last executing test programs: 38.800576132s ago: executing program 3 (id=30): syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async, rerun: 64) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b000001090224"], 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 37.602909544s ago: executing program 3 (id=51): r0 = dup(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="00000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00158018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 37.541568927s ago: executing program 3 (id=53): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) fcntl$setflags(r0, 0x2, 0x1) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x2000000, 0x0, 0x58595556}}) r1 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000000)) 37.541177167s ago: executing program 3 (id=54): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r1, 0x0, 0x0) read(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2001) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x8, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0x8}, @union={0xe, 0x6, 0x0, 0x5, 0x0, 0x7, [{0x4, 0x2, 0x8001}, {0x3, 0x3, 0xff}, {0x3, 0x5}, {0x4, 0x5, 0x6}, {0xc, 0x1, 0x1}, {0x10, 0x2, 0x5}]}, @func={0x582, 0x0, 0x0, 0xc, 0x5}, @restrict={0x6, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x2e, 0x2e, 0x61, 0x5f, 0xfc]}}, &(0x7f0000000500)=""/72, 0x9c, 0x48, 0x0, 0x0, 0x10000, @value=r0}, 0x28) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_ts_info}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0xfffe, 0x0, @mcast2}}}}}}, 0x0) 37.400441954s ago: executing program 3 (id=56): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) listxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=""/4092, 0xffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r0}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r2, 0x20, &(0x7f00000004c0)={&(0x7f00000002c0)=""/24, 0x18, 0x0, &(0x7f0000000380)=""/172, 0xac}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x10c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x1, 0x0, 0xffffffff}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0xa8, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6c}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x10c}}, 0x8040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000180)='\x88\x9a.\xaa\x8c\b\x99\xe5 \x19\xa6\x1c}g\xf5)P\x86\f\xba\xff\x8fS0\xd0/\xa2\x16\xc1?5\x9f&!\xfe?\xbe\x03\\\x94s\xf5\x1f\xaa\xd9\xfd2\xbc5y\x18#Qu\x85\xee-\xc0\xac\xa8\x93\x0eXds\xf3\xf6\x84\xca\"\xb8\x06\x8bM\xd4\xc5\x8c\xe1\x86\'@\x9f\x8f\xce\x85\xdf\xbb\xa2\x04Z\xbc:;\x00B\x85U\xf6\x9d\x9e_\x9f_\x9dD\t\xa6\xf6\xa9\xb2e\x92\xd0g\xb3\x01\xb77\x8eC}\x1d\x92\xa0\x85)\x0f\x1d\x7f\xd6\xd7\x0f\x8d\xea']}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) (async) listxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=""/4092, 0xffc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r0}, 0x18) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/timers\x00', 0x0, 0x0) (async) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r2, 0x20, &(0x7f00000004c0)={&(0x7f00000002c0)=""/24, 0x18, 0x0, &(0x7f0000000380)=""/172, 0xac}}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x10c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x1, 0x0, 0xffffffff}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0xa8, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6c}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x10c}}, 0x8040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) (async) execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000180)='\x88\x9a.\xaa\x8c\b\x99\xe5 \x19\xa6\x1c}g\xf5)P\x86\f\xba\xff\x8fS0\xd0/\xa2\x16\xc1?5\x9f&!\xfe?\xbe\x03\\\x94s\xf5\x1f\xaa\xd9\xfd2\xbc5y\x18#Qu\x85\xee-\xc0\xac\xa8\x93\x0eXds\xf3\xf6\x84\xca\"\xb8\x06\x8bM\xd4\xc5\x8c\xe1\x86\'@\x9f\x8f\xce\x85\xdf\xbb\xa2\x04Z\xbc:;\x00B\x85U\xf6\x9d\x9e_\x9f_\x9dD\t\xa6\xf6\xa9\xb2e\x92\xd0g\xb3\x01\xb77\x8eC}\x1d\x92\xa0\x85)\x0f\x1d\x7f\xd6\xd7\x0f\x8d\xea']}) (async) 36.638272651s ago: executing program 3 (id=72): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000000)={0x7, 0x400000000000305, 0x0, 0x0, &(0x7f0000000480)}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r3, 0x5851, 0x0, 0x2) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) ioctl$TCSETS(r4, 0x804c4700, &(0x7f0000000040)={0x1, 0x10000000, 0x5, 0x0, 0x0, "3eccd8f9d2000000040000100000fe060005e5"}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000800), 0x1281c15, &(0x7f0000000480)=ANY=[@ANYBLOB="06643d325772126e5b827f41553ac3e237a9d5415aae2a80311ed8134d481bfc417c0c23fd38ca6963c9efa2173540f19ba946d88d09d5c11b04e58fb74255cb79165368a48371c7361457129f67ba0c0df6b64376bef513eda37d8a0ce42297aa58fc09158003ceb7b045b6248a978256b5d9dedf6a40e60cbe366f5b638ef5c8a5bde3056c6fadd8b1eab02c0621a68da972bc80ed955efb51bd4536e54d5b6aea1e6ec52063bddfb3cc1f65fe4e7f", @ANYRESHEX=r5, @ANYRESDEC=r3, @ANYBLOB="ab34b19bd9a6f17a735fe608ef331e5dfbe3c907e4362c62021db94f807f39fc2d9ad8a10d3b0c1bd1e5a226cf24beb5f6e483e4f73c56dd991838a2caf8cb8851334d0eefce91b1a3756d02f215c05f28116c347c95cd32a2f7e1931a61ecefc55a43000000000000000000", @ANYRESDEC=r0, @ANYRESHEX]) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r7}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r10 = fanotify_init(0xf00, 0x0) fanotify_mark(r10, 0x1, 0x5000003a, r9, 0x0) 36.551344869s ago: executing program 32 (id=72): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000000)={0x7, 0x400000000000305, 0x0, 0x0, &(0x7f0000000480)}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r3, 0x5851, 0x0, 0x2) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) ioctl$TCSETS(r4, 0x804c4700, &(0x7f0000000040)={0x1, 0x10000000, 0x5, 0x0, 0x0, "3eccd8f9d2000000040000100000fe060005e5"}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000800), 0x1281c15, &(0x7f0000000480)=ANY=[@ANYBLOB="06643d325772126e5b827f41553ac3e237a9d5415aae2a80311ed8134d481bfc417c0c23fd38ca6963c9efa2173540f19ba946d88d09d5c11b04e58fb74255cb79165368a48371c7361457129f67ba0c0df6b64376bef513eda37d8a0ce42297aa58fc09158003ceb7b045b6248a978256b5d9dedf6a40e60cbe366f5b638ef5c8a5bde3056c6fadd8b1eab02c0621a68da972bc80ed955efb51bd4536e54d5b6aea1e6ec52063bddfb3cc1f65fe4e7f", @ANYRESHEX=r5, @ANYRESDEC=r3, @ANYBLOB="ab34b19bd9a6f17a735fe608ef331e5dfbe3c907e4362c62021db94f807f39fc2d9ad8a10d3b0c1bd1e5a226cf24beb5f6e483e4f73c56dd991838a2caf8cb8851334d0eefce91b1a3756d02f215c05f28116c347c95cd32a2f7e1931a61ecefc55a43000000000000000000", @ANYRESDEC=r0, @ANYRESHEX]) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r7}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r10 = fanotify_init(0xf00, 0x0) fanotify_mark(r10, 0x1, 0x5000003a, r9, 0x0) 3.400756784s ago: executing program 1 (id=714): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d000000fffffff600000000000000"]) (async) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) userfaultfd(0x801) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x3) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r1, &(0x7f00000005c0)=@objname={'system_u:object_r:dhcp_state_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0xb08a, 0x20, './file0\x00'}, 0x4e) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="5287c79d", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000070000000000000001000000"], &(0x7f00000009c0)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000a00), 0x41000, 0x22, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a40)=[r1, r1], &(0x7f0000000a80)=[{0x3, 0x1, 0xd, 0x2}, {0x1, 0x3, 0x6, 0x4}, {0x2, 0x4, 0x2, 0xc}, {0x1, 0x4, 0x6, 0x7}, {0x0, 0x1, 0x8, 0x1}, {0x4, 0x5, 0x2, 0xb}], 0x10, 0x1}, 0x94) r2 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/85, 0x55}, {&(0x7f00000002c0)=""/214, 0xd6}, {&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f00000003c0)=""/208, 0xd0}], 0x4, &(0x7f00000004c0)=""/190, 0xbe}, 0x60) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) syz_open_dev$evdev(&(0x7f0000000700), 0x7fff, 0x208c00) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex, 0x9, 0x0, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0}, 0x40) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r1, r3, 0x25, 0x6, @val=@netkit={@void, @value=r1, @void, @void, r4}}, 0x1c) 3.002439918s ago: executing program 1 (id=722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0xfffffffffffffe7a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f00000000c0)=0xfffffff3, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r2, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "1595bbe7f643aba5", "e0564679ab1d2f0c4c21a078d110f996", "b4294571", "64adab93b7441a68"}, 0x28) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f00000002c0)="efdf4450dc421c61388d91bce374542a4d57e3b7896b41447dabf8a76779164b7ce776062005fc7290901769bb9ce937dcff7f9b2ddd2085d84a4ee4e04f7bd9a984a21721684cfa2dbc210498fef15680a0963a91127c513fc98d1f7ef99385f850e48e50", 0x65}, {&(0x7f00000001c0)="33f37404caaf736c12", 0x9}, {&(0x7f0000000340)="eca32c73c832e3e24c92ceda6d07c4eac32e6c28f206d2e068fe2360b612fca5f586d2fc6da709b9baa7f058d5f73af437676978ef6f41b76096a7b37645f70074f9d84284a60f515db0926de8e3844fb3b5e4a6ad1bdc71ef84cec53a4c692e0aab8032872b33c973fe184c657fcaae7625982503c73425bff75d65bf54466b52cafa4ec6f07b48", 0x88}, {&(0x7f0000000400)="00ae676efdf4fa9203ec2cb3baeaa9bf0b61fbc15a78285bf449dfd3996248931f9e1e82faab8e3c4fa8fd2dd16efbfa5e66f6572a900799c8665ac9e31cd5e6b311132c265bf804dcedf514cc9087c3577ca2715e5cf9250db6077ff721be46e755a2c0489ee580e8dca3cfe157be9921fbe93f4e2ab30acc802b9c070694217f616eb989c9c55b6cd1fad3d39200152600ceaec2721239f3fbc2504463ae8de65027f95fc4ba4a2d6521ac7ab9738a2e972a0fcedeb5907bfe1775455832f2d4eeb20ef895631044b29692db4c", 0xce}, {&(0x7f0000000540)="0fbbe244add70544617bc4b430b98a9f0a6e73b46d799da144bbbc04d51c1360e88af7473acd50450bbe392d8bce2472fa7a3b3daefe709f4482d1d28e779eec2fbab4909e6ccba3fd833e33059ed2047d01e7b4bf25d3efac8efa3bb9d791368544227ea169310942a4dd7cd677b4399e6e45694c06c3ee31cec4b458117a3fefa9afc5afbd9fa40b572d161951ecb336c1f24ea0785a5d9a48c3626b76e9943e395949b4e02afe94d54a375a6e0a160871f05f5326269b5c989558a4f0cbfe7ee10ae766ea4b34b61fdeb3230ddabfaaa2e5d02bbe0d67af1dc6e84254050e86e6618b72410c8af7f2402b734df9837f7cb95f4a4bbec46f731b40f5cb9f04067b3bfb9bc2d6d8779678de6d1a94b9cbd3a6a6721900f74b335b2cb2541941b20614693b40760a484e7477acc674e858227e2fafa44640b44d7699c332819ab8f27ab0368740f54654d42e8220e487cfb40a6745821379bfd9f42db7d4640d50e72ff15f40585a1ae0586e39d224f7b650f298a3398f34d077ca9d7334dc738ee5d99834475489dead16c2a7271228a75da7a4c041c08bd0bf1217bfd85d4daff71c6b76fc6da43d6de226abff9587b3c03304d7f12fd2fcc1a6b83355cc700c609b8167edef8df5257bb12d8ba3dd11ab0765df6bc63929cbec6e3ae76457611c0141c950cbc46e2f15e8a7893b5bb0462fff71f22ae92dc6d398e90d6ff46dbecbe31355173fef0b7b22d4174b0072c00404c1f62fa8d24b6a0bdf834195877a9618b8ac0cfbba9b77bedb403b6a68ab65d923856ddb2bf5c82eea37f40c1367f15ce4401f45572a93ceccb507704dc7ea101346ccf38bd82f20e8cee5f343b2f8b73f4ac674f4838d25e742746e7cc49b9d6bfce29c15d7e42d8a4d320d81ae982c66f47f9bf30aa4556b97a6d7edc9228796a4e7990baf7fa539461442e35bee45118be4be0e0ff218b692ddda4f96acdc904aec1a3238a99cfe3c361bcbd53ed46e08fa7276da3d7d2fe78f6bdf52c9e8882adb205cbadad4c2a8ca9286c071b6227f0fd19156e105bf269a9b18546aa2ba23ae660d3291815f901d79940a90e3e09bf1bebe77fd2e07f32478665d1d1f0a3af073d784631f12a015cae27ca86bee0d2ae5c8b0fe8d18b942eb386c4ac1d7c613bc198083ba13e04fc251ca37d71a2f0f64ce6c203c7ce3ba7388ccc73ba8a2048eb8726a889a6bba0eeb88c286d2ea1f438904b79c3b7d88b1c6e9586bd13f4211a750b0407900832674902dd6dde1062bea8a4e90f3fe368b2f00de47d0ac3534e869a36788ed325fc9687a590fd7992deddfde02c51dcde3f6edc333c72405a397023caaec1aa02dc17f880b1ce8a407fa8ba6e36e2334ec6bbe6de20efe3dcbe94177b1b10c5b1d50b8eafe30dcb4bace727c82fbd5d071f02e6431f8e30ae090a46da1de1c744a9335bfe19e27c8ebd3ef593d80f418d03ac80f68d4106ded80652f3184d36431d802df850cf9c8e699523690aab67e2675e9e287d7b54654b1b41f39757d11a40839ae1312a28a81eb2f692b434f3b000980caa8ca45183c2ba1050a49ebd8273254afda90bfe1f39a33953f9fe56c2dcef08d847d0192f18ef40f961f7c120f2b5c021117dd3bfcad1f0f8b81b56aebd2da69515c4bbd3120b3b938c7e80a49f2215cc287f0f18c5e7c386f1d8f5d7f26b4788d9fdbca24061d00c7d1ab101096efa5027d8e98f927252823ec60881cf25d1df307fe85badedeb83030a130b59b04ead3d68d9930d58d96e34858e349e7734080a21776bf6a4d17b5c81017b3cdde7375bddca119ef83bc2434bbf7c4e13f11502b8a41fb237d8b5779b610e4a6789d7d71cf82e4c7bee25f18143f4383a2eb67b0e81a24a07327f938754805e7e6a00507e786d8aa93badf6010182af972db6937c00897b47db0c8bb61c8d00a9964aa43bc03d7b329d00cfd6d633f854f73ba158133b978fd53a8e0b5af4eaa775c7c91a8e75aa28d81275062684a7c751ed9d72a9a547c31da226cd077bcb509b284806bb08b9e41ef351c825c9315b95d04658c7fa9ffc905d2dbd89d4908e93a4a77be1f5428beb93b44595cd7faee5a7641bfa04049d765a1247087fdad1f34fad50d2970452c6fab2e672c60b6794bbb800bc1819978f51ed07ab7adb262cc4f583b45649f4850ddd396f30ea190113b9ac280391c2c2ea93ed4e9b943694a2e39d0913c86ca61fa7bada37ca2135aab7bae9a6b253f6f936b743290fc6ea01b4364a2e9961df623ce09e739334c1898e812c7177c183499fcd45aab5fb953799100acdc870dba31bdd4320298190139bab1aa843ce35a55e0629e3c4164d580b3dd67cc0cae8efe5e5fdc25378cff3331d8fc980fc2c6f6a4620770832b89307b61ac8684e65c1e71a8d0803c80b27cc999a8db2da34b3820f5aa8ee7c594eec4477f19dd9409a5b847056c39956db74c0ab0ae483754d9b856698733fcff72547cbb4d605863e7568f5c59d816719046923f4a23fe65379439b01e81123cd3ac719820fed1e813ae2ef9dd612aef6c2b22604c819f0f2188e4a78afd46938fc932bca85e444f1b0ac7f0db17605d512cbf8a701a3efa929bab633e808de7313915de6ff9bc22b8eb4fbd19033cef4233ba240c36aed3be33e5bdb417a6c2d5758a2bb69b393c6955f3983beb710a7f04d2fbcf5a136534e7ceb8d87b359773083c9672421e4373691fa622de2dcb8668ce01084033a7c774a664c30cd891061ab8b1a72bcaa12606bd8c01e35e94c0f084f9610334af18803a78db19a12af539cd715c04fdaf49a684342fdd5a7fa96ff800f817313ce95a6895afe39611ff5f3364533bca5fa53b20a1e5fd52d6d69deed1387e3a7bcfb7cd4b12628a9af2fcf61ddd8b123482baf0ccc6d8df17a15f2b1b98e903a4c3eb4b7702c69c75672b4a77880a3bdb547be5bba17858bcd44e6a72057fc4e6748b91c59dfb4b5b325f562fd09c8aea29f9c70c19b8cc49673dfb9678e8eedbf332a3fd6f7bd08c477e781ec355878ca65427f45f4429e15c97f6c348e3c9e37b3d3eaddca5359f434f960f819abb0de0e28a4a5aecd5e01321a3a8bcb1b2b2aee79bafa2907e480feb0ab79825375675d15be0971024707a18e1cf2dc060639dfb6169ebba36d825c09c61806fbe656cecb33d10f41bdae4a7e351ad405f5290ab45c07694b3da3387d7c50ca6a52f9b48368dcd3ce2c943d85ccb731502c1030743902410868251384a74561fdb59ec77884e88921507648ca5d24b81d64b5577647eb38b6dcddce9df45f92cf3a85c0bf1b7b1973453c172dbf9c0c05e1493aae46cef9e78cb10510ab8d35ee3ab3c03e8eb9db46cdca2c59fa052cf02c27e62a9e68e2cf49ff5d9d51b9549d10289212c805e9a6b3cb76adec4a06364a9158afbb1f1a5d7b8ab8f539e228c32e4ed422d19c43d0287cc03da0629c0944da98c46c9cbe7d3071a280012a178d46a9efea5b5b3de7fc17cca0f17ee47f8f58a5b8e0ff73ed2f9e60444986a66fdc9b891949c545dc5b6ddf8bc6cbb94d4f24d3aa48bb8468c8ee3213e5594cb83d2bcb051679fa36039430289df05404d6da342adfa99a5cde8e3fb8903f73eb729c8c094447383a54773d632ab788bcef3d927f064682abc0b4031fd01d749311ff1daac945c0e0b173dd4ead75c2a69dc02c4a0a09b47a933b3f4d62f348b200450b34bc96a41744f68ff2343370ed9b2630a4ffa4e274f5ed998e37d2c6503847c6f2f6fbf6d4495ff21f56d0598ed95eed4992e47fa0fd36702e167cedb3fb824fa459d2a4a62ac071502591ee672a7707f07cb15109835e72332aaa3b4abbe467198608197303b4415bf78fb9054c89d41fb1531836bc63ff5e9d36c75d39f4ab14fed5320202f91dcc88c7b344a7806f63e71428afd090573073d0676a1b5d5d885ff788e279fb087c9fa07477e32b9575ff3f81dec6f244eb922043c97c33efe22440abd164801c5cab6c457a15525292a80ffaa5ccb080f37b31a36f13be08d6401588304a1b22383aa41369cc1cb369a23280fe93f9e1499f67e025a052539516edd7d10ec0b10c04a45374c230c934470daf0c3c588b37379631267c62aeb59d88c632eb3ea7e6b2efe02b059fce0ede3fb2c3a217fde66ee9af8404aa0df8c4ac67b4ed14643fba2282defd2630867353ba21573fe12ced5b80191afab586aa57f82ec3bfa86c4857aa5762921f058268c753726151a3154c1cc93dde9cac15aaf9cbf22311eb98936d11ee829466341932bd9cbbee57bea19ae1937bb341003ae4411c90cdf7a31fe9bc44b421ba150e74c9541c8b0996b73dbb21c305e0c13d277de68393465a769fd32211fcd0e1983ddb7fc4c465e351dc1215ae7b9c67eddc46039c4c47cf247ef293e7685181d47e512e8c3f0781876c40858711c9e39c788492c4127f39f37cb70fe47d233eb14aa66f4e79414b788fc6115e4a0d7b8f48038369cba5fec04310641ee1a4fc102496e6ee5e78042773022a233a87549f1064377f569b5c31904d5430e418027916fae02c61c72302d48324086afd2d176aff27e72225605e392b4f4bafa53b8cccfe0c6d3de03f0ea7e29f39850601794d10b36470a8836edaf6281b282f80855bf70272513868865758a43e26fe38d8bf6d8e1e1c03f99d18c558ab7c30026134779f8ed3e8a1de6a9590bbcda7b23e71787da57872895fcc7a34f5d2c743d973d3e1e5d2307d21d3d9c7dd26ebb623aa30c49d815d2da6a67392751252a0808dacd66adcb028369e9a5fe16fb8491ab6e85c26f8deb805ff4f7c1afd1109657b3f86e7afa49f8dcce8faffd69173da92af268b9b24bd80f2a52863f0e20d763514b4046d36d7a23f56ce6ce521ba84407eb20926892c27813f2edd9cecc9d59db45e28c8f6033c67409fb7c60af5da5a25cba138667b7687a6c3ed3cb20adc13a757a31e69cb9174b58dee014d2df1cfa82cb443e0c02f29bd725d386335b44cff28a14aef8232f2df902613ecdbe84a491b66a21b5afb65548ee4b49a41f30a169d7f3af96f79b633c00e2216880a8ff82747eb1c404c25cd37afb140108981f3e9cf488dcea628fa48d191f8723da57606f3d17ac3ea43c25c6c335b04f8e146fca2f54ffec89839ff55c6229d94d19a4d94528fd011e2d34e719b84b6bdd41b04d7209f85e5b11102720bce5e20e361c32a3e0a2b3f50fefae7c0b829a1a60263fae18e8699a30843940058dfd9bc38b0f05c3c5b5694c34e26be770638d57efae110a800887806c640977089326a20887097f2f97ff367250ceaf4bc4080c96444f273ef0b3c98f51dfab83152df971113491d3a1ea1d8d47f930d5d4298a6967b3c5808432143d0bce48cf25628847e8f4ca72122704710844e1665e2e32a757d3dc51e2f7e895ce9e1e1b1bce2220dcfa49b57a894f58f7fb36da344f89c6565282a1af82ec4f6ccb5b2c95d9a45585a77cbfc999c41156101228dce34b7e8582c4a012b42f7f0836a6c33b4566f5518b6eeed178de0e56b85c883c20c7129118cf46e3aa7838f1c295db3383651b07d49b9ff525ff616e5494fa7c204c557a55aab3c0f0928cc21d386dbd3e26a9ff5580f253d1d458d55e6a0e95d8692939db07462e9f0f4b4bdef0781bd113195f3bfc8ae0fc7e411b35190e5f471f11828153770c658fe670b9e5edf4eefb7450f79b004d1a0550ce60ff82e666783ab7e5a20bf69757045c9915d81adb14abfbd04687f998240217d99be62800", 