="sockfs" ino=32223 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 120.850435][ T9493] xt_l2tp: v2 sid > 0xffff: 150994944 [ 121.236680][ T57] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 121.397606][ T57] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 121.399828][ T57] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.405023][ T57] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 121.407514][ T57] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 121.409593][ T57] usb 12-1: Manufacturer: syz [ 121.412133][ T57] usb 12-1: config 0 descriptor?? [ 121.475088][ T9531] binder: 9530:9531 ioctl c0306201 20000200 returned -11 [ 121.476484][ T57] rc_core: IR keymap rc-hauppauge not found [ 121.478584][ T57] Registered IR keymap rc-empty [ 121.480922][ T57] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 121.484422][ T57] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input12 [ 121.615188][ T57] usb 12-1: USB disconnect, device number 3 [ 121.780612][ T39] audit: type=1400 audit(1732097555.091:1766): avc: denied { ioctl } for pid=9551 comm="syz.6.998" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.085072][ T5951] Bluetooth: hci1: ACL packet for unknown connection handle 1203 [ 122.432822][ T9602] tmpfs: Bad value for 'mpol' [ 122.726543][ T35] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 122.900037][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.902947][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.905694][ T35] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 122.909082][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.913660][ T35] usb 9-1: config 0 descriptor?? [ 123.283226][ T9636] overlay: filesystem on ./bus not supported [ 123.323241][ T35] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 123.326663][ T35] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 123.330821][ T35] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.0006/input/input13 [ 123.339270][ T35] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 123.524897][ T828] usb 9-1: USB disconnect, device number 19 [ 123.815349][ T9662] tmpfs: Bad value for 'mpol' [ 123.950410][ T9677] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1207) [ 123.953669][ T9677] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 124.010573][ T9681] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.106783][ T828] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 124.186552][ T39] kauditd_printk_skb: 56 callbacks suppressed [ 124.186563][ T39] audit: type=1400 audit(1732097557.501:1823): avc: denied { read } for pid=9713 comm="syz.4.1047" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.203291][ T39] audit: type=1400 audit(1732097557.501:1824): avc: denied { open } for pid=9713 comm="syz.4.1047" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.249418][ T9714] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.252782][ T9714] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.261076][ T9714] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.266601][ T828] usb 12-1: Using ep0 maxpacket: 32 [ 124.268247][ T9714] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.270850][ T9714] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.271557][ T828] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.275804][ T828] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.279295][ T828] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.282268][ T828] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.282961][ T9714] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.285352][ T828] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.285373][ T828] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.285401][ T828] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 124.298574][ T828] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.299514][ T9726] __nla_validate_parse: 67 callbacks suppressed [ 124.299527][ T9726] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1051'. [ 124.303160][ T828] usb 12-1: config 0 descriptor?? [ 124.317400][ T9714] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.319275][ T9714] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.322372][ T9714] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.327019][ T9714] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.328609][ T9714] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.333632][ T9714] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.455379][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1056'. [ 124.533538][ T828] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.539322][ T9758] input: syz0 as /devices/virtual/input/input14 [ 124.605490][ T9758] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.641945][ T39] audit: type=1400 audit(1732097557.951:1825): avc: denied { create } for pid=9768 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 124.684068][ T39] audit: type=1326 audit(1732097557.991:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.3.1064" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60c677e759 code=0x0 [ 125.476293][ T39] audit: type=1400 audit(1732097558.781:1827): avc: denied { read write } for pid=9798 comm="syz.6.1072" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 125.482531][ T39] audit: type=1400 audit(1732097558.791:1828): avc: denied { open } for pid=9798 comm="syz.6.1072" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 125.638935][ T9808] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.068472][ T9813] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 126.070690][ T9813] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 126.075080][ T9813] vhci_hcd vhci_hcd.0: Device attached [ 126.079772][ T9814] vhci_hcd: connection closed [ 126.081243][ T8296] vhci_hcd: stop threads [ 126.083995][ T8296] vhci_hcd: release socket [ 126.085300][ T8296] vhci_hcd: disconnect device [ 126.276416][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.276444][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.356409][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.356458][ T5951] Bluetooth: hci0: command 0x080f tx timeout [ 126.537348][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1081'. [ 126.601644][ T39] audit: type=1326 audit(1732097559.911:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.4.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2250d7e759 code=0x7ffc0000 [ 126.607775][ T39] audit: type=1326 audit(1732097559.911:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.4.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2250d7e759 code=0x7ffc0000 [ 126.614213][ T39] audit: type=1326 audit(1732097559.921:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.4.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2250d7e759 code=0x7ffc0000 [ 126.621010][ T39] audit: type=1326 audit(1732097559.931:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.4.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2250d7e759 code=0x7ffc0000 [ 126.672834][ T9850] tipc: Started in network mode [ 126.674221][ T9850] tipc: Node identity ac1414aa, cluster identity 4711 [ 126.688208][ T9850] tipc: Enabled bearer , priority 10 [ 126.729718][ T9860] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 126.868417][ C0] usblp0: nonzero read bulk status received: -71 [ 126.872094][ T25] usb 12-1: USB disconnect, device number 4 [ 126.882047][ T9666] usblp0: removed [ 126.901219][ T9879] ip6t_srh: unknown srh match flags B153 [ 126.930328][ T9884] 9pnet_virtio: no channels available for device syz [ 126.935150][ T9884] sp0: Synchronizing with TNC [ 126.979068][ T9886] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1096'. [ 126.981928][ T9877] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1096'. [ 127.179824][ T9918] set match dimension is over the limit! [ 127.183893][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1111'. [ 127.275371][ T9922] kvm: kvm [9921]: vcpu0, guest rIP: 0x19 Unhandled WRMSR(0xc1) = 0xd [ 127.278136][ T9922] kvm: kvm [9921]: vcpu0, guest rIP: 0x1b Unhandled WRMSR(0xc1) = 0xd [ 127.387498][ T6171] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 127.536429][ T6171] usb 11-1: Using ep0 maxpacket: 8 [ 127.540482][ T6171] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.543039][ T6171] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.545689][ T6171] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.551557][ T6171] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.555014][ T6171] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.561495][ T6171] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.623096][ T9942] trusted_key: encrypted_key: keylen parameter is missing [ 127.643350][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1120'. [ 127.698336][ T9949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1123'. [ 127.706103][ T9949] vlan2: entered promiscuous mode [ 127.707938][ T9949] vlan2: entered allmulticast mode [ 127.729165][ T9952] 9pnet_virtio: no channels available for device syz [ 127.799099][ T25] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 127.801314][ T6171] usb 11-1: GET_CAPABILITIES returned 0 [ 127.802808][ T6171] usbtmc 11-1:16.0: can't read capabilities [ 127.819454][ T9963] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 127.828127][ T6011] tipc: Node number set to 2886997162 [ 127.968223][ T25] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.971665][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.974535][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 127.977085][ T25] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.980674][ T25] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.983064][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.986326][ T25] usb 9-1: config 0 descriptor?? [ 127.992938][ T9978] 9pnet_virtio: no channels available for device syz [ 