last executing test programs: 2m7.352702149s ago: executing program 3 (id=547): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000d0429a67000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000200012800b0001006272696467650000100002800c001e000000000001000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) 2m7.352504311s ago: executing program 3 (id=548): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103c41, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) flock(r1, 0x2) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000000)={0xc5, 0x0, r1}) 2m7.272667918s ago: executing program 3 (id=549): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000c80)={0x2020, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002cc0)={0x1, 0x10000, {}, {0x0}, 0xff, 0xec45}) getresgid(&(0x7f0000002d00), &(0x7f0000002d40), &(0x7f0000002d80)=0x0) write$FUSE_STATX(r0, &(0x7f0000002dc0)={0x130, 0x0, r1, {0x5, 0x0, 0x0, '\x00', {0x200, 0x4, 0x1, 0x5, r2, r3, 0x4000, '\x00', 0x9afa, 0x1, 0xa157, 0x8, {0x0, 0xffffffff}, {0x1, 0xfffffff8}, {0x7, 0x2}, {0x5, 0x7}, 0x3, 0x1, 0x3}}}, 0x130) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="1100000000000000000000004d368028564be915bdebc88f7660d0c20f28b08b52ba7d044603f8afe66465053d528ae7c013f1aa19cfc2033b", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x10448) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)=r9}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000740)={'sit0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x10, 0x3ff, {{0x49, 0x4, 0x1, 0x1, 0x124, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x4c, 0x1b, 0x1, 0x6, [{@rand_addr=0x64010101, 0x2}, {@broadcast, 0x3}, {@broadcast, 0x1}, {@rand_addr=0x64010100, 0xd}, {@multicast1, 0x7}, {@private=0xa010101, 0x401}, {@multicast1, 0x81}, {@private=0xa010102, 0x8}, {@remote, 0x8}]}, @noop, @end, @generic={0x82, 0x10, "9f985c8228c6540e2633546a5eae"}, @cipso={0x86, 0x8a, 0xffffffffffffffff, [{0x5, 0x12, "d307084da2100e9da5e8940aa27f2599"}, {0x1, 0x10, "dcde20a809f1be916fb9cce40e86"}, {0x1, 0xc, "ec9f653e33ea2ad825de"}, {0x5, 0xe, "02f2e04815e2aaaeb41439df"}, {0x7, 0x11, "9025d5138b5bedd39124711099698f"}, {0x4, 0xc, "d8ace1556ed5ff2f61c9"}, {0x6, 0xa, "ab8909c269b159c3"}, {0x1, 0x11, "f5067c1d1e091f167d709af5484eaf"}, {0x0, 0x10, "36321f8b2dedaf411daff7bfd190"}]}, @cipso={0x86, 0x25, 0x3, [{0x1, 0x11, "752dddadfb9172cd05bada2e23f2a7"}, {0x6, 0x3, 'w'}, {0x7, 0xb, "cbeb1f08136bc5d7ab"}]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r8, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f00000008c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff2919, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @exit, @map_fd={0x18, 0xb, 0x1, 0x0, r10}, @exit, @alu={0x7, 0x0, 0x6, 0xb, 0x9, 0xffffffffffffffe0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0xa, 0x3, 0x0, 0xffffffffffffffdc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x8, 0x4e, &(0x7f0000000540)=""/78, 0x41100, 0x60, '\x00', r11, @fallback=0x1c, r7, 0x8, &(0x7f0000000780)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0xe, 0x6, 0x492001c1}, 0x10, r12, r7, 0x5, &(0x7f0000000b00)=[r9, r7, r7, r8], &(0x7f0000000b40)=[{0x3, 0x4, 0x1, 0x1}, {0x2, 0x1, 0x8}, {0x0, 0x1, 0x10, 0x5}, {0x1, 0x1, 0x9, 0x5}, {0x1, 0x2, 0xe, 0x8}], 0x10, 0x3dc9}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r8, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r9}, 0x20) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) 2m7.272166481s ago: executing program 3 (id=550): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c08b1}, 0x4044840) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') mincore(&(0x7f0000009000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/68) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0x2, 0x4) listen(r1, 0x9) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c08b1}, 0x4044840) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') (async) mincore(&(0x7f0000009000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/68) (async) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r1) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0x2, 0x4) (async) listen(r1, 0x9) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 2m7.122956615s ago: executing program 3 (id=551): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@fwd={0x0, 0x0, 0x0, 0x10, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8]}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x13f, 0x40) 2m6.881773994s ago: executing program 3 (id=560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x88}], 0x1, 0x5) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020088ffffffffffffff0000000001"], 0xfdef) 2m6.791158977s ago: executing program 32 (id=560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x88}], 0x1, 0x5) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020088ffffffffffffff0000000001"], 0xfdef) 1m23.888784846s ago: executing program 1 (id=1393): modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x0, 0x400}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1m23.88777891s ago: executing program 1 (id=1395): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) (async) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000100)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7, 0xffffffffffffffff}) close_range(r4, r5, 0x0) (async) ioctl$SYNC_IOC_FILE_INFO(r8, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x6, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x87, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x4, 0x0, {0x7, 0x25, 0x1, 0x3, 0x5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0xfd, 0x0, 0xc6, {0x7, 0x25, 0x1, 0x3, 0x7, 0x3}}}}}}}]}}, 0x0) (async) io_uring_setup(0x29ea, &(0x7f0000000480)={0x0, 0x0, 0x2}) 1m23.886693624s ago: executing program 1 (id=1396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x88}], 0x1, 0x5) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000101"], 0xfdef) 1m23.750743806s ago: executing program 1 (id=1398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 1m23.658450179s ago: executing program 1 (id=1402): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80c0f98dbe1efbafc0c66ed64660f3809fe0f01c3", 0x34}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 1m23.578761995s ago: executing program 1 (id=1408): r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\t\x00\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00', 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}, @TCA_RED_PARMS={0x14, 0x1, {0x200, 0xf, 0x800, 0x11, 0x1d, 0x9, 0x5}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r5 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x10, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1m8.528003884s ago: executing program 33 (id=1408): r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\t\x00\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00', 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}, @TCA_RED_PARMS={0x14, 0x1, {0x200, 0xf, 0x800, 0x11, 0x1d, 0x9, 0x5}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r5 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x10, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 53.141683768s ago: executing program 4 (id=1772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x88}], 0x1, 0x5) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000011000001"], 0xfdef) 52.951680766s ago: executing program 4 (id=1777): syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x24, 0x2b, 0x0, @private2, @local, {[@routing={0x1, 0x2, 0x2, 0x8, 0x0, [@local]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x1, 0x100, @void}}}}}}}}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$qrtrtun(r0, &(0x7f00000014c0)="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", 0x1000) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000080)) 52.950405205s ago: executing program 4 (id=1781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="614e164d312ab43f4cfa8630db040c05ad46f968bb858b986686aaf04602f7cf1b92dd494ec2423cf8c5ae0765812b7fa01324e177f1db3df604f2b21ac4f488f852d6d2de012e0b489bb3b93b804464052e07884b73cd988884005e93356303330df9cda87ac59fd324e54697a5bbf07c43d225ce9d979813059d9a410a0bd9136bd932bec4497263b33261d795e8bd87acebbd2fa4f50220bdeee6c7b33bfee894afb05d019f581f5710b0453e284acb0683d3de7b1404", @ANYRESOCT=r1, @ANYRES32=r0], 0x58}}, 0x20004890) 52.871765199s ago: executing program 4 (id=1783): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0xfff, 0x8000007f, 0x0, 0xfffffffffffffdfc, 0x800000df}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x514, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f00000006c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) mmap(&(0x7f0000c0e000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x9ef3e000) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x2d8, 0x20, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000005200010a"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0x2, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0x10, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0x13, 0x3, 0xca}, {0x6000, 0xdddd0000, 0x3, 0x0, 0x6, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0x3000, 0x4000, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x3, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0xb, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x2, 0xd, 0x5, 0x3, 0x3, 0xa, 0xfd, 0x5, 0x6, 0x2, 0x7}, {0x3000, 0x5}, {0xeefee000, 0x9}, 0xc000000b, 0x0, 0xdddd1000, 0x22a0, 0x9, 0x4000, 0xe6e70c00, [0x1, 0x401, 0x0, 0xc5]}) close_range(r1, r1, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000700)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@hyper, 0x3}, 0x400, "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"}, 0x452, 0x4002000}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f0000000140)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000100)=0x3}) 52.609193412s ago: executing program 4 (id=1790): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @empty, @empty, 0x0, 0x10}}) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000340)="b8010000000f01d966b889000f00d0b8f77f00000f23c80f21f835000080000f23f8dadcc4e189d3dc650f01c8f30f7e56000f01df0f01dff30f1ef1", 0x3c}], 0x1, 0x53, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0x18, 0x0, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000040)='GPL\x00', 0x0, 0x86}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2}}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r10 = eventfd2(0x6b, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000100)=r10, 0x1) 52.410891521s ago: executing program 4 (id=1795): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00'}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x61}, {0x0, 0xc9, 0x0, 0x2}}}, 0x9) syz_open_dev$usbfs(0x0, 0x77, 0x3501) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="e5ffffffffffffff00006b00000008000300", @ANYRES32=r3], 0x28}}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000040)={0x2, 0x2, 0x0, {0x6, 0xc, 0x1, 0x5}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) 37.406220483s ago: executing program 34 (id=1795): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00'}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x61}, {0x0, 0xc9, 0x0, 0x2}}}, 0x9) syz_open_dev$usbfs(0x0, 0x77, 0x3501) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="e5ffffffffffffff00006b00000008000300", @ANYRES32=r3], 0x28}}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000040)={0x2, 0x2, 0x0, {0x6, 0xc, 0x1, 0x5}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) 2.161553661s ago: executing program 2 (id=2543): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0xf563760638e6d24b, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048888}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) fcntl$addseals(r3, 0x409, 0x8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x20008885) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000380)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x7, 0x51, 0x7, 0x0, {{0x17, 0x4, 0x2, 0x35, 0x5c, 0x67, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @empty, {[@generic={0x44, 0x11, "bfc156c6cf0ded03237ad240e721ae"}, @timestamp_prespec={0x44, 0x34, 0xfb, 0x3, 0x1, [{@private=0xa010102, 0x2}, {@rand_addr=0x64010101, 0x4}, {@multicast1, 0x8}, {@rand_addr=0x64010102, 0x1}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x3}, {@multicast2, 0x6}]}]}}}}}) getpeername$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x0, 0x7, {{0x30, 0x4, 0x1, 0x9, 0xc0, 0x64, 0x0, 0x7, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x7f, 0x3, 0x6, [{@remote, 0x80000000}]}, @cipso={0x86, 0x14, 0x3, [{0x0, 0xe, "bb9f34778e13a0fcfdbc0bc9"}]}, @generic={0x7, 0x4, "aa5a"}, @timestamp_addr={0x44, 0x1c, 0xc5, 0x1, 0x5, [{@remote, 0x200000}, {@loopback, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0xcf, 0x3, 0x9, [{@empty, 0xe}, {@multicast2, 0x84}, {@empty, 0x231}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@local, 0x1}, {@private=0xa010100, 0x1}]}, @generic={0x7, 0x10, "77fede49d3a99284a74a926b1c98"}, @rr={0x7, 0xf, 0xc5, [@remote, @local, @rand_addr=0x64010101]}, @generic={0x89, 0x7, "cb6851ff82"}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r6, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000880)=0x7) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xd, &(0x7f00000008c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x77d}}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000940)='GPL\x00', 0x9, 0xa5, &(0x7f0000000980)=""/165, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[r5], &(0x7f0000000ac0)=[{0x1, 0x3, 0x4, 0x8}], 0x10, 0xce2e}, 0x94) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000c00)=0x1) io_setup(0x80, &(0x7f0000000c40)=0x0) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000c80)={r3, 0x5e39, 0x8, 0x1000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r12, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r17 = syz_open_dev$usbmon(&(0x7f0000001e80), 0x6, 0x200000) io_submit(r14, 0x5, &(0x7f0000002080)=[&(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x2, 0x0, r15, &(0x7f0000000cc0)="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", 0x1000, 0x0, 0x0, 0x1, r5}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, &(0x7f0000001d00)="03598fda5cdccebcadabb16358e14e59a5c78ed825fff435eed7cd7f513882fd38a18b077a1bbfea37bd0835f10136e25c3f62e4c8feb83d83ef67d33db00e62075b570628ac6e5375c5deadeee2e554ae877634f73448ad488e4d367516763398da0fcd19bf855656e2dc7822bddd15e5b57db7c5df0c1f60a417767f9b", 0x7e, 0x6, 0x0, 0x0, r5}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x8, 0x10, r0, &(0x7f0000001dc0), 0x0, 0x9, 0x0, 0x1, r16}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x7, 0x2, r17, &(0x7f0000001ec0)="349906cdcbe0c96d4488fd290d6de376c982a27a7f61363cbaf9d51f1b7af58a587be49877c769532a9a7ec0b3d8c357c5f63d7f788e5c58227ab28696d59ede41d4f8d1d5620bf1a3345ba36db705b843fe787afe3c03823e09bb7485dfe4461b67e268f709a2d4798f14fb9d05623084fe426a68c1b9b76701bca884bafb07a420da936afb56172f95102687edeb629452658960de0ae3ef838d1a03c657e0feff56c66f6d7f412a1d35c664998129bcfb85fec104b95e4dccc19a5d488b428235b95ebf3997cc2113b33d4a9faccb0b359e8a0d0974077f0cfb1f27c6d72b95718bdc", 0xe4, 0x9, 0x0, 0x2, r5}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x6, 0x7, r13, &(0x7f0000002000)="26074ce49ef70b1f3e0cf867e6f497524d015f9a1f412c45bdc6211236da65231bddefff768ed38391600c2b18a93b0f1714", 0x32, 0x5, 0x0, 0x2, r5}]) r18 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000020c0), 0x200000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r18, 0x80083313, &(0x7f0000002100)) 1.974717378s ago: executing program 2 (id=2547): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000740)=[@cpuid={0x14, 0x18, {0x3, 0x3}}, @cpuid={0x14, 0x18, {0x1, 0x8}}, @wr_crn={0x46, 0x20, {0x8, 0x4}}, @wrmsr={0x1e, 0x20, {0x1b2, 0x2f79}}, @out_dx={0xaa, 0x28, {0xbcdf, 0x0, 0xa97d}}, @out_dx={0xaa, 0x28, {0x1278, 0x1, 0x9}}, @rdmsr={0x32, 0x18}, @wr_drn={0x6e, 0x20, {0x0, 0x9}}, @uexit={0x0, 0x18, 0x1}, @rdmsr={0x32, 0x18, {0xb40}}, @wr_drn={0x6e, 0x20, {0x5, 0x892}}, @out_dx={0xaa, 0x28, {0x87e3, 0x2, 0x9}}, @in_dx={0x82, 0x20, {0x73f3, 0x3}}, @code={0xa, 0x4e, {"c4627921960000000066ba4200ec420fc7b32f78000047d8b71b8e0000400f011f470f06439c42d8645b08410f01c8b9800000c00f3235004000000f30"}}, @uexit={0x0, 0x18, 0x4}, @wrmsr={0x1e, 0x20, {0x4c1, 0x3}}, @wr_drn={0x6e, 0x20, {0x3, 0x8000}}, @code={0xa, 0x65, {"c482292c820080000048b8db530000000000000f23c80f21f8350c00a0000f23f80f01c3b938030000b88e000000ba000000000f30460f01c2420fc7abce00000066baa000edc4e335791b940f1836c4e169db38"}}, @out_dx={0xaa, 0x28, {0xe5b1, 0x2, 0x7}}, @rdmsr={0x32, 0x18, {0x315}}], 0x2db}) ioctl$KVM_GET_TSC_KHZ_cpu(r0, 0xaea3) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18090000000000000000000000000000850000008800000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x10}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='ntfs3\x00', 0x8080, &(0x7f00000001c0)='discard') sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$nci(r2, &(0x7f0000000680)=""/88, 0x58) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1.973080717s ago: executing program 2 (id=2549): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) (async) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) madvise(&(0x7f000034c000/0x3000)=nil, 0x3000, 0x10) lseek(r1, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x68e1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008005}, 0x2) 1.891478571s ago: executing program 0 (id=2551): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000002c0)={0x26, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x4024082) socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r2, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001340)=0xfffffffffffffffc) preadv(r1, &(0x7f0000002800)=[{&(0x7f0000001400)=""/170, 0xaa}], 0x1, 0x7, 0x8) 1.831676973s ago: executing program 2 (id=2552): kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x12008000, 0x1008000}], 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000040)={0x0, 0x2, 0x101, 0x9, 0x1, [], [0x3, 0x80000001, 0xfffffffd, 0x6], [0x8, 0x1, 0x5, 0x48], [0x8, 0xb, 0x10001, 0x5]}) creat(&(0x7f0000000f00)='./file0\x00', 0xc8) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f00000001c0)=0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c000004"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r7, &(0x7f0000000340)="3fe11724808fa7124731e53bc888bc5505ca883c435f5f2c13bc72c3d3900a836c066978637112880e5a78b225d83eb8", 0x30, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001"], 0x38}}, 0x0) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r10, &(0x7f00000001c0), 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r11, 0x40045532, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000240)={0x1, 0x1fffffe, 0x2, 0x80000000006, 0x8000000000000000, 0x100000001, 0xfffdfffffffffffb, 0x0, 0xfffffffffffffffd, 0x1000000000004, 0xfffffffd, 0x2}) r12 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r12, 0xc06c4124, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r13 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000080)=0x10) syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="04080410c90003"], 0x7) 1.830105361s ago: executing program 0 (id=2553): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="348da700f316a8dc73004bcfd0e3d49e16fdf8605f30b214d30b6aaf6b3bd18edd9efcabbe14a24a3fb1618f93b91c425524473e490972541ad4d8ec467b774eeea25f23d49f8f7efe4fb7310fffb26600509bad71364914eea45d1f3a4511ec930c1bb980d546a5b9", @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005000000"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x5c, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa268100000086dd60010100002211ff289ee8651f94fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22002281780203000000000000301ce602000079dea6b6f056d75cddf97abb"], 0x0) 1.828887963s ago: executing program 0 (id=2554): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x180, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000300)) waitid(0x0, r0, 0x0, 0x8, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) getrusage(0x1, &(0x7f00000000c0)) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000c00000000000c000180060006008e", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.751322632s ago: executing program 2 (id=2555): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4a800, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4a800, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23, 