0x1000}], 0x6, &(0x7f00000015c0)=[@dstopts={{0x40, 0x29, 0x37, {0x62, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0xffff, [0x101, 0x8]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}}}}, @dstopts={{0x78, 0x29, 0x37, {0xc, 0xb, '\x00', [@ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x48, {0x0, 0x10, 0xff, 0x7787, [0x9, 0x5, 0x8000000000000001, 0xa3, 0x5, 0x4, 0xffffffffffffff40, 0x8000000000000000]}}, @ra={0x5, 0x2, 0x40}, @enc_lim={0x4, 0x1, 0xc5}, @jumbo={0xc2, 0x4, 0x80}]}}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000016c0)="594ff8cd87fbd1adf1d953556d7bd771c9b4378844", 0x15}, {&(0x7f0000001780)="426f61d809655cd4f665032a5c565d82608c69345ae6f20da662d81bfc1c966451b46324076d1b553e627c3c800755143b2268e0049a7e9f3f90d4edfd1eaaf1883f7aaa587542cb3a704409786671cbc2bc06514e0e7904880b8fe12e0dcb082f7452a8ebfe6ff982cd9db4b8481896ce3ce11b2b4783ecb507141d", 0x7c}, {&(0x7f0000001800)="c756d0e39538edea53292768e0a33e81993a09cf16e4b6a88865e06cc1241af8acb52235a6b2c7f2689c0b54fb3c00de28cbd5c4f81a6a40fdcbbcea6df69515fd8b3832b69befd98cacdb2753542cba02f98e13e38c57f590e9be8f32597718a847a88d4e7a1fc596209e8db5b89c1f52063e5632159d877c1e8ff6bb09cc62c7fe7d474126e55ae5c88110c0c46423c20e5b3fa7bcb3dd94c5b8fadf5ddfbb78893527092980e6537bfbf6d2981c69ebdea75f17e4f700a7185b9aeafabf2eff1490a35a33d66ed6759dfbe383d687d42b6347c1d9", 0xd6}, {&(0x7f0000001900)="171860bd254a798b2bfdb991314b8dba20be259d41752cdd8bb1c8cab4518e55693bb38aa8a6448ce6c6d7e169464dd3ba160696043a71107e3b73ee8ccf45efb0c33c41fa7e532c940a4f570f7cdaaaa03f7b53ea25c3637f2e7733df38f8f25604ff94073c8acce2a91158b377cf6766657ab64a4cd9b14f4ecf358261d208c4b7a93c4a84fe0f0d8eed9777d7", 0x8e}], 0x4, &(0x7f00000019c0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x8, 0x6, 0x2, 0xd9, 0x0, [@private1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}}}, @dstopts={{0x20, 0x29, 0x37, {0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x80}}], 0x2, 0x840) sendto$inet6(r0, &(0x7f0000000280)='vW', 0x2, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 2.768734421s ago: executing program 1 (id=729): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x2}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) 2.702206265s ago: executing program 1 (id=732): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc01, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x111800, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000180)={0x3, [0x10, 0xc, 0x1]}, 0xa) prctl$PR_GET_TIMERSLACK(0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x4fcb, 0x6, {{0x9, 0x4, 0x0, 0x2e, 0x24, 0x67, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x89, 0xe, "2a87a967944e591dfe630bc7"}, @noop]}}}}}) r8 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r7, 0x25, 0xf, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=[0x4f4d, 0xfffffffffffffff7, 0xffffffff], &(0x7f0000000300)=[0x2, 0x0, 0x1, 0x1], 0xfffffffffffffc76, 0x3, 0x0, r8}}, 0x40) ioctl$KDDELIO(r4, 0x4b35, 0x231) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000380)={0x5, 0x8}) syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x77}, "425682754464c71e1a998ffd7ace08bc024c0fb0cfe8421d38db54558e189c1fa848b033f5ed7a8be2182054f6d8641353e026948e63484d89b80efb63a9f752b92fa578f007ad49c8ded8f57d3e27363fc246a8754fc05be904ceb49cf395c1a36b528abd5b97dc8154dc67c4f886e135bf64073a3cad"}, 0x7b) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r3) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x168, r9, 0x420, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x168}, 0x1, 0x0, 0x0, 0x48040}, 0x24048011) syz_open_procfs$namespace(r8, &(0x7f00000006c0)='ns/ipc\x00') ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000000700)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000800)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r4}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8001}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000008c0)='GPL\x00', 0x4c, 0x93, &(0x7f0000000900)=""/147, 0x41000, 0x40, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000009c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0x5, 0x401, 0x7fffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[r4, r1, r4, r1, r3, r1, r4], &(0x7f0000000a80)=[{0x1, 0x4, 0x5, 0x2}, {0x4, 0x1, 0x2, 0x3}, {0x3, 0x2, 0xb, 0x8}], 0x10, 0x81}, 0x94) getrusage(0x1, &(0x7f0000000b80)) clock_gettime(0x0, &(0x7f0000000c80)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000cc0)={0x0, 0x0}) utimensat(r1, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000d00)={{r11, r12/1000+60000}, {r13, r14/1000+60000}}, 0x100) ppoll(&(0x7f0000000d40)=[{0xffffffffffffffff, 0x20}], 0x1, &(0x7f0000000d80)={0x0, 0x3938700}, &(0x7f0000000dc0)={[0x6]}, 0x8) syz_emit_vhci(&(0x7f0000000e00)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000e80)={0x990000, 0x352a, 0x9, r4, 0x0, &(0x7f0000000e40)={0x980924, 0x7f, '\x00', @ptr=0xf}}) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000ec0)={'veth1_to_bond\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.624224133s ago: executing program 1 (id=735): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x2, 0x12) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000500)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0x0, 0x0, 0x5, 0x0, 0x2000000006, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r3, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002b40)='./file0\x00', 0x0) 2.547451691s ago: executing program 1 (id=740): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x80002) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) read$FUSE(r2, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000002200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x6, 0x0, 0xeeeeeeee}) setsockopt$inet_tcp_buf(r5, 0x6, 0x8, &(0x7f0000000040)="11", 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000018) open(0x0, 0x14000, 0x50) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000040)={'security\x00', 0xf, "5b24549344ee1d6b997077995f89b0"}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 1.52061055s ago: executing program 4 (id=762): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061100c0000000000b500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) 1.518338508s ago: executing program 4 (id=764): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x2, 0x5}, {0x4, 0x2}, {0x9, 0x1}, {0x8, 0x3}, {0xa}]}, @const={0x7}, @const={0x10, 0x0, 0x0, 0xa, 0x5}, @struct={0x4, 0x2, 0x0, 0x4, 0x0, 0x7fff, [{0xa, 0x5, 0x5}, {0xd, 0x0, 0x2}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000000c0)=""/127, 0x94, 0x7f, 0x1, 0x1}, 0x28) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) (async) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f00000001c0)='highspeed\x00', 0xa) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x200200, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/168, 0xa8, 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex=0x0, 0x2b, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) ioctl$KVM_CAP_VM_TYPES(r2, 0x4068aea3, &(0x7f00000004c0)={0xeb, 0x0, 0x4}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pread64(r4, &(0x7f0000000580)=""/216, 0xd8, 0x8000000000000001) (async) sendto$l2tp(r2, &(0x7f0000000680)="4d439597e27c57c740494ce487e1c21e3e84c942de2af61222afadc6006675e021b72f442f557715e5032203764c880b1a3c6ae8918bf138b7d41e32acee321f8a1e169d330269d6872cf813b376fb738d3ba28e82eeb1281ffef95944d6d5c16f18fe9207960f2c527d3eb3888063e82e619c1dfe6717a1fd580b160a178b40a50c6b9e78bdb4b69a7b236c01fe694ee94a910fd2ac301d953223c1907a776a3455109309bf51b7f578d90ca9a64a57fda2edbc6408a626e3f7d13fd71b5df0a79862ea60189926aec0e9a79d302feea122185e201e351b476b434341853ccd0d24bf3a08e82433f04ab470ab7d2df7dec4a22aa776d33b6fc911cee93cff5c45657f90a6aaa7c1140e508735e9fcf1a18f2766095daec93074f058cc1efdf53373d9c3679edba4d8cfeda5a6dcccc5285be327879b2fd4b4d05e02db262147d0e8aa623eac63193554c702ff6acbe50b627032ad37c39e4f851033aebc86f60c4c6094d584224b7ca009c8dbbc17e84ca23a5dbda4095061ae29476cb99fe2f94f9b76e9e57a83f5d4de25bafa9dbff5c914aae0703c531e3c7a30b91618a4e4b74208d624e544f328bd698992251ecbd698ec8ad967d046e39b1a7846f6fc1e7eb52a6b2b3c11317f76c4dfe40198118a7e2fea903c5a6ce6d521cc297125f3362aed6f7a0d4a47535c540232cfacce0862296ee26e68640b7e013904eabbfa995f34394f09c9c6bd6442456969e9d3fc976079bfbf17addb7f91d45f9e89447bac0bdb5f9dba209d92ac43da1c042e50f21cdb1643dfcdc68047b0c9c2beacb24e6e39ee7e117cc76b369bf815f4cacdf8a7c52db49a6281b6c19299a01828a0fa52af04ff04e79b6a971470dbc47ad68e3ebecc9644fa2a66092f509d389f7ce66ab234b9ef5483b1a094f4c5ba1f64382c02da1d325714078b13ec1a28de0b6648ac4946c48017502da7b589a5df8645c4f7874d0442ed8102405f539437c968a0829a06ba4e8597249bdb2f245ebb9bb49283cc3a693c9681dc6b25a7a57d28f6ed9f47d6d59052d72036785a708446fd9aa097a27d6a14ecce7a9d0402df9b6ce9c09a64e03e1828a8835be85ee856c33ddf75edc198fc3b5da259108136e7f87812e66ed897821dc1034e3fac5cd9cd2a107be42564e1d3317fa82a29ed8afb04004a342981372bc5dec1a0834fdcf6e50d2aeedb8d9555729b555a59495e9f516cefc8a9b209ecab8e8b41a84f0704b05dcd2f79d8f437b512660e375399f6dd99716f13e8cf0ce6fc16c59483a36d05e2086ec0b2868cc6b53b95a3cac776d965f453871e1606f6ded2258a4e3d138070e8954a904afeea2dab96f2401a1b491ad2caa44cb65cbf5747a037712725448cea676877cd03de3bbe2974fa31859a0c06c20e4861507b7a2b1a70b927086729f365134fc10ced38da5c11b28c1c227fe48bca3bd49d7ef39969da9acb26455090e1487c59906f9f7f79671413c1ef79f0a76d375ddc205f3b6b9b0066d288b46c5354aeb94f4732294176d74a4947375ac23881b8e406012c77328b17f9dd7368ae40a8837030b09abb3ae2831645eed7f1ab3fd0dbbedc842857f1aad75e11849ca32944de4c4918d0bd555be2634d18eecd0b853712d216945f296f750c21783f36942f80d5a8bbc277e3f2dc5c83f385352be92184dbaa06639b718ca38d0056d53de0a9a096f7fac585a1ec177f75cf31b5285f6fc5f2256c807ed9e8e05ecdf40a56e6ac5c90e71c1edbda5afe7b3feb191761f7a3f5de8eac273360b83f5ed716d4753d96a20a25d702d352aeee737d637d68c177ddbae3567784a46f8327784b3d14fcd288d033433b4ec04c0adf67dfa0f46c9ec3de3402c9a544bbb35ae303b939474507e1e8c4f65371d08b42e4a785d985bf8d99c6bcd4e4e9dfd9d82d4c6e875ea4052e56cef700b978d849ed59d02cf38b99f8a490a6c1f5bbdc988aa87b2e7e17ed055f3ee923ea45805d34264605e19a88c52c972285f2de323d52aedfb7b7bafc3f82e92474755755a2c16dbff55f97493e1154d9d7e98772cf12cb815cbcd936034fc13ac3f99356a909df2a8b382bd8a04acd89514ae5aeeea826ecdd71d5d32a7906765c72594f72b6c4173ce3c221256abf8ce0bc636c3cf171a5de17333999a855230099540bc67dee1cca540fbb2d5963ea82443a443803c76167966c0dcffbfd72c09e773928732fa7fd6c4472c0425a6980daaab3735634e27e2f2ac838d8668763b24b7ec2a3455335b3735f789a0fcc5e7d65369e91a5b47311601b9e4b53d9f664cd6aa31301eaec7af80ddfc921f43d504a5920c546e940cb7305000db752953ae66349d0e7849b8eba838805c51172d85698d40bee758d380adcff9c77e06abd4da16abe0b93e6b8e4312ecb99e302e7de05964b44deefa5f9538321956a1fc6c0781e0fe3a63f3840028ef5fa9999d57e30f9d34dbd76d550fc95f5a5afed9f62d47cfa2d5dfeaf88693253e87b837deb988606e545ede59e8599085c9be864b0e8a167da932abac1399c3419e2c68d9aabe1045d97bc604c0a81b2fa500201b90a75ed2b27d02d89927a507ad75aa0fd452e32ca155459fd2b8ede1d34c37f56e99f8c6e95da21250956e4ff9ae81bf1a955d877ba91cb557d854f9ce31f0c6bd8b3010f0e75eaef1bfef5c2d77d66e8f4e3ef5116e7bf03c840220570b4895b29c000653a55de8f513a02d65d9651ee41464c8921cbe0959b6b4cfc18824363987c7c91c7fa4cc5a4a3bb715cc94a9625ceb72c92f28abd1388fcc2999d7bc027f3ef1c71d17b3ef2f714c75760dba25902c68a112457254661cdde1d83de55db642019539e115e16282d182ba1cbd1a0272adae415b9acc8eb1c785df1dad38e59f4c6dba4842edd97ede2348570d67ffb6de8375004f1c4895d6fdddb5ae343b4c02ee9d0e838ec544e3c4c9be8b0a8b29bda0998a601b30b80c7d649b3f06ffbf24a07f8167b22964e6bfef026eb92db11324dac0e5abeb1ab07ff343c27b82644f5420ea08683d6e83a1f275950a3dc7b6377a5e2f8bf16fc678375f59f106813964f832c31c40b9a8b864a5f3dce80f4e2e36a80a7c72aa08a390fe2cfb1e48ca0bed43f3f0d357b195a95e879012a223005d95a6864eff69467c097b53a39d0a2190dea979ddcaaf1ffe9e8d4e1ec39d95c3d45803fffae665c92463eec29ea4a259fdfdaae4b26de51f5da7729e75295a78ba9ee5db29f0d83e8ee6c3c5f32bec09df9ebda9385007b45cfe069d99ed2b6809ed7b2fe2d5701fa46e8f48ede13286f91077fb983f609b25a8add17017da5be21e4cee2f9fd29ebfebd2ca3e0f9d9b9210f3307f4fc4a53354c7676e13838ec979c142bf3e95363a10f8dfab6a45d076e48f7f3cb8ece8dcee708bd84dbb2a25baa0735d1393d20e163c69108a233a42e75731090d3c223723ace433228eba98057c0a329ce4f05a048dc5bef8abd059089fdac293b7255018b25895c46328a2abcc45dd25f386700c02d023a31a6f0c9756759b2ce12cda98b98298be78ad911b3d7bfe21aa588451295e151732f3bcc96ba42d50cfdae80878439b20b1505357a46fb483f61945872f4a6781a90f3514e911823fcd7cd7e143bf48bc4b04b5a0c74d7551e9df605f6d359f60fa332bf90cfc6c584b7dc9d9febba19f0387f95d7694d98a07ae80735eefd30551cb71c370dfbfa259ff4bd9ee4577dc50e9365e9fb507f51ee2526c4a56a3dbcdcbc1b7433010d276fc43a210afae3edf461f833d15563a86a2871129bc9ec6eab9bdb47ff55711dd426d18916626b113bdaa5e180f3d7661d7514e236c18e39210124a3ee0e0e27bf76f13224ed8e3c37cc604e3ba9b3296faf7cbab2697f9e55d310ad93ad98f28792b7a49ca966b1d688e8898c64c13544076db9f3acc0da6ab60ad5be714b696404c514928ac435deafe293c15bcc0e1bdf7d316c11da71e0554543b0c214a3d5490e599d16d67ef4ea5cb63e88ad8bbc6e82b94d0b97a5d19ae2f7e91ec8540885cbe6e30c32524de9b2fe8f7d2d2216fe1b89c8d5053e8f175a44238f2be9955460311c4193d7e1c6a579eaad097d0d8d61fafd16153e62077e407c8050fb97bd06909d433cf43c7a94cd7361590f22b5ac2fb0e80e0b5d856978ed544b6d5ac4b24f299d47912ccc7fa929f9539a09d3e3fd2cf75b44cb5dead9e875f022ba53c28a5917f9c626b99e39cfe1f8628b61857e2dda91eb43a5145742063782b63d96857737453141b07d18e364e6d51268f57e35a54b9a5604fd5c991c378359b7423cfd26d5ab83eb0ecb78e7409a6e054da26f8115813b6e39df3feb963f631c6ba3bbc8570cfb0a110aa083214d0ad5093b5cd7477c6ebe60c40ff056c05965fa1be3d8f2217ee24eb9b7cb396edd4d9760c73480628d197f6d40648a2bd09785a0c37be01b44c491a13f6bcf8c7eeec754d7955c23cb321436920da9e14a8ca29cef89dac689bd14f318d29feef29db4d9ea9353e026fc0a639439e511ecbf5497eac9d9468bf25dd2c585f5c65662f9a14c59f3644849048da5241ef28fc771c755aabc6ad73046e52a68c7de47e11767f597d3d583412ed13bdc096826c5828f7910c8864d3cd8e5aca6afa1ab284f324e63a5f1cc1df87d6e5482bbfbe4f20ce0a0b78774fce67e4f718355f96d9a78fd8b5ff6ada88efcda860f00105f387190fdbe4c4e9cbd7489f31405efe0d61e0d3b66addf0cb8a5b73875a9dfc27aa6e4c3891e055747ed28d1269ac8c71feec7a3b35dd889b80c2b02349e72a3612aeb8b6a5f1170ad41c90d73a50a4ec9f1b19dedc0708a074263540fa4d68c48646bad13500e28e852be40996650cd45f0a8872fac616bb4fd12e026a773bd8397e61ce6a0c9d9fa99e1c25cfc0f07491d6cef08685ee5378062f16f8b1ab69316e3e031d42aeec3ee3baea22b80f0c16fdd6be81e715670c3667a645e9c4d72b5ab328b1050170fa13395eb2b1dd2f53278871b250cb6b5c53af81309655e7778d096f5d2bd4cc62276c1ef8b8edee21f033be582e45ed6cef440933da8bbf8f390f65185b04be15eded3e89a6195de654c22e901f262f3007bc076cb4385654e55526ca85e5d259c099e0e8811d540af4c305de02203b3e009605580520a031c149c4f3648e65531f46c9da3a3bf46d0ac000da6cd4b50ed2c5f4dd6c276f285b909aae8cb8294a8c585a2197ae0c7a53cb32a820e6fecf8431500f3cc4ae828c99ba9ad8faf256cc94b4f04f40b1e4bcc677e74ba49463bfe6bed2c9494a70c984c0a4d2df08676ec317ded7ae10b6bab3f03fc073f2456fbe490edb8228db1f9b83172dc85498895056956fb51275c49ff12b20d5b7ba3db18a6d8ea726adffb51cea71869887a4b30be6a6c5fffc4d2c4fa3e1bc1da6c4794b47e5300a537c9bfa5bcb22b440037bb1edb1fc023ed8a63ccd4c7de1d1c3ae83b0f60e325577614a8363ecb48a0a62a6221f492b8b4b1fa4339c557da93f08c5a096c04e1205003b8d1dc098103528db54feeec8300a87493fcded7e330b7036dae03dc31d6ce6a4d5c428bc0d9e141653cb69994ffc020b68af584274be13a2e82dcf487ac68c6d12fd9555c15ca6ab0c9baeb39b0cc7cf8813747bc516ffee9c1a7553509d737c690e4678b10487111f87b5d8658aa850d7ad73532eacbfbd65479c2467618bf8f1225f092e396954be0bafd133538286492dd90835b69bbacdc137fe90d792fa0dc8b08f55d6637", 