128.027510][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.031094][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.034550][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.037023][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.039434][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.041796][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.044215][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.046765][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.049714][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.052702][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.056730][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.059921][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.063037][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.066797][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.069598][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.071894][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 128.075427][ T5997] usb 11-1: USB disconnect, device number 4 [ 128.326362][ T57] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 128.356378][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.356413][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.408086][ T25] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 128.411008][ T25] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 128.414577][ T25] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 128.436501][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.446323][ T5951] Bluetooth: hci0: command 0x080f tx timeout [ 128.497531][ T57] usb 12-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 128.500491][ T57] usb 12-1: config 1 interface 0 has no altsetting 0 [ 128.503838][ T57] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 128.506304][ T57] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.508394][ T57] usb 12-1: Product: syz [ 128.509439][ T57] usb 12-1: Manufacturer: syz [ 128.510619][ T57] usb 12-1: SerialNumber: syz [ 128.517108][ T9980] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 128.694605][ T9997] exFAT-fs (nullb0): invalid boot record signature [ 128.697156][ T9997] exFAT-fs (nullb0): failed to read boot sector [ 128.699540][ T9997] exFAT-fs (nullb0): failed to recognize exfat type [ 128.730613][ T57] usb 12-1: USB disconnect, device number 5 [ 128.916402][ T6171] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 129.067646][ T6171] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.070795][ T6171] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 129.073422][ T6171] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.076587][ T6171] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.081920][ T9995] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 129.086157][ T6171] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.445775][ T25] usb 11-1: USB disconnect, device number 5 [ 129.507027][ T57] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 129.656320][ T57] usb 12-1: Using ep0 maxpacket: 8 [ 129.658970][ T57] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.661495][ T57] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.664037][ T57] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 51658, setting to 1024 [ 129.667106][ T57] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 129.669865][ T57] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.673297][ T57] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.675685][ T57] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.880814][ T57] usb 12-1: GET_CAPABILITIES returned 0 [ 129.882322][ T57] usbtmc 12-1:16.0: can't read capabilities [ 130.142118][ T6011] usb 12-1: USB disconnect, device number 6 [ 130.167395][T10028] netlink: 87 bytes leftover after parsing attributes in process `syz.6.1145'. [ 130.184456][T10028] hfs: unable to load iocharset "io#harsetyÐHÇÁ„" [ 130.303359][T10035] validate_nla: 58 callbacks suppressed [ 130.303370][T10035] netlink: 'syz.6.1148': attribute type 9 has an invalid length. [ 130.307264][T10035] netlink: 165904 bytes leftover after parsing attributes in process `syz.6.1148'. [ 130.364562][T10040] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 130.364580][T10039] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 130.371678][T10039] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.437100][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.446979][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.516808][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.526569][ T5951] Bluetooth: hci0: command 0x080f tx timeout [ 130.542474][ T6017] usb 9-1: USB disconnect, device number 20 [ 130.662190][T10051] program syz.3.1153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.706060][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 130.706071][ T39] audit: type=1326 audit(1732097564.011:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.7.1157" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8402b7e759 code=0x7ffc0000 [ 130.718585][ T39] audit: type=1326 audit(1732097564.011:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.7.1157" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8402b7e759 code=0x7ffc0000 [ 130.724527][ T39] audit: type=1326 audit(1732097564.021:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.7.1157" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8402b7e759 code=0x7ffc0000 [ 130.738946][ T39] audit: type=1326 audit(1732097564.021:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.7.1157" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8402b7e759 code=0x7ffc0000 [ 130.744932][ T39] audit: type=1326 audit(1732097564.021:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.7.1157" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8402b7e759 code=0x7ffc0000 [ 130.751618][ T39] audit: type=1326 audit(1732097564.021:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.7.1157" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8402b7e759 code=0x7ffc0000 [ 130.757763][ T39] audit: type=1326 audit(1732097564.021:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.7.1157" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8402b7e759 code=0x7ffc0000 [ 130.765082][ T39] audit: type=1326 audit(1732097564.021:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.7.1157" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8402b7e759 code=0x7ffc0000 [ 130.775596][ T39] audit: type=1326 audit(1732097564.021:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.7.1157" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8402b7e759 code=0x7ffc0000 [ 130.782939][ T39] audit: type=1326 audit(1732097564.021:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.7.1157" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8402b7e759 code=0x7ffc0000 [ 130.784670][T10064] loop6: detected capacity change from 0 to 524287999 [ 130.858749][ C3] blk_print_req_error: 26 callbacks suppressed [ 130.858761][ C3] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 130.864499][ C3] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.867109][ C3] buffer_io_error: 26 callbacks suppressed [ 130.867116][ C3] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 131.108007][T10080] netlink: 'syz.6.1162': attribute type 46 has an invalid length. [ 131.419742][T10101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1169'. [ 131.651537][T10114] net_ratelimit: 57 callbacks suppressed [ 131.651548][T10114] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 131.674014][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 131.677197][T10116] bridge_slAve_0: renamed from lo (while UP) [ 131.705941][T10118] netpci0: tun_chr_ioctl cmd 1074025676 [ 131.708006][T10118] netpci0: owner set to 0 [ 131.717789][T10118] sp0: Synchronizing with TNC [ 132.001208][T10135] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 132.026398][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1181'. [ 132.029300][T10138] sctp: [Deprecated]: syz.7.1181 (pid 10138) Use of int in max_burst socket option deprecated. [ 132.029300][T10138] Use struct sctp_assoc_value instead [ 132.168367][T10166] afs: Unknown parameter 'dyn ' [ 132.170634][T10166] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1189'. [ 132.228504][T10183] netlink: 4088 bytes leftover after parsing attributes in process `syz.7.1192'. [ 132.231686][T10183] openvswitch: netlink: Actions may not be safe on all matching packets [ 132.328801][T10150] cgroup: fork rejected by pids controller in /syz6 [ 132.447833][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.449831][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.876010][T10264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1201'. [ 132.975693][ T5951] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 132.978581][ T5951] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 132.978862][T10279] binder: BINDER_SET_CONTEXT_MGR already set [ 132.982658][T10279] binder: 10276:10279 ioctl 4018620d 20000100 returned -16 [ 133.203952][T10290] netlink: 'syz.4.1208': attribute type 27 has an invalid length. [ 133.345247][T10295] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1210'. [ 133.391380][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1211'. [ 133.451309][T10305] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.593301][T10323] QAT: Device 1 not found [ 133.639807][ T5951] Bluetooth: hci0: unexpected event for opcode 0x2036 [ 134.090985][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.109041][ T5951] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 134.209586][T10393] binder: binder_mmap: 10392 20acc000-20ace000 bad vm_flags failed -1 [ 134.309693][T10400] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 134.530339][T10415] netlink: 'syz.7.1243': attribute type 3 has an invalid length. [ 134.686113][T10423] xt_hashlimit: size too large, truncated to 1048576 [ 134.762194][T10432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=10432 comm=syz.7.1248 [ 134.986409][ T827] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 135.140345][ T827] usb 11-1: Using ep0 maxpacket: 8 [ 135.142961][ T827] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.147562][ T827] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.150612][ T827] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.156679][ T827] usb 11-1: config 0 descriptor?? [ 135.356891][T10441] hid-generic 0003:0627:0001.0001: pid 10441 passed too large report [ 135.363304][T10450] __nla_validate_parse: 4 callbacks