0xfb24, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}}}, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0xa6}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.75109016s ago: executing program 2 (id=2556): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@alu={0x7, 0x0, 0x9, 0xa, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x3, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) syz_open_dev$video4linux(&(0x7f0000000580), 0x5, 0x286600) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x4, 0x2, 0x2, 0x4}}, 0x26) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_PEC(r6, 0x708, 0x8) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000000c0)={0x0, 0x1, 0x2, &(0x7f0000000040)={0x1a, "1a0c1c9da4693f2542f9eb34767f98bba3d2309893660cc16d461581326c87719d"}}) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x2) syz_io_uring_setup(0x82a, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) connect$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00?'], 0xe4}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r8, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 1.353476353s ago: executing program 6 (id=2559): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000300)={{0xe, 0xe}, 'port1\x00', 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x7, 0x0, 0x8, 0xa7}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x21, 0x0, 0x3, 0x0, 0x144}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'erspan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x3a, 0x1, 0x0, 0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r4, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000600)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2542, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) write$P9_RLOPEN(r7, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x2, 0x3}, 0x5}}, 0x18) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r8, 0x80184153, &(0x7f00000005c0)={0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x3}, 0x0, 0x3, 0x7, 0x400, 0xfffffffffffffffe, 0x84c10147, r1}) 941.780597ms ago: executing program 0 (id=2563): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]}) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000006200)=[{{0x0, 0x0, 0x0}, 0x72d}], 0x1, 0x2000000022, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 771.432661ms ago: executing program 6 (id=2564): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x22002) ioctl$CEC_ADAP_S_PHYS_ADDR(r1, 0x40026102, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r3}}}, 0x78) 770.098402ms ago: executing program 6 (id=2565): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xa) r1 = socket(0x10, 0x80000, 0x2) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4086, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000a80)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x5a, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x1, 0x8, 0x1, 0x6}) 711.432346ms ago: executing program 6 (id=2566): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x5820a61ca228659, 0x0, 0x6, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x2872, 0x7f, 0x9, 0x3d6, 0x0, 0x401, 0x7, 0x9}}}}]}, 0x58}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@deltfilter={0x27a0, 0x2d, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x6, 0xd}, {0x10, 0xd}, {0x6, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2740, 0x2, [@TCA_CGROUP_EMATCHES={0x23c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x238, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x7c, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x9}, "8ad68041bd09367037ebda32b9224ef08053106ccc918a0b8844d359424eb7a2b11c8ff30ed7c85319ee47e3a183bfa68b919e92eab7177bad4492ca832e15de3fd3245d5859603529a4ed86b8099391c26ebe95ed9cf3b290628ee319e8f701f51a5b75264a904ebd2f76900ac9"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfff, 0x1, 0x1}, {0x4701, 0x7, 0x40, 0xa8fa1be197de627d, 0x3, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xd9, 0x3, 0x1}, {0xcbd, 0x9, 0xa, 0x7}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x3}, {0x9}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7f, 0x7, 0xb17f}, {{0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xa0, 0x3, 0x0, 0x0, {{0x3ff, 0x0, 0xa}, "ae0a18dbda7f2f881c7203ce549441fc59fc1d3f6e2d1d98677e7b02380f75cc2559ebe7a45394779f1e5239b8c7adf5fbe19be6d3660581ac9735d2248bd3077fae73fd84a0daaf85e72f498e0f13fe1d7efc6612025d29b00aa6b89b187da4bc0d08d19510da0680720740dfe7356e2a80be3830fb90a654c3bd6e376fc6920fc9a425764ab9d45eba907b750535d416fb"}}, @TCF_EM_CONTAINER={0xc0, 0x3, 0x0, 0x0, {{0x3ff, 0x0, 0x7}, "5c37a28c44a0fa41aced824d7b768711a9bc490597cd8089af2d83261e0a0c84c9b2a1719ded456090e296fb4c91bb03fd9d17ef361117a1c604d77bd5108d03567691cfe23123e950e3f8503a55bc7cc997b8343e0a07f40c7f952c57c095c01677f5342056d5a566bfd3a707673d632ce9a211bf61bb71fdb2e03c2300233849aebd176be369b6a8b4271de58b8126049dba4154a313ecd9d813695a7e1927b8b18874cd3bcbb103419bc13d5ffd4f28ac52ab"}}]}]}, @TCA_CGROUP_EMATCHES={0x7f0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2d8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x5}, {0x4, 0x8, 0x2, "8f328e3d57dbb313"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x4c}, {0x18e, 0x9, 0x43b2, 0x5, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xd0, 0x1, 0x0, 0x0, {{0x80, 0x0, 0x6}, "e706b58ee365aae50325084dd9406f158772bf01137ad39e7b27af829913ed6a6f59a7a9d51dbdbfca2b6da9d043337ea53587e80ea79d04cef70e4ff130da4fac5c68585a4f66c20cdf20eb5d272d11a31a2afe63f960a02691aff14300403fd9bfc762cd15ca56cd79bb1c1d75416de819c22b7ba64054b13238aad36547a07dbeeb425cf53a6772492c1bfb050c10bba845b95084f2af2d84b9e387290bc2c2f096e19156fb63390deccad837b456a72c4915c71f8b7f2f319c1330baebd3241674"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x7}, {{0x2, 0x1, 0x1}, {0x2}}}}, @TCF_EM_IPT={0x1c0, 0x3, 0x0, 0x0, {{0xb, 0x9, 0xb}, [@TCA_EM_IPT_MATCH_DATA={0x16, 0x5, "8a9b54b7f627312f0906ab4754272b5432a9"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}, @TCA_EM_IPT_MATCH_DATA={0x98, 0x5, "fbe5cac741685303d3fa283c808aab5cc3193b987ce98e6db2e233a10468953311441e9ac0d6ffef36bd97ee6ba0fb34398fc325dd7ed01403643d3a07fcc6aee418e7f6666ad8c66ca95ac8d8a41d1bfe5438e1908d37bf4500fba528069c065dcc4ce2a724e97ba21f555f92c6143c4f878b1597b1a5cfd99bc1dad364bbbcc5932cb29f4140ec71313c7caf71de0c8a174497"}, @TCA_EM_IPT_MATCH_DATA={0xde, 0x5, "1a20529d53a779d1ab21c8fb66aff873c6521c998ce20f85d5f88e16b7827366590c208e884ba052111020f794d1dbfaa77dccff7790f22c53194a7b65602278866018b39f6fdc6a4772b19d75bf86e1a38fa36c5d45827557457eb6143b5d86be50d3cbb2107ce1741d26c34086f723f6e74f9189f113a167898b296e0892b75fd22184afb3a99c59aaad045c4e6ec55d063f7f9044b5ab580b05302fa6980cdb54ad36cb69dd0ad2f7a382b458fd110cdb3ed6f3d5fdd649c24613c7411fc6f8c08ae4833e065c7c66f334a861bea9fa5b454e984bf8a0cc8d"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}]}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x38, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "2ece2776e421ba0b28861d50a81d20785b835f0dd07f220c8a01fab6e38aecfd908acac1b556a778ace7bd89"}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x631}, "f588a8"}}]}, @TCA_EMATCH_TREE_LIST={0x1e0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x6}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0x108, 0x2, 0x0, 0x0, {{0xb}, "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"}}, @TCF_EM_CMP={0x18, 0xb4, 0x0, 0x0, {{0x7, 0x1, 0x40}, {0x6, 0x9, 0x9, 0x6, 0xb, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x6}, {0xffff, 0x9, 0x0, "425fc138cbcafcfdfc"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x7}, {0x42, 0x42cc, 0x0, 0xb0}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x8}, {0xa, 0x9, 0x7ff, 0x1, 0x3, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfc01, 0x8, 0x101}, {0x4, 0x3, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x8}, {0xffffffffffffffff, 0x2, 0x824ecf418ea4e041}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x7, 0x4, 0x2e}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6]}]}}]}, @TCA_EMATCH_TREE_LIST={0x2e0, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0xfffc}, {0x3, 0x4, 0x1}}}, @TCF_EM_IPT={0x160, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0x4d, 0x5, "3546945626e6988409d517dd83e1858d5a71774a585549955a32c82593d9ee595bf1c84f5040f708f7d84fd268d529390127583b125a48c2ad11de03abaa27e8e361b0c911dad33eed"}, @TCA_EM_IPT_MATCH_DATA={0x4d, 0x5, "da77378ca0ebdb1581ea89b1144b755bda4352251ad2e6e3f394c7a039d53cf08c70309fdcf30d2240986a86309f8a1f60f07dfc54e1afa369de543592ad247a1f339bbe1a8fa81d4d"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x66, 0x5, "9d8f2300709499f954bbcbcfae04b09819624cece4c438deba4667e762a1efbba0f68f482b5a8fb06aea632917a82343e7ade77970a40ceea62389a5580a9f5793653b998e3f65ec9065c1fae12ab575226a94f84121089d349226def5bd890b71a8"}, @TCA_EM_IPT_MATCH_DATA={0x35, 0x5, "91446359448e3f11ca4a70acd3c3ad93022685e5efcb6990aa33b79af05cec9d01382266c85569c2c4281c2d344f7ffab6"}, @TCA_EM_IPT_MATCH_DATA={0xa, 0x5, "44ab9fd38384"}]}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x380}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x1, 0xfdf, 0x81, 0x4}}}, @TCF_EM_CONTAINER={0x74, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x5}, "001b5738af0323fc1f6610b2b2ef25f162e1310efa10f468d08fe8cd542a1260b6366e65add8aa585aefa97aec85dd541312fef9f446f2cace85864481216f4e99bbd95097063178d3f771b7f3e0cd6de70af25284f8f97c956743aeaec84c82563693cc9ae5"}}, @TCF_EM_IPT={0xa8, 0x3, 0x0, 0x0, {{0x101, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0x48, 0x5, "f4c6764a6741a00dfe2406fcd518936dd7d7190400266293decf162ba35aa768433e30bcf1b66fff178ab6d72362eea0f282d42a8c3e9a800ff10cc41af7123cc65a6d34"}, @TCA_EM_IPT_MATCH_DATA={0x2a, 0x5, "76f8f3d32a2d0331668da20055ecae14404a8188ce9ea931602daac642b947e7037cbe0faef6"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x1}, {0x4, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x40}, {0xfffffff1, 0xfffffffd, 0x6, 0x5, 0xa, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x8683, 0x1fc1, 0x7447, {0x9a, 0x2, 0x2, 0xe, 0x8, 0x80000001}, {0x8, 0x2, 0x3340, 0x7, 0x5, 0xd6}, 0x7, 0x8, 0x1b29104e}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_CGROUP_ACT={0x14f4, 0x1, [@m_tunnel_key={0xac, 0x1e, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x35, 0x6, "54106f64e6b477f60afa5249d19554f770b4f8a87e00bbb7beac1d2afc1cbd49c06012fac14afe175b43005a648466a1ec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x1}}}}, @m_csum={0x112c, 0x1b, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5b, 0x5, 0x3, 0x413}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4f, 0x2, 0x3, 0x6, 0x5}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x8, 0x47c000, 0x9}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xf2, 0x9}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x3, 0x0, 0x65e0dd11}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x4, 0x13c, 0x8}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x13, 0x5, 0x4, 0x3}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xb0d, 0xffffffffffffffff, 0x3b40, 0x7}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x6, 0x20000000, 0x8, 0x5}, 0x3a}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0xe8, 0x1d, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x66e3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]]}, {0x94, 0x6, "bf397e1ebc8847cd25a7b5e4ff198b8e0ff4e359cdcda29f09954b809c6661678455bb2d0cd99b97b7331b0eef026f539bb8a6d9a8fbe69f904a377bed945201889ada9dfd66dbefe80a611ce2ada52151977c63ca89255736635379aa270ab152ca9a788f058c858899ca3fed8f8c4cf0d5f8d9fc246453296429b9ddeb3b6c19e14623a2c854cfec28a00632d3931b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0xf8, 0x8, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xde, 0x6, 0x0, 0x7, 0x6}, 0xfffa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x85, 0x6, 0x40520ef1, 0x1000}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x6, 0x4, 0x99f6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x4, 0x4, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5a, 0xfffffffffffffffd, 0x3, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x7, 0x101, 0x6}, 0x1ff}}]}, {0x1e, 0x6, "e1da8180f2a7ec2c81115ee8ddffc6f5f503581ef77d533dbba6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x138, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xb4b0, 0x4, 0x87, 0x2}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xeb, 0x6, "75110d4d8f033d9235298c63fbac0655de9aa4783d397de5075a4da6ae0ba24c59b8e868188b0c7dc95c191745a99549f94dae6d0832704acce3dd8c3f23e1a2826da4819fb640a7bb118b6fb0ff9fc3806048f26f2093533791b8c9f99c2980a0a2b71d1203add2d976dd7c2723e4a111bab3bba7e2c38b728119d4e04c3e7dc27d6baea6d2b338a24c7714dfa73085d8d2384da04338b8df405c70dbb14e4963bf040a2e964259c08c7d752ee1a7b666ce7b17e0b4d1f7d7fff83a73651f703b7a1340d151d5f55208724a6db5d9934a97c1ea53774ccbeb88add78890e51c4186c91796cb68"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x784, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4ac, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x17c, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xe2, 0x5, "6b9fd11fb2ef7e14c4381e92e73d4d6ca576ad123b765f8a489802bf045b7d5952351fdb21812abbe6056597b9b50cdfb49d8b331827131c08fcc04a48d10e61e90d005fe34cfe06e433aab7639d0b8fa7269545d2d862a86f27869de02239811f61d5be402ada1552e47851d774f2c112d4a8a3ea949ca90b0e4f56fb09baf1081f3e1a7a751428125de2379a6b97862d4d304b2686c658cf42789f167996ae6b486e58264c6b7a54c4b412f77b2a64c8dd8cc16ba6b4522e4278eca5c1aaa253e2af6e0ea7437f2189ba30ad288b237a6e2c20dba992af6d004eb1e6c5"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x73}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x5e, 0x5, "41938fb471c3c8fd981b1ad7c7e1d31df3138f0f98f513ebb903984e23d5a1d15c0f2dc71e0507f94b9bfca9b340476403c286f49f579d9efff6978bb204e27bced16af1a8b1f0719d75f73fa909fc75402b62b1910943967f7c"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xe4}]}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x60}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_CONTAINER={0xf0, 0x3, 0x0, 0x0, {{0x3, 0x0, 0xfffc}, "c98cfb8fe8085f9b60fa18d7452d000169ee73fdda377673fd78e9b2e34faf81273867a9dc560513fe76b67f34935f20e581f724298010e92f52733dc18307b3a7450da07ef287a82a6c283ccbf5cb432173e31cdc1d22dae2fc7d865db049299a24edbe591a7f19367a7f807eb5522277f13f0b30cec0b2c109dd66444c40ed02706873279d71d23a8c57ea4a146346be700dedad8472025ef92a3522c2ed4f6cb93febf2c7b0391fc2bdee9e2f56093805ef774f286e82ec980db312676670bde1652d29603326692c0f75ea1b3b3b2f3aabdaeec4649afc8a873de803dd70a2b460"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x5}, {0x9, 0xf, 0xd2c5, 0x5}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa, 0x8, 0x1000}, {0x4, 0x1}}}, @TCF_EM_IPT={0x13c, 0x1, 0x0, 0x0, {{0x4, 0x9, 0xffff}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x91}, @TCA_EM_IPT_MATCH_DATA={0xf0, 0x5, "1f95c2f05c922cf2a61fa250e79068121ecf9111b1a4e4495c41138e1da5923a7347ac5883b480ba26fcaffba9b3e795b057a18063177a65b94084216802bc5badd323e8236c8708ff9226b47d3bd1d927e1e932d628db745958b2ed92478207039a324aea3028cdea2e4843dbd579bd39f8293a55e6120e393f10dd0096ba08b6e36aa2f5d5223991b71db807b722f5a009b3cc6aa49233481415fd9179f1f7bb522677384b73521f586a4510e2bcdf2ba69abdd241f381c3ffe4768d4016477c300050d04092d7ddd2ff47b8a52375ddc90732958bde5b11394e649434b68beacdc749659e794da88ab680"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x73}]}}, @TCF_EM_CONTAINER={0xb0, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x2}, "2746dab7916cbf1731cd07c731d877a87c27948541ce134a5c76fecbc07603c1daa3f4094a32da1c59820da89fe37031fc61f70585dfda7e87b52065aac93852292c4ba23b95ec58401863b257a790c67ccfa32d9e7751c7b65b3b275075750dd731b8ac4ffc162e0b32b691403126717ffd81eaee433f7ab84163cd2bf8e527e024d7f7f2aaeaa5da29768a5843c18a524d1aec08c81a663e3ebe84eb5ddbb890"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x69e, 0x8, 0x2}, {0x4, 0x3, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2cc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7fff, 0x1, 0x3}, {0xb2, 0xb5c, 0x7, 0x1, 0x6, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x4}, {0x3ff, 0x40000, 0x3, 0xffffbb6d}}}, @TCF_EM_CONTAINER={0xe8, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x4}, "0bed48c0d8ea98730fdeefa80b9c71bcd3db6c94e4ac6dcf8b96ce0ca5ea66f5a16583a74af1129ea064d05433f8774d95a112c8cbd1cc8f0d009f65cd9d193c40e0626f10ccb4988829efadb9480a01d4f02123fb45153d8b64aede55654ecedc30b6dd70e4bd16ba2161f948ba4ed2057c6bca1df19785d9ff50616391548229e172761abab226e8cdc0bb119e7f1836363bceca91f19e9338c43a3460037af118e150749e8ef279477451dbca879ef8a8767970f0e039a97b3ecba0f1f3ee737dcca4c077fa55b882dfe98d6b6b692bf38de899ce31a480"}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x6, 0x1}, {0x9, 0x2a, 0x2}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="72da9f66", @TCF_META_TYPE_VAR="b1dc259e", @TCF_META_TYPE_VAR="dd3435b17cd6", @TCF_META_TYPE_VAR="eb6281c8", @TCF_META_TYPE_VAR="0e998c"]}]}}, @TCF_EM_CONTAINER={0x1c, 0x2, 0x0, 0x0, {{0x8001, 0x0, 0x2}, "d4b0796522c61f3bb9803f1d39295048"}}, @TCF_EM_IPT={0x140, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x100}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xe7, 0x5, "00665f7ff049f15f33991381102a20b5bb7e50559de79017fc52a0d0c80741fc74e578ac870b0d1d43e7f8a0cb05c0e88fca00415e113b5c91c13dddf4339da59827c68f4390c1b1a6f0cb5f8eee7038fb1a53fc730ed12608f7a340c15de64b78b6689700e3ad4d8135bd65327557d302ca6159bfc1c0f5069b1fb89f1eb7d389bf7d0aa5bd70b07fd5ff1c22ab1fdda308ee8b3faf121e4ed11ee75c61f109f1d97198aa09e37a9bb875422a5c710d64affa55f949c96d24d6282e56c5594b92eec45885019383f216251424caa7f9dcdec12849ca6bbc85b2d26e69eb2e883e634a"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0x400}, {0x7fffffff, 0x5, 0xffc0, 0x5, 0x5, 0x4}}}]}]}, @TCA_CGROUP_POLICE={0x4c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x101}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x2, 0x8, 0x800, {0x4, 0x2, 0x623, 0x7, 0x4000, 0x3}, {0x10, 0x2, 0x1ff, 0x2, 0xfe13, 0x1e}, 0x10000, 0x0, 0x4}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0xd}, @TCA_RATE={0x6, 0x5, {0x9, 0x61}}, @TCA_RATE={0x6, 0x5, {0x1, 0xc4}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x27a0}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x94, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x1, 0x4, 0x0, {0x7, 0x4, 0x0, 0xd, 0x0, 0x1, 0x1, 0x1}, 0x407, 0x401, 0x8}}, @NL80211_ATTR_SSID={0xc, 0x34, @random="fffb71cb595cca2b"}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x9, 0x9, 0x2, 0xc, 0x6, 0x2, 0x4, 0x24, 0x0, 0x8, 0x2, 0x6, 0x81, 0x6, 0x5, 0xb86]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x30}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000e01e, {0xb21d, 0x9, 0xf, 0x2}}}]}, 0x94}}, 0x4000085) 617.201247ms ago: executing program 6 (id=2567): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) request_key(0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x4) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000100)='f2fs\x00', 0x0, &(0x7f0000000140)='grpquota') 616.78081ms ago: executing program 6 (id=2568): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) r1 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xf51) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROM_GET_CAPABILITY(r5, 0x5331) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdc00, {0x7, 0x0, 0x0, r6, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000068000/0x1000)=nil, 0x1000, 0x2000005) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000003140100009f0000fbdbdf250900020073797a31000000000800410073697700140033007866726d300000000000000000400000"], 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0xc802) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048001}, 0x4000) 190.757248ms ago: executing program 5 (id=2569): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="5849f35ee542f1a70360446e1d6b86687951337a8d0004b2090f6352e5efbcae2a7a7b35488fe482429d289e3f44aa", @ANYRESDEC], 0xc0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0xe, 0x5, 0xd171, 0x18, 0xb5, 0x8}, &(0x7f0000000140)=0x9c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x38]}}]}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x513883, 0x488) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2a13bf316b0b7bffde63efea6d5cdefd", 0x10) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa) getdents(r5, &(0x7f0000000080)=""/87, 0x57) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000440)=[@wr_drn={0x6e, 0x20, {0x5, 0x9}}, @wr_drn={0x6e, 0x20, {0x3, 0x9}}, @rdmsr={0x32, 0x18, {0x2d5}}, @wr_crn={0x46, 0x20, {0x3, 0x1}}, @in_dx={0x82, 0x20, {0x27ca, 0x4}}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0x53, {"430f2251c44229aedf3e440f01c20f20e035000200000f22e08f898098fcb9800000c00f3235002000000f3065420fc77600450f782066baa000ed66b89e000f00d8"}}, @out_dx={0xaa, 