0x1000, 0x80, &(0x7f0000001680)={0x2, 0x0, @loopback, 0x4}, 0x10) read$snddsp(r2, &(0x7f00000016c0)=""/223, 0xdf) unshare(0x40800) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000017c0), 0x0) (async) fsopen(&(0x7f0000001800)='cpuset\x00', 0x0) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000001840), &(0x7f0000001880)=0x4) syz_open_dev$radio(&(0x7f00000018c0), 0x1, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000001900)=""/81) (async) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000001980)) (async) recvfrom$l2tp(r2, &(0x7f00000019c0)=""/53, 0x35, 0x10003, &(0x7f0000001a00)={0x2, 0x0, @broadcast}, 0x10) (async) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001a40), 0x8c0, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r5, 0x5396, &(0x7f0000001a80)={0x8}) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001ac0), 0x41200, 0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) (async) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000001b00)={0xf6, 0x5, 0x9}) bind$alg(r6, &(0x7f0000001b40)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) (async) sendmsg$can_j1939(r6, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x1d, r3, 0x2, {0x1, 0x1, 0x1}, 0x1}, 0x18, &(0x7f0000001c40)={&(0x7f0000001c00)="d324ba9d5cac83b0e4f1160d51edbece32c88178687a5b6958fefecc4c3411efae39511d756edcb35824a0277f2fdd4d45e5e8c360f8c1e60a5e6b", 0x3b}, 0x1, 0x0, 0x0, 0x800}, 0xc885) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000001cc0)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000001d00)=0x8, 0x4) 1.431784044s ago: executing program 4 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x642600, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r3, 0x3b64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, &(0x7f00000023c0)=[{&(0x7f00000003c0)="d04a15fb50ec4d93", 0x8}], 0x1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) r9 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$inet(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x1e, 0x0}, 0x20004081) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 1.102520057s ago: executing program 0 (id=780): r0 = socket$nl_rdma(0x10, 0x3, 0x14) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ptrace(0x11, r1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000840)={0x28, 0x1410, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000000)={0x28, 0x10000, 0x0, 0x0, 0x27800a, 0xff, 0x9, 0x1beb3c}) 1.101326236s ago: executing program 0 (id=781): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x228000, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0xd8141) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x9, 0x0, 0x2, 0xfffffff8, 'syz1\x00', &(0x7f0000002600)=['\xfc\xed\xd8\xae\xde\x94(i\x8c\xe3 \x13 \xf0\x92D\x01Y\xfc\xdf#\xde,\\\x17\x9b\xebK\xcb\x92o\xf5\xb1\x14J\xf3\xded8r\x83<}\xa94\xc5\xe1C\x81\x95\b\xf4O\xe7\x8ern\f4\xf8\x92C{\xa88\xd8F\xa1\xad\xfe\xec\xe8\x1f\x1cQ\x05\x1f\xd5\x11\xfb\x1b\x9bg\xc7\xbaM\xd3\xe8\xb1\x03\x8c\xd7\x97\xeb\x03o\x1f\x05\"#,K\'\n\xae\x89\xa5\xda 4\x17', '\xb8\xb6\x9b\xce#n\xa46h_+s\xa7\xdc{\xbaJRl\xba\x82\xdf\x87/\xec\x18H\x80'], 0x8b}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x5, 0xf9, &(0x7f0000001440)=ANY=[@ANYRESDEC=r2], 0x0) ioctl$EVIOCRMFF(r3, 0x4004550e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000100)={r4, r4, 0x0, 0x6f5e042c}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000040)={r4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) close_range(r0, r2, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x10001, 0xa0000) ioctl$VIDIOC_OVERLAY(r5, 0x4004560e, &(0x7f0000000040)=0x5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2c, 0x5, 0xe44c) r7 = syz_pidfd_open(r6, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg$inet_nvme(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="9feb010018851f777fbd89b7741a85c69a75b42a00001000000000fb000000000000010000ec0001000700fb25943af801895000"/67], 0x0, 0x37, 0x0, 0x1, 0x800}, 0x28) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001400)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/117, 0x75}], 0x2) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x3) waitid$P_PIDFD(0x3, r7, 0x0, 0x8, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 532.235763ms ago: executing program 2 (id=795): syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @local, 0x6}, r1}}, 0x30) 532.077215ms ago: executing program 2 (id=796): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil) (async, rerun: 32) mmap(&(0x7f000095c000/0x1000)=nil, 0x1000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x5ac15000) 482.186064ms ago: executing program 2 (id=797): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="e40700040000000000000b000000080003009f5c133d0e973779593eeb08324d3a18b472b95398c9805d06f5eb6e6c", @ANYRES32=0x0, @ANYBLOB="20005080110001004abee33908f8eef16f162471f40000000800070002000000"], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x88, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=any,access=client,cache=mmap']) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="e40700040000000000000b000000080003009f5c133d0e973779593eeb08324d3a18b472b95398c9805d06f5eb6e6c", @ANYRES32=0x0, @ANYBLOB="20005080110001004abee33908f8eef16f162471f40000000800070002000000"], 0x3c}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) (async) dup(r4) (async) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x88, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=any,access=client,cache=mmap']) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) (async) 412.272766ms ago: executing program 2 (id=798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e657665300000000000000000001400010077670d24267f000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f74ea3d7465616d"], 0x110}}, 0x0) 411.839685ms ago: executing program 2 (id=799): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x290, 0x2c0, 0x0, {}, [@common=@srh1={{0x90}, {0x1, 0x10, 0x7, 0x9, 0x41d4, @remote, @dev={0xfe, 0x80, '\x00', 0x26}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xffffffff], 0x213, 0x20}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r3], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="e766ed41", 0x4}], 0x1) 331.687193ms ago: executing program 2 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x15, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x240448d4}, 0x200088c0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000000)) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x6, 0x8, 0x36, '\x00', 0x47fffffffffffffc}) listen(r3, 0x0) r7 = accept(r3, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r7}, 0x20) recvmsg$can_bcm(r7, &(0x7f00000003c0)={0x0, 0xffffffffffffff9d, 0x0}, 0x161) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@ipv4_newaddr={0x28, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x50, 0xff, r9}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x48006) 132.332274ms ago: executing program 0 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x3f, &(0x7f00000008c0), 0x4) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f03f, 0x2}) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x2000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async, rerun: 32) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) (rerun: 32) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000007919b00000000000950000000000000083f44fdfc227d88e8841d21e0700000000000000972dff77b936b6c32a7a43177eb431c87fb04d737f423ead8b5c82f9c6b5546896c7e85989fb5d9208a3bfa904e4d9d2292c90fbb5dc6cb125a2f3de9d900000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0xb9, &(0x7f0000000080)=""/185}, 0x80) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 128.432158ms ago: executing program 0 (id=802): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2, 0x15, 0x4, 0x6, 0x2, 0x0, 0x70bd25, 0x25dfdc00}, 0x10}}, 0x4001) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/114, 0x72}], 0x1}, 0x40002042) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) 72.010624ms ago: executing program 0 (id=803): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0xdf, 0x6, 0x6, 0x5}) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0xdf, 0x6, 0x6, 0x5}) 71.219464ms ago: executing program 4 (id=804): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000070000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c0800034000000000080002400000000d0800014000000008080002400000000908000140000000090800024000000018080001"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x7, 0x0, {{0x33, 0x4, 0x0, 0x7, 0xcc, 0x64, 0x0, 0x2f, 0x29, 0x0, @empty, @remote, {[@cipso={0x86, 0x5e, 0x1, [{0x7, 0x8, "005358549af2"}, {0x1, 0x2}, {0x7, 0xb, "db12ce6c800ed3a5c1"}, {0x6, 0x8, "54146a258d88"}, {0x5, 0x4, "2bfe"}, {0x2, 0xc, "306c5fd4414e94ef2f9f"}, {0x7, 0xd, "262692173cbe106a81341b"}, {0x5, 0xf, "b372869fe3f9862646117ea45f"}, {0x0, 0xf, "6a1899164742b575716d10bc84"}]}, @cipso={0x86, 0x31, 0x3, [{0x7, 0x8, "526f1869eb20"}, {0x2, 0xa, "4ffa50110730452b"}, {0x0, 0x3, 'D'}, {0x2, 0x5, "032157"}, {0x7, 0x11, "06c01b34aa1cb956baefb45298ccf1"}]}, @generic={0x82, 0x12, "85d290f133d178615584761d86e0d71d"}, @timestamp={0x44, 0x14, 0x17, 0x0, 0x8, [0x4, 0x5802, 0x0, 0xffff]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080007003b070000050006"], 0x4c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@multicast2, @empty, 0x0}, &(0x7f0000000600)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x4, 0x1, 0xc, @local, @local, 0x700, 0x7, 0x4, 0x8}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000700)={0x488, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xf2, 0x5, "24edbd37e46cc32bec65966703536f88e06d238e2d430ad3bbbc9b77540777a6dc0078ea4868fca6841c3408f811061faac6667207113adfb05b6b9a4310d47ecc424c65437c6a339f457fc73fe1ededcedc3e49aff5ecec6d1547db5c26f37da6f3ed2f76b8fef11a906d028ccc072ddeb04d5ddae886bd94389e6cc07a63668eda14654cc2f86a5399ceb53a698ca4ef780db764af758c07ca95b5da0ef916b65602f34a99995a3cdee85ff0215ed103d4afcf08041e62f65eb2f2458ac0d4ff31c6aef1b706c93773da43135645637c5a3cd1327b0c85822771d0cb0af939f2fb5c959b7acd7d8e5e64eb5878"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{\x98\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4181}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x78, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x6e, 0x5, "74cde52c473f3444c81aaa51e2a1e1b2fcf81f912c82d990bce03147015899d25ea765a73783cefefc25f52fd8cca610ed672ec0a1e9b7bb461b90b126b1c67352ba7c419a3ee441c9bb840c709eda7f411c1b19f4bb4b57dc8a08a6087b43766539ea2fc328ec461515"}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x561fbfb3d8ed7134}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcc, 0x4, "1df454674558260b3f4ef5b57635fa0e4777b217ba4541a02bdd2094240d1bd398f63852cd63a8b77326c9c5a1fd9989a6b98b376deaedbfab28e579595a113563220100ff16140d8d474963fb7300b56246b44b0e7551d513556dd5fb6d1fdd5fcf76e76d5d2b7e50c344f6603fc7c0937e21b923a1ec066221deecfe8d15180b268d2eff0076a43d1ffe095cfc07e18a28952639fe92f4e859bd4096112340cfe033448cdc1dd1624a0f1cfd10803ee43e2dad3d04b1c40789ab1ebd2405ee8c0a52c500d96e75"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "448cd5a22ae96f71bdcdb095f0c53c65121a852ee3438bd14181a2fcdfcc9035e1a38367c7723b84e75bf2413314bb48896e4577302599c165ab8d66c0c581812e330142d448b23512bf2f8a420cec9cce684a1956ef8d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe0}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-^\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*@{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xad44}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r13, 0x8}, 0x8) sendto$inet6(r2, &(0x7f0000000080)="5fbf212b95ae1f48de915b1820e52f0e4b8e6c5bfe6f32aabc9ef7af42746f69618250c619d413cac035cf0ecacee673", 0x30, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e21, 0xfffffffa, @remote, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0xc) 70.863521ms ago: executing program 0 (id=805): syz_emit_ethernet(0x3e, &(0x7f0000002040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x50, 0x0, 0x8}}}}}}, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x0) fchdir(r1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000005c0)={0x200, 0xffffffffffffffff, 0x2}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) r12 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f0000000a00)=0xd0cf) write$cgroup_pid(r12, &(0x7f00000002c0), 0x12) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r14 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r11}, './cgroup.net/cgroup.procs\x00'}) ioctl$F2FS_IOC_COMPRESS_FILE(r15, 0xf518, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r16, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r14, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xff, 0x1}, 0x50) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) r19 = syz_open_dev$vcsn(&(0x7f0000000840), 0x7, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x16, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x83}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0x5, 0x2, 0x0, r5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x6, &(0x7f0000000880)=[r8, r11, r13, 0x1, r14, r17, 0xffffffffffffffff, r18, r19], &(0x7f00000008c0)=[{0x0, 0x5, 0x10, 0x1}, {0x1, 0x1, 0x10, 0xc}, {0x1, 0x2, 0x10, 0x7}, {0x4, 0x1, 0x9, 0x5}, {0x5, 0x2, 0xd, 0xa}, {0x5, 0x1, 0x4, 0x2}], 0x10, 0xfffffffd}, 0x94) 519.457Âĩs ago: executing program 4 (id=806): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x4b, &(0x7f0000000340)={&(0x7f0000000180)={0x28, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xfffffffffffffe8c, 0x99, {0x4, 