suppressed [ 135.363314][T10450] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1255'. [ 135.364010][ T827] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 135.505232][T10468] sctp: [Deprecated]: syz.4.1259 (pid 10468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.505232][T10468] Use struct sctp_sack_info instead [ 135.891492][T10473] syz.7.1260: attempt to access beyond end of device [ 135.891492][T10473] sr0: rw=4096, sector=0, nr_sectors = 4 limit=0 [ 135.895546][T10473] EXT4-fs (sr0): unable to read superblock [ 135.924120][T10475] tmpfs: Unknown parameter 'e' [ 135.977317][T10482] netlink: 'syz.3.1263': attribute type 4 has an invalid length. [ 136.231653][T10488] netlink: 'syz.7.1264': attribute type 32 has an invalid length. [ 136.233726][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1264'. [ 136.236165][T10488] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 136.268860][ T39] kauditd_printk_skb: 111 callbacks suppressed [ 136.268872][ T39] audit: type=1400 audit(1732097569.581:1981): avc: denied { setattr } for pid=10490 comm="syz.7.1265" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.867303][T10511] batman_adv: batadv0: Adding interface: dummy0 [ 136.869029][T10511] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.875442][T10511] batman_adv: batadv0: Interface activated: dummy0 [ 136.880270][T10511] batadv0: mtu less than device minimum [ 136.882942][T10511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.886636][T10511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.890002][T10511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.893422][T10511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.896840][T10511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.900220][T10511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.903596][T10511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.907460][T10511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.910877][T10511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.700972][ T827] usb 11-1: USB disconnect, device number 6 [ 137.704590][ T827] iowarrior 11-1:0.0: I/O-Warror #0 now disconnected [ 137.717862][ T5951] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 137.720386][ T5951] Bluetooth: hci0: Injecting HCI hardware error event [ 137.723821][ T5951] Bluetooth: hci0: hardware error 0x00 [ 137.844619][T10540] vxfs: WRONG superblock magic 00000000 at 1 [ 137.848329][T10540] vxfs: WRONG superblock magic 00000000 at 8 [ 137.849976][T10540] vxfs: can't find superblock. [ 138.056775][ T5956] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 138.116164][T10565] kvm: emulating exchange as write [ 138.173021][T10574] tmpfs: Bad value for 'huge' [ 138.339134][T10595] Unsupported ieee802154 address type: 0 [ 138.386592][T10597] netlink: 'syz.7.1294': attribute type 4 has an invalid length. [ 138.388721][T10597] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1294'. [ 138.444050][T10601] netlink: 'syz.7.1296': attribute type 15 has an invalid length. [ 138.456579][ T6011] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 138.492436][T10605] netdevsim netdevsim7: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 138.533276][T10611] tc_dump_action: action bad kind [ 138.626468][ T6011] usb 11-1: Using ep0 maxpacket: 8 [ 138.629769][ T6011] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.633616][ T6011] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.636413][ T6011] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.637251][ T39] audit: type=1400 audit(1732097571.951:1982): avc: denied { remount } for pid=10614 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 138.639486][ T6011] usb 11-1: config 0 descriptor?? [ 138.851446][ T6011] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 138.958767][ T39] audit: type=1400 audit(1732097572.271:1983): avc: denied { connect } for pid=10640 comm="syz.3.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.037234][ T5997] usb 12-1: new full-speed USB device number 7 using dummy_hcd [ 139.127391][ T39] audit: type=1326 audit(1732097572.441:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.3.1316" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c677e759 code=0x7ffc0000 [ 139.137147][ T39] audit: type=1326 audit(1732097572.441:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.3.1316" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c677e759 code=0x7ffc0000 [ 139.145531][ T39] audit: type=1326 audit(1732097572.441:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.3.1316" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60c677e759 code=0x7ffc0000 [ 139.153752][ T39] audit: type=1326 audit(1732097572.441:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.3.1316" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c677e759 code=0x7ffc0000 [ 139.161428][ T39] audit: type=1326 audit(1732097572.441:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.3.1316" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c677e759 code=0x7ffc0000 [ 139.169629][ T39] audit: type=1326 audit(1732097572.441:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.3.1316" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60c677e759 code=0x7ffc0000 [ 139.176355][ T5997] usb 12-1: device descriptor read/64, error -71 [ 139.177712][ T39] audit: type=1326 audit(1732097572.441:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.3.1316" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c677e759 code=0x7ffc0000 [ 139.274249][T10665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1319'. [ 139.309249][ T6011] usb 11-1: USB disconnect, device number 7 [ 139.311758][ T6011] iowarrior 11-1:0.0: I/O-Warror #0 now disconnected [ 139.369673][T10670] syz.3.1320: attempt to access beyond end of device [ 139.369673][T10670] sr0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 139.373043][T10670] (syz.3.1320,10670,2):ocfs2_get_sector:1769 ERROR: status = -5 [ 139.375080][T10670] (syz.3.1320,10670,2):ocfs2_sb_probe:749 ERROR: status = -5 [ 139.377319][T10670] (syz.3.1320,10670,2):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 139.379751][T10670] (syz.3.1320,10670,2):ocfs2_fill_super:1178 ERROR: status = -5 [ 139.426367][ T5997] usb 12-1: new full-speed USB device number 8 using dummy_hcd [ 139.566395][ T5997] usb 12-1: device descriptor read/64, error -71 [ 139.679166][ T5997] usb usb12-port1: attempt power cycle [ 139.806348][ T5951] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 140.026330][ T5997] usb 12-1: new full-speed USB device number 9 using dummy_hcd [ 140.046932][ T5997] usb 12-1: device descriptor read/8, error -71 [ 140.193119][T10696] netlink: 'syz.4.1326': attribute type 6 has an invalid length. [ 140.195373][T10694] syz.3.1325: attempt to access beyond end of device [ 140.195373][T10694] sr0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 140.200721][T10694] hfs: can't find a HFS filesystem on dev sr0 [ 140.296714][ T5997] usb 12-1: new full-speed USB device number 10 using dummy_hcd [ 140.313233][ T5951] Bluetooth: hci3: Malformed HCI Event [ 140.315220][T10711] devpts: called with bogus options [ 140.315263][T10710] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1328'. [ 140.339991][ T5997] usb 12-1: device descriptor read/8, error -71 [ 140.446532][ T5997] usb usb12-port1: unable to enumerate USB device [ 140.518623][T10726] Failed to initialize the IGMP autojoin socket (err -2) [ 140.780195][T10749] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 141.003414][T10764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.007508][T10764] batadv_slave_1: entered promiscuous mode [ 141.011887][T10764] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1346'. [ 141.096329][T10766] bridge_slave_0: invalid flags given to default FDB implementation [ 141.106393][ T57] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 141.277719][ T57] usb 9-1: config 0 has no interfaces? [ 141.279226][ T57] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 141.281566][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.285234][ T57] usb 9-1: config 0 descriptor?? [ 141.440022][T10772] netlink: 'syz.3.1349': attribute type 6 has an invalid length. [ 141.468895][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 141.536474][ T25] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 141.600886][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 141.600897][ T39] audit: type=1400 audit(1732097574.911:2014): avc: denied { mount } for pid=10780 comm="syz.3.1352" name="/" dev="9p" ino=37617754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 141.613136][ T39] audit: type=1400 audit(1732097574.921:2015): avc: denied { unmount } for pid=5957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 141.697992][ T25] usb 11-1: unable to get BOS descriptor or descriptor too short [ 141.701237][ T25] usb 11-1: config 1 has an invalid interface number: 222 but max is 0 [ 141.703679][ T25] usb 11-1: config 1 has no interface number 0 [ 141.705496][ T25] usb 11-1: config 1 interface 222 altsetting 7 endpoint 0xD has invalid maxpacket 1024, setting to 8 [ 141.708581][ T25] usb 11-1: config 1 interface 222 has no altsetting 0 [ 141.713127][ T25] usb 11-1: string descriptor 0 read error: -22 [ 141.714953][ T25] usb 11-1: New USB device found, idVendor=19d2, idProduct=1057, bcdDevice= 9.6c [ 141.717464][ T25] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.721801][T10770] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 141.725787][ T25] option 11-1:1.222: GSM modem (1-port) converter detected [ 141.903124][T10797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=10797 comm=syz.7.1356 [ 141.907793][T10797] 9pnet_fd: Insufficient options for proto=fd [ 141.969316][ T828] usb 11-1: USB disconnect, device number 8 [ 141.977156][ T828] option 11-1:1.222: device disconnected [ 141.991968][ T39] audit: type=1400 audit(1732097575.301:2016): avc: denied { getopt } for pid=10799 comm="syz.7.