0x28, {0x6393, 0x1, 0x6}}, @in_dx={0x82, 0x20, {0x881c}}, @in_dx={0x82, 0x20, {0x9318}}, @uexit={0x0, 0x18, 0xe423}, @cpuid={0x14, 0x18, {0x1, 0xfffffffe}}, @uexit={0x0, 0x18, 0x1}], 0x1b3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000600)={0x3, 0x2, @raw_data=[0x3, 0x3, 0x0, 0xa4, 0x0, 0x559, 0x9, 0x6, 0x7, 0x10000, 0xc4c3, 0x6, 0x8001, 0x5, 0x8, 0x7]}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={r8, 0x8000, 0x4b83, 0x4}, &(0x7f00000001c0)=0x10) setrlimit(0x536c98aacb9103a4, &(0x7f0000000240)={0x3ff, 0x9}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={r8, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={r8, @in6={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7c7a}}}, &(0x7f0000000100)=0x84) 121.387646ms ago: executing program 5 (id=2570): sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) (async) r0 = syz_io_uring_setup(0x6d5, &(0x7f0000000300)={0x0, 0xe654, 0x4000, 0x2, 0x16}, &(0x7f0000000380), &(0x7f00000004c0)) r1 = syz_io_uring_setup(0x606, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x2, 0x0, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) (async) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1000) openat$cgroup_ro(r4, &(0x7f0000000540)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r5, 0x0, 0x0, r5}) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000100)={0x7fff, r5, 0x4, {0x101}, 0x1}, 0x1) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}}, 0x0) 120.899842ms ago: executing program 5 (id=2571): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x700, 0x7, 0x4, 0x8, {{0x1b, 0x4, 0x0, 0x9, 0x6c, 0x67, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x1b, 0x14, [@loopback, @rand_addr=0x64010100, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1b, 0x39, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @broadcast, @multicast2, @loopback]}, @lsrr={0x83, 0x13, 0xdb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0xb}, @empty]}, @end, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xbc, [@rand_addr=0x64010101]}]}}}}}) recvfrom(r0, &(0x7f00000001c0)=""/208, 0xd0, 0x12000, &(0x7f00000003c0)=@ll={0x11, 0x17, r1, 0x1, 0x3, 0x6, @random="9bebf694045d"}, 0x80) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@fwd={0xa}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x1ff, [{0x5, 0x3, 0x2}]}]}, {0x0, [0x30, 0x2e, 0x0, 0x2e, 0x0, 0x61]}}, &(0x7f0000000100)=""/83, 0x44, 0x53, 0x0, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="690000070000000000000095000066b8a17dc7000000000000000000000000001dc227afc3410d9933bb9719b70de7598e4aafb3fb8dbf163589a61a77de3c8fa1f9c5f7031b010039fa3964ae03b19dc514a1c3d00cd2"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, r2}, 0x94) 69.902315ms ago: executing program 5 (id=2572): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x800, 0x4000) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x2) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x44}, 0x2) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0x8001, 0xffffffffffffff83, 0x1, 0x1, 0x1, [0x2, 0x6, 0xb05e, 0x9]}) (async) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140), 0x2) (async) write$sndseq(r1, &(0x7f0000000180)=[{0x7, 0x3, 0x42, 0x1, @time={0x40, 0x10}, {0x8, 0xee}, {0x7, 0x3}, @time}], 0x1c) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x7ff, 0x8101) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000200)) (async) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000240)={0x4, @remote}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0x7015, 0x2}) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) listen(r3, 0xa) (async, rerun: 32) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil}) (rerun: 32) write$P9_RMKDIR(r1, &(0x7f0000000300)={0x14, 0x49, 0x2, {0x10, 0x4, 0x4}}, 0x14) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x10010, r1, 0x0) syz_io_uring_setup(0x4ebc, &(0x7f0000000380)={0x0, 0x147d, 0x4000, 0x2, 0xc9, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000740)=@IORING_OP_RECVMSG={0xa, 0x40, 0x4, r3, 0x0, &(0x7f0000000700)={&(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/131, 0x83}], 0x2}, 0x0, 0x1, 0x0, {0x2}}) chmod(&(0x7f0000000780)='./file0\x00', 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xb}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async) write$snapshot(r1, &(0x7f0000000940)="470e6228220424f8d8b0e23000d1fa67c02382745d60532295e50a9b81dcb8db77bd62a82027065cfe54dd23c522cd2ca00ae7091955bad095f18d2dc731336a7cb5c863f19fe341a43945a1cb85daaa4d1da103392e7da2e36e8b29887606cad6ce4742d9372629487815d43c89", 0x6e) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00', r1}, 0x18) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) (async, rerun: 32) recvfrom$unix(r1, &(0x7f0000000a40)=""/98, 0x62, 0x21, 0x0, 0x0) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xe400211}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x160, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x721c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7923}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc47e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x698222ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b285138}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d7092ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34e8}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5be1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bbc3cc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5806}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2448}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6382}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b4eb8d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x360ff511}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ec805f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2da8121d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81ea}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x994}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8950}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe682}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x4}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68d99780}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe49b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fe7b251}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe8a1472}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66c348a7}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x160}, 0x1, 0x0, 0x0, 0x8000}, 0x48011) 69.521743ms ago: executing program 5 (id=2573): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x40081) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x32) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x31) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 67.653735ms ago: executing program 0 (id=2574): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x3ffdcf, 0xaf0}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xf}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2400c000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd2d, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x28}}, 0x8000040) r6 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = fsmount(r6, 0x0, 0x80) setuid(0xee01) r8 = openat$cgroup(r7, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x0, 0xc, {0xffffffffffffffff}, {0xee01}, 0x9, 0x9}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, r10, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x60}, 0x1, 0x0, 0x0, 0x100040c0}, 0xc0) 1.014881ms ago: executing program 5 (id=2575): eventfd2(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800015, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080007003b070000050006"], 0x4c}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) 0s ago: executing program 0 (id=2576): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0xc002}, 0x4000020) (async) accept4(r1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): type 1 family 0 port 8472 - 0 [ 150.894519][T11810] fido_id[11810]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.935845][T11809] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.022484][T11809] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.023539][ T67] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 151.033160][ T59] tipc: Node number set to 4269801488 [ 151.065802][T11816] netlink: 'syz.0.1665': attribute type 28 has an invalid length. [ 151.068982][T11816] netlink: 'syz.0.1665': attribute type 3 has an invalid length. [ 151.072393][T11816] netlink: 'syz.0.1665': attribute type 28 has an invalid length. [ 151.075511][T11816] netlink: 'syz.0.1665': attribute type 3 has an invalid length. [ 151.078753][T11816] netlink: 'syz.0.1665': attribute type 28 has an invalid length. [ 151.083027][T11816] netlink: 'syz.0.1665': attribute type 3 has an invalid length. [ 151.085991][T11816] netlink: 'syz.0.1665': attribute type 28 has an invalid length. [ 151.088490][T11816] netlink: 'syz.0.1665': attribute type 3 has an invalid length. [ 151.091019][T11816] netlink: 'syz.0.1665': attribute type 28 has an invalid length. [ 151.097487][T11809] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 151.119613][T11809] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.227952][ T61] usb 10-1: USB disconnect, device number 2 [ 151.274392][ T81] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.296891][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.300251][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.313673][ T81] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.613700][T11841] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 151.616698][T11841] SELinux: failed to load policy [ 151.714847][T11844] "syz.4.1674" (11844) uses obsolete ecb(arc4) skcipher [ 151.918282][ T40] kauditd_printk_skb: 310 callbacks suppressed [ 151.918292][ T40] audit: type=1400 audit(1758702080.550:2652): avc: denied { read write } for pid=11852 comm="syz.5.1676" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.929330][ T40] audit: type=1400 audit(1758702080.550:2653): avc: denied { open } for pid=11852 comm="syz.5.1676" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.938451][ T40] audit: type=1400 audit(1758702080.550:2654): avc: denied { ioctl } for pid=11852 comm="syz.5.1676" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.947404][ T40] audit: type=1400 audit(1758702080.570:2655): avc: denied { create } for pid=11854 comm="syz.4.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.955604][ T40] audit: type=1400 audit(1758702080.570:2656): avc: denied { write } for pid=11854 comm="syz.4.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.986184][T11855] batadv_slave_0: entered promiscuous mode [ 151.988278][T11855] batadv_slave_0: entered allmulticast mode [ 152.097750][ T40] audit: type=1400 audit(1758702080.730:2657): avc: denied { ioctl } for pid=11859 comm="syz.4.1678" path="socket:[48265]" dev="sockfs" ino=48265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.106920][ T40] audit: type=1400 audit(1758702080.730:2658): avc: denied { create } for pid=11859 comm="syz.4.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.153142][ T5339] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 152.160161][ T40] audit: type=1400 audit(1758702080.790:2659): avc: denied { append } for pid=11864 comm="syz.4.1679" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 152.170223][ T40] audit: type=1400 audit(1758702080.790:2660): avc: denied { bind } for pid=11864 comm="syz.4.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.179521][ T40] audit: type=1400 audit(1758702080.790:2661): avc: denied { name_bind } for pid=11864 comm="syz.4.1679" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 152.274181][T11870] ip6gretap1: entered promiscuous mode [ 152.276185][T11870] ip6gretap1: entered allmulticast mode [ 152.307973][ T5339] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 152.310839][ T5339] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.314355][ T5339] usb 10-1: Product: syz [ 152.315759][ T5339] usb 10-1: Manufacturer: syz [ 152.317653][ T5339] usb 10-1: SerialNumber: syz [ 152.325076][ T5339] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 152.357681][T11875] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 152.364715][ T5339] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 152.584487][T11891] 9pnet_virtio: no channels available for device syz [ 152.921207][T11900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.924858][T11900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.932167][ T61] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 152.941813][ T67] usb 10-1: USB disconnect, device number 3 [ 152.985027][ T5972] Bluetooth: hci2: unexpected event 0x09 length: 4 > 3 [ 152.988150][T11906] nbd_handle_cmd: 2 callbacks suppressed [ 152.988162][T11906] block nbd4: Attempted send on invalid socket [ 152.995901][T11906] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.999695][T11906] exFAT-fs (nbd4): unable to read boot sector [ 153.001949][T11906] exFAT-fs (nbd4): failed to read boot sector [ 153.005288][T11906] exFAT-fs (nbd4): failed to recognize exfat type [ 153.037477][T11913] __nla_validate_parse: 40 callbacks suppressed [ 153.037487][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1691'. [ 153.042201][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1691'. [ 153.050393][T11916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'. [ 153.054092][T11916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'. [ 153.056963][T11916] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 153.082312][ T61] usb 7-1: Using ep0 maxpacket: 16 [ 153.087231][ T61] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 153.090502][ T61] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 153.095680][ T61] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 153.099028][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 153.103674][ T61] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 153.106882][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.109493][ T61] usb 7-1: Product: syz [ 153.111781][ T61] usb 7-1: Manufacturer: syz [ 153.114705][ T61] usb 7-1: SerialNumber: syz [ 153.118885][ T61] usb 7-1: config 0 descriptor?? [ 153.243000][T11930] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 153.336278][ T61] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input25 [ 153.343525][ T5363] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 153.402298][ T5339] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 153.405503][ T5339] ath9k_htc: Failed to initialize the device [ 153.412952][ T67] usb 10-1: ath9k_htc: USB layer deinitialized [ 153.424248][ T5363] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 153.484491][T11951] 9pnet_virtio: no channels available for device syz [ 153.512608][ T5363] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 153.535101][T11964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.608668][T11972] tmpfs: Bad value for 'mpol' [ 153.684718][T11977] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1706'. [ 153.746843][T11983] ata1.00: invalid multi_count 1 ignored [ 153.854962][ T59] usb 7-1: USB disconnect, device number 10 [ 153.863146][T11996] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 153.870545][T11996] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1714'. [ 154.028814][T12006] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input26 [ 154.063583][T12003] /dev/sr0: Can't open blockdev [ 154.217085][T12017] binder: 12016:12017 ioctl c0306201 0 returned -14 [ 154.613723][ T5972] block nbd2: Receive control failed (result -32) [ 154.620238][T12025] block nbd2: shutting down sockets [ 154.734430][T12028] 9pnet: Could not find request transport: uniximer [ 154.944937][T12048] QAT: failed to copy from user. [ 155.002315][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1728'. [ 155.005802][T12062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1732'. [ 155.015279][T12049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1728'. [ 155.094697][T12078] sp0: Synchronizing with TNC [ 155.268956][T12083] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.274999][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1739'. [ 155.776701][T12063] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.779951][T12063] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.790442][T12063] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.796316][T12063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.798733][T12063] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 155.815108][T12063] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 155.859931][T12114] fuse: Bad value for 'fd' [ 155.867477][T12114] XFS (nbd0): no-recovery mounts must be read-only. [ 155.884094][T12114] dlm: non-version read from control device 8192 [ 156.028051][T12129] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 156.062329][ T67] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 156.146517][T12137] validate_nla: 60 callbacks suppressed [ 156.146534][T12137] netlink: 'syz.0.1754': attribute type 11 has an invalid length. [ 156.214344][ T67] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.222177][ T67] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 156.226356][ T67] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.229911][ T67] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 156.235552][ T67] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 156.241763][ T67] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.245626][ T67] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.249110][ T67] usb 7-1: Product: syz [ 156.250870][ T67] usb 7-1: Manufacturer: syz [ 156.251077][T12137] cdrom: dropping to single frame dma [ 156.259456][ T67] cdc_wdm 7-1:1.0: skipping garbage [ 156.261803][ T67] cdc_wdm 7-1:1.0: skipping garbage [ 156.269009][ T67] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 156.271664][ T67] cdc_wdm 7-1:1.0: Unknown control protocol [ 156.445817][T12149] binder: 12148:12149 ioctl c0306201 200000000640 returned -22 [ 156.460095][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.462339][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.465107][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.467880][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.470634][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.473376][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.477248][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.479936][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.484646][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.487493][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.490403][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.493159][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.495908][ T6085] usb 7-1: USB disconnect, device number 11 [ 156.681009][T12167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1302 sclass=netlink_route_socket pid=12167 comm=syz.5.1764 [ 156.681386][T12105] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 156.691789][T12105] Error validating options; rc = [-22] [ 156.848842][T12184] nullb0: AHDI p1 [ 156.905783][T12187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.948790][ T40] kauditd_printk_skb: 467 callbacks suppressed [ 156.948807][ T40] audit: type=1400 audit(1758702085.580:3129): avc: denied { allowed } for pid=12190 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 156.959578][ T40] audit: type=1400 audit(1758702085.580:3130): avc: denied { create } for pid=12190 comm="syz.5.1769" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 156.968353][ T40] audit: type=1400 audit(1758702085.580:3131): avc: denied { map } for pid=12190 comm="syz.5.1769" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 156.976652][ T40] audit: type=1400 audit(1758702085.580:3132): avc: denied { read write } for pid=12190 comm="syz.5.1769" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 156.984847][ T40] audit: type=1400 audit(1758702085.580:3133): avc: denied { read } for pid=12190 comm="syz.5.1769" dev="nsfs" ino=4026533368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.991783][ T40] audit: type=1400 audit(1758702085.590:3134): avc: denied { open } for pid=12190 comm="syz.5.1769" path="net:[4026533368]" dev="nsfs" ino=4026533368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.999256][ T40] audit: type=1400 audit(1758702085.590:3135): avc: denied { create } for pid=12190 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 157.007477][ T40] audit: type=1400 