0x3f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000000)=""/24, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r4, r6, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000000c0)={0x0, r6}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000e28d4271df479ddf37be289b3f763456ed460a872b867425eefcf4f9fda2fd3abcc02d1c686e38f226f9000799421d9e1170064384e3c75eef0e14272053981f68e2847187323ff51699bedc95d522b224d2734d25e34fde4c1858dcc8b12a8fef0304aee6b8cbee0631bf89a18374383b6fa2116949d28a8124ec1261b37d8433ab106810c83d262b92a3cbc8ec841fed0cfdc501e268ec04129ce0e963b652af28b0c0538fd2fae0afa0aa4e4a96545b260a03905401b77aa5a617a6287ec3cbda13e402bba4a369ab2612", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000007ba0080000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) 0s ago: executing program 4 (id=807): r0 = syz_io_uring_setup(0x18d, &(0x7f0000000140)={0x0, 0x505f}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x649f, &(0x7f00000001c0)={0x0, 0x1309, 0x800, 0x3, 0x1f1, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x6195, &(0x7f0000000400)={0x0, 0xa1d, 0x400, 0x1, 0x2d9, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000480)=0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$P9_RREAD(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000540)=@IORING_OP_FILES_UPDATE={0x14, 0x16, 0x0, 0x0, 0x200, &(0x7f0000000500)=[r0, r0, r5, r0, r0, r6, r0], 0x7, 0x0, 0x1, {0x0, r7}}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1}) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x13, 0xffffffffffffffff, 0x10000000) r9 = socket$inet6(0xa, 0x4, 0x80000000) syz_io_uring_submit(r1, r8, &(0x7f0000000140)=@IORING_OP_SHUTDOWN={0x22, 0x2, 0x0, r9, 0x0, 0x0, 0x1, 0x0, 0x1}) r10 = socket$netlink(0x10, 0x3, 0x7) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x1, 0x0, &(0x7f00000004c0)) r11 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = dup(r11) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r13, &(0x7f00000000c0)={0x195a, 0x6, 0x0, 0x1, 0x1}, 0x8) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r12, 0x46c1c000) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x2, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_open_dev$sndmidi(&(0x7f0000000600), 0x1000, 0x244d02) r15 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x8e027592beee00ea, 0x103, 0x1, 0x0, 0x80}, 0x20) sendmsg$inet6(r15, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r15, 0x8982, &(0x7f0000000580)) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r16, @ANYRES32, @ANYBLOB="009da4cea67263fdd3000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x400c090) kernel console output (not intermixed with test programs): [ 43.825499][ T40] audit: type=1400 audit(1753840031.975:61): avc: denied { siginh } for pid=5865 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:12751' (ED25519) to the list of known hosts. [ 45.084738][ T40] audit: type=1400 audit(1753840033.255:62): avc: denied { name_bind } for pid=5906 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.101688][ T40] audit: type=1400 audit(1753840033.275:63): avc: denied { write } for pid=5907 comm="sh" path="pipe:[4887]" dev="pipefs" ino=4887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.117876][ T40] audit: type=1400 audit(1753840033.295:64): avc: denied { execute } for pid=5907 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.125580][ T40] audit: type=1400 audit(1753840033.295:65): avc: denied { execute_no_trans } for pid=5907 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.254732][ T40] audit: type=1400 audit(1753840035.425:66): avc: denied { mounton } for pid=5907 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.258904][ T5907] cgroup: Unknown subsys name 'net' [ 47.391989][ T5907] cgroup: Unknown subsys name 'cpuset' [ 47.399022][ T5907] cgroup: Unknown subsys name 'rlimit' [ 47.614916][ T5940] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.314047][ T5907] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.528750][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.528763][ T40] audit: type=1400 audit(1753840039.705:80): avc: denied { execmem } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.748799][ T40] audit: type=1400 audit(1753840039.925:81): avc: denied { create } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.759390][ T40] audit: type=1400 audit(1753840039.925:82): avc: denied { read write } for pid=5948 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.768844][ T40] audit: type=1400 audit(1753840039.925:83): avc: denied { open } for pid=5948 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.778778][ T40] audit: type=1400 audit(1753840039.945:84): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="socket:[4911]" dev="sockfs" ino=4911 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.807255][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.807410][ T5959] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.810525][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.812809][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.814593][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.817461][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.820193][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.820468][ T5961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.821153][ T5961] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.821595][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.822238][ T5961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.822812][ T5961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.825571][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.827278][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.829025][ T40] audit: type=1400 audit(1753840039.995:85): avc: denied { read } for pid=5949 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.831811][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.833486][ T40] audit: type=1400 audit(1753840039.995:86): avc: denied { open } for pid=5949 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.836258][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.838872][ T40] audit: type=1400 audit(1753840040.005:87): avc: denied { mounton } for pid=5949 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.841682][ T5965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.870703][ T5965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.873836][ T5965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.876376][ T5965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.054864][ T40] audit: type=1400 audit(1753840040.225:88): avc: denied { module_request } for pid=5949 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.089993][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 52.167846][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 52.250365][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.254063][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.260108][ T5949] bridge_slave_0: entered allmulticast mode [ 52.263018][ T5949] bridge_slave_0: entered promiscuous mode [ 52.313869][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.316170][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.318843][ T5949] bridge_slave_1: entered allmulticast mode [ 52.321459][ T5949] bridge_slave_1: entered promiscuous mode [ 52.368723][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 52.381904][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.388607][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.428687][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.431079][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.433507][ T5948] bridge_slave_0: entered allmulticast mode [ 52.436267][ T5948] bridge_slave_0: entered promiscuous mode [ 52.440547][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 52.484484][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.486861][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.489135][ T5948] bridge_slave_1: entered allmulticast mode [ 52.491789][ T5948] bridge_slave_1: entered promiscuous mode [ 52.531603][ T5949] team0: Port device team_slave_0 added [ 52.539186][ T5949] team0: Port device team_slave_1 added [ 52.604370][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.643047][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.659175][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.661469][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.663766][ T5960] bridge_slave_0: entered allmulticast mode [ 52.666402][ T5960] bridge_slave_0: entered promiscuous mode [ 52.670286][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.672516][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.680642][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.727409][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.729684][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.732074][ T5960] bridge_slave_1: entered allmulticast mode [ 52.735143][ T5960] bridge_slave_1: entered promiscuous mode [ 52.737863][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.740003][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.748922][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.753235][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.755618][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.758909][ T5951] bridge_slave_0: entered allmulticast mode [ 52.762112][ T5951] bridge_slave_0: entered promiscuous mode [ 52.786408][ T5948] team0: Port device team_slave_0 added [ 52.819741][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.822057][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.824425][ T5951] bridge_slave_1: entered allmulticast mode [ 52.827205][ T5951] bridge_slave_1: entered promiscuous mode [ 52.843960][ T5948] team0: Port device team_slave_1 added [ 52.851185][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.857809][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.899718][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.960765][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.966563][ T5949] hsr_slave_0: entered promiscuous mode [ 52.969431][ T5949] hsr_slave_1: entered promiscuous mode [ 52.972460][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.974690][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.982812][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.988186][ T5960] team0: Port device team_slave_0 added [ 53.018566][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.020770][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.029629][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.034640][ T5960] team0: Port device team_slave_1 added [ 53.059572][ T5951] team0: Port device team_slave_0 added [ 53.102796][ T5951] team0: Port device team_slave_1 added [ 53.123165][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.125454][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.133574][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.139636][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.141929][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.152124][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.170401][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.172627][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.180569][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.231018][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.233240][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.241233][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.258091][ T5948] hsr_slave_0: entered promiscuous mode [ 53.260396][ T5948] hsr_slave_1: entered promiscuous mode [ 53.262460][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 53.264306][ T5948] Cannot create hsr debugfs directory [ 53.324528][ T5951] hsr_slave_0: entered promiscuous mode [ 53.326965][ T5951] hsr_slave_1: entered promiscuous mode [ 53.329206][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 53.331180][ T5951] Cannot create hsr debugfs directory [ 53.349131][ T5960] hsr_slave_0: entered promiscuous mode [ 53.351482][ T5960] hsr_slave_1: entered promiscuous mode [ 53.353593][ T5960] debugfs: 'hsr0' already exists in 'hsr' [ 53.355382][ T5960] Cannot create hsr debugfs directory [ 53.619119][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.625695][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.630590][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.638782][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.665153][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.669711][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.675454][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.681391][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.718016][ T5960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.724081][ T5960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.735245][ T5960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.749529][ T5960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.799759][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.803698][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.808875][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.814345][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.827936][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.860485][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.873147][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.875536][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.890796][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.893141][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.898461][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.907911][ T5964] Bluetooth: hci2: command tx timeout [ 53.908595][ T5965] Bluetooth: hci3: command tx timeout [ 53.908781][ T5312] Bluetooth: hci0: command tx timeout [ 53.908914][ T5312] Bluetooth: hci1: command tx timeout [ 53.911012][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.941466][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.957570][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.959846][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.973021][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.975482][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.984875][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.991354][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.993713][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.014168][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.016471][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.024893][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.044435][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.051302][ T40] audit: type=1400 audit(1753840042.225:89): avc: denied { sys_module } for pid=5949 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.065362][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.067683][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.071530][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.073796][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.089126][ T5960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.135591][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.160595][ T5949] veth0_vlan: entered promiscuous mode [ 54.165772][ T5949] veth1_vlan: entered promiscuous mode [ 54.184757][ T5949] veth0_macvtap: entered promiscuous mode [ 54.190990][ T5949] veth1_macvtap: entered promiscuous mode [ 54.208188][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.221579][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.225952][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.230015][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.233450][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.237189][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.243185][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.249398][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.258683][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.330200][ T5960] veth0_vlan: entered promiscuous mode [ 54.333551][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.336580][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.351486][ T5951] veth0_vlan: entered promiscuous mode [ 54.364425][ T5960] veth1_vlan: entered promiscuous mode [ 54.371979][ T5948] veth0_vlan: entered promiscuous mode [ 54.379690][ T5951] veth1_vlan: entered promiscuous mode [ 54.379809][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.384470][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.392519][ T5948] veth1_vlan: entered promiscuous mode [ 54.407840][ T5960] veth0_macvtap: entered promiscuous mode [ 54.415729][ T5960] veth1_macvtap: entered promiscuous mode [ 54.426186][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.430856][ T5951] veth0_macvtap: entered promiscuous mode [ 54.439535][ T5948] veth0_macvtap: entered promiscuous mode [ 54.443297][ T5951] veth1_macvtap: entered promiscuous mode [ 54.448877][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.452230][ T5948] veth1_macvtap: entered promiscuous mode [ 54.461949][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.469217][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.473518][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.479716][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.483459][ T5960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.486331][ T5960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.489977][ T5960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.492792][ T5960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.500065][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.502852][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.505579][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.508931][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.514256][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.529641][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.532358][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.535243][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.538266][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.579984][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.582551][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.601007][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.603756][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.603777][ T6044] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 54.620613][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.623252][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.638692][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.642471][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.654419][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.657443][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.668346][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.670988][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.735025][ T6053] overlayfs: failed to resolve './file1': -2 [ 54.751319][ T6050] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.2'. [ 54.768943][ T6055] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.794719][ T6058] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 54.796943][ T6058] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 54.802379][ T6058] vhci_hcd vhci_hcd.0: Device attached [ 54.809093][ T6059] vhci_hcd: connection closed [ 54.810580][ T96] vhci_hcd: stop threads [ 54.814316][ T96] vhci_hcd: release socket [ 54.816548][ T96] vhci_hcd: disconnect device [ 54.818718][ T6063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6063 comm=syz.2.9 [ 54.885187][ T6063] netlink: 'syz.2.9': attribute type 13 has an invalid length. [ 54.888444][ T6063] macvtap0: entered promiscuous mode [ 54.890993][ T6063] macvtap0: refused to change device tx_queue_len [ 55.060074][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 55.108090][ T6077] hsr_slave_0 (unregistering): left promiscuous mode [ 55.125092][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12'. [ 55.172069][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 55.342284][ T6116] bridge_slave_0: left allmulticast mode [ 55.344188][ T6116] bridge_slave_0: left promiscuous mode [ 55.346834][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.353336][ T6116] bridge_slave_1: left allmulticast mode [ 55.355167][ T6116] bridge_slave_1: left promiscuous mode [ 55.358156][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.363371][ T6116] bond0: (slave bond_slave_0): Releasing backup interface [ 55.369954][ T6116] bond0: (slave bond_slave_1): Releasing backup interface [ 55.381998][ T6116] team0: Port device team_slave_0 removed [ 55.387930][ T6116] team0: Port device team_slave_1 removed [ 55.390210][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.392528][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.396202][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.398768][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.608143][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 55.903151][ T6168] qrtr: Invalid version 0 [ 55.958950][ T6172] netlink: 'syz.3.30': attribute type 13 has an invalid length. [ 55.976295][ T6172] gretap0: refused to change device tx_queue_len [ 55.983228][ T6172] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 55.989107][ T5965] Bluetooth: hci2: command tx timeout [ 55.996882][ T5964] Bluetooth: hci1: command tx timeout [ 55.997667][ T5965] Bluetooth: hci3: command tx timeout [ 56.206803][ T6037] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.278031][ T6043] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.346886][ T6037] usb 8-1: device descriptor read/64, error -71 [ 56.351152][ T6183] fuse: Bad value for 'fd' [ 56.378062][ T6185] bond0: option ad_select: unable to set because the bond device is up [ 56.465070][ T6043] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 56.468131][ T6043] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 56.471486][ T6043] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 56.474302][ T6043] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 56.478924][ T6043] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 56.500976][ T6043] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 56.503845][ T6043] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 56.506347][ T6043] usb 7-1: Product: syz [ 56.508313][ T6043] usb 7-1: Manufacturer: syz [ 56.515684][ T6043] cdc_wdm 7-1:1.0: skipping garbage [ 56.518108][ T6043] cdc_wdm 7-1:1.0: skipping garbage [ 56.529770][ T6043] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 56.531730][ T6043] cdc_wdm 7-1:1.0: Unknown control protocol [ 56.537579][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 56.537590][ T40] audit: type=1400 audit(1753840044.715:193): avc: denied { ioctl } for pid=6169 comm="syz.3.30" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 56.547982][ T6199] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.549881][ T40] audit: type=1400 audit(1753840044.715:194): avc: denied { read write } for pid=6169 comm="syz.3.30" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 56.551251][ T6199] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 56.551269][ T6199] audit: backlog limit exceeded [ 56.555571][ T6199] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.557739][ T6197] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.557754][ T6197] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 56.557766][ T6197] audit: backlog limit exceeded [ 56.559959][ T40] audit: type=1400 audit(1753840044.715:195): avc: denied { read write } for pid=6169 comm="syz.3.30" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 56.596879][ T6037] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.621499][ T6206] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 56.624628][ T6207] Zero length message leads to an empty skb [ 56.760845][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.44'. [ 56.784662][ T6222] sctp: [Deprecated]: syz.0.45 (pid 6222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 56.784662][ T6222] Use struct sctp_sack_info instead [ 56.840284][ T6222] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 56.845492][ T6043] usb 7-1: USB disconnect, device number 2 [ 56.848343][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 56.852820][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 56.855411][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 56.859786][ T6222] CIFS mount error: No usable UNC path provided in device string! [ 56.859786][ T6222] [ 56.863250][ T6222] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 56.879179][ T6222] overlay: ./file1 is not a directory [ 56.882508][ T6222] overlay: ./bus is not a directory [ 56.956127][ T6232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.078395][ T6237] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 57.103851][ T6241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.219041][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.52'. [ 57.261080][ T6248] ======================================================= [ 57.261080][ T6248] WARNING: The mand mount option has been deprecated and [ 57.261080][ T6248] and is ignored by this kernel. Remove the mand [ 57.261080][ T6248] option from the mount to silence this warning. [ 57.261080][ T6248] ======================================================= [ 57.703260][ T6272] syz.2.63 (6272): /proc/6271/oom_adj is deprecated, please use /proc/6271/oom_score_adj instead. [ 57.943093][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 57.946333][ T6296] veth1_to_batadv: entered promiscuous mode [ 57.949140][ T6296] veth1_to_batadv: entered allmulticast mode [ 57.952975][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 57.976203][ T6299] syz.1.70 uses obsolete (PF_INET,SOCK_PACKET) [ 58.061450][ T6103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.067238][ T5965] Bluetooth: hci3: command tx timeout [ 58.067334][ T5964] Bluetooth: hci1: command tx timeout [ 58.069473][ T5965] Bluetooth: hci2: command tx timeout [ 58.166176][ T6103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.325454][ T6103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.347027][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.352325][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.356216][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.364356][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.368272][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.421830][ T6103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.535214][ T6317] chnl_net:caif_netlink_parms(): no params data found [ 58.589265][ T6103] bridge_slave_1: left allmulticast mode [ 58.591324][ T6103] bridge_slave_1: left promiscuous mode [ 58.594137][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.603380][ T6103] bridge_slave_0: left allmulticast mode [ 58.608747][ T6103] bridge_slave_0: left promiscuous mode [ 58.611317][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.840511][ T6342] kvm: kvm [6340]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 58.938651][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.949659][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.955635][ T6103] bond0 (unregistering): Released all slaves [ 59.035833][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.038219][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.040500][ T6317] bridge_slave_0: entered allmulticast mode [ 59.043179][ T6317] bridge_slave_0: entered promiscuous mode [ 59.046408][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.049301][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.052090][ T6317] bridge_slave_1: entered allmulticast mode [ 59.054879][ T6317] bridge_slave_1: entered promiscuous mode [ 59.092261][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.129462][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.163995][ T6317] team0: Port device team_slave_0 added [ 59.168344][ T6317] team0: Port device team_slave_1 added [ 59.244891][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.247913][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.256211][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.264604][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.269304][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.277436][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.366942][ T6103] hsr_slave_0: left promiscuous mode [ 59.379487][ T6103] hsr_slave_1: left promiscuous mode [ 59.384129][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.386527][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.389891][ T6358] syz.1.83: attempt to access beyond end of device [ 59.389891][ T6358] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 59.395699][ T6358] syz.1.83: attempt to access beyond end of device [ 59.395699][ T6358] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 59.396221][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.401920][ T6358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 59.403822][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.408464][ T6358] syz.1.83: attempt to access beyond end of device [ 59.408464][ T6358] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 59.414229][ T6358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 59.417426][ T6358] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 59.420230][ T6358] UDF-fs: Scanning with blocksize 512 failed [ 59.423247][ T6358] syz.1.83: attempt to access beyond end of device [ 59.423247][ T6358] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 59.430543][ T6358] syz.1.83: attempt to access beyond end of device [ 59.430543][ T6358] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 59.430817][ T6103] veth1_macvtap: left promiscuous mode [ 59.435653][ T6358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 59.438388][ T6103] veth0_macvtap: left promiscuous mode [ 59.441078][ T6358] syz.1.83: attempt to access beyond end of device [ 59.441078][ T6358] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 59.442819][ T6103] veth1_vlan: left promiscuous mode [ 59.447589][ T6358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 59.449867][ T6103] veth0_vlan: left promiscuous mode [ 59.453278][ T6358] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 59.458637][ T6358] UDF-fs: Scanning with blocksize 1024 failed [ 59.461051][ T6358] syz.1.83: attempt to access beyond end of device [ 59.461051][ T6358] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 59.465452][ T6358] syz.1.83: attempt to access beyond end of device [ 59.465452][ T6358] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 59.470074][ T6358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 59.473246][ T6358] syz.1.83: attempt to access beyond end of device [ 59.473246][ T6358] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 59.478199][ T6358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 59.481239][ T6358] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 59.483681][ T6358] UDF-fs: Scanning with blocksize 2048 failed [ 59.485896][ T6358] syz.1.83: attempt to access beyond end of device [ 59.485896][ T6358] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 59.491475][ T6358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 59.495516][ T6358] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 59.499772][ T6358] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 59.504443][ T6358] UDF-fs: Scanning with blocksize 4096 failed [ 59.516812][ T6358] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 59.992103][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 60.039842][ T6103] team0 (unregistering): Port device team_slave_0 removed [ 60.149106][ T5965] Bluetooth: hci2: command tx timeout [ 60.150909][ T5965] Bluetooth: hci3: command tx timeout [ 60.152641][ T5955] Bluetooth: hci1: command tx timeout [ 60.398717][ T5955] Bluetooth: hci0: command tx timeout [ 60.416663][ T6317] hsr_slave_0: entered promiscuous mode [ 60.420193][ T6317] hsr_slave_1: entered promiscuous mode [ 60.423245][ T6317] debugfs: 'hsr0' already exists in 'hsr' [ 60.425670][ T6317] Cannot create hsr debugfs directory [ 60.520870][ T6372] netlink: 'syz.0.87': attribute type 10 has an invalid length. [ 60.546811][ T6372] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 60.565746][ T6375] netlink: 188348 bytes leftover after parsing attributes in process `syz.1.88'. [ 60.573074][ T6375] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 60.575767][ T6099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.579570][ T6099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.598815][ T6375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.625157][ T6375] bond2: (slave geneve2): making interface the new active one [ 60.630341][ T6375] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 60.708870][ T6317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.714361][ T6317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.728430][ T6317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.738941][ T6317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.815026][ T6317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.832280][ T6317] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.839734][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.842127][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.845576][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.848651][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.964260][ T6317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.994715][ T1330] hid-generic 0000:0004:0009.0002: hidraw1: HID v0.04 Device [syz0] on syz1 [ 61.104679][ T6317] veth0_vlan: entered promiscuous mode [ 61.110027][ T6317] veth1_vlan: entered promiscuous mode [ 61.128096][ T6317] veth0_macvtap: entered promiscuous mode [ 61.132336][ T6317] veth1_macvtap: entered promiscuous mode [ 61.143871][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.150757][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.157176][ T6317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.159938][ T6317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.162662][ T6317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.165398][ T6317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.202748][ T6102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.205592][ T6102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.224305][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.227906][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.408922][ T6446] sp0: Synchronizing with TNC [ 61.575989][ T40] kauditd_printk_skb: 249 callbacks suppressed [ 61.576001][ T40] audit: type=1400 audit(1753840049.745:422): avc: denied { append } for pid=6456 comm="syz.4.97" name="pfkey" dev="proc" ino=4026533879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.671043][ T6468] netlink: 'syz.4.98': attribute type 21 has an invalid length. [ 61.673600][ T6468] netlink: 156 bytes leftover after parsing attributes in process `syz.4.98'. [ 61.826610][ T6480] cdrom: dropping to single frame dma [ 61.845788][ T6519] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 61.851594][ T40] audit: type=1400 audit(1753840050.025:423): avc: denied { ioctl } for pid=6518 comm="syz.1.103" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.863061][ T40] audit: type=1400 audit(1753840050.035:424): avc: denied { nlmsg_write } for pid=6520 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 61.870120][ T40] audit: type=1400 audit(1753840050.045:425): avc: denied { map } for pid=6520 comm="syz.0.102" path="socket:[11901]" dev="sockfs" ino=11901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 61.890316][ T40] audit: type=1400 audit(1753840050.055:426): avc: denied { create } for pid=6520 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.898298][ T40] audit: type=1400 audit(1753840050.055:427): avc: denied { read } for pid=6520 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.920658][ T6524] ufs: You didn't specify the type of your ufs filesystem [ 61.920658][ T6524] [ 61.920658][ T6524] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 61.920658][ T6524] [ 61.920658][ T6524] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 61.931211][ T6524] ufs: failed to set blocksize [ 61.958496][ T40] audit: type=1400 audit(1753840050.135:428): avc: denied { read } for pid=6532 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.970182][ T6535] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 62.051797][ T40] audit: type=1400 audit(1753840050.225:429): avc: denied { setattr } for pid=6548 comm="syz.0.111" name="/" dev="9p" ino=38010984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.079278][ T40] audit: type=1400 audit(1753840050.255:430): avc: denied { unmount } for pid=5960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 62.183398][ T6558] ata1.00: invalid cdb length 6 [ 62.225361][ T40] audit: type=1400 audit(1753840050.395:431): avc: denied { create } for pid=6564 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.328162][ T6571] program syz.2.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.467789][ T5955] Bluetooth: hci0: command tx timeout [ 62.485242][ T6584] netlink: 'syz.2.123': attribute type 10 has an invalid length. [ 62.562471][ T6594] netlink: 'syz.0.125': attribute type 4 has an invalid length. [ 62.562505][ T6595] netlink: 'syz.0.125': attribute type 4 has an invalid length. [ 62.579559][ T6594] netlink: 'syz.0.125': attribute type 4 has an invalid length. [ 62.928417][ T6611] 9pnet_fd: p9_fd_create_tcp (6611): problem connecting socket to 127.0.0.1 [ 62.967906][ T6618] netlink: 256 bytes leftover after parsing attributes in process `syz.2.130'. [ 63.199318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.202646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.352487][ T6638] netlink: 'syz.2.134': attribute type 10 has an invalid length. [ 63.366776][ T6638] netlink: 2 bytes leftover after parsing attributes in process `syz.2.134'. [ 63.370735][ T6638] team0: entered promiscuous mode [ 63.372361][ T6638] team_slave_0: entered promiscuous mode [ 63.374266][ T6638] team_slave_1: entered promiscuous mode [ 63.376247][ T6638] bridge0: port 3(team0) entered blocking state [ 63.379511][ T6638] bridge0: port 3(team0) entered disabled state [ 63.382979][ T6638] team0: entered allmulticast mode [ 63.384678][ T6638] team_slave_0: entered allmulticast mode [ 63.386519][ T6638] team_slave_1: entered allmulticast mode [ 63.391007][ T6638] bridge0: port 3(team0) entered blocking state [ 63.393372][ T6638] bridge0: port 3(team0) entered forwarding state [ 63.401469][ T6642] Cannot find set identified by id 3 to match [ 63.447141][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.138'. [ 63.963753][ T6698] fuse: Bad value for 'group_id' [ 63.966296][ T6698] fuse: Bad value for 'group_id' [ 63.979756][ T6696] program syz.4.150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.001080][ T6696] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.150'. [ 64.085914][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 64.092799][ T6706] mkiss: ax0: crc mode is auto. [ 64.242768][ T6717] tipc: Started in network mode [ 64.246031][ T6717] tipc: Node identity 96065d8dc302, cluster identity 4711 [ 64.251535][ T6717] tipc: Enabled bearer , priority 0 [ 64.304923][ T6717] tipc: Disabling bearer [ 64.394236][ T6732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.428043][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 64.727053][ T6756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'. [ 64.784265][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 64.846310][ T6771] bond0: entered allmulticast mode [ 64.848116][ T6771] bond_slave_0: entered allmulticast mode [ 64.850023][ T6771] bond_slave_1: entered allmulticast mode [ 64.851896][ T6771] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 65.144186][ T6796] bridge1: entered promiscuous mode [ 65.145972][ T6796] bridge1: entered allmulticast mode [ 65.292169][ T6804] loop6: detected capacity change from 0 to 524287999 [ 65.325061][ T6804] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 65.671520][ T6809] __nla_validate_parse: 31 callbacks suppressed [ 65.671532][ T6809] netlink: 80 bytes leftover after parsing attributes in process `syz.4.189'. [ 65.722227][ T6811] sctp: [Deprecated]: syz.0.190 (pid 6811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.722227][ T6811] Use struct sctp_sack_info instead [ 65.727941][ T6812] sctp: [Deprecated]: syz.0.190 (pid 6812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.727941][ T6812] Use struct sctp_sack_info instead [ 65.868269][ T1469] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.020147][ T1469] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.023168][ T1469] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 66.030853][ T1469] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.033859][ T1469] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.036435][ T1469] usb 7-1: Product: syz [ 66.038181][ T1469] usb 7-1: Manufacturer: syz [ 66.039563][ T1469] usb 7-1: SerialNumber: syz [ 66.047178][ T6844] dlm: no local IP address has been set [ 66.049615][ T6844] dlm: cannot start dlm midcomms -107 [ 66.067351][ T5964] Bluetooth: hci0: command 0x0419 tx timeout [ 66.243159][ T6853] netlink: 'syz.0.203': attribute type 9 has an invalid length. [ 66.248224][ T6806] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.349378][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 66.352777][ T6857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'. [ 66.389040][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 66.392545][ T6857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'. [ 66.462083][ T1469] cdc_ncm 7-1:1.0: bind() failure [ 66.474889][ T1469] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 66.480370][ T1469] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 66.485351][ T1469] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 66.497947][ T1469] usb 7-1: USB disconnect, device number 3 [ 66.586926][ T6870] pimreg: entered allmulticast mode [ 66.648054][ T6873] serio: Serial port ptm0 [ 66.732572][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 66.732582][ T40] audit: type=1400 audit(1753840054.905:506): avc: denied { mounton } for pid=6879 comm="syz.4.210" path="/27/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 66.747997][ T40] audit: type=1400 audit(1753840054.925:507): avc: denied { getopt } for pid=6879 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.786829][ T61] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.865967][ T6886] netlink: 'syz.4.211': attribute type 4 has an invalid length. [ 66.963676][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.968804][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.971686][ T61] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.978980][ T61] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.981629][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.986121][ T61] usb 5-1: config 0 descriptor?? [ 67.013698][ T6902] IPv4: Oversized IP packet from 127.202.26.0 [ 67.063535][ T6908] x_tables: duplicate underflow at hook 2 [ 67.093581][ T6913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.216'. [ 67.132198][ T6913] netlink: 277 bytes leftover after parsing attributes in process `syz.2.216'. [ 67.185848][ T40] audit: type=1400 audit(1753840055.355:508): avc: denied { name_bind } for pid=6917 comm="syz.2.217" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.193277][ T40] audit: type=1400 audit(1753840055.355:509): avc: denied { node_bind } for pid=6917 comm="syz.2.217" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 67.244440][ T6925] bridge0: entered promiscuous mode [ 67.246837][ T6925] macvlan2: entered promiscuous mode [ 67.323776][ T40] audit: type=1400 audit(1753840055.495:510): avc: denied { view } for pid=6931 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.357494][ T40] audit: type=1400 audit(1753840055.535:511): avc: denied { getopt } for pid=6937 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.433230][ T61] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 67.459078][ T6942] program syz.4.224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.546374][ T40] audit: type=1400 audit(1753840055.715:512): avc: denied { write } for pid=6950 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.618865][ T40] audit: type=1400 audit(1753840055.795:513): avc: denied { mounton } for pid=6957 comm="syz.4.227" path="/proc/99/task" dev="proc" ino=10832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 67.621323][ T6958] netlink: 'syz.4.227': attribute type 7 has an invalid length. [ 67.628865][ T6958] netlink: 224 bytes leftover after parsing attributes in process `syz.4.227'. [ 67.638216][ T6958] 9pnet_fd: p9_fd_create_unix (6958): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 68.020250][ T40] audit: type=1400 audit(1753840056.195:514): avc: denied { create } for pid=6967 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 68.051497][ C0] vkms_vblank_simulate: vblank timer overrun [ 68.061573][ T40] audit: type=1400 audit(1753840056.215:515): avc: denied { getopt } for pid=6967 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.157970][ T5955] Bluetooth: hci0: command 0x0419 tx timeout [ 68.167208][ T6981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.234'. [ 68.173906][ T6984] netlink: 596 bytes leftover after parsing attributes in process `syz.4.235'. [ 68.223424][ T6991] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 68.225744][ T6991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.469785][ T7015] random: crng reseeded on system resumption [ 68.524677][ T7019] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.530026][ T7018] netlink: 'syz.2.244': attribute type 12 has an invalid length. [ 68.532754][ T7018] netlink: 'syz.2.244': attribute type 29 has an invalid length. [ 68.596543][ T7022] openvswitch: netlink: Unknown key attributes 2 [ 68.700185][ T7026] kvm: kvm [7025]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 68.973296][ T7034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.977734][ T7034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.982886][ T7034] bond0 (unregistering): Released all slaves [ 69.111862][ T7037] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 69.114727][ T7037] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.119203][ T7037] overlayfs: failed to set uuid (53/file1, err=-13); falling back to uuid=null. [ 69.122594][ T7039] gfs2: Unknown parameter 'norecoveryp' [ 69.151679][ T7044] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 69.164551][ T7044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.203954][ T7044] bond0: (slave veth3): Enslaving as an active interface with a down link [ 69.225145][ T7045] bond0: (slave veth5): Enslaving as an active interface with a down link [ 69.252587][ T7044] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 