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 142.286332][ T5997] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 142.447594][ T5997] usb 12-1: config 0 has no interfaces? [ 142.450577][ T5997] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.452939][ T5997] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.455016][ T5997] usb 12-1: Product: syz [ 142.456128][ T5997] usb 12-1: Manufacturer: syz [ 142.458391][ T5997] usb 12-1: config 0 descriptor?? [ 142.592229][T10809] kvm: pic: non byte write [ 142.653979][ T5951] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 142.657833][T10812] gre1: entered promiscuous mode [ 142.659702][T10812] team0: Device gre1 is of different type [ 142.693319][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1361'. [ 142.769445][T10825] netlink: 'syz.6.1364': attribute type 1 has an invalid length. [ 142.771580][T10825] netlink: 112860 bytes leftover after parsing attributes in process `syz.6.1364'. [ 142.776672][T10825] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1364'. [ 142.781901][T10827] netlink: 'syz.3.1365': attribute type 3 has an invalid length. [ 142.784494][T10827] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1365'. [ 142.805497][T10833] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.811165][ T39] audit: type=1400 audit(1732097576.121:2017): avc: denied { override_creds } for pid=10829 comm="syz.3.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 142.819328][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 142.862493][T10807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.874305][T10807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.037797][ T5997] usb 12-1: USB disconnect, device number 11 [ 143.050439][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.054004][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.056700][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.059596][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.061763][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.064381][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.081099][T10851] Failed to initialize the IGMP autojoin socket (err -2) [ 143.196108][T10851] chnl_net:caif_netlink_parms(): no params data found [ 143.316793][T10851] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.319405][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.321891][T10851] bridge_slave_0: entered allmulticast mode [ 143.324488][T10851] bridge_slave_0: entered promiscuous mode [ 143.329925][T10851] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.332015][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.333949][T10851] bridge_slave_1: entered allmulticast mode [ 143.337915][T10851] bridge_slave_1: entered promiscuous mode [ 143.385567][T10851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.403481][T10851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.471756][T10851] team0: Port device team_slave_0 added [ 143.480683][T10851] team0: Port device team_slave_1 added [ 143.492039][T10851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.493920][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.502188][T10851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.506502][T10851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.508601][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.515204][T10851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.556512][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.559742][T10756] Bluetooth: hci2: Opcode 0x080f failed: -110 [ 143.568800][T10851] hsr_slave_0: entered promiscuous mode [ 143.575972][T10851] hsr_slave_1: entered promiscuous mode [ 143.581516][T10851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.584268][T10851] Cannot create hsr debugfs directory [ 143.584815][ T5997] usb 9-1: USB disconnect, device number 21 [ 143.727227][ T39] audit: type=1400 audit(1732097577.041:2018): avc: denied { ioctl } for pid=10878 comm="syz.7.1377" path="socket:[39448]" dev="sockfs" ino=39448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.732701][T10851] netdevsim netdevsim8 netdevsim0: renamed from eth18 [ 143.742371][ T39] audit: type=1400 audit(1732097577.041:2019): avc: denied { getopt } for pid=10876 comm="syz.6.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 143.756757][T10851] netdevsim netdevsim8 netdevsim1: renamed from eth19 [ 143.773528][T10886] usb usb9: usbfs: process 10886 (syz.7.1379) did not claim interface 1 before use [ 143.779935][T10851] netdevsim netdevsim8 netdevsim2: renamed from eth20 [ 143.786861][T10889] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1378'. [ 143.792674][T10851] netdevsim netdevsim8 netdevsim3: renamed from eth21 [ 143.819802][T10851] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.819833][T10851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.819978][T10851] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.820008][T10851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.840279][T10892] binder: 10891:10892 ioctl c0306201 20000140 returned -14 [ 143.913724][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.918751][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.937874][T10851] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.943094][T10896] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 143.960926][ T8296] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.963035][ T8296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.974350][ T8296] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.976326][ T8296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.990185][T10906] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.003757][T10906] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 144.034968][ T39] audit: type=1400 audit(1732097577.341:2020): avc: denied { map } for pid=10907 comm="syz.6.1387" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.044230][T10910] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1386'. [ 144.110648][ T39] audit: type=1400 audit(1732097577.421:2021): avc: denied { setopt } for pid=10919 comm="syz.7.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 144.118898][T10851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.142192][T10924] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1390'. [ 144.174098][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 144.249609][ T39] audit: type=1400 audit(1732097577.561:2022): avc: denied { connect } for pid=10916 comm="syz.6.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.250487][T10935] netlink: 'syz.6.1388': attribute type 1 has an invalid length. [ 144.254813][ T39] audit: type=1400 audit(1732097577.561:2023): avc: denied { read } for pid=10916 comm="syz.6.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.258554][T10943] VFS: could not find a valid V7 on nullb0. [ 144.289589][T10851] veth0_vlan: entered promiscuous mode [ 144.294723][T10851] veth1_vlan: entered promiscuous mode [ 144.329703][T10851] veth0_macvtap: entered promiscuous mode [ 144.339570][T10851] veth1_macvtap: entered promiscuous mode [ 144.449591][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.452514][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.455090][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.460707][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.463250][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.466901][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.473382][T10851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.477187][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.481079][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.484363][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.488229][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.493970][T10851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.503577][T10851] net_ratelimit: 13 callbacks suppressed [ 144.503585][T10851] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 144.514637][T10851] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 144.520527][T10851] wireguard: wg0: Could not create IPv4 socket [ 144.524105][T10851] wireguard: wg1: Could not create IPv4 socket [ 144.526489][ T6011] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 144.526852][T10851] wireguard: wg2: Could not create IPv4 socket [ 144.688872][ T6011] usb 9-1: Using ep0 maxpacket: 8 [ 144.691987][ T6011] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.694823][ T6011] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 144.697263][ T6011] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.700340][ T6011] usb 9-1: config 0 descriptor?? [ 144.904192][ T6011] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 145.033974][T10983] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 145.205278][T10991] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 145.311175][ T6011] usb 9-1: USB disconnect, device number 22 [ 145.315671][ T6011] iowarrior 9-1:0.0: I/O-Warror #0 now disconnected [ 145.399306][T11016] sp0: Synchronizing with TNC [ 145.403368][T11016] program syz.6.1416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.406431][T11014] [U] è [ 145.430157][T11019] binder: 11018:11019 ioctl c0306201 20000200 returned -11 [ 145.632944][T11042] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 145.646910][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.680239][T11057] qnx6: unable to set blocksize [ 145.800958][T11070] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 146.067345][T11093] overlay: filesystem on ./bus not supported [ 146.396860][T11101] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 146.398506][T11102] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.460993][T11101] overlay: ./file1 is not a directory [ 146.462510][T11106] overlay: ./file1 is not a directory [ 146.593280][T11112] Invalid ELF header type: 0 != 1 [ 146.739301][T11117] Bluetooth: MGMT ver 1.23 [ 146.833254][T11129] 9pnet_fd: p9_fd_create_unix (11129): problem connecting socket: ./file0: -111 [ 147.251284][T11148] gretap0: entered promiscuous mode [ 147.253089][T11148] macsec1: entered promiscuous mode [ 147.256983][T11148] gretap0: left promiscuous mode [ 147.347435][T11150] __nla_validate_parse: 9 callbacks suppressed [ 147.347446][T11150] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1459'. [ 147.352155][T11150] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1459'. [ 147.715281][ T5951] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 147.738200][T11172] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1468'. [ 148.005854][T11198] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1475'. [ 148.111233][T11200] tmpfs: Invalid uid '0x00000000ffffffff' [ 148.123617][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 148.123632][ T39] audit: type=1400 audit(1732097581.431:2037): avc: denied { setattr } for pid=11199 comm="syz.6.1476" name="/" dev="9p" ino=37617754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.301798][T11206] Failed to initialize the IGMP autojoin socket (err -2) [ 148.412476][ T39] audit: type=1401 audit(1732097581.721:2038): op=fscreate invalid_context=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 148.497997][T11225] openvswitch: netlink: Flow key attr not present in new flow. [ 148.524568][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 148.524945][T11223] openvswitch: netlink: Flow key attr not present in new flow. [ 148.557043][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.567268][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.570561][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.573930][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.580232][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.582805][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.594286][T11230] Failed to initialize the IGMP autojoin socket (err -2) [ 148.608238][ T5951] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 148.639010][T11241] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 148.640867][T11241] PKCS7: Only support pkcs7_signedData type [ 148.741704][T11255] netlink: 'syz.7.1494': attribute type 3 has an invalid length. [ 148.743768][T11255] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.1494'. [ 148.761792][ T39] audit: type=1400 audit(1732097582.071:2039): avc: denied { getopt } for pid=11237 comm="syz.6.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 148.791118][T11257] nfs: Unknown parameter '/dev/dri/card#' [ 149.067249][T11296] netlink: 'syz.7.1504': attribute type 4 has an invalid length. [ 149.159414][T11314] netlink: 'syz.4.1509': attribute type 4 has an invalid length. [ 149.159428][T11314] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1509'. [ 149.214380][ T39] audit: type=1400 audit(1732097582.521:2040): avc: denied { nlmsg_read } for pid=11318 comm="syz.6.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.215710][T11319] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1510'. [ 149.496413][ T35] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 149.538767][T11328] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 149.550599][T11328] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 149.657875][ T35] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.660402][ T35] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.663943][ T35] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.666504][ T35] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.670658][ T35] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.673177][ T35] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.675660][ T35] usb 11-1: Product: syz [ 149.676841][ T35] usb 11-1: Manufacturer: syz [ 149.680967][ T35] cdc_wdm 11-1:1.0: skipping garbage [ 149.682381][ T35] cdc_wdm 11-1:1.0: skipping garbage [ 149.684947][ T35] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 149.687160][ T35] cdc_wdm 11-1:1.0: Unknown control protocol [ 149.816344][ T827] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 149.885612][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 149.888107][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 149.890512][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 149.892871][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 149.895242][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 149.897548][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 149.899759][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 149.901488][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 149.903176][ T35] usb 11-1: USB disconnect, device number 9 [ 149.904674][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 149.904685][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 149.904692][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 149.966311][ T827] usb 12-1: Using ep0 maxpacket: 32 [ 149.968928][ T827] usb 12-1: config index 0 descriptor too short (expected 35577, got 27) [ 149.971213][ T827] usb 12-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 149.973503][ T827] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 149.975877][ T827] usb 12-1: config 1 has no interface number 0 [ 149.977625][ T827] usb 12-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.980669][ T827] usb 12-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 149.983989][ T827] usb 12-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 149.986439][ T827] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.995995][ T827] snd_usb_pod 12-1:1.1: Line 6 Pocket POD found [ 150.283472][ T39] audit: type=1400 audit(1732097583.591:2041): avc: denied { read } for pid=11329 comm="syz.4.1515" name="file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 150.289164][ T39] audit: type=1400 audit(1732097583.591:2042): avc: denied { open } for pid=11329 comm="syz.4.1515" path="/349/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 150.332157][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1516'. [ 150.400195][T11230] netdevsim netdevsim8 netdevsim0: renamed from eth18 [ 150.410288][T11230] netdevsim netdevsim8 netdevsim1: renamed from eth19 [ 150.421149][T11230] netdevsim netdevsim8 netdevsim2: renamed from eth20 [ 150.440167][T11230] netdevsim netdevsim8 netdevsim3: renamed from eth21 [ 150.549573][ T827] snd_usb_pod 12-1:1.1: Line 6 Pocket POD now attached [ 150.596429][ T5951] Bluetooth: hci3: command tx timeout [ 150.711071][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.713803][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.717232][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.720063][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.722573][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.725230][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.729771][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.732482][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.735431][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.738440][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.742770][T11230] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 150.749909][T11230] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 150.755737][T11230] wireguard: wg0: Could not create IPv4 socket [ 150.758486][T11230] wireguard: wg1: Could not create IPv4 socket [ 150.760972][T11230] wireguard: wg2: Could not create IPv4 socket [ 150.764822][ T827] usb 12-1: USB disconnect, device number 12 [ 150.769820][ T827] snd_usb_pod 12-1:1.1: Line 6 Pocket POD now disconnected [ 150.877843][ T39] audit: type=1326 audit(1732097584.191:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11376 comm="syz.4.1524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2250d7e759 code=0x7ffc0000 [ 150.885561][ T39] audit: type=1326 audit(1732097584.191:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11376 comm="syz.4.1524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2250d7e759 code=0x7ffc0000 [ 151.069034][T11389] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1526'. [ 151.156076][T11397] overlayfs: overlapping lowerdir path [ 151.519990][T11418] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 151.523682][T11419] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 151.527962][T11418] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 151.751769][ T39] audit: type=1400 audit(1732097585.061:2045): avc: denied { read } for pid=11435 comm="syz.7.1541" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 151.753848][T11434] 9pnet_fd: p9_fd_create_tcp (11434): problem creating socket [ 151.760298][ T39] audit: type=1400 audit(1732097585.061:2046): avc: denied { open } for pid=11435 comm="syz.7.1541" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 151.788272][T11439] netlink: 'syz.6.1542': attribute type 10 has an invalid length. [ 151.870351][T11451] netlink: 'syz.7.1545': attribute type 3 has an invalid length. [ 152.025022][T11459] vxlan0: entered allmulticast mode [ 152.029273][T11459] evm: overlay not supported [ 152.061193][T11464] syzkaller1: entered promiscuous mode [ 152.063291][T11464] syzkaller1: entered allmulticast mode [ 152.201584][T11471] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.293826][T11476] syz.7.1551: attempt to access beyond end of device [ 152.293826][T11476] sr0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 152.298068][T11476] hpfs: hpfs_map_sector(): read error [ 152.303097][T11475] syz.7.1551: attempt to access beyond end of device [ 152.303097][T11475] sr0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 152.307391][T11475] hpfs: hpfs_map_sector(): read error [ 152.363252][T11480] __nla_validate_parse: 7 callbacks suppressed [ 152.363262][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1553'. [ 152.526431][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1554'. [ 152.529037][T11482] bridge_slave_1: left allmulticast mode [ 152.530855][T11482] bridge_slave_1: left promiscuous mode [ 152.532692][T11482] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.536347][T11482] bridge_slave_0: left allmulticast mode [ 152.538362][T11482] bridge_slave_0: left promiscuous mode [ 152.540175][T11482] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.733364][T11490] Failed to initialize the IGMP autojoin socket (err -2) [ 152.735748][T11491] Failed to initialize the IGMP autojoin socket (err -2) [ 152.952637][T11506] Failed to initialize the IGMP autojoin socket (err -2) [ 153.364257][T11540] Failed to initialize the IGMP autojoin socket (err -2) [ 153.459958][T11543] Failed to initialize the IGMP autojoin socket (err -2) [ 153.506869][T11544] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 