audit(1758702085.590:3136): avc: denied { connect } for pid=12190 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 157.162405][ T5973] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.198110][ T40] audit: type=1400 audit(1758702085.830:3137): avc: denied { write } for pid=12194 comm="syz.4.1770" name="raw" dev="proc" ino=4026533785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 157.201290][T12195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.222823][ T40] audit: type=1400 audit(1758702085.860:3138): avc: denied { mounton } for pid=12196 comm="syz.2.1771" path="/487/file0" dev="tmpfs" ino=2606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 157.497564][T12237] overlayfs: missing 'lowerdir' [ 157.802224][ T5973] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.231327][T12292] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.359240][T12298] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 158.361609][T12297] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 159.212868][T12248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.214954][T12248] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 159.230489][T12305] __nla_validate_parse: 10 callbacks suppressed [ 159.230499][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1806'. [ 159.293507][T12248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.295396][T12248] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 159.415623][T12314] block nbd5: shutting down sockets [ 159.519067][T12325] mkiss: ax0: crc mode is auto. [ 159.681461][T12340] nfs: Unknown parameter '"' [ 159.686835][T12340] ubi31: attaching mtd0 [ 159.690628][T12340] ubi31: scanning is finished [ 159.693071][T12340] ubi31: empty MTD device detected [ 159.734606][T12346] bond_slave_0: Caught tx_queue_len zero misconfig [ 159.796211][T12340] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 159.798652][T12340] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 159.800921][T12340] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 159.811131][T12340] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 159.815918][T12340] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 159.819144][T12340] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 159.821814][T12340] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 885662030 [ 159.825183][T12340] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 159.831033][T12349] ubi31: background thread "ubi_bgt31d" started, PID 12349 [ 159.989482][T12360] netlink: 'syz.2.1816': attribute type 10 has an invalid length. [ 159.996137][T12360] team0: Device hsr_slave_0 failed to register rx_handler [ 160.187551][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1819'. [ 160.193094][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 160.198768][T12371] macvlan2: entered allmulticast mode [ 160.200555][T12371] veth1_vlan: entered allmulticast mode [ 160.346237][T12374] .: renamed from bond0 (while UP) [ 160.408953][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1822'. [ 160.409180][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1822'. [ 160.554466][T12382] team0: Port device team_slave_0 removed [ 160.845166][T12402] loop2: detected capacity change from 0 to 7 [ 160.848465][T12402] Dev loop2: unable to read RDB block 7 [ 160.850922][T12402] loop2: AHDI p1 p2 p3 [ 160.853037][T12402] loop2: partition table partially beyond EOD, truncated [ 160.856206][T12402] loop2: p1 start 1601398130 is beyond EOD, truncated [ 160.859204][T12402] loop2: p2 start 1702059890 is beyond EOD, truncated [ 160.949662][T12408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1829'. [ 161.006795][T12413] SELinux: failed to load policy [ 161.277774][T12421] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 161.283264][T12421] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 162.104689][ T40] kauditd_printk_skb: 371 callbacks suppressed [ 162.104700][ T40] audit: type=1400 audit(1758702090.740:3510): avc: denied { ioctl } for pid=12452 comm="syz.5.1844" path="socket:[49837]" dev="sockfs" ino=49837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.117234][ T40] audit: type=1400 audit(1758702090.740:3511): avc: denied { create } for pid=12452 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.124889][ T40] audit: type=1400 audit(1758702090.750:3512): avc: denied { create } for pid=12452 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.134030][ T40] audit: type=1400 audit(1758702090.750:3513): avc: denied { getopt } for pid=12452 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.141950][ T40] audit: type=1400 audit(1758702090.760:3514): avc: denied { create } for pid=12452 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.150776][ T40] audit: type=1400 audit(1758702090.760:3515): avc: denied { write } for pid=12452 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.162405][ T40] audit: type=1400 audit(1758702090.760:3516): avc: denied { read write } for pid=12452 comm="syz.5.1844" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 162.172325][ T40] audit: type=1400 audit(1758702090.760:3517): avc: denied { open } for pid=12452 comm="syz.5.1844" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 162.180886][ T40] audit: type=1400 audit(1758702090.760:3518): avc: denied { ioctl } for pid=12452 comm="syz.5.1844" path="/dev/video3" dev="devtmpfs" ino=959 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 162.190496][ T40] audit: type=1400 audit(1758702090.760:3519): avc: denied { map_create } for pid=12452 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 162.318703][T12461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12461 comm=syz.5.1846 [ 162.324639][T12461] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1846'. [ 162.328777][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1846'. [ 162.386071][T12466] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1848'. [ 162.476623][T12470] xfrm0 speed is unknown, defaulting to 1000 [ 162.479017][T12470] xfrm0 speed is unknown, defaulting to 1000 [ 162.481914][T12470] xfrm0 speed is unknown, defaulting to 1000 [ 162.490406][T12470] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 162.508637][T12470] xfrm0 speed is unknown, defaulting to 1000 [ 162.511703][T12470] xfrm0 speed is unknown, defaulting to 1000 [ 162.516577][T12470] xfrm0 speed is unknown, defaulting to 1000 [ 162.519619][T12470] xfrm0 speed is unknown, defaulting to 1000 [ 162.686098][T12482] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 162.688168][T12482] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.693811][T12482] vhci_hcd vhci_hcd.0: Device attached [ 162.888463][T12485] block nbd2: shutting down sockets [ 162.932186][ T6055] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 162.936934][ T839] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 162.942615][T12495] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1860'. [ 162.945168][T12494] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 162.957806][T12494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.006013][T12498] xfrm0 speed is unknown, defaulting to 1000 [ 163.092162][ T839] usb 10-1: Using ep0 maxpacket: 16 [ 163.095492][ T839] usb 10-1: config 0 has no interfaces? [ 163.097787][ T839] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 163.101372][ T839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.125916][T12512] xfrm0 speed is unknown, defaulting to 1000 [ 163.129812][ T839] usb 10-1: config 0 descriptor?? [ 163.312239][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 163.377214][T12526] No control pipe specified [ 163.465127][ T10] usb 7-1: config 0 has no interfaces? [ 163.469300][ T10] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 163.473540][ T6055] usb 47-1: device descriptor read/64, error -71 [ 163.480611][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.485531][ T10] usb 7-1: Product: syz [ 163.487346][ T10] usb 7-1: Manufacturer: syz [ 163.488884][ T10] usb 7-1: SerialNumber: syz [ 163.493172][ T10] usb 7-1: config 0 descriptor?? [ 163.712215][ T6055] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 163.963827][ T10] usb 7-1: USB disconnect, device number 12 [ 163.985848][T12559] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 163.988876][T12559] overlayfs: missing 'lowerdir' [ 164.135269][T12566] bond0: entered allmulticast mode [ 164.185830][T12570] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 164.351350][T12574] fuse: Unknown parameter 'Q' [ 164.449303][T12576] netlink: 'syz.0.1882': attribute type 11 has an invalid length. [ 164.455407][T12576] __nla_validate_parse: 2 callbacks suppressed [ 164.455419][T12576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1882'. [ 164.464370][T12577] netlink: 'syz.0.1882': attribute type 6 has an invalid length. [ 164.466840][T12577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1882'. [ 164.544214][T12582] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1884'. [ 165.134066][T12614] netlink: 'syz.2.1893': attribute type 1 has an invalid length. [ 165.149440][T12614] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.179191][T12614] bond5: (slave veth3): Enslaving as an active interface with a down link [ 165.185645][T12614] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.189290][T12614] bond5: (slave team0): making interface the new active one [ 165.192834][T12614] team0: entered promiscuous mode [ 165.194455][T12614] team_slave_0: entered promiscuous mode [ 165.196457][T12614] team_slave_1: entered promiscuous mode [ 165.198468][T12614] bond5: (slave team0): Enslaving as an active interface with an up link [ 165.229420][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'. [ 165.232400][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1895'. [ 165.235205][T12622] netlink: 'syz.2.1895': attribute type 18 has an invalid length. [ 165.238473][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'. [ 165.241259][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1895'. [ 165.252271][T12622] netlink: 'syz.2.1895': attribute type 18 has an invalid length. [ 165.287336][T12624] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 165.408368][T12483] vhci_hcd: connection closed [ 165.408638][ T1145] vhci_hcd: stop threads [ 165.408874][ T10] usb 10-1: USB disconnect, device number 4 [ 165.410313][ T1145] vhci_hcd: release socket [ 165.417062][ T1145] vhci_hcd: disconnect device [ 165.425383][T12630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1898'. [ 165.576287][T12638] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 165.620345][T12644] netlink: 'syz.2.1903': attribute type 3 has an invalid length. [ 165.624991][T12644] netlink: 'syz.2.1903': attribute type 1 has an invalid length. [ 165.628802][T12644] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1903'. [ 165.634967][T12644] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1903'. [ 165.670132][T12648] block nbd2: Attempted send on invalid socket [ 165.673682][T12648] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 165.677622][T12648] gfs2: error -5 reading superblock [ 165.922408][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 166.072435][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 166.085863][T12655] sctp: [Deprecated]: syz.0.1906 (pid 12655) Use of int in maxseg socket option. [ 166.085863][T12655] Use struct sctp_assoc_value instead [ 166.144321][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.147734][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 166.150108][ T10] usb 5-1: can't read configurations, error -71 [ 166.211022][T12696] netlink: 'syz.5.1913': attribute type 1 has an invalid length. [ 166.672260][ T6018] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 166.676259][T12711] tmpfs: Group quota inode hardlimit too large. [ 166.835206][ T6018] usb 7-1: config 9 has an invalid interface number: 104 but max is 2 [ 166.837857][ T6018] usb 7-1: config 9 has an invalid interface number: 162 but max is 2 [ 166.840497][ T6018] usb 7-1: config 9 has an invalid interface number: 8 but max is 2 [ 166.843365][ T6018] usb 7-1: config 9 has an invalid interface number: 74 but max is 2 [ 166.846134][ T6018] usb 7-1: config 9 has 4 interfaces, different from the descriptor's value: 3 [ 166.849082][ T6018] usb 7-1: config 9 has no interface number 0 [ 166.851059][ T6018] usb 7-1: config 9 has no interface number 1 [ 166.853490][ T6018] usb 7-1: config 9 has no interface number 2 [ 166.855481][ T6018] usb 7-1: config 9 has no interface number 3 [ 166.857853][ T6018] usb 7-1: config 9 interface 104 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 166.861425][ T6018] usb 7-1: config 9 interface 104 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 166.865395][ T6018] usb 7-1: config 9 interface 104 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 166.869673][ T6018] usb 7-1: config 9 interface 104 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 166.873239][ T6018] usb 7-1: config 9 interface 104 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 166.876809][ T6018] usb 7-1: config 9 interface 162 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 166.880548][ T6018] usb 7-1: config 9 interface 8 altsetting 252 has a duplicate endpoint with address 0x8, skipping [ 166.885158][ T6018] usb 7-1: config 9 interface 8 altsetting 252 has a duplicate endpoint with address 0x3, skipping [ 166.888633][ T6018] usb 7-1: config 9 interface 8 altsetting 252 bulk endpoint 0xD has invalid maxpacket 1024 [ 166.891967][ T6018] usb 7-1: config 9 interface 8 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 166.895646][ T6018] usb 7-1: config 9 interface 8 altsetting 252 has a duplicate endpoint with address 0x6, skipping [ 166.899082][ T6018] usb 7-1: config 9 interface 8 altsetting 252 has a duplicate endpoint with address 0x6, skipping [ 166.902685][ T6018] usb 7-1: config 9 interface 8 altsetting 252 has a duplicate endpoint with address 0xF, skipping [ 166.906189][ T6018] usb 7-1: config 9 interface 8 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 166.910325][ T6018] usb 7-1: config 9 interface 8 altsetting 252 has a duplicate endpoint with address 0xF, skipping [ 166.914137][ T6018] usb 7-1: config 9 interface 8 altsetting 252 has 11 endpoint descriptors, different from the interface descriptor's value: 15 [ 166.918379][ T6018] usb 7-1: too many endpoints for config 9 interface 74 altsetting 76: 70, using maximum allowed: 30 [ 166.921831][ T6018] usb 7-1: config 9 interface 74 altsetting 76 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 166.926165][ T6018] usb 7-1: config 9 interface 74 altsetting 76 has a duplicate endpoint with address 0x5, skipping [ 166.929977][ T6018] usb 7-1: config 9 interface 74 altsetting 76 has an endpoint descriptor with address 0x99, changing to 0x89 [ 166.934557][ T6018] usb 7-1: config 9 interface 74 altsetting 76 bulk endpoint 0x89 has invalid maxpacket 32 [ 166.938245][ T6018] usb 7-1: config 9 interface 74 altsetting 76 has 4 endpoint descriptors, different from the interface descriptor's value: 70 [ 166.943717][ T6018] usb 7-1: config 9 interface 104 has no altsetting 0 [ 166.946447][ T6018] usb 7-1: config 9 interface 162 has no altsetting 0 [ 166.949100][ T6018] usb 7-1: config 9 interface 8 has no altsetting 0 [ 166.951174][ T6018] usb 7-1: config 9 interface 74 has no altsetting 0 [ 166.956598][ T6018] usb 7-1: New USB device found, idVendor=0df6, idProduct=0075, bcdDevice=eb.e6 [ 166.960400][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.963784][ T6018] usb 7-1: Product: 컛霾⹘䁀芊윹濵袃㌁賕瞫┪ᬿ퐖蘟ነ䕫쉷畵敆ᛰ铹莻荅↩䲝虻ף敖䄦姝⊒騯儺µ챐␿殕᎝糂㨔ṻ눦⸼쾀鰏㼴쭽꡻ꝇ铹㋍鲻떘旚ퟪ릸࠯쫗ص頂༴ﺟꢭ蒍옍隹樟䃑倜䚜朂君ꦐ빬왈㯽㚌㨥㸂ር꫓흍㏖邗⇦䁌聦舫㞷磷ଷ☏⋂䴖쁆뎪姭ꀪᢛⵑ衆뽸ἃ鋆㘙 [ 166.976199][ T6018] usb 7-1: Manufacturer: ϩ䇱짒킰熔䠢吜쁿ಗ蜼힡醂漣먖꽵ꑹ砍톇࿘탘ۀ휰룉펓ˑయ请剀핤㷆棜稈Ẕ䃍놔詜 [ 166.982722][ T6018] usb 7-1: SerialNumber: 瓱 [ 166.987214][ T6018] usb 7-1: Interface #162 referenced by multiple IADs [ 166.990394][T12709] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.134457][ T40] kauditd_printk_skb: 258 callbacks suppressed [ 167.134472][ T40] audit: type=1400 audit(1758702095.770:3778): avc: denied { create } for pid=12728 comm="syz.5.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.195877][ T40] audit: type=1400 audit(1758702095.830:3779): avc: denied { read } for pid=12736 comm="syz.5.1930" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 167.196764][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.208177][ T40] audit: type=1400 audit(1758702095.830:3780): avc: denied { read } for pid=12708 comm="syz.2.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.217515][ T40] audit: type=1400 audit(1758702095.830:3781): avc: denied { open } for pid=12736 comm="syz.5.1930" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 167.223832][T12737] vivid-000: ================= START STATUS ================= [ 167.227791][ T40] audit: type=1400 audit(1758702095.860:3782): avc: denied { ioctl } for pid=12736 comm="syz.5.1930" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 167.230774][T12737] vivid-000: Test Pattern: [ 167.237514][ T40] audit: type=1400 audit(1758702095.870:3783): avc: denied { read } for pid=12743 comm="syz.2.1931" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 167.238972][T12737] 75% Colorbar [ 167.247617][ T40] audit: type=1400 audit(1758702095.870:3784): avc: denied { open } for pid=12743 comm="syz.2.1931" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 167.250489][T12737] vivid-000: Fill Percentage of Frame: 100 [ 167.257454][T12737] vivid-000: Horizontal Movement: No Movement [ 167.259389][T12737] vivid-000: Vertical Movement: No Movement [ 167.261496][T12737] vivid-000: OSD Text Mode: All [ 167.263170][T12737] vivid-000: Show Border: false [ 167.264070][ T6018] usb 7-1: USB disconnect, device number 13 [ 167.264694][T12737] vivid-000: Show Square: false [ 167.268973][T12737] vivid-000: Sensor Flipped Horizontally: false [ 167.269116][ T40] audit: type=1400 audit(1758702095.870:3785): avc: denied { ioctl } for pid=12743 comm="syz.2.1931" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 167.270933][T12737] vivid-000: Sensor Flipped Vertically: false [ 167.285744][T12737] vivid-000: Insert SAV Code in Image: false [ 167.288063][T12737] vivid-000: Insert EAV Code in Image: false [ 167.291999][T12737] vivid-000: Insert Video Guard Band: false [ 167.295067][T12737] vivid-000: Reduced Framerate: true [ 167.295203][ T40] audit: type=1400 audit(1758702095.870:3786): avc: denied { write } for pid=12743 comm="syz.2.1931" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.297553][T12737] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 167.306935][T12737] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 167.309457][T12737] vivid-000: Enable Capture Cropping: true grabbed [ 167.311542][T12737] vivid-000: Enable Capture Composing: true grabbed [ 167.314289][T12737] vivid-000: Enable Capture Scaler: true grabbed [ 167.316473][T12737] vivid-000: Timestamp Source: End of Frame [ 167.318128][ T40] audit: type=1400 audit(1758702095.910:3787): avc: denied { setattr } for pid=8015 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.318377][T12737] vivid-000: Colorspace: SMPTE 170M [ 167.328180][T12737] vivid-000: Transfer Function: Default [ 167.329990][T12737] vivid-000: Y'CbCr Encoding: Default [ 167.331738][T12737] vivid-000: HSV Encoding: Hue 0-179 [ 167.334014][T12737] vivid-000: Quantization: Default [ 167.335764][T12737] vivid-000: Apply Alpha To Red Only: false [ 167.337670][T12737] vivid-000: Standard Aspect Ratio: 4x3 [ 167.339462][T12737] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 167.342003][T12737] vivid-000: DV Timings: 640x480p59 inactive [ 167.344351][T12737] vivid-000: DV Timings Aspect Ratio: 4x3 [ 167.346461][T12737] vivid-000: Maximum EDID Blocks: 1 [ 167.348349][T12737] vivid-000: Limited RGB Range (16-235): true [ 167.350301][T12737] vivid-000: Rx RGB Quantization Range: Automatic [ 167.352553][T12737] vivid-000: Power Present: 0x00000001 [ 167.354354][T12737] tpg source WxH: 720x576 (Y'CbCr) [ 167.356171][T12737] tpg field: 4 [ 167.357457][T12737] tpg crop: (0,0)/64x32 [ 167.358841][T12737] tpg compose: (0,0)/16x8 [ 167.360258][T12737] tpg colorspace: 1 [ 167.361522][T12737] tpg transfer function: 6/6 [ 167.363474][T12737] tpg Y'CbCr encoding: 0/1 [ 167.364947][T12737] tpg quantization: 0/2 [ 167.366534][T12737] tpg RGB range: 0/1 [ 167.367857][T12737] vivid-000: ================== END STATUS ================== [ 167.374588][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.378042][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.381083][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.384537][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.388844][T12720] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 