69.255828][ T7044] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 69.257746][ T7049] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 69.265164][ T7054] CIFS mount error: No usable UNC path provided in device string! [ 69.265164][ T7054] [ 69.275976][ T7054] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 69.293339][ T7051] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 69.296247][ T7051] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 69.358754][ T5955] Bluetooth: hci2: command 0x0406 tx timeout [ 69.492681][ T7084] bio_check_eod: 2 callbacks suppressed [ 69.492692][ T7084] syz.2.265: attempt to access beyond end of device [ 69.492692][ T7084] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 69.510070][ T7084] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 69.512042][ T61] usb 5-1: USB disconnect, device number 2 [ 69.530005][ T7084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7084 comm=syz.2.265 [ 69.691369][ T7105] SELinux: truncated policydb string identifier [ 69.693600][ T7105] SELinux: failed to load policy [ 69.771862][ T7117] 9pnet_virtio: no channels available for device syz [ 69.937193][ T5992] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.066880][ T5992] usb 7-1: device descriptor read/64, error -71 [ 70.308390][ T5992] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 70.396276][ T7145] ubi31: attaching mtd0 [ 70.403215][ T7145] ubi31: scanning is finished [ 70.406055][ T7145] ubi31: empty MTD device detected [ 70.436853][ T5992] usb 7-1: device descriptor read/64, error -71 [ 70.547014][ T5992] usb usb7-port1: attempt power cycle [ 70.593755][ T7145] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 70.596163][ T7145] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 70.598664][ T7145] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 70.600799][ T7145] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 70.603106][ T7145] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 70.605233][ T7145] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 70.616752][ T7145] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2760904366 [ 70.619992][ T7145] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 70.623773][ T7153] ubi31: background thread "ubi_bgt31d" started, PID 7153 [ 70.822191][ T7169] __nla_validate_parse: 9 callbacks suppressed [ 70.822203][ T7169] netlink: 80 bytes leftover after parsing attributes in process `syz.0.289'. [ 70.896780][ T5992] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 70.917266][ T5992] usb 7-1: device descriptor read/8, error -71 [ 70.950049][ T7176] overlayfs: failed to clone upperpath [ 71.018609][ T7180] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 71.052352][ T7184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.073409][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 71.095219][ T6137] IPVS: starting estimator thread 0... [ 71.110644][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.112704][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.125951][ T7193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7193 comm=syz.0.297 [ 71.130093][ T7192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7192 comm=syz.0.297 [ 71.151834][ T7194] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 71.156326][ T7194] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 71.156823][ T5992] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 71.177209][ T5992] usb 7-1: device descriptor read/8, error -71 [ 71.197985][ T7190] IPVS: using max 41 ests per chain, 98400 per kthread [ 71.287970][ T5992] usb usb7-port1: unable to enumerate USB device [ 71.542003][ T7224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.706969][ T7231] fuse: Bad value for 'fd' [ 71.710423][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.309'. [ 71.783142][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.309'. [ 71.786858][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.309'. [ 71.906102][ T7187] overlayfs: statfs failed on './file0' [ 71.906265][ T7194] overlayfs: statfs failed on './file0' [ 71.958181][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 71.962871][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'. [ 72.825245][ T7288] netlink: 666 bytes leftover after parsing attributes in process `syz.1.316'. [ 72.874229][ T7294] random: crng reseeded on system resumption [ 72.882900][ T7294] Restarting kernel threads ... [ 72.886514][ T7294] Done restarting kernel threads. [ 72.893990][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 72.894003][ T40] audit: type=1400 audit(1753840061.065:558): avc: denied { listen } for pid=7295 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.894187][ T7297] 9pnet_virtio: no channels available for device 127.0.0.1 [ 73.025374][ T40] audit: type=1400 audit(1753840061.195:559): avc: denied { accept } for pid=7315 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 73.079549][ T7322] (syz.1.323,7322,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 73.083791][ T7322] (syz.1.323,7322,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 73.161804][ T7333] afs: Unknown parameter 'dyns2' [ 73.165027][ T7333] overlayfs: overlapping lowerdir path [ 73.924570][ T7342] capability: warning: `syz.1.327' uses deprecated v2 capabilities in a way that may be insecure [ 74.033611][ T7348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.042636][ T7348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.053689][ T7348] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 74.114455][ T40] audit: type=1400 audit(1753840062.285:560): avc: denied { accept } for pid=7352 comm="syz.4.331" path=0076214E0000656469330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 74.223154][ T5964] Bluetooth: hci1: Malformed LE Event: 0x1d [ 74.229034][ T1469] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 74.255437][ T7364] unknown channel width for channel at 909000KHz? [ 74.322420][ T40] audit: type=1400 audit(1753840062.495:561): avc: denied { setopt } for pid=7368 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.335610][ T7369] tipc: Started in network mode [ 74.338326][ T7369] tipc: Node identity 4, cluster identity 4711 [ 74.340446][ T7369] tipc: Node number set to 4 [ 74.354554][ T7369] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 74.388920][ T1469] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.393469][ T1469] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.398826][ T40] audit: type=1400 audit(1753840062.575:562): avc: denied { wake_alarm } for pid=7371 comm="syz.4.338" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.399718][ T1469] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 74.407848][ T40] audit: type=1400 audit(1753840062.575:563): avc: denied { append } for pid=7371 comm="syz.4.338" name="video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.410898][ T1469] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.430701][ T1469] usb 6-1: config 0 descriptor?? [ 74.531623][ T7382] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 74.536642][ T7382] netlink: 'syz.4.341': attribute type 4 has an invalid length. [ 74.547306][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.341'. [ 74.594683][ T7386] QAT: Stopping all acceleration devices. [ 74.639604][ T1469] usbhid 6-1:0.0: can't add hid device: -71 [ 74.643627][ T1469] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 74.650540][ T1469] usb 6-1: USB disconnect, device number 2 [ 74.947181][ T1330] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 75.076874][ T1330] usb 9-1: device descriptor read/64, error -71 [ 75.195245][ T40] audit: type=1400 audit(1753840063.365:564): avc: denied { bind } for pid=7401 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.203166][ T40] audit: type=1400 audit(1753840063.365:565): avc: denied { watch_mount } for pid=7401 comm="syz.2.347" path="/69" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.329029][ T1330] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 75.476841][ T1330] usb 9-1: device descriptor read/64, error -71 [ 75.588944][ T1330] usb usb9-port1: attempt power cycle [ 75.645776][ T40] audit: type=1400 audit(1753840063.815:566): avc: denied { setopt } for pid=7410 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.646360][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.350'. [ 75.946814][ T1330] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 75.977395][ T1330] usb 9-1: device descriptor read/8, error -71 [ 76.006964][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 76.011625][ T7427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.355'. [ 76.031466][ T7430] netlink: 'syz.1.356': attribute type 4 has an invalid length. [ 76.037801][ T7430] netlink: 'syz.1.356': attribute type 4 has an invalid length. [ 76.169393][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 76.172662][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.179606][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.182670][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.185206][ T10] usb 7-1: Product: syz [ 76.186575][ T10] usb 7-1: Manufacturer: æŧ–îˆĩīļ“ãĸœæ‰å¨ŦëŦœä° Í†æŒ„늊谊ԒčŗéŒŦęŦžāĢ€å”¯ãĢ¸č†Ŋâŗ—ėŠ“įē⃚āĒĻâŊ›îēĩãŽę–†ãĄ™å Ē柑âĩĸׄ䩲ꐈë†ŋęļ”ę”ļįŗ¨čģŠæŖ›îŠąėŖŋī€‹īĸ‹âŧ¯îĨ⇸㇉č‹ģčēžâš¨éž€áŽ§ë‚ę‚¸ę¸‘ [ 76.196419][ T7455] Driver unsupported XDP return value 0 on prog (id 55) dev N/A, expect packet loss! [ 76.199125][ T10] usb 7-1: SerialNumber: syz [ 76.207710][ T7419] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.210170][ T7419] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.225467][ T7455] process 'syz.1.362' launched './file0' with NULL argv: empty string added [ 76.226943][ T1330] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 76.236801][ T40] audit: type=1400 audit(1753840064.405:567): avc: denied { execute_no_trans } for pid=7454 comm="syz.1.362" path="/92/file0" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.257236][ T1330] usb 9-1: device descriptor read/8, error -71 [ 76.273626][ T7461] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 76.294552][ T7461] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.333188][ T7461] bond3: (slave veth5): Enslaving as an active interface with a down link [ 76.342451][ T7461] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 76.351474][ T7461] vlan2: entered allmulticast mode [ 76.353281][ T7461] veth0_to_bond: entered allmulticast mode [ 76.356135][ T7461] veth0_to_bond: entered promiscuous mode [ 76.359335][ T7461] veth0_to_bond: left promiscuous mode [ 76.362733][ T7461] veth0_to_bond: entered promiscuous mode [ 76.366322][ T7461] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 76.368284][ T1330] usb usb9-port1: unable to enumerate USB device [ 76.377670][ T7461] veth0_to_bond: left promiscuous mode [ 76.433482][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 76.441384][ T10] usb 7-1: USB disconnect, device number 8 [ 76.446243][ T10] usblp0: removed [ 76.449122][ T7474] netlink: 56 bytes leftover after parsing attributes in process `syz.0.368'. [ 76.467383][ T7474] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.544007][ T7480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.370'. [ 76.548539][ T7480] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 76.563915][ T7480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.590018][ T7480] bond3: (slave veth3): Enslaving as an active interface with a down link [ 76.597797][ T7481] bond3: (slave veth0_to_bond): making interface the new active one [ 76.601287][ T7481] veth0_to_bond: entered promiscuous mode [ 76.603492][ T7481] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 76.638958][ T7487] team0: No ports can be present during mode change [ 76.782999][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 77.062443][ T7527] fuse: Unknown parameter '0x00000000000000070x0000000000000008' [ 77.155154][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 77.159134][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 77.226655][ T7537] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 77.229280][ T7537] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 77.234953][ T7537] vhci_hcd vhci_hcd.0: Device attached [ 77.310047][ T7541] overlayfs: statfs failed on './file0' [ 77.345928][ T7543] netlink: 248 bytes leftover after parsing attributes in process `syz.1.389'. [ 77.387591][ T7545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7545 comm=syz.0.390 [ 77.444727][ T7549] batman_adv: batadv0: Adding interface: ipvlan2 [ 77.449387][ T7549] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.460286][ T7549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.464655][ T7549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.469092][ T7549] batman_adv: batadv0: Interface activated: ipvlan2 [ 77.477810][ T24] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 77.561250][ T7559] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=7559 comm=syz.0.394 [ 77.565246][ T7559] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=7559 comm=syz.0.394 [ 77.573599][ T7559] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=7559 comm=syz.0.394 [ 77.750565][ T7580] mmap: syz.4.398 (7580) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.759164][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 77.912042][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 78.059163][ T7538] vhci_hcd: connection reset by peer [ 78.062002][ T6089] vhci_hcd: stop threads [ 78.063855][ T6089] vhci_hcd: release socket [ 78.067563][ T6089] vhci_hcd: disconnect device [ 78.171185][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 78.229105][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 78.229121][ T40] audit: type=1400 audit(1753840066.405:579): avc: denied { read } for pid=7600 comm="syz.1.404" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 78.239837][ T7603] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 78.255969][ T40] audit: type=1400 audit(1753840066.405:580): avc: denied { open } for pid=7600 comm="syz.1.404" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 78.265090][ T40] audit: type=1400 audit(1753840066.425:581): avc: denied { ioctl } for pid=7600 comm="syz.1.404" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 78.326552][ T40] audit: type=1400 audit(1753840066.495:582): avc: denied { read } for pid=7609 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.413818][ T5964] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 78.418278][ T7617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7617 comm=syz.1.409 [ 78.661831][ T7626] Bluetooth: MGMT ver 1.23 [ 78.873386][ T7655] overlayfs: failed to clone upperpath [ 78.877778][ T40] audit: type=1400 audit(1753840067.045:583): avc: denied { getopt } for pid=7653 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.877894][ T7656] tmpfs: Unknown parameter 'uad' [ 78.883828][ T40] audit: type=1400 audit(1753840067.055:584): avc: denied { create } for pid=7653 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.894788][ T40] audit: type=1400 audit(1753840067.055:585): avc: denied { getopt } for pid=7653 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.930079][ T40] audit: type=1400 audit(1753840067.105:586): avc: denied { write } for pid=7661 comm="syz.1.426" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.937765][ T40] audit: type=1400 audit(1753840067.105:587): avc: denied { open } for pid=7661 comm="syz.1.426" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.957608][ T7664] exFAT-fs (nullb0): invalid boot record signature [ 78.959853][ T7664] exFAT-fs (nullb0): failed to read boot sector [ 78.961868][ T7664] exFAT-fs (nullb0): failed to recognize exfat type [ 78.968638][ T40] audit: type=1400 audit(1753840067.145:588): avc: denied { module_load } for pid=7667 comm="syz.1.428" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=16025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 78.992620][ T7668] Invalid ELF header magic: != ELF [ 79.039104][ T7674] netlink: 'syz.1.431': attribute type 1 has an invalid length. [ 79.105815][ T7672] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=106 sclass=netlink_audit_socket pid=7672 comm=syz.0.430 [ 79.625483][ T7726] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.628853][ T7726] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.632124][ T7726] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.635146][ T7726] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.639439][ T7726] vxlan0: entered promiscuous mode [ 79.780445][ T7742] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 79.821482][ T7737] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 79.836026][ T54] hid-generic 0005:16C0:5505.0004: item fetching failed at offset 0/2 [ 79.840205][ T54] hid-generic 0005:16C0:5505.0004: probe with driver hid-generic failed with error -22 [ 79.888857][ T7753] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 79.891317][ T7753] netlink: 'syz.2.454': attribute type 2 has an invalid length. [ 80.024121][ T7765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7765 comm=syz.2.459 [ 80.048942][ T7770] xt_hashlimit: invalid interval [ 80.092417][ T7775] binder: BINDER_SET_CONTEXT_MGR already set [ 80.094781][ T7775] binder: 7774:7775 ioctl 4018620d 2000000000c0 returned -16 [ 80.099722][ T7775] binder: BINDER_SET_CONTEXT_MGR already set [ 80.102062][ T7775] binder: 7774:7775 ioctl 4018620d 200000000040 returned -16 [ 80.105004][ T7775] binder: 7774:7775 unknown command 0 [ 80.114662][ T7775] binder: 7774:7775 ioctl c0306201 2000000003c0 returned -22 [ 80.206790][ T6037] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 80.356916][ T6037] usb 9-1: Using ep0 maxpacket: 8 [ 80.359858][ T6037] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.363412][ T6037] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.366287][ T6037] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.379929][ T6037] usb 9-1: config 0 descriptor?? [ 80.534844][ T7807] IPv6: addrconf: prefix option has invalid lifetime [ 80.535146][ T7805] overlayfs: maximum fs stacking depth exceeded [ 80.584443][ T6037] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 80.622557][ T7827] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=94 sclass=netlink_xfrm_socket pid=7827 comm=syz.2.474 [ 80.708970][ T5964] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 80.716836][ T5964] Bluetooth: hci0: command 0x0419 tx timeout [ 80.741762][ T7840] trusted_key: syz.1.477 sent an empty control message without MSG_MORE. [ 80.816281][ T7866] netlink: 'syz.2.485': attribute type 5 has an invalid length. [ 80.828028][ T7865] delete_channel: no stack [ 80.895207][ T7874] netlink: 'syz.2.487': attribute type 10 has an invalid length. [ 81.353572][ T838] cfg80211: failed to load regulatory.db [ 81.631231][ T7888] overlayfs: failed to resolve './control': -2 [ 81.732266][ T7898] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 81.735288][ T7898] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.792712][ T7901] __nla_validate_parse: 10 callbacks suppressed [ 81.792725][ T7901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.495'. [ 81.798431][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.495'. [ 82.177281][ T7934] xt_hashlimit: overflow, try lower: 18446744073709551615/9 [ 82.388512][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 82.394542][ T7948] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7948 comm=syz.2.505 [ 82.606759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 82.609641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 82.612696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 82.616868][ T24] vhci_hcd: vhci_device speed not set [ 82.648804][ T7956] nbd: couldn't find a device at index -1605786504 [ 82.686779][ T838] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 82.834926][ T7962] syz_tun: entered allmulticast mode [ 82.838384][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.842078][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.845397][ T838] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.850530][ T838] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.853574][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.865663][ T838] usb 7-1: config 0 descriptor?? [ 82.981594][ T6019] usb 9-1: USB disconnect, device number 6 [ 83.119186][ T7968] tls_set_device_offload: netdev not found [ 83.281110][ T838] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 83.293604][ T838] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 83.344471][ T7980] netlink: 830 bytes leftover after parsing attributes in process `syz.1.517'. [ 83.361089][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 83.361100][ T40] audit: type=1400 audit(1753840071.535:614): avc: denied { read } for pid=7979 comm="syz.1.517" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.373407][ T40] audit: type=1400 audit(1753840071.535:615): avc: denied { open } for pid=7979 comm="syz.1.517" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.383078][ T40] audit: type=1400 audit(1753840071.535:616): avc: denied { ioctl } for pid=7979 comm="syz.1.517" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.425789][ T7983] program syz.4.518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.434309][ T7985] tipc: Enabled bearer , priority 10 [ 83.451246][ T40] audit: type=1400 audit(1753840071.625:617): avc: denied { associate } for pid=7979 comm="syz.1.517" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.569267][ T7988] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 83.609466][ T7961] syz_tun: left allmulticast mode [ 83.641382][ T40] audit: type=1400 audit(1753840071.815:618): avc: denied { create } for pid=7999 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.644203][ T6504] Bluetooth: hci4: Frame reassembly failed (-84) [ 83.651365][ T6504] Bluetooth: hci4: Frame reassembly failed (-84) [ 83.740283][ T8006] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 83.933924][ T8012] netlink: 'syz.4.527': attribute type 5 has an invalid length. [ 83.947216][ T8012] ip6erspan0: entered promiscuous mode [ 84.050862][ T5999] usb 7-1: USB disconnect, device number 9 [ 84.103326][ T40] audit: type=1400 audit(1753840072.275:619): avc: denied { bind } for pid=8015 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.117756][ T40] audit: type=1400 audit(1753840072.295:620): avc: denied { listen } for pid=8015 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.126572][ T40] audit: type=1400 audit(1753840072.295:621): avc: denied { read } for pid=8015 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.363926][ T40] audit: type=1400 audit(1753840072.535:622): avc: denied { write } for pid=8034 comm="syz.2.535" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.364246][ T8037] trusted_key: encrypted_key: master key parameter '' is invalid [ 84.388730][ T40] audit: type=1404 audit(1753840072.555:623): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 84.475342][ T8046] netlink: 292 bytes leftover after parsing attributes in process `syz.2.538'. [ 84.548333][ T24] tipc: Node number set to 1426349453 [ 84.567384][ T8055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.680118][ T5955] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 84.680196][ T5955] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 84.683354][ T5955] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 84.686523][ T5955] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 84.689885][ T5955] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 84.692551][ T5955] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 84.695632][ T5955] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 84.698941][ T5955] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 84.701614][ T5955] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 84.704577][ T5955] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 84.709290][ T8075] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.733385][ T8077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59289 sclass=netlink_route_socket pid=8077 comm=syz.0.549 [ 84.760430][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 84.771223][ T8080] macsec0: entered promiscuous mode [ 84.773081][ T8080] macsec0: entered allmulticast mode [ 84.777936][ T8080] veth1_macvtap: entered allmulticast mode [ 84.780093][ T8080] team0: Device macsec0 is up. Set it down before adding it as a team port [ 84.864670][ T8094] 9pnet: Could not find request transport: unixŽ8¸ [ 84.874879][ T8093] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 84.910255][ T8098] cgroup: fork rejected by pids controller in /syz4 [ 85.019258][ T8177] overlay: ./file1 is not a directory [ 85.231742][ T8195] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 85.239010][ T8195] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 85.441553][ T8203] netlink: 165 bytes leftover after parsing attributes in process `syz.4.569'. [ 85.666976][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 85.669284][ T5964] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 85.721442][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 85.724231][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 85.863404][ T8234] .: renamed from bond0 (while UP) [ 86.011992][ T8246] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 86.014592][ T8246] netlink: 228 bytes leftover after parsing attributes in process `syz.2.586'. [ 86.027406][ T8246] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 86.030244][ T8246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.072164][ T8252] ufs: You didn't specify the type of your ufs filesystem [ 86.072164][ T8252] [ 86.072164][ T8252] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 86.072164][ T8252] [ 86.072164][ T8252] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 86.082338][ T8252] ufs: failed to set blocksize [ 86.091810][ T8256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8256 comm=syz.0.582 [ 86.093493][ T8254] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 86.123124][ T8254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.134303][ T8254] vlan2: entered allmulticast mode [ 86.136015][ T8254] veth1: entered allmulticast mode [ 86.143069][ T8254] bond0: (slave vlan2): making interface the new active one [ 86.148556][ T8254] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 86.855979][ T8288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8288 comm=syz.1.596 [ 86.964336][ T8294] __nla_validate_parse: 3 callbacks suppressed [ 86.964351][ T8294] netlink: 14 bytes leftover after parsing attributes in process `syz.2.598'. [ 86.998415][ T8301] netlink: 256 bytes leftover after parsing attributes in process `syz.2.601'. [ 87.003900][ T8300] netlink: 256 bytes leftover after parsing attributes in process `syz.2.601'. [ 87.101383][ T8307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.130944][ T8316] block nbd2: NBD_DISCONNECT [ 87.135661][ T8316] block nbd2: Disconnected due to user request. [ 87.138813][ T8316] block nbd2: shutting down sockets [ 87.154249][ T8318] input: syz0 as /devices/virtual/input/input9 [ 87.186235][ T8323] netlink: 96 bytes leftover after parsing attributes in process `syz.1.608'. [ 87.260101][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 87.268209][ T5964] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 87.273065][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: kworker/u33:7 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 87.273083][ T5964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.273091][ T5964] Workqueue: hci2 hci_rx_work [ 87.273117][ T5964] Call Trace: [ 87.273122][ T5964] [ 87.273127][ T5964] dump_stack_lvl+0x16c/0x1f0 [ 87.273143][ T5964] sysfs_warn_dup+0x7f/0xa0 [ 87.273161][ T5964] sysfs_create_dir_ns+0x24b/0x2b0 [ 87.273174][ T5964] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 87.273185][ T5964] ? find_held_lock+0x2b/0x80 [ 87.273204][ T5964] ? do_raw_spin_unlock+0x172/0x230 [ 87.273219][ T5964] kobject_add_internal+0x2c4/0x9b0 [ 87.273237][ T5964] kobject_add+0x16e/0x240 [ 87.273253][ T5964] ? __pfx_kobject_add+0x10/0x10 [ 87.273269][ T5964] ? do_raw_spin_unlock+0x172/0x230 [ 87.273283][ T5964] ? kobject_put+0xab/0x5a0 [ 87.273300][ T5964] device_add+0x288/0x1a70 [ 87.273317][ T5964] ? __pfx_dev_set_name+0x10/0x10 [ 87.273327][ T5964] ? __pfx_device_add+0x10/0x10 [ 87.273342][ T5964] ? mgmt_send_event_skb+0x2fb/0x460 [ 87.273359][ T5964] hci_conn_add_sysfs+0x17e/0x230 [ 87.273374][ T5964] le_conn_complete_evt+0x1075/0x1d70 [ 87.273391][ T5964] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 87.273404][ T5964] ? hci_event_packet+0x459/0x11c0 [ 87.273420][ T5964] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 87.273434][ T5964] ? skb_pull_data+0x166/0x210 [ 87.273448][ T5964] hci_le_meta_evt+0x354/0x5e0 [ 87.273462][ T5964] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 87.273477][ T5964] hci_event_packet+0x682/0x11c0 [ 87.273489][ T5964] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 87.273503][ T5964] ? __pfx_hci_event_packet+0x10/0x10 [ 87.273518][ T5964] ? kcov_remote_start+0x3c9/0x6d0 [ 87.273530][ T5964] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.273546][ T5964] hci_rx_work+0x2c5/0x16b0 [ 87.273561][ T5964] ? rcu_is_watching+0x12/0xc0 [ 87.273577][ T5964] process_one_work+0x9cc/0x1b70 [ 87.273595][ T5964] ? __pfx_process_one_work+0x10/0x10 [ 87.273611][ T5964] ? assign_work+0x1a0/0x250 [ 87.273623][ T5964] worker_thread+0x6c8/0xf10 [ 87.273639][ T5964] ? __kthread_parkme+0x19e/0x250 [ 87.273656][ T5964] ? __pfx_worker_thread+0x10/0x10 [ 87.273668][ T5964] kthread+0x3c5/0x780 [ 87.273679][ T5964] ? __pfx_kthread+0x10/0x10 [ 87.273690][ T5964] ? rcu_is_watching+0x12/0xc0 [ 87.273704][ T5964] ? __pfx_kthread+0x10/0x10 [ 87.273715][ T5964] ret_from_fork+0x5d4/0x6f0 [ 87.273724][ T5964] ? __pfx_kthread+0x10/0x10 [ 87.273735][ T5964] ret_from_fork_asm+0x1a/0x30 [ 87.273755][ T5964] [ 87.273770][ T5964] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.297420][ T8337] QAT: Invalid ioctl -2144835806 [ 87.297697][ T5964] Bluetooth: hci2: failed to register connection device [ 87.358014][ T8332] syz.0.612 (8332) used greatest stack depth: 19784 bytes left [ 87.395400][ T8342] netlink: 'syz.4.614': attribute type 9 has an invalid length. [ 87.398622][ T8342] netlink: 212012 bytes leftover after parsing attributes in process `syz.4.614'. [ 87.434006][ T8351] netlink: 'syz.4.617': attribute type 6 has an invalid length. [ 87.436518][ T8351] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.617'. [ 87.446282][ T8350] netlink: 'syz.2.616': attribute type 32 has an invalid length. [ 87.450806][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 87.454644][ T8350] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 87.468488][ T8354] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.618'. [ 87.558795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.561529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.564183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.567729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.570388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.582510][ T8364] netlink: 76 bytes leftover after parsing attributes in process `syz.4.621'. [ 87.748444][ T6498] veth