153.601578][T11544] syz.7.1572 (11544): drop_caches: 2 [ 153.716368][ T5951] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 153.749349][T11549] exFAT-fs (nullb0): invalid boot record signature [ 153.751994][T11549] exFAT-fs (nullb0): failed to read boot sector [ 153.754316][T11549] exFAT-fs (nullb0): failed to recognize exfat type [ 153.760105][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 153.760114][ T39] audit: type=1400 audit(1732097587.071:2049): avc: denied { setcheckreqprot } for pid=11546 comm="syz.4.1574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 153.760603][T11549] tmpfs: Bad value for 'mpol' [ 154.297118][T11572] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1583'. [ 154.336364][ T5985] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 154.497590][ T5985] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.500764][ T5985] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 154.503658][ T5985] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.506716][ T5985] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.510246][ T5985] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.512668][ T5985] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.517181][ T5985] usb 11-1: config 0 descriptor?? [ 154.519283][T11565] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 154.650691][T11600] 9pnet_rdma: rdma_create_trans (11600): problem binding to privport: 13 [ 154.678471][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1592'. [ 154.680756][T11602] IPVS: Unknown mcast interface: vcan0 [ 154.738263][T11613] netlink: 'syz.7.1595': attribute type 10 has an invalid length. [ 154.926505][ T5985] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 154.929119][ T5985] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 154.933400][ T5985] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 154.997171][T11629] XFS (nullb0): Invalid superblock magic number [ 155.031911][T11630] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 155.110807][T11645] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 155.115971][T11645] overlayfs: failed to set xattr on upper [ 155.116705][ T39] audit: type=1400 audit(1732097588.421:2050): avc: denied { mounton } for pid=11644 comm="syz.7.1604" path="/265/file0/bus" dev="ramfs" ino=45412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 155.117847][T11645] overlayfs: ...falling back to redirect_dir=nofollow. [ 155.125409][T11645] overlayfs: ...falling back to index=off. [ 155.127103][T11645] overlayfs: ...falling back to uuid=null. [ 155.141677][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1604'. [ 155.188187][ T39] audit: type=1400 audit(1732097588.501:2051): avc: denied { listen } for pid=11564 comm="syz.6.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.195727][ T5985] usb 11-1: USB disconnect, device number 11 [ 155.196716][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.204650][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.205549][ T6196] bond0: (slave syz_tun): Releasing backup interface [ 155.208198][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.212925][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.216050][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.219835][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.238953][T11646] Failed to initialize the IGMP autojoin socket (err -2) [ 155.289588][ T8288] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.425557][ T8288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.511630][ T8288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.591856][ T8288] team0: Port device netdevsim0 removed [ 155.594608][ T8288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.725612][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.729049][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.731633][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.734409][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.737063][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.739856][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.963256][ T8288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.971936][ T8288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.975597][ T8288] bond0 (unregistering): Released all slaves [ 155.981819][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.984605][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.989140][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.991884][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.995972][T11646] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 156.001800][T11646] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 156.006823][T11646] wireguard: wg0: Could not create IPv4 socket [ 156.009307][T11646] wireguard: wg1: Could not create IPv4 socket [ 156.012593][T11646] wireguard: wg2: Could not create IPv4 socket [ 156.044583][ T8288] tipc: Disabling bearer [ 156.051428][ T8288] tipc: Left network mode [ 156.176060][ T39] audit: type=1400 audit(1732097583.489:2052): avc: denied { audit_write } for pid=11703 comm="syz.6.1616" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 156.195390][T11706] binder: 11705:11706 ioctl c0306201 200001c0 returned -22 [ 156.324202][ T8288] hsr_slave_0: left promiscuous mode [ 156.326174][ T8288] hsr_slave_1: left promiscuous mode [ 156.328169][ T8288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.330388][ T8288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.332945][ T8288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.335029][ T8288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.358960][ T8288] veth1_macvtap: left promiscuous mode [ 156.360504][ T8288] veth0_macvtap: left promiscuous mode [ 156.362434][ T8288] veth1_vlan: left promiscuous mode [ 156.363944][ T8288] veth0_vlan: left promiscuous mode [ 156.613034][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.634191][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.642085][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.648212][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.650369][ T5956] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.652420][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.106308][ T8288] team0 (unregistering): Port device team_slave_1 removed [ 157.186124][ T8288] team0 (unregistering): Port device team_slave_0 removed [ 157.769890][T11712] Failed to initialize the IGMP autojoin socket (err -2) [ 158.256795][ T8288] IPVS: stop unused estimator thread 0... [ 158.276338][T11741] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.280202][T11741] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 158.710683][ T5951] Bluetooth: hci1: command tx timeout [ 159.462932][ T5954] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 159.607134][ T5954] usb 11-1: device descriptor read/64, error -71 [ 159.862769][ T5954] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 160.006255][ T5954] usb 11-1: device descriptor read/64, error -71 [ 160.111009][ T5954] usb usb11-port1: attempt power cycle [ 160.444468][ T5954] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 160.463812][ T5954] usb 11-1: device descriptor read/8, error -71 [ 160.691832][ T5951] Bluetooth: hci1: command tx timeout [ 160.701441][ T5954] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 160.730311][ T5954] usb 11-1: device descriptor read/8, error -71 [ 160.847490][ T5954] usb usb11-port1: unable to enumerate USB device [ 161.464990][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.468256][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.470881][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.475322][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.477491][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.479500][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.494643][T11757] Failed to initialize the IGMP autojoin socket (err -2) [ 161.693077][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.698473][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.706093][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.709316][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.720457][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.724108][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.739728][T11760] Failed to initialize the IGMP autojoin socket (err -2) [ 161.891142][T11712] netdevsim netdevsim8 netdevsim0: renamed from eth26 [ 161.900454][T11712] netdevsim netdevsim8 netdevsim1: renamed from eth27 [ 161.930882][T11712] netdevsim netdevsim8 netdevsim2: renamed from eth28 [ 161.941272][T11712] netdevsim netdevsim8 netdevsim3: renamed from eth29 [ 161.955745][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.962022][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.964650][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.966811][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.969037][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.971500][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.984936][T11763] Failed to initialize the IGMP autojoin socket (err -2) [ 162.208928][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.211661][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.214187][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.217714][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.221637][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.224345][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.229135][T11712] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 162.234350][T11712] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 162.239666][T11712] wireguard: wg0: Could not create IPv4 socket [ 162.242289][T11712] wireguard: wg1: Could not create IPv4 socket [ 162.245460][T11712] wireguard: wg2: Could not create IPv4 socket [ 162.504821][ T39] audit: type=1400 audit(1732097590.124:2053): avc: denied { bind } for pid=11784 comm="syz.6.