167.397087][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.489899][T12758] tipc: Enabled bearer , priority 0 [ 167.492717][T12758] syzkaller0: entered promiscuous mode [ 167.494399][T12758] syzkaller0: entered allmulticast mode [ 167.499273][T12758] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 167.512362][T12758] tipc: Resetting bearer [ 167.515657][T12760] ubi31: detaching mtd0 [ 167.519692][T12757] tipc: Resetting bearer [ 167.521220][T12760] ubi31: mtd0 is detached [ 167.532513][T12757] tipc: Disabling bearer [ 167.637676][ T10] usb 5-1: USB disconnect, device number 7 [ 167.645965][T12764] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 167.792409][ T6018] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 167.948078][ T6018] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 167.949030][T12776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=12776 comm=syz.2.1941 [ 167.955952][ T6018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 167.955975][ T6018] usb 10-1: Product: syz [ 167.955988][ T6018] usb 10-1: Manufacturer: syz [ 167.956002][ T6018] usb 10-1: SerialNumber: syz [ 167.963185][ T6018] usb 10-1: config 0 descriptor?? [ 167.971143][ T6018] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 167.974759][ T6018] dvb-usb: bulk message failed: -22 (2/0) [ 167.983735][ T6018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.988263][ T6018] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 167.992226][ T6018] usb 10-1: media controller created [ 168.009720][ T6018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.172466][T12762] dvb-usb: bulk message failed: -22 (3/0) [ 168.175729][ T6018] cxusb: set interface failed [ 168.177308][ T6018] dvb-usb: bulk message failed: -22 (1/0) [ 168.202914][ T6018] DVB: Unable to find symbol mt352_attach() [ 168.204891][ T6018] dvb-usb: bulk message failed: -22 (5/0) [ 168.207983][ T6018] zl10353_read_register: readreg error (reg=127, ret==-121) [ 168.210392][ T6018] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 168.252189][ T6018] rc_core: IR keymap rc-dvico-mce not found [ 168.254115][ T6018] Registered IR keymap rc-empty [ 168.257037][ T6018] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 168.263779][ T6018] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input27 [ 168.267808][ T6018] dvb-usb: schedule remote query interval to 100 msecs. [ 168.270039][ T6018] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 168.275564][ T6018] usb 10-1: USB disconnect, device number 5 [ 168.346185][ T6018] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 168.352169][ T839] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 168.507533][ T839] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.511687][ T839] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.516377][ T839] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.519475][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.718380][T12796] netlink: 'syz.5.1946': attribute type 1 has an invalid length. [ 168.732747][ T839] usb 7-1: usb_control_msg returned -71 [ 168.735113][ T839] usbtmc 7-1:16.0: can't read capabilities [ 168.746744][T12796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.749564][ T839] usb 7-1: USB disconnect, device number 14 [ 168.760219][T12796] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.765618][T12796] bond0: (slave team0): making interface the new active one [ 168.770215][T12796] bond0: (slave team0): Enslaving as an active interface with an up link [ 168.819605][T12800] netlink: 'syz.5.1947': attribute type 64 has an invalid length. [ 168.832634][ T6055] vhci_hcd: vhci_device speed not set [ 169.470667][T12822] __nla_validate_parse: 7 callbacks suppressed [ 169.470681][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 169.477295][T12822] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 169.480601][T12822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.489244][T12826] tmpfs: Cannot change global quota limit on remount [ 169.681020][T12835] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 169.759178][T12842] xfrm0 speed is unknown, defaulting to 1000 [ 169.869167][T12848] overlayfs: statfs failed on './file0' [ 170.217831][T12857] ptrace attach of "/syz-executor exec"[11300] was attempted by ""[12857] [ 170.223582][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1967'. [ 170.632221][T12866] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1970'. [ 170.635757][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 171.119484][T12877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1974'. [ 171.123179][T12878] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1975'. [ 171.155858][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1975'. [ 171.171537][T12879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1974'. [ 171.175573][T12879] nbd: nbd64 already in use [ 171.305945][T12891] overlayfs: missing 'workdir' [ 171.311203][T12249] udevd[12249]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 171.442177][ T6018] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 171.593735][ T6018] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.597480][ T6018] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 171.601696][ T6018] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.607393][ T6018] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 171.611916][ T6018] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 171.619114][ T6018] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.622947][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.626186][ T6018] usb 7-1: Product: syz [ 171.627910][ T6018] usb 7-1: Manufacturer: syz [ 171.637633][ T6018] cdc_wdm 7-1:1.0: skipping garbage [ 171.639798][ T6018] cdc_wdm 7-1:1.0: skipping garbage [ 171.649679][ T6018] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 171.652336][ T6018] cdc_wdm 7-1:1.0: Unknown control protocol [ 172.186886][ T40] kauditd_printk_skb: 163 callbacks suppressed [ 172.186901][ T40] audit: type=1400 audit(1758702100.820:3951): avc: denied { read write } for pid=12881 comm="syz.2.1976" name="cdc-wdm0" dev="devtmpfs" ino=3271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 172.201404][ T40] audit: type=1400 audit(1758702100.820:3952): avc: denied { open } for pid=12881 comm="syz.2.1976" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 172.388077][ T40] audit: type=1400 audit(1758702101.020:3953): avc: denied { ioctl } for pid=12881 comm="syz.2.1976" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3271 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 172.402229][ T6085] usb 7-1: USB disconnect, device number 15 [ 172.932040][ T40] audit: type=1400 audit(1758702101.560:3955): avc: denied { setattr } for pid=8015 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.941105][ T40] audit: type=1400 audit(1758702101.560:3954): avc: denied { read write } for pid=12899 comm="syz.2.1980" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 172.950684][ T40] audit: type=1400 audit(1758702101.570:3956): avc: denied { open } for pid=12899 comm="syz.2.1980" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 172.959881][ T40] audit: type=1400 audit(1758702101.570:3957): avc: denied { ioctl } for pid=12899 comm="syz.2.1980" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 172.979008][ T40] audit: type=1400 audit(1758702101.610:3958): avc: denied { execute } for pid=12901 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 172.988251][ T40] audit: type=1400 audit(1758702101.610:3959): avc: denied { execute_no_trans } for pid=12901 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 172.998581][ T40] audit: type=1400 audit(1758702101.620:3960): avc: denied { execmem } for pid=12901 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 173.147758][ T5972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.153413][ T5972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.157919][ T5972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.161797][ T5972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.165716][ T5972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.173941][ T5973] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.177115][ T5973] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.181144][ T5973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.184227][ T5973] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.186916][ T5973] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.206283][T12906] xfrm0 speed is unknown, defaulting to 1000 [ 173.233410][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1984'. [ 173.248033][ T1144] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.306822][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 173.311385][T12914] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 173.314218][T12914] PKCS7: Only support pkcs7_signedData type [ 173.318133][ T1144] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.333588][T12906] chnl_net:caif_netlink_parms(): no params data found [ 173.385079][ T1144] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.450672][T12906] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.453665][T12906] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.457460][T12906] bridge_slave_0: entered allmulticast mode [ 173.461345][T12906] bridge_slave_0: entered promiscuous mode [ 173.467703][ T1144] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.476317][T12906] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.478850][T12906] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.481517][T12906] bridge_slave_1: entered allmulticast mode [ 173.487409][T12906] bridge_slave_1: entered promiscuous mode [ 173.541942][T12906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.547390][T12906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.580970][T12906] team0: Port device team_slave_0 added [ 173.584369][T12906] team0: Port device team_slave_1 added [ 173.593356][ T6018] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 173.616929][T12906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.619305][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.628485][T12906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.633555][T12906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.635890][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.644860][T12906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.716569][T12906] hsr_slave_0: entered promiscuous mode [ 173.718765][T12906] hsr_slave_1: entered promiscuous mode [ 173.720819][T12906] debugfs: 'hsr0' already exists in 'hsr' [ 173.723522][T12906] Cannot create hsr debugfs directory [ 173.752337][ T6018] usb 7-1: Using ep0 maxpacket: 8 [ 173.755302][ T6018] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.757791][ T6018] usb 7-1: config 0 has no interface number 0 [ 173.759682][ T6018] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.763296][ T6018] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 173.766054][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.770090][ T6018] usb 7-1: config 0 descriptor?? [ 173.782441][ T6018] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 173.861315][ T1144] bond1 (unregistering): (slave gretap1): Releasing active interface [ 173.978356][ T61] usb 7-1: USB disconnect, device number 16 [ 174.103078][ T1144] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 174.152744][ T1144] bond0 (unregistering): Released all slaves [ 174.161142][ T1144] bond1 (unregistering): Released all slaves [ 174.170867][T12916] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 174.346776][T12906] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.350960][T12906] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.356114][T12906] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.360113][T12906] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.467817][T12906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.482469][T12906] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.488099][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.490963][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.500044][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.502841][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.959008][T12906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.076599][T12906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.207198][ T1144] hsr_slave_0: left promiscuous mode [ 175.209978][ T1144] hsr_slave_1: left promiscuous mode [ 175.244889][ T5972] Bluetooth: hci2: command tx timeout [ 175.477444][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1992'. [ 176.460702][T12906] veth0_vlan: entered promiscuous mode [ 176.467638][T12906] veth1_vlan: entered promiscuous mode [ 176.498907][T12906] veth0_macvtap: entered promiscuous mode [ 176.503720][T12906] veth1_macvtap: entered promiscuous mode [ 176.514872][T12906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.523897][T12906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.536771][ T1145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.539611][ T1145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.545888][ T1145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.548641][ T1145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.604781][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.607389][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.624605][ T60] team0: left promiscuous mode [ 176.625193][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.627310][ T60] team_slave_0: left promiscuous mode [ 176.629889][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.631846][ T60] team_slave_1: left promiscuous mode [ 176.664758][T12998] validate_nla: 1 callbacks suppressed [ 176.664768][T12998] netlink: 'syz.2.1996': attribute type 10 has an invalid length. [ 176.664781][T13000] netlink: 'syz.2.1996': attribute type 10 has an invalid length. [ 176.666851][T12998] team0: Device hsr_slave_0 failed to register rx_handler [ 176.676282][T13000] team0: Device hsr_slave_0 failed to register rx_handler [ 176.736139][T13008] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3919364976 (501678716928 ns) > initial count (201147751424 ns). Using initial count to start timer. [ 177.126911][T13022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2000'. [ 177.132536][T13022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2000'. [ 177.194676][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 177.194692][ T40] audit: type=1400 audit(1758702105.830:4093): avc: denied { mounton } for pid=13029 comm="syz.2.2002" path="/587/file0" dev="tmpfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 177.207217][ T40] audit: type=1400 audit(1758702105.830:4094): avc: denied { mount } for pid=13029 comm="syz.2.2002" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 177.215936][ T40] audit: type=1400 audit(1758702105.830:4095): avc: denied { mounton } for pid=13029 comm="syz.2.2002" path="/587/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 177.225324][ T40] audit: type=1400 audit(1758702105.830:4096): avc: denied { mount } for pid=13029 comm="syz.2.2002" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 177.236411][ T40] audit: type=1400 audit(1758702105.830:4097): avc: denied { remount } for pid=13029 comm="syz.2.2002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 177.242610][ T40] audit: type=1400 audit(1758702105.850:4098): avc: denied { read write } for pid=13029 comm="syz.2.2002" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.249717][ T40] audit: type=1400 audit(1758702105.850:4099): avc: denied { open } for pid=13029 comm="syz.2.2002" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.256933][ T40] audit: type=1400 audit(1758702105.850:4100): avc: denied { ioctl } for pid=13029 comm="syz.2.2002" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.323074][ T5972] Bluetooth: hci2: command tx timeout [ 177.482189][ T1338] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 177.644158][ T1338] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.648964][ T1338] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.655426][ T1338] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.658875][ T1338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.664170][T13030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.920244][ T40] audit: type=1400 audit(1758702106.550:4101): avc: denied { read write } for pid=13029 comm="syz.2.2002" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 177.927709][ T40] audit: type=1400 audit(1758702106.550:4102): avc: denied { open } for pid=13029 comm="syz.2.2002" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 178.042239][T12720] sound midiC3D0: rawmidi drain error (avail = 4048, buffer_size = 4096) [ 178.082368][ T1338] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.108641][T13008] Set syz1 is full, maxelem 65536 reached [ 178.272811][T13056] rdma_op ffff888029a409f0 conn xmit_rdma 0000000000000000 [ 178.353754][T13062] fuse: Unknown parameter '0x00000000000000040xffffffffffffffff' [ 178.402658][T13060] Process accounting resumed [ 178.408519][T13070] tmpfs: Invalid uid '0x00000000ffffffff' [ 178.408921][T13062] orangefs_mount: mount request failed with -4 [ 178.446347][T13078] binder: BINDER_SET_CONTEXT_MGR already set [ 178.448459][T13078] binder: 13077:13078 ioctl 4018620d 200000000280 returned -16 [ 178.461736][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2020'. [ 178.465380][T13081] new mount options do not match the existing superblock, will be ignored [ 178.510621][T13092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2023'. [ 178.633201][T13101] Malformed UNC in devname [ 178.633201][T13101] [ 178.636223][T13101] CIFS: VFS: Malformed UNC in devname [ 178.724145][T13107] can: request_module (can-proto-0) failed. [ 178.946172][T13125] i2c i2c-1: Invalid block write size 50 [ 179.051617][T13127] CUSE: unknown device info "" [ 179.054380][T13127] CUSE: zero length info key specified [ 179.302252][ T1338] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 179.302334][ T29] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 179.412249][ T5972] Bluetooth: hci2: command tx timeout [ 179.433956][ T29] usb 5-1: device descriptor read/64, error -71 [ 179.453365][ T1338] usb 10-1: Using ep0 maxpacket: 16 [ 179.456441][ T1338] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 179.459449][ T1338] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 179.463326][ T1338] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 179.466319][ T1338] usb 10-1: config 0 interface 0 has no altsetting 0 [ 179.470026][ T1338] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 179.473063][ T1338] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.475636][ T1338] usb 10-1: Product: syz [ 179.476981][ T1338] usb 10-1: Manufacturer: syz [ 179.478458][ T1338] usb 10-1: SerialNumber: syz [ 179.481263][ T1338] usb 10-1: config 0 descriptor?? [ 179.670389][T13144] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2041'. [ 179.682329][ T29] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 179.691250][ T1338] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input28 [ 179.695992][ T5363] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 179.711604][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2041'. [ 179.714784][T13144] bridge_slave_1: left allmulticast mode [ 179.718126][T13144] bridge_slave_1: left promiscuous mode [ 179.721182][T13144] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.726543][T13144] bridge_slave_0: left allmulticast mode [ 179.728402][T13144] bridge_slave_0: left promiscuous mode [ 179.730864][T13144] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.782521][ T5363] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 179.812404][ T29] usb 5-1: device descriptor read/64, error -71 [ 179.867659][ T5363] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 179.897014][T13130] erspan1: entered promiscuous mode [ 179.901045][ T1338] usb 10-1: USB disconnect, device number 6 [ 179.922292][ T29] usb usb5-port1: attempt power cycle [ 179.970881][T13149] FAULT_INJECTION: forcing a failure. [ 179.970881][T13149] name failslab, interval 1, probability 0, space 0, times 1 [ 179.975537][T13149] CPU: 0 UID: 0 PID: 13149 Comm: syz.6.2043 Not tainted syzkaller #0 PREEMPT(full) [ 179.975552][T13149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.975559][T13149] Call Trace: [ 179.975563][T13149] [ 179.975567][T13149] dump_stack_lvl+0x16c/0x1f0 [ 179.975606][T13149] should_fail_ex+0x512/0x640 [ 179.975625][T13149] ? fs_reclaim_acquire+0xae/0x150 [ 179.975642][T13149] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 179.975658][T13149] should_failslab+0xc2/0x120 [ 179.975671][T13149] __kmalloc_noprof+0xd2/0x510 [ 179.975686][T13149] tomoyo_realpath_from_path+0xc2/0x6e0 [ 179.975704][T13149] ? tomoyo_profile+0x47/0x60 [ 179.975716][T13149] tomoyo_path_number_perm+0x245/0x580 [ 179.975730][T13149] ? tomoyo_path_number_perm+0x237/0x580 [ 179.975745][T13149] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 179.975760][T13149] ? find_held_lock+0x2b/0x80 [ 179.975786][T13149] ? find_held_lock+0x2b/0x80 [ 179.975799][T13149] ? hook_file_ioctl_common+0x145/0x410 [ 179.975814][T13149] ? __fget_files+0x20e/0x3c0 [ 179.975829][T13149] security_file_ioctl+0x9b/0x240 [ 179.975845][T13149] __x64_sys_ioctl+0xb7/0x210 [ 179.975863][T13149] do_syscall_64+0xcd/0x4e0 [ 179.975883][T13149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.975894][T13149] RIP: 0033:0x7f702d38eec9 [ 179.975903][T13149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.975914][T13149] RSP: 002b:00007f702e18c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.975924][T13149] RAX: ffffffffffffffda RBX: 00007f702d5e5fa0 RCX: 00007f702d38eec9 [ 179.975931][T13149] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000004 [ 179.975937][T13149] RBP: 00007f702e18c090 R08: 0000000000000000 R09: 0000000000000000 [ 179.975944][T13149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.975950][T13149] R13: 00007f702d5e6038 R14: 00007f702d5e5fa0 R15: 00007ffd6f9f4f58 [ 179.975965][T13149] [ 179.975969][T13149] ERROR: Out of memory at tomoyo_realpath_from_path. [ 180.236712][T13158] xfrm0 speed is unknown, defaulting to 1000 [ 180.275382][T13160] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2046'. [ 180.278595][T13160] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2046'. [ 180.281524][T13160] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2046'. [ 180.285333][ T29] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 180.312660][ T29] usb 5-1: device descriptor read/8, error -71 [ 180.341868][ T61] usb 7-1: USB disconnect, device number 17 [ 180.441478][T13168] netlink: 'syz.2.2049': attribute type 18 has an invalid length. [ 180.444934][T13168] netlink: 'syz.2.2049': attribute type 18 has an invalid length. [ 180.451240][T13170] program syz.5.2050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.517308][T13174] vxlan0: entered promiscuous mode [ 180.519037][T13174] vxlan0: entered allmulticast mode [ 180.521067][ T60] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.524203][ T60] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.527788][ T60] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.572354][ T29] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 180.604271][ T29] usb 5-1: device descriptor read/8, error -71 [ 180.708608][T13180] FAULT_INJECTION: forcing a failure. [ 180.708608][T13180] name failslab, interval 1, probability 0, space 0, times 0 [ 180.712679][T13180] CPU: 2 UID: 0 PID: 13180 Comm: syz.5.2054 Not tainted syzkaller #0 PREEMPT(full) [ 180.712693][T13180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.712700][T13180] Call Trace: [ 180.712704][T13180] [ 180.712708][T13180] dump_stack_lvl+0x16c/0x1f0 [ 180.712726][T13180] should_fail_ex+0x512/0x640 [ 180.712740][T13180] ? fs_reclaim_acquire+0xae/0x150 [ 180.712756][T13180] ? tomoyo_encode2+0x100/0x3e0 [ 180.712772][T13180] should_failslab+0xc2/0x120 [ 180.712785][T13180] __kmalloc_noprof+0xd2/0x510 [ 180.712800][T13180] tomoyo_encode2+0x100/0x3e0 [ 180.712818][T13180] tomoyo_encode+0x29/0x50 [ 180.712834][T13180] tomoyo_realpath_from_path+0x18f/0x6e0 [ 180.712852][T13180] ? tomoyo_profile+0x47/0x60 [ 180.712864][T13180] tomoyo_path_number_perm+0x245/0x580 [ 180.712878][T13180] ? tomoyo_path_number_perm+0x237/0x580 [ 180.712893][T13180] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 180.712908][T13180] ? find_held_lock+0x2b/0x80 [ 180.712935][T13180] ? find_held_lock+0x2b/0x80 [ 180.712948][T13180] ? hook_file_ioctl_common+0x145/0x410 [ 180.712963][T13180] ? __fget_files+0x20e/0x3c0 [ 180.712978][T13180] security_file_ioctl+0x9b/0x240 [ 180.712995][T13180] __x64_sys_ioctl+0xb7/0x210 [ 180.713014][T13180] do_syscall_64+0xcd/0x4e0 [ 180.713029][T13180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.713041][T13180] RIP: 0033:0x7f227638eec9 [ 180.713051][T13180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.713061][T13180] RSP: 002b:00007f227715f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.713072][T13180] RAX: ffffffffffffffda RBX: 00007f22765e5fa0 RCX: 00007f227638eec9 [ 180.713078][T13180] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000004 [ 180.713085][T13180] RBP: 00007f227715f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.713091][T13180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.713098][T13180] R13: 00007f22765e6038 R14: 00007f22765e5fa0 R15: 00007fff29fc6108 [ 180.713114][T13180] [ 180.713123][T13180] ERROR: Out of memory at tomoyo_realpath_from_path. [ 180.714159][ T29] usb usb5-port1: unable to enumerate USB device [ 180.940994][T13189] batadv0: entered promiscuous mode [ 180.955104][T13190] batadv0: entered promiscuous mode [ 180.988588][T13193] __nla_validate_parse: 67 callbacks suppressed [ 180.988599][T13193] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2058'. [ 181.205541][T13206] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2061'. [ 181.482371][ T5972] Bluetooth: hci2: command tx timeout [ 181.919227][T13252] netlink: 'syz.5.2066': attribute type 5 has an invalid length. [ 182.159805][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'. [ 182.208281][ T40] kauditd_printk_skb: 254 callbacks suppressed [ 182.208291][ T40] audit: type=1400 audit(1758702110.840:4357): avc: denied { unmount } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 182.238924][ T40] audit: type=1400 audit(1758702110.870:4358): avc: denied { create } for pid=13278 comm="syz.0.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 182.243711][T13279] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2071'. [ 182.250224][ T40] audit: type=1400 audit(1758702110.880:4359): avc: denied { create } for pid=13278 comm="syz.0.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.280898][ T40] audit: type=1400 audit(1758702110.910:4360): avc: denied { map_create } for pid=13280 comm="syz.6.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 182.282712][ T5972] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 182.287867][ T40] audit: type=1400 audit(1758702110.920:4361): avc: denied { create } for pid=13282 comm="syz.0.2073" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 182.299589][ T40] audit: type=1400 audit(1758702110.920:4362): avc: denied { ioctl } for pid=13282 comm="syz.0.2073" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=55242 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 182.341104][ T40] audit: type=1400 audit(1758702110.970:4363): avc: denied { perfmon } for pid=13282 comm="syz.0.2073" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.701850][T13248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.704541][T13248] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 182.709625][T13248] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 182.741250][ T40] audit: type=1400 audit(1758702111.370:4364): avc: denied { ioctl } for pid=13286 comm="syz.2.2074" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 182.791676][ T40] audit: type=1400 audit(1758702111.420:4365): avc: denied { map } for pid=13286 comm="syz.2.2074" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 182.795059][T13288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2074'. [ 182.801574][ T40] audit: type=1400 audit(1758702111.420:4366): avc: denied { execute } for pid=13286 comm="syz.2.2074" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 182.856829][T13295] CIFS: iocharset name too long [ 182.861960][T13295] bond5: (slave team0): Releasing active interface [ 182.863357][T13294] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 182.919303][T13296] comedi comedi3: aio_aio12_8: I/O port conflict (0x4f27,32) [ 183.009212][T13301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2078'. [ 183.059409][T13303] ntfs3(sr0): Primary boot signature is not NTFS. [ 183.063461][T13303] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 183.239155][ T5973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.249114][ T5973] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.252449][ T5973] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.256010][ T5973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.258916][ T5973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.285438][T13315] xfrm0 speed is unknown, defaulting to 1000 [ 183.319965][T13324] netlink: 'syz.6.2086': attribute type 62 has an invalid length. [ 183.323478][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2086'. [ 183.327090][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2086'. [ 183.330316][T13324] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2086'. [ 183.388895][T13315] chnl_net:caif_netlink_parms(): no params data found [ 183.465778][T13315] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.468093][T13315] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.468349][T13339] netlink: 'syz.6.2088': attribute type 1 has an invalid length. [ 183.470335][T13315] bridge_slave_0: entered allmulticast mode [ 183.471665][T13315] bridge_slave_0: entered promiscuous mode [ 183.478703][T13315] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.480911][T13315] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.483350][T13315] bridge_slave_1: entered allmulticast mode [ 183.486891][T13315] bridge_slave_1: entered promiscuous mode [ 183.507578][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2089'. [ 183.521458][T13315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.527515][T13315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.567289][T13315] team0: Port device team_slave_0 added [ 183.570413][T13315] team0: Port device team_slave_1 added [ 183.572848][T13345] [U] v3f"S/4:XTzWtlW= [ 183.576634][T13345] [U] J"e:" [ 183.578090][T13345] [U] [ 183.579318][T13345] [U] 8[^,c¦~;˸3u0t>@زK]yN:sPl#.6U|>IEumw&\ [ 183.583448][T13345] [U] ň\k;HɆ#Rm4R{< [ 183.587838][T13345] [U] j9kjXLfζI[ 5%e 3ݓGEUbFL [ 183.592964][T13345] [U] [gg-?i~ێЖ]JԹDS]ek [ 183.614897][T13315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.617701][T13315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.628526][T13315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.634904][T13315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.637656][T13315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.647324][T13315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.696091][T13315] hsr_slave_0: entered promiscuous mode [ 183.698414][T13315] hsr_slave_1: entered promiscuous mode [ 183.773012][T13349] block nbd6: Attempted send on invalid socket [ 183.775648][T13349] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.780574][T13349] block nbd6: Attempted send on invalid socket [ 183.783113][T13349] I/O error, dev nbd6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.800314][T13315] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.880193][T13315] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.938224][T13315] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.962303][ T5972] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.005300][T13315] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.223309][T13315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.230372][T13315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.239008][T13315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.244468][T13315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 184.293450][T13380] udf: Unknown parameter 'barvS^GM [ 184.293450][T13380] V;: vͪpN1(RZ' [ 184.299508][T13315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.313691][T13315] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.321166][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.323469][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.327591][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.330064][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.453154][T13394] netlink: 'syz.5.2102': attribute type 10 has an invalid length. [ 184.456863][T13394] openvswitch: netlink: Flow key attr not present in new flow. [ 184.461374][T13315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.490245][T13315] veth0_vlan: entered promiscuous mode [ 184.495790][T13315] veth1_vlan: entered promiscuous mode [ 184.511728][T13315] veth0_macvtap: entered promiscuous mode [ 184.516332][T13315] veth1_macvtap: entered promiscuous mode [ 184.526121][T13315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.533476][T13315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.545974][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.550040][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.555418][ T1145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.568929][ T1145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.617929][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.621127][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.637890][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.640670][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.787506][T13421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.872628][T13421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.988811][T13432] sctp: [Deprecated]: syz.0.2116 (pid 13432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.988811][T13432] Use struct sctp_sack_info instead [ 185.111159][T13439] trusted_key: encrypted_key: master key parameter '' is invalid [ 185.137687][T13439] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.304728][T13454] fuse: Bad value for 'fd' [ 185.306183][T13455] fuse: Unknown parameter '9' [ 185.322292][ T5972] Bluetooth: hci4: command tx timeout [ 185.562276][ T29] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 185.722358][ T29] usb 11-1: Using ep0 maxpacket: 8 [ 185.725377][ T29] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 185.727740][ T29] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 185.731231][ T29] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.735051][ T29] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.738847][ T29] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 185.742786][ T29] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 185.745095][ T29] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 185.748519][ T29] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.752723][ T29] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.756038][ T29] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 185.759879][ T29] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 185.762247][ T29] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 185.765614][ T29] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.769698][ T29] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.773149][ T29] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 185.778706][ T29] usb 11-1: string descriptor 0 read error: -22 [ 185.780738][ T29] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 185.784183][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.789916][ T29] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 185.992248][ T29] usb 11-1: USB disconnect, device number 2 [ 186.042780][ T5972] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.192411][T13457] adutux: No device or device unplugged -19 [ 186.579579][T13421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.300506][ T40] kauditd_printk_skb: 217 callbacks suppressed [ 187.300518][ T40] audit: type=1400 audit(1758702116.932:4584): avc: denied { create } for pid=13474 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.309196][ T40] audit: type=1400 audit(1758702116.942:4585): avc: denied { create } for pid=13474 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.315590][ T40] audit: type=1400 audit(1758702116.942:4586): avc: denied { setopt } for pid=13474 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.321897][ T40] audit: type=1400 audit(1758702116.942:4587): avc: denied { write } for pid=13474 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.357369][ T40] audit: type=1400 audit(1758702116.992:4588): avc: denied { create } for pid=13477 comm="syz.0.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.363915][ T40] audit: type=1400 audit(1758702116.992:4589): avc: denied { setopt } for pid=13477 comm="syz.0.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.370291][ T40] audit: type=1400 audit(1758702116.992:4590): avc: denied { bind } for pid=13477 comm="syz.0.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.377593][ T40] audit: type=1400 audit(1758702116.992:4591): avc: denied { name_bind } for pid=13477 comm="syz.0.2130" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 187.384869][ T40] audit: type=1400 audit(1758702116.992:4592): avc: denied { node_bind } for pid=13477 comm="syz.0.2130" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 187.391262][ T40] audit: type=1400 audit(1758702116.992:4593): avc: denied { write } for pid=13477 comm="syz.0.2130" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.402208][ T5972] Bluetooth: hci4: command tx timeout [ 187.952383][ T67] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 188.132247][ T5972] Bluetooth: hci2: command 0x0c1a tx timeout [ 188.132287][ T67] usb 10-1: Using ep0 maxpacket: 16 [ 188.141029][ T67] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 188.144702][ T67] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 188.150307][ T67] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.153245][ T67] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.155673][ T67] usb 10-1: Product: П [ 188.156919][ T67] usb 10-1: Manufacturer: ๴才ꖡ聑 [ 188.158554][ T67] usb 10-1: SerialNumber: ဌ [ 188.276435][T13421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.374615][ T67] cdc_ncm 10-1:1.0: bind() failure [ 188.378890][ T67] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 188.380917][ T67] cdc_ncm 10-1:1.1: bind() failure [ 188.384530][ T67] usb 10-1: USB disconnect, device number 7 [ 188.439151][ T81] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.445011][ T81] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.452063][ T81] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.460885][ T81] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.502712][T13542] afs: Unknown parameter 'UM' [ 188.505151][T13542] overlayfs: overlapping lowerdir path [ 188.544656][T13544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=13544 comm=syz.5.2146 [ 188.653669][T13558] netlink: 'syz.0.2153': attribute type 21 has an invalid length. [ 188.656470][T13558] __nla_validate_parse: 3 callbacks suppressed [ 188.656480][T13558] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2153'. [ 188.658825][T13560] could not open pipe file descriptor [ 188.659068][T13561] could not open pipe file descriptor [ 188.668507][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 189.030895][T13599] ISOFS: Unable to identify CD-ROM format. [ 189.036440][T13599] netlink: 'syz.2.2167': attribute type 1 has an invalid length. [ 189.039142][T13599] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2167'. [ 189.252657][T13612] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2172'. [ 189.348882][T13612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.379081][T13616] netlink: 'syz.2.2174': attribute type 4 has an invalid length. [ 189.384669][T13612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.434418][T13612] bond0 (unregistering): Released all slaves [ 189.482926][ T5972] Bluetooth: hci4: command tx timeout [ 189.483721][T13618] netlink: 'syz.2.2175': attribute type 8 has an invalid length. [ 189.783930][T13665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2187'. [ 189.928426][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'. [ 189.964458][ C3] IPv4: Oversized IP packet from 172.20.20.10 [ 190.120709][T13709] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 190.125584][T13709] overlayfs: missing 'lowerdir' [ 190.164246][T13715] netlink: 'syz.5.2203': attribute type 1 has an invalid length. [ 190.183694][T13715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.196298][T13715] gretap2: entered promiscuous mode [ 190.200045][T13715] bond2: (slave gretap2): making interface the new active one [ 190.209669][T13715] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 190.215560][T13719] befs: (nullb0): No write support. Marking filesystem read-only [ 190.220397][T13719] befs: (nullb0): invalid magic header [ 190.221058][T13718] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2204'. [ 190.237142][T13721] xfrm0 speed is unknown, defaulting to 1000 [ 190.422246][ T6063] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 190.536636][T13737] usb usb5: usbfs: process 13737 (syz.2.2208) did not claim interface 0 before use [ 190.573536][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'. [ 190.588906][T13742] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.591386][T13742] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.758914][T13754] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2212'. [ 190.784057][T13739] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.787431][T13739] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 190.789339][T13739] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 190.794593][T13739] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.430913][T13764] netlink: 'syz.5.2214': attribute type 58 has an invalid length. [ 191.507801][T13763] input: syz1 as /devices/virtual/input/input29 [ 191.627710][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2221'. [ 191.957206][T13816] netlink: 'syz.2.2232': attribute type 2 has an invalid length. [ 192.061170][T13825] overlayfs: failed to clone upperpath [ 192.114853][T13825] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 192.237882][T13772] syz.5.2218 (13772): drop_caches: 2 [ 192.324656][ T40] kauditd_printk_skb: 422 callbacks suppressed [ 192.324672][ T40] audit: type=1400 audit(1758702121.962:5016): avc: denied { create } for pid=13844 comm="syz.2.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 192.335284][ T40] audit: type=1400 audit(1758702121.962:5017): avc: denied { setopt } for pid=13844 comm="syz.2.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 192.344577][ T40] audit: type=1400 audit(1758702121.972:5018): avc: denied { read write } for pid=13858 comm="syz.5.2245" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.353282][ T40] audit: type=1400 audit(1758702121.972:5019): avc: denied { open } for pid=13858 comm="syz.5.2245" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.361205][ T40] audit: type=1400 audit(1758702121.972:5020): avc: denied { ioctl } for pid=13858 comm="syz.5.2245" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.401209][ T40] audit: type=1400 audit(1758702122.032:5021): avc: denied { create } for pid=13861 comm="syz.2.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.409145][ T40] audit: type=1400 audit(1758702122.032:5022): avc: denied { setopt } for pid=13861 comm="syz.2.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.417425][ T40] audit: type=1400 audit(1758702122.032:5023): avc: denied { accept } for pid=13861 comm="syz.2.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.424422][ T40] audit: type=1400 audit(1758702122.052:5024): avc: denied { sys_module } for pid=13848 comm="syz.6.2243" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 192.440724][T13849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.447543][T13849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.456514][T13849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.489474][ T40] audit: type=1400 audit(1758702122.122:5025): avc: denied { create } for pid=13880 comm="syz.2.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.522699][ C1] vcan0: j1939_session_tx_dat: 0xffff8880553d6c00: queue data error: -100 [ 192.575744][T13883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.592192][ T29] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 192.742268][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 192.745961][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.749419][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.753238][ T29] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.760882][ T29] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 192.762315][ T5972] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.764678][ T29] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 192.769198][ T29] usb 10-1: Product: syz [ 192.770601][ T29] usb 10-1: Manufacturer: syz [ 192.772048][ T29] usb 10-1: SerialNumber: syz [ 192.790154][ T29] input: appletouch as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/input/input30 [ 192.842232][ T5972] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.981775][T13907] kAFS: Can only specify source 'none' with -o dyn [ 193.122817][T13918] f2fs: Unknown parameter 'usrquotacks' [ 193.123643][T13921] overlayfs: failed to clone upperpath [ 193.164997][ T839] usb 10-1: USB disconnect, device number 8 [ 193.248355][ T839] appletouch 10-1:1.0: input: appletouch disconnected [ 193.294629][T13951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13951 comm=syz.6.2276 [ 193.302858][T13951] geneve2: entered promiscuous mode [ 193.304503][T13951] geneve2: entered allmulticast mode [ 193.428617][T13962] xfrm0 speed is unknown, defaulting to 1000 [ 193.584562][T13971] xfrm0 speed is unknown, defaulting to 1000 [ 193.687103][T13983] siw: device registration error -23 [ 193.705714][T13985] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 193.717838][T13985] __nla_validate_parse: 10 callbacks suppressed [ 193.717852][T13985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2287'. [ 193.760727][T13991] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2290'. [ 193.787942][T13991] CIFS: Unable to determine destination address [ 193.883844][ T839] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 193.954799][T14015] netlink: 'syz.0.2295': attribute type 10 has an invalid length. [ 193.960332][T14015] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 193.962929][T14015] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 193.966635][T14017] netlink: 'syz.0.2295': attribute type 10 has an invalid length. [ 193.996696][T14014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.044108][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.065090][ T839] usb 11-1: config index 0 descriptor too short (expected 53027, got 18) [ 194.067713][ T839] usb 11-1: config 109 has too many interfaces: 134, using maximum allowed: 32 [ 194.070477][ T839] usb 11-1: config 109 has an invalid descriptor of length 168, skipping remainder of the config [ 194.073984][ T839] usb 11-1: config 109 has 0 interfaces, different from the descriptor's value: 134 [ 194.078711][ T839] usb 11-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 194.081845][ T839] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.085481][ T839] usb 11-1: Product: syz [ 194.086861][ T839] usb 11-1: Manufacturer: syz [ 194.088367][ T839] usb 11-1: SerialNumber: syz [ 194.642223][ T29] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 194.812378][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 194.817457][ T29] usb 10-1: config 2 interface 0 has no altsetting 0 [ 194.821283][ T29] usb 10-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 194.824259][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.826796][ T29] usb 10-1: Product: syz [ 194.828164][ T29] usb 10-1: Manufacturer: syz [ 194.830109][ T29] usb 10-1: SerialNumber: syz [ 194.877948][T14056] Invalid source name [ 194.879316][T14056] UBIFS error (pid: 14056): cannot open "ubifs", error -22 [ 194.922232][ T5972] Bluetooth: hci4: command 0x0c1a tx timeout [ 195.040776][T14038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.044774][T14038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.053494][ T29] usb 10-1: USB disconnect, device number 9 [ 195.736925][T14072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2313'. [ 195.816659][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 196.068348][T14107] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 196.076548][T14107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14107 comm=syz.5.2321 [ 196.086054][ T5973] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.090965][ T5973] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.091689][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 196.094308][ T5973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.103335][ T5973] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.110165][ T5973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.165337][T14108] xfrm0 speed is unknown, defaulting to 1000 [ 196.299160][T14108] chnl_net:caif_netlink_parms(): no params data found [ 196.337080][T14131] bond3: entered promiscuous mode [ 196.339338][T14131] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.398735][T14135] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2329'. [ 196.443250][T14108] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.445770][T14108] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.447956][T14108] bridge_slave_0: entered allmulticast mode [ 196.450573][T14108] bridge_slave_0: entered promiscuous mode [ 196.453708][T14108] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.456532][T14108] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.458757][T14108] bridge_slave_1: entered allmulticast mode [ 196.461345][T14108] bridge_slave_1: entered promiscuous mode [ 196.505249][T14108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.541514][T14108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.545719][T14144] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 196.571655][ T839] usb 11-1: USB disconnect, device number 3 [ 196.632397][T14108] team0: Port device team_slave_0 added [ 196.635761][T14108] team0: Port device team_slave_1 added [ 196.653163][T14150] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20003 [ 196.680774][T14108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.683220][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.691240][T14108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.708642][T14108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.711562][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.722971][T14108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.767405][T14108] hsr_slave_0: entered promiscuous mode [ 196.770112][T14108] hsr_slave_1: entered promiscuous mode [ 196.772851][T14108] debugfs: 'hsr0' already exists in 'hsr' [ 196.775101][T14108] Cannot create hsr debugfs directory [ 196.867392][T14154] netlink: 'syz.5.2335': attribute type 4 has an invalid length. [ 196.877059][T14154] netlink: 'syz.5.2335': attribute type 4 has an invalid length. [ 196.967182][T14170] xfrm1: entered allmulticast mode [ 197.012218][ T5973] Bluetooth: hci4: command 0x0c1a tx timeout [ 197.222592][ T81] dvmrp0 (unregistering): left allmulticast mode [ 197.407385][ T40] kauditd_printk_skb: 314 callbacks suppressed [ 197.407402][ T40] audit: type=1400 audit(1758702127.042:5340): avc: denied { create } for pid=14193 comm="syz.2.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.459596][ T40] audit: type=1400 audit(1758702127.092:5341): avc: denied { setopt } for pid=14193 comm="syz.2.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 197.463151][T14196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'. [ 197.541485][ T81] bond5 (unregistering): (slave bridge4): Releasing active interface [ 197.798203][ T81] bond0 (unregistering): left allmulticast mode [ 197.800476][ T81] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 197.812897][ T81] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 197.852927][ T81] bond0 (unregistering): Released all slaves [ 197.863788][ T81] bond1 (unregistering): Released all slaves [ 197.870299][ T81] bond2 (unregistering): Released all slaves [ 197.876668][ T81] bond3 (unregistering): Released all slaves [ 197.967905][ T81] bond4 (unregistering): Released all slaves [ 197.975278][ T81] bond5 (unregistering): Released all slaves [ 197.984242][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2340'. [ 197.988127][T14175] netlink: 'syz.5.2340': attribute type 20 has an invalid length. [ 198.038663][ T40] audit: type=1400 audit(1758702127.672:5342): avc: denied { search } for pid=5680 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.045720][ T40] audit: type=1400 audit(1758702127.672:5343): avc: denied { search } for pid=5680 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.055757][ T40] audit: type=1400 audit(1758702127.672:5344): avc: denied { search } for pid=5680 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.064932][ T40] audit: type=1400 audit(1758702127.672:5345): avc: denied { read } for pid=5680 comm="dhcpcd" name="n153" dev="tmpfs" ino=7753 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.073764][ T40] audit: type=1400 audit(1758702127.672:5346): avc: denied { open } for pid=5680 comm="dhcpcd" path="/run/udev/data/n153" dev="tmpfs" ino=7753 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.085646][ T40] audit: type=1400 audit(1758702127.672:5347): avc: denied { getattr } for pid=5680 comm="dhcpcd" path="/run/udev/data/n153" dev="tmpfs" ino=7753 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.093094][ T40] audit: type=1400 audit(1758702127.692:5348): avc: denied { create } for pid=14197 comm="syz.6.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.099242][ T40] audit: type=1400 audit(1758702127.692:5349): avc: denied { ioctl } for pid=14197 comm="syz.6.2347" path="socket:[63722]" dev="sockfs" ino=63722 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.176875][T14217] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 198.179161][T14217] overlayfs: failed to set xattr on upper [ 198.180835][T14217] overlayfs: ...falling back to redirect_dir=nofollow. [ 198.183710][T14213] IPVS: Unknown mcast interface: syzkaller1 [ 198.184353][T14217] overlayfs: ...falling back to metacopy=off. [ 198.188178][T14217] overlayfs: ...falling back to index=off. [ 198.190156][T14217] overlayfs: ...falling back to uuid=null. [ 198.212284][ T5973] Bluetooth: hci3: command tx timeout [ 198.232042][T14220] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2351'. [ 198.642608][ T81] batadv_slave_0: left promiscuous mode [ 198.644992][ T81] batadv_slave_1: left promiscuous mode [ 198.654698][ T81] hsr_slave_0: left promiscuous mode [ 198.657988][ T81] hsr_slave_1: left promiscuous mode [ 199.372811][T14288] Mount JFS Failure: -22 [ 199.934676][T14108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.942435][T14279] erspan1: entered promiscuous mode [ 199.962839][T14108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.974260][T14108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.981596][T14108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.002715][T14292] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2369'. [ 200.075041][T14301] ISOFS: Unable to identify CD-ROM format. [ 200.084587][T14108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.100901][T14302] ISOFS: Unable to identify CD-ROM format. [ 200.105482][T14108] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.126613][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.129354][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.143341][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.146290][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.214428][T14108] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.218738][T14108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.284781][ T5973] Bluetooth: hci3: command tx timeout [ 200.337176][T14332] ocfs2: Unknown parameter 'grpquotaK3r' [ 200.456670][ T81] IPVS: stop unused estimator thread 0... [ 200.458631][T14108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.503046][T14108] veth0_vlan: entered promiscuous mode [ 200.512967][T14108] veth1_vlan: entered promiscuous mode [ 200.536666][T14108] veth0_macvtap: entered promiscuous mode [ 200.543594][T14108] veth1_macvtap: entered promiscuous mode [ 200.561247][T14108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.569603][T14108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.577839][ T95] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.581467][ T95] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.587910][ T95] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.591361][ T95] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.653866][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.658203][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.687564][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.690530][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.811658][T14366] 9pnet_fd: Insufficient options for proto=fd [ 201.252134][T14346] orangefs_mount: mount request failed with -4 [ 201.646839][T14368] overlayfs: statfs failed on './file0' [ 201.823655][T14407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.837982][T14412] erspan0: entered promiscuous mode [ 201.942552][ T6085] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 202.026930][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2403'. [ 202.103775][ T6085] usb 11-1: not running at top speed; connect to a high speed hub [ 202.107263][ T6085] usb 11-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 202.109964][ T6085] usb 11-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 202.122190][ T6085] usb 11-1: config 1 has no interface number 1 [ 202.124126][ T6085] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 202.128293][ T6085] usb 11-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 202.134897][ T6085] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.137697][ T6085] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.140180][ T6085] usb 11-1: Product: syz [ 202.141550][ T6085] usb 11-1: Manufacturer: 倂봴닶毴젡ᴒ␻猻꽂⊱媎깢뻢봫鶹뛚㡦귁耆璘Ⴔ穃轊䫰•금摢ඟ謭흇呛埣녛껎̣砾㣉犇⠕铂勉걤ꜣ戡䙋㒺영脘ꡣ겥猾肞 [ 202.147630][ T6085] usb 11-1: SerialNumber: syz [ 202.285684][T14451] program syz.0.2410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.290961][T14451] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 202.296422][T14451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2410'. [ 202.348773][T14458] comedi comedi3: multiq3: I/O port conflict (0x4f24,16) [ 202.361241][ T6085] usb 11-1: 2:1 : no UAC_FORMAT_TYPE desc [ 202.362849][ T5973] Bluetooth: hci3: command tx timeout [ 202.371461][ T6085] usb 11-1: USB disconnect, device number 4 [ 202.386420][T12249] udevd[12249]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.388920][T14461] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2413'. [ 202.441613][ T40] kauditd_printk_skb: 292 callbacks suppressed [ 202.441630][ T40] audit: type=1400 audit(1758702132.072:5642): avc: denied { read } for pid=14464 comm="syz.0.2415" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.451437][ T40] audit: type=1400 audit(1758702132.072:5643): avc: denied { open } for pid=14464 comm="syz.0.2415" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.461392][ T40] audit: type=1400 audit(1758702132.082:5644): avc: denied { ioctl } for pid=14464 comm="syz.0.2415" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.475738][ T40] audit: type=1400 audit(1758702132.092:5645): avc: denied { mounton } for pid=14464 comm="syz.0.2415" path="/13/file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 202.555779][ T40] audit: type=1400 audit(1758702132.192:5646): avc: denied { unmount } for pid=14108 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 202.583615][ T40] audit: type=1400 audit(1758702132.222:5647): avc: denied { read } for pid=14467 comm="syz.0.2416" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 202.585449][T14468] input: syz1 as /devices/virtual/input/input32 [ 202.590736][ T40] audit: type=1400 audit(1758702132.222:5648): avc: denied { ioctl } for pid=14467 comm="syz.0.2416" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 202.593825][T14468] input: failed to attach handler leds to device input32, error: -6 [ 202.677094][ T40] audit: type=1400 audit(1758702132.312:5649): avc: denied { module_request } for pid=14467 comm="syz.0.2416" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 202.696278][ T40] audit: type=1400 audit(1758702132.332:5650): avc: denied { sys_module } for pid=14467 comm="syz.0.2416" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 202.804984][ T40] audit: type=1400 audit(1758702132.442:5651): avc: denied { read write } for pid=14108 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.847297][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 