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.532662][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1634'. [ 162.549596][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.553507][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.558155][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.563154][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.565305][ T5951] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.568575][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.575573][T11789] Failed to initialize the IGMP autojoin socket (err -2) [ 162.583919][T11796] fuse: blksize only supported for fuseblk [ 162.606279][T11798] netlink: 'syz.6.1637': attribute type 10 has an invalid length. [ 162.617907][T11798] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.620398][T11798] bond0: (slave team0): Enslaving as an active interface with an up link [ 162.622687][T11798] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1637'. [ 162.626239][ T39] audit: type=1400 audit(1732097590.260:2054): avc: denied { read } for pid=11797 comm="syz.6.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 162.687708][ T39] audit: type=1326 audit(1732097590.313:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11800 comm="syz.6.1638" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f201e17e759 code=0x0 [ 163.443033][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.448261][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.450801][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.453617][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.459104][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.462851][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.474649][T11789] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 163.484461][T11789] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 163.489343][T11789] wireguard: wg0: Could not create IPv4 socket [ 163.491742][T11789] wireguard: wg1: Could not create IPv4 socket [ 163.496108][T11789] wireguard: wg2: Could not create IPv4 socket [ 163.701998][ T6011] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 163.835321][ T6011] usb 11-1: device descriptor read/64, error -71 [ 164.073479][ T6011] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 164.216733][ T6011] usb 11-1: device descriptor read/64, error -71 [ 164.330819][ T6011] usb usb11-port1: attempt power cycle [ 164.654611][ T6011] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 164.683297][ T6011] usb 11-1: device descriptor read/8, error -71 [ 164.930877][ T6011] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 164.950140][ T6011] usb 11-1: device descriptor read/8, error -71 [ 165.054762][ T6011] usb usb11-port1: unable to enumerate USB device [ 166.588694][T11830] [ 166.589536][T11830] ====================================================== [ 166.591988][T11830] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 166.594480][T11830] 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 Not tainted [ 166.598577][T11830] ------------------------------------------------------ [ 166.601385][T11830] syz.6.1641/11830 is trying to acquire lock: [ 166.603717][T11830] ffff8880268b05d8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 166.607427][T11830] [ 166.607427][T11830] but task is already holding lock: [ 166.609799][T11830] ffff8880268b00a8 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 166.612770][T11830] [ 166.612770][T11830] which lock already depends on the new lock. [ 166.612770][T11830] [ 166.615432][T11830] [ 166.615432][T11830] the existing dependency chain (in reverse order) is: [ 166.617723][T11830] [ 166.617723][T11830] -> #4 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 166.620146][T11830] blk_mq_submit_bio+0x1fc4/0x24c0 [ 166.621724][T11830] __submit_bio+0x384/0x540 [ 166.623058][T11830] submit_bio_noacct_nocheck+0x6fb/0xd70 [ 166.624716][T11830] submit_bio_noacct+0x93a/0x1e10 [ 166.626170][T11830] block_read_full_folio+0x812/0xa50 [ 166.627689][T11830] filemap_read_folio+0xc6/0x2a0 [ 166.629134][T11830] filemap_get_pages+0x1560/0x1be0 [ 166.630604][T11830] filemap_read+0x3ca/0xd70 [ 166.631927][T11830] blkdev_read_iter+0x187/0x480 [ 166.633335][T11830] vfs_read+0x87f/0xbe0 [ 166.634576][T11830] ksys_read+0x12b/0x250 [ 166.635823][T11830] do_syscall_64+0xcd/0x250 [ 166.637140][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.638811][T11830] [ 166.638811][T11830] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 166.641313][T11830] down_read+0x9a/0x330 [ 166.642986][T11830] filemap_fault+0x62e/0x2820 [ 166.644620][T11830] __do_fault+0x10a/0x490 [ 166.645931][T11830] do_pte_missing+0xec5/0x3e70 [ 166.647304][T11830] __handle_mm_fault+0x100a/0x2a10 [ 166.648769][T11830] handle_mm_fault+0x3fa/0xaa0 [ 166.650542][T11830] __get_user_pages+0x8d9/0x3b50 [ 166.651915][T11830] populate_vma_page_range+0x27f/0x3a0 [ 166.653489][T11830] __mm_populate+0x1d6/0x380 [ 166.654829][T11830] do_mlock+0x40a/0x7d0 [ 166.656058][T11830] __x64_sys_mlock+0x59/0x80 [ 166.657384][T11830] do_syscall_64+0xcd/0x250 [ 166.658888][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.661069][T11830] [ 166.661069][T11830] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 166.663095][T11830] __might_fault+0x11b/0x190 [ 166.664427][T11830] _copy_from_user+0x29/0xd0 [ 166.665759][T11830] __blk_trace_setup+0xa8/0x180 [ 166.667158][T11830] blk_trace_ioctl+0x163/0x290 [ 166.668535][T11830] blkdev_ioctl+0x109/0x6d0 [ 166.669986][T11830] __x64_sys_ioctl+0x190/0x200 [ 166.671346][T11830] do_syscall_64+0xcd/0x250 [ 166.672660][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.674325][T11830] [ 166.674325][T11830] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 166.676333][T11830] __mutex_lock+0x19b/0xa60 [ 166.677639][T11830] blk_register_queue+0x13c/0x550 [ 166.679117][T11830] add_disk_fwnode+0x785/0x1300 [ 166.680538][T11830] brd_alloc.isra.0+0x5a2/0x840 [ 166.682380][T11830] brd_init+0x12b/0x1d0 [ 166.684070][T11830] do_one_initcall+0x128/0x700 [ 166.685987][T11830] kernel_init_freeable+0x5c7/0x900 [ 166.688045][T11830] kernel_init+0x1c/0x2b0 [ 166.689802][T11830] ret_from_fork+0x45/0x80 [ 166.691372][T11830] ret_from_fork_asm+0x1a/0x30 [ 166.692760][T11830] [ 166.692760][T11830] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 166.694930][T11830] __lock_acquire+0x249e/0x3c40 [ 166.696386][T11830] lock_acquire.part.0+0x11b/0x380 [ 166.697884][T11830] __mutex_lock+0x19b/0xa60 [ 166.699275][T11830] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 166.701056][T11830] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 166.702678][T11830] nbd_start_device+0x15b/0xd70 [ 166.704141][T11830] nbd_ioctl+0x21a/0xfd0 [ 166.705420][T11830] blkdev_ioctl+0x276/0x6d0 [ 166.706795][T11830] __x64_sys_ioctl+0x190/0x200 [ 166.708204][T11830] do_syscall_64+0xcd/0x250 [ 166.709582][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.711347][T11830] [ 166.711347][T11830] other info that might help us debug this: [ 166.711347][T11830] [ 166.714064][T11830] Chain exists of: [ 166.714064][T11830] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#55 [ 166.714064][T11830] [ 166.717932][T11830] Possible unsafe locking scenario: [ 166.717932][T11830] [ 166.720209][T11830] CPU0 CPU1 [ 166.721642][T11830] ---- ---- [ 166.723032][T11830] lock(&q->q_usage_counter(io)#55); [ 166.724458][T11830] lock(mapping.invalidate_lock#2); [ 166.726472][T11830] lock(&q->q_usage_counter(io)#55); [ 166.728507][T11830] lock(&q->sysfs_lock); [ 166.729667][T11830] [ 166.729667][T11830] *** DEADLOCK *** [ 166.729667][T11830] [ 166.731879][T11830] 4 locks held by syz.6.1641/11830: [ 166.733289][T11830] #0: ffff88802672f998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 166.735736][T11830] #1: ffff88802672f8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 166.738568][T11830] #2: ffff8880268b00a8 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 166.742046][T11830] #3: ffff8880268b00e0 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 166.746263][T11830] [ 166.746263][T11830] stack backtrace: [ 166.748344][T11830] CPU: 0 UID: 0 PID: 11830 Comm: syz.6.1641 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 166.752046][T11830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.755811][T11830] Call Trace: [ 166.756685][T11830] [ 166.757455][T11830] dump_stack_lvl+0x116/0x1f0 [ 166.758702][T11830] print_circular_bug+0x419/0x5d0 [ 166.760035][T11830] check_noncircular+0x31a/0x400 [ 166.761325][T11830] ? __pfx_check_noncircular+0x10/0x10 [ 166.762765][T11830] ? add_lock_to_list+0x17d/0x390 [ 166.764112][T11830] __lock_acquire+0x249e/0x3c40 [ 166.765385][T11830] ? __pfx___lock_acquire+0x10/0x10 [ 166.766724][T11830] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 166.768226][T11830] ? stack_depot_save_flags+0x31b/0x8f0 [ 166.769687][T11830] lock_acquire.part.0+0x11b/0x380 [ 166.771033][T11830] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 166.772643][T11830] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 166.774130][T11830] ? rcu_is_watching+0x12/0xc0 [ 166.775385][T11830] ? trace_lock_acquire+0x14a/0x1d0 [ 166.776738][T11830] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 166.778332][T11830] ? lock_acquire+0x2f/0xb0 [ 166.779566][T11830] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 166.781151][T11830] __mutex_lock+0x19b/0xa60 [ 166.782354][T11830] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 166.783978][T11830] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 166.785573][T11830] ? __pfx___mutex_lock+0x10/0x10 [ 166.786899][T11830] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 166.788485][T11830] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 166.790426][T11830] ? __mutex_trylock_common+0xea/0x250 [ 166.792080][T11830] ? __pfx___mutex_trylock_common+0x10/0x10 [ 166.793866][T11830] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 166.795692][T11830] ? rcu_is_watching+0x12/0xc0 [ 166.796998][T11830] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 166.799296][T11830] ? __pfx___mutex_trylock_common+0x10/0x10 [ 166.800806][T11830] ? nbd_ioctl+0x151/0xfd0 [ 166.801924][T11830] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 166.803389][T11830] ? __pfx___mutex_lock+0x10/0x10 [ 166.805075][T11830] ? trace_contention_end+0xea/0x140 [ 166.806985][T11830] ? __mutex_lock+0x1cc/0xa60 [ 166.808687][T11830] ? nbd_ioctl+0x151/0xfd0 [ 166.810315][T11830] ? __pfx___mutex_lock+0x10/0x10 [ 166.811861][T11830] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 166.813278][T11830] nbd_start_device+0x15b/0xd70 [ 166.814571][T11830] ? bpf_lsm_capable+0x9/0x10 [ 166.815793][T11830] nbd_ioctl+0x21a/0xfd0 [ 166.816894][T11830] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 166.818585][T11830] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 166.820277][T11830] ? __pfx_nbd_ioctl+0x10/0x10 [ 166.821585][T11830] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 166.823378][T11830] ? __pfx_lock_release+0x10/0x10 [ 166.824718][T11830] ? trace_lock_acquire+0x14a/0x1d0 [ 166.826085][T11830] ? __pfx_nbd_ioctl+0x10/0x10 [ 166.827335][T11830] blkdev_ioctl+0x276/0x6d0 [ 166.828527][T11830] ? __pfx_blkdev_ioctl+0x10/0x10 [ 166.830181][T11830] ? selinux_file_ioctl+0x180/0x270 [ 166.831931][T11830] ? selinux_file_ioctl+0xb4/0x270 [ 166.833252][T11830] ? __pfx_blkdev_ioctl+0x10/0x10 [ 166.834619][T11830] __x64_sys_ioctl+0x190/0x200 [ 166.835855][T11830] do_syscall_64+0xcd/0x250 [ 166.837041][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.838592][T11830] RIP: 0033:0x7f201e17e759 [ 166.839861][T11830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.844861][T11830] RSP: 002b:00007f201ef53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.847012][T11830] RAX: ffffffffffffffda RBX: 00007f201e335f80 RCX: 00007f201e17e759 [ 166.849083][T11830] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 166.851895][T11830] RBP: 00007f201e1f175e R08: 0000000000000000 R09: 0000000000000000 [ 166.854012][T11830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.856078][T11830] R13: 0000000000000000 R14: 00007f201e335f80 R15: 00007ffca2ed9c38 [ 166.858150][T11830] [ 166.903315][T11830] block nbd6: shutting down sockets [ 167.002065][ T8316] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.104771][ T8316] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.171788][ T8316] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.237757][ T8316] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.290728][ T8316] bridge_slave_1: left allmulticast mode [ 167.292260][ T8316] bridge_slave_1: left promiscuous mode [ 167.293940][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.296520][ T8316] bridge_slave_0: left allmulticast mode [ 167.298445][ T8316] bridge_slave_0: left promiscuous mode [ 167.300390][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.466971][ T8316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.469910][ T8316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.472875][ T8316] bond0 (unregistering): (slave team0): Releasing backup interface [ 167.475771][ T8316] bond0 (unregistering): Released all slaves [ 167.478881][ T8316] bond1 (unregistering): Released all slaves [ 167.745163][ T8316] hsr_slave_0: left promiscuous mode [ 167.747340][ T8316] hsr_slave_1: left promiscuous mode [ 167.749520][ T8316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.752319][ T8316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.754729][ T8316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.758211][ T8316] veth1_macvtap: left promiscuous mode [ 167.760096][ T8316] veth0_macvtap: left promiscuous mode [ 167.761561][ T8316] veth1_vlan: left promiscuous mode [ 167.762971][ T8316] veth0_vlan: left promiscuous mode [ 167.972455][ T8316] team0 (unregistering): Port device team_slave_1 removed [ 168.013971][ T8316] team0 (unregistering): Port device team_slave_0 removed [ 168.639189][ T8316] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.677087][ T8316] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.724698][ T8316] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.762419][ T8316] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.851834][ T8316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.855580][ T8316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.858549][ T8316] bond0 (unregistering): Released all slaves [ 168.861731][ T8316] bond1 (unregistering): Released all slaves [ 169.173515][ T8316] hsr_slave_0: left promiscuous mode [ 169.175384][ T8316] hsr_slave_1: left promiscuous mode [ 169.177060][ T8316] batman_adv: batadv0: Interface deactivated: dummy0 [ 169.178776][ T8316] batman_adv: batadv0: Removing interface: dummy0 [ 169.180945][ T8316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.182860][ T8316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.184917][ T8316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.186878][ T8316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.190197][ T8316] veth1_macvtap: left promiscuous mode [ 169.191628][ T8316] veth0_macvtap: left promiscuous mode [ 169.193063][ T8316] veth1_vlan: left promiscuous mode [ 169.194382][ T8316] veth0_vlan: left promiscuous mode [ 169.365513][ T8316] team0 (unregistering): Port device team_slave_1 removed [ 169.413437][ T8316] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 10:09:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850d5855 RDI=ffffffff9ab02400 RBP=ffffffff9ab023c0 RSP=ffffc90003317028 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e32312e36 R12=0000000000000000 R13=0000000000000061 R14=ffffffff850d57f0 R15=0000000000000000 RIP=ffffffff850d587f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f201ef536c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f201ef31f98 CR3=0000000030894000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f201e1f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f201e1f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f201e1f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f201e1f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f201e1f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f201e1f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f201e30c488 00007f201e30c480 00007f201e30c478 00007f201e30c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f201ee6d100 00007f201e30c440 00007f201e300004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f201e30c498 00007f201e30c490 00007f201e30c488 00007f201e30c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff9a83f8a0 RBX=0000000000000001 RCX=ffffc90003b58001 RDX=ffffc90003b57678 RSI=ffffc90003b57660 RDI=0000000000000001 RBP=ffffc90003b50000 RSP=ffffc90003b57268 R8 =ffffc90003b5731c R9 =ffffffff90ffa004 R10=ffffc90003b572e8 R11=000000000000ef52 R12=ffffc90003b57338 R13=ffffc90003b572e8 R14=ffffc90003b57670 R15=ffffc90003b57668 RIP=ffffffff815c363e RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffb3fbbfd00 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc9e8f2f18 CR3=000000002c6f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=9e87227f9e87227f 9e87227f9e87227f 9e87227f9e87227f 9e87227f9e87227f 9e87227f9e87227f 9e87227f9e87227f 9e87227f9e87227f 9e87227f9e87227f ZMM22=12c190b312c190b3 12c190b312c190b3 12c190b312c190b3 12c190b312c190b3 12c190b312c190b3 12c190b312c190b3 12c190b312c190b3 12c190b312c190b3 ZMM23=d1c3f7f8d1c3f7f8 d1c3f7f8d1c3f7f8 d1c3f7f8d1c3f7f8 d1c3f7f8d1c3f7f8 d1c3f7f8d1c3f7f8 d1c3f7f8d1c3f7f8 d1c3f7f8d1c3f7f8 d1c3f7f8d1c3f7f8 ZMM24=74b625de74b625de 74b625de74b625de 74b625de74b625de 74b625de74b625de 74b625de74b625de 74b625de74b625de 74b625de74b625de 74b625de74b625de ZMM25=a13380afa13380af a13380afa13380af a13380afa13380af a13380afa13380af a13380afa13380af a13380afa13380af a13380afa13380af a13380afa13380af ZMM26=255cd28f255cd28f 255cd28f255cd28f 255cd28f255cd28f 255cd28f255cd28f 255cd28f255cd28f 255cd28f255cd28f 255cd28f255cd28f 255cd28f255cd28f ZMM27=3ea5e21c3ea5e21c 3ea5e21c3ea5e21c 3ea5e21c3ea5e21c 3ea5e21c3ea5e21c 3ea5e21c3ea5e21c 3ea5e21c3ea5e21c 3ea5e21c3ea5e21c 3ea5e21c3ea5e21c ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=fc070000fc070000 fc070000fc070000 fc070000fc070000 fc070000fc070000 fc070000fc070000 fc070000fc070000 fc070000fc070000 fc070000fc070000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81d6653b RDX=0000000000000000 RSI=0000000000000004 RDI=ffffea0000e509f0 RBP=000055558737e000 RSP=ffffc90006a4f890 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000005005 R12=dffffc0000000000 R13=ffffea0000e509f0 R14=ffff88802105d7c0 R15=ffffea0000e509c0 RIP=ffffffff81ef7a90 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f38a5867d60 CR3=0000000031f8c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f38a4d0c6a3 00007f38a4d0c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc057cab0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555871074a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555871836de 0000555587183210 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc057cf24 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9408000100000c08 0606011bea001000 0020808080900003 8004060c4fa00023 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0105ac8808000100 0002080604011be0 05ac860800010000 02080604011be401 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000004080605ac80 08000100000c0806 06011bf001100005 ac9408000100000c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080606011bea0010 0000208080809000 038004060c4fa000 2364626e2f766564 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f01ffffffffffff ffffeb0803800301 000004080605ac80 0800010000020806 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000000 RBX=0000000000000072 RCX=ffffffff8453239a RDX=ffff888022cb8000 RSI=000000000000005c RDI=0000000000000001 RBP=ffff888027960fe2 RSP=ffffc900042376c8 R8 =0000000000000001 R9 =000000000000005c R10=0000000000000072 R11=00000000000a4001 R12=0000000000000020 R13=0000000000000004 R14=0000000000000004 R15=dffffc0000000000 RIP=ffffffff818da3e8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556bf0d500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555906ad808 CR3=000000004feb2000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdc943820 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8402bf25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8402bf2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8402bf2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8402bf2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8402bf269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8402bf277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000