203.152964][T14496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.177656][T14499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.181587][T14499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.207673][T14503] netlink: 'syz.2.2428': attribute type 13 has an invalid length. [ 203.230332][T14503] gretap0: refused to change device tx_queue_len [ 203.234797][T14503] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 203.548529][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'. [ 203.745298][T14536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=14536 comm=syz.2.2441 [ 203.781294][T14536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.824735][T14548] netlink: 'syz.0.2445': attribute type 10 has an invalid length. [ 203.837134][T14548] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 204.117395][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 204.121572][T14578] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 204.191537][T14593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 204.192514][ T61] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 204.216944][T14596] tmpfs: Unknown parameter 'usrquotablock_hardlimit' [ 204.358941][T14600] tipc: Enabling of bearer rejected, failed to enable media [ 204.363238][T14596] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 204.379112][ T61] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 204.382859][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.386512][ T61] usb 5-1: Product: syz [ 204.388293][ T61] usb 5-1: Manufacturer: syz [ 204.390153][ T61] usb 5-1: SerialNumber: syz [ 204.444926][T14623] netlink: 'syz.2.2459': attribute type 2 has an invalid length. [ 204.448056][T14623] netlink: 'syz.2.2459': attribute type 1 has an invalid length. [ 204.451315][T14623] netlink: 'syz.2.2459': attribute type 1 has an invalid length. [ 204.454669][ T5973] Bluetooth: hci3: command tx timeout [ 204.687666][T14651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.918238][T14671] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 204.920998][T14671] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.924930][T14671] vhci_hcd vhci_hcd.0: Device attached [ 204.941243][T14672] vhci_hcd: unknown pdu 2 [ 204.948896][ T13] vhci_hcd: stop threads [ 204.950754][ T13] vhci_hcd: release socket [ 204.952970][ T13] vhci_hcd: disconnect device [ 205.096309][T14681] dvmrp0: entered allmulticast mode [ 205.098926][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 205.222287][T14692] fuse: Bad value for 'user_id' [ 205.223887][T14692] fuse: Bad value for 'user_id' [ 205.253997][ T5973] Bluetooth: hci4: adv larger than maximum supported [ 205.254035][ T5973] Bluetooth: hci4: Malformed LE Event: 0x0d [ 205.577025][T14705] tmpfs: Bad value for 'mpol' [ 205.644630][T14715] fuse: Bad value for 'group_id' [ 205.646272][T14715] fuse: Bad value for 'group_id' [ 205.680847][ T61] rtl8150 5-1:1.0: couldn't reset the device [ 205.683279][ T61] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 205.932197][ T6018] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 206.105996][ T6018] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 206.108863][ T6018] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 206.112003][ T6018] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 206.115141][ T6018] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 206.118584][ T6018] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 206.123481][ T6018] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 206.126459][ T6018] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 206.128908][ T6018] usb 10-1: Product: syz [ 206.130225][ T6018] usb 10-1: Manufacturer: syz [ 206.138749][ T6018] cdc_wdm 10-1:1.0: skipping garbage [ 206.140395][ T6018] cdc_wdm 10-1:1.0: skipping garbage [ 206.143698][ T6018] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 206.145505][ T6018] cdc_wdm 10-1:1.0: Unknown control protocol [ 206.231021][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2495'. [ 206.238541][T14739] IPv6: addrconf: prefix option has invalid lifetime [ 206.280319][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2496'. [ 206.284321][T14742] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 206.287246][T14742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.291100][T14742] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2496'. [ 206.296602][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2496'. [ 206.349348][ T839] usb 10-1: USB disconnect, device number 10 [ 206.494701][T14761] dvmrp0: left allmulticast mode [ 206.530650][T14765] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 206.538180][T14767] xt_socket: unknown flags 0x20 [ 206.568079][T14769] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2504'. [ 206.959106][ T839] usb 5-1: USB disconnect, device number 12 [ 207.047125][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2518'. [ 207.050360][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2518'. [ 207.056375][T14815] binder_alloc: 14802: binder_alloc_buf, no vma [ 207.066082][T14814] usb usb8: usbfs: process 14814 (syz.6.2519) did not claim interface 0 before use [ 207.124537][T14820] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 207.489018][T14834] 9pnet_fd: p9_fd_create_tcp (14834): problem connecting socket to 127.0.0.1 [ 207.528348][ T40] kauditd_printk_skb: 235 callbacks suppressed [ 207.528365][ T40] audit: type=1400 audit(1758702137.162:5887): avc: denied { ioctl } for pid=14838 comm="syz.5.2527" path="socket:[63486]" dev="sockfs" ino=63486 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.649045][ T40] audit: type=1400 audit(1758702137.282:5888): avc: denied { ioctl } for pid=14843 comm="syz.5.2528" path="socket:[64891]" dev="sockfs" ino=64891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.688264][ T40] audit: type=1400 audit(1758702137.322:5889): avc: denied { execute } for pid=14845 comm="syz.5.2529" path="/237/cpu.stat" dev="tmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.696250][ T40] audit: type=1400 audit(1758702137.332:5890): avc: denied { create } for pid=14845 comm="syz.5.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.702456][ T40] audit: type=1400 audit(1758702137.332:5891): avc: denied { ioctl } for pid=14845 comm="syz.5.2529" path="socket:[66051]" dev="sockfs" ino=66051 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.711919][ T40] audit: type=1400 audit(1758702137.332:5892): avc: denied { module_request } for pid=14845 comm="syz.5.2529" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 207.729542][ T40] audit: type=1400 audit(1758702137.352:5893): avc: denied { sys_module } for pid=14845 comm="syz.5.2529" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 207.762374][ T40] audit: type=1400 audit(1758702137.402:5894): avc: denied { read write } for pid=11300 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.770008][ T40] audit: type=1400 audit(1758702137.402:5895): avc: denied { open } for pid=11300 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.778355][ T40] audit: type=1400 audit(1758702137.402:5896): avc: denied { ioctl } for pid=11300 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.854166][T14858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2533'. [ 207.978409][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2538'. [ 208.071899][T14874] hsr_slave_1 (unregistering): left promiscuous mode [ 208.229445][T14892] fuse: Unknown parameter 'fd' [ 208.564597][T14920] net_ratelimit: 4 callbacks suppressed [ 208.564607][T14920] openvswitch: netlink: Flow key attr not present in new flow. [ 208.594127][T14925] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 208.620904][T14929] netlink: ct family unspecified [ 208.623234][T14929] openvswitch: netlink: Actions may not be safe on all matching packets [ 209.099427][T14940] SELinux: policydb version 926561016 does not match my version range 15-35 [ 209.102869][T14940] SELinux: failed to load policy [ 209.585658][T14956] CUSE: unknown device info "" [ 209.587361][T14956] CUSE: zero length info key specified [ 209.729745][T14962] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 209.732494][T14962] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 1th superblock [ 209.735764][T14962] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 209.738481][T14962] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 2th superblock [ 209.828815][T14965] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 209.834839][T14965] xfrm0 speed is unknown, defaulting to 1000 [ 209.837433][T14965] xfrm0 speed is unknown, defaulting to 1000 [ 209.840503][T14965] xfrm0 speed is unknown, defaulting to 1000 [ 209.847910][T14965] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 209.862824][T14965] xfrm0 speed is unknown, defaulting to 1000 [ 209.865343][T14965] xfrm0 speed is unknown, defaulting to 1000 [ 209.867819][T14965] xfrm0 speed is unknown, defaulting to 1000 [ 209.870242][T14965] xfrm0 speed is unknown, defaulting to 1000 [ 209.873002][T14965] xfrm0 speed is unknown, defaulting to 1000 [ 209.882220][ T5973] Bluetooth: hci3: command tx timeout [ 210.358528][T14985] __nla_validate_parse: 5 callbacks suppressed [ 210.358538][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2575'. [ 210.363880][T14985] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 210.422319][ T13] ------------[ cut here ]------------ [ 210.424446][ T13] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 210.427421][ T13] WARNING: CPU: 2 PID: 13 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 210.430627][ T13] Modules linked in: [ 210.432353][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 210.436651][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.440200][ T13] Workqueue: bond0 bond_mii_monitor [ 210.442680][ T13] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 210.445008][ T13] Code: 05 ff ff ff e8 34 48 43 f8 c6 05 81 84 1b 07 01 90 ba 48 00 00 00 48 c7 c6 20 09 e6 8c 48 c7 c7 c0 08 e6 8c e8 84 ec 01 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 a8 ab 90 e8 de af a9 f8 e9 [ 210.451228][ T13] RSP: 0018:ffffc900001079f0 EFLAGS: 00010286 [ 210.453152][ T13] RAX: 0000000000000000 RBX: ffff888031a70000 RCX: ffffffff817a4388 [ 210.455554][ T13] RDX: ffff88801daf8000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 210.458000][ T13] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 210.460439][ T13] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000020f48 [ 210.462969][ T13] R13: ffff888031a70cc1 R14: ffffffff8c5996c0 R15: ffffffff89b17f70 [ 210.465451][ T13] FS: 0000000000000000(0000) GS:ffff8880d68b2000(0000) knlGS:0000000000000000 [ 210.468437][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.470490][ T13] CR2: 00007ff1c7fbfd58 CR3: 0000000024346000 CR4: 0000000000352ef0 [ 210.473013][ T13] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 0000000000000080 [ 210.475356][ T13] DR3: 000000000f000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 210.477789][ T13] Call Trace: [ 210.478868][ T13] [ 210.479772][ T13] ethtool_op_get_link+0x1d/0x70 [ 210.481271][ T13] bond_check_dev_link+0x3f9/0x710 [ 210.482889][ T13] ? __pfx_bond_check_dev_link+0x10/0x10 [ 210.484603][ T13] bond_mii_monitor+0x3c0/0x2dc0 [ 210.486139][ T13] ? __pfx_bond_mii_monitor+0x10/0x10 [ 210.487753][ T13] ? rcu_is_watching+0x12/0xc0 [ 210.489267][ T13] process_one_work+0x9cc/0x1b70 [ 210.490793][ T13] ? __pfx_bond_mii_monitor+0x10/0x10 [ 210.492453][ T13] ? __pfx_process_one_work+0x10/0x10 [ 210.494040][ T13] ? assign_work+0x1a0/0x250 [ 210.495484][ T13] worker_thread+0x6c8/0xf10 [ 210.496952][ T13] ? __pfx_worker_thread+0x10/0x10 [ 210.498978][ T13] kthread+0x3c2/0x780 [ 210.500658][ T13] ? __pfx_kthread+0x10/0x10 [ 210.502642][ T13] ? rcu_is_watching+0x12/0xc0 [ 210.504583][ T13] ? __pfx_kthread+0x10/0x10 [ 210.506500][ T13] ret_from_fork+0x56a/0x730 [ 210.508384][ T13] ? __pfx_kthread+0x10/0x10 [ 210.510301][ T13] ret_from_fork_asm+0x1a/0x30 [ 210.512391][ T13] [ 210.513697][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.516651][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 210.520396][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.524656][ T13] Workqueue: bond0 bond_mii_monitor [ 210.526800][ T13] Call Trace: [ 210.528169][ T13] [ 210.529385][ T13] dump_stack_lvl+0x3d/0x1f0 [ 210.531323][ T13] vpanic+0x6e8/0x7a0 [ 210.532997][ T13] ? __pfx_vpanic+0x10/0x10 [ 210.534909][ T13] ? __linkwatch_sync_dev+0x1ed/0x230 [ 210.537136][ T13] panic+0xca/0xd0 [ 210.538719][ T13] ? __pfx_panic+0x10/0x10 [ 210.540496][ T13] ? check_panic_on_warn+0x1f/0xb0 [ 210.542044][ T13] check_panic_on_warn+0xab/0xb0 [ 210.543567][ T13] __warn+0xf6/0x3c0 [ 210.544762][ T13] ? __pfx_vprintk_emit+0x10/0x10 [ 210.546419][ T13] ? __linkwatch_sync_dev+0x1ed/0x230 [ 210.548184][ T13] report_bug+0x3c3/0x580 [ 210.549485][ T13] ? __linkwatch_sync_dev+0x1ed/0x230 [ 210.551137][ T13] handle_bug+0x184/0x210 [ 210.552496][ T13] exc_invalid_op+0x17/0x50 [ 210.553889][ T13] asm_exc_invalid_op+0x1a/0x20 [ 210.555381][ T13] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 210.557247][ T13] Code: 05 ff ff ff e8 34 48 43 f8 c6 05 81 84 1b 07 01 90 ba 48 00 00 00 48 c7 c6 20 09 e6 8c 48 c7 c7 c0 08 e6 8c e8 84 ec 01 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 a8 ab 90 e8 de af a9 f8 e9 [ 210.562921][ T13] RSP: 0018:ffffc900001079f0 EFLAGS: 00010286 [ 210.564784][ T13] RAX: 0000000000000000 RBX: ffff888031a70000 RCX: ffffffff817a4388 [ 210.567192][ T13] RDX: ffff88801daf8000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 210.569544][ T13] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 210.572078][ T13] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000020f48 [ 210.574427][ T13] R13: ffff888031a70cc1 R14: ffffffff8c5996c0 R15: ffffffff89b17f70 [ 210.577032][ T13] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 210.579154][ T13] ? __warn_printk+0x198/0x350 [ 210.580636][ T13] ? __warn_printk+0x1a5/0x350 [ 210.582075][ T13] ethtool_op_get_link+0x1d/0x70 [ 210.583574][ T13] bond_check_dev_link+0x3f9/0x710 [ 210.585124][ T13] ? __pfx_bond_check_dev_link+0x10/0x10 [ 210.587057][ T13] bond_mii_monitor+0x3c0/0x2dc0 [ 210.588534][ T13] ? __pfx_bond_mii_monitor+0x10/0x10 [ 210.590158][ T13] ? rcu_is_watching+0x12/0xc0 [ 210.591668][ T13] process_one_work+0x9cc/0x1b70 [ 210.593179][ T13] ? __pfx_bond_mii_monitor+0x10/0x10 [ 210.594825][ T13] ? __pfx_process_one_work+0x10/0x10 [ 210.596617][ T13] ? assign_work+0x1a0/0x250 [ 210.598523][ T13] worker_thread+0x6c8/0xf10 [ 210.599982][ T13] ? __pfx_worker_thread+0x10/0x10 [ 210.601619][ T13] kthread+0x3c2/0x780 [ 210.602886][ T13] ? __pfx_kthread+0x10/0x10 [ 210.604292][ T13] ? rcu_is_watching+0x12/0xc0 [ 210.605788][ T13] ? __pfx_kthread+0x10/0x10 [ 210.607279][ T13] ret_from_fork+0x56a/0x730 [ 210.608710][ T13] ? __pfx_kthread+0x10/0x10 [ 210.610192][ T13] ret_from_fork_asm+0x1a/0x30 [ 210.611841][ T13] [ 210.613398][ T13] Kernel Offset: disabled [ 210.614785][ T13] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:22:19 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff95dda960 RBX=ffff88801dafd370 RCX=0000000060457123 RDX=0000000000000000 RSI=ffff88801dafd398 RDI=ffff88801dafd398 RBP=0000000000000000 RSP=ffffc90000127970 R8 =0000000000080000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffff88801dafd398 R13=ffff88801dafc880 R14=0000000000000001 R15=0000000000000002 RIP=ffffffff8197b9ae RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff29fc4be8 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000080 DR3=000000000f000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000305f6576616c 735f656764697262 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6f9f5466 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6f9f5466 00007ffd6f9f546c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f702d412fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f702d412fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f702d412fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f702d412fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f702d41305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f702d41313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002c03000000 4002000800000000 307a797300010009 00000002d5ff1a5e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100110000001400 000000327a797300 0300090000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000200000000ff e6000003010a0300 00002c0300000040 0200080000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006d80000 RBX=0000000000000000 RCX=ffff8881063a9070 RDX=000000000000009d RSI=ffffffff86b46a98 RDI=ffff8881063a92d0 RBP=0000000000000001 RSP=ffffc900006a0b60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000005cbf R12=0000000000000001 R13=0000000000004e20 R14=ffff8881063a9070 R15=0000000000000001 RIP=ffffffff86b46ad5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000023c0 CR3=000000005e3d8000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000080 DR3=000000000f000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000305f6576616c 735f656764697262 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6f9f5466 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6f9f5466 00007ffd6f9f546c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f702d412fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f702d412fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f702d412fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f702d412fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f702d41305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f702d41313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002c03000000 4002000800000000 307a797300010009 00000002d5ff1a5e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100110000001400 000000327a797300 0300090000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000200000000ff e6000003010a0300 00002c0300000040 0200080000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c215 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc90000107360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b1180e0 R15=ffffffff8564c1b0 RIP=ffffffff8564c23f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff1c7fbfd58 CR3=0000000024346000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000080 DR3=000000000f000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefe420480 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefe420606 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefe420606 00007ffefe42060c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a07c12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a07c12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a07c12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a07c12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a07c1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a07c1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000019ded1 RBX=0000000000000003 RCX=ffffffff8b94db49 RDX=0000000000000000 RSI=ffffffff8de52d59 RDI=ffffffff8c163400 RBP=ffffed1003c55000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2a8000 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b94c68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff1c7174b40 CR3=0000000025b2f000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000008 DR3=000000000f000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557684ea40 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555768332e6 0000555576833210 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555768492ed 0000555576848390 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 208080808a100002 1000080171ec0008 000a10004c100006 0070ce000200073c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff040100000208 06060108a0000200 070008001b800308 0002050004000800 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8fa403000200018f a20301a20200018f a00304ddfeeffa08 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 018fb80300000006 0806018fb0030604 00018fac03100400 018fa80300040001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0400018fcc0314 0400018fc8030202 00018fc003029404 00018fbc030a0400 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000fffffff ffffff040fffffff ffffff0401000002 0806080116408080 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c010000f80040100 0008080606015eae 0002000706808408 000fe0030010000f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0030010000fc003 0210000fb0036010 000c900302020001 8fda03000200018f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d803000200018fd6 03220200018fd403 040200018fd20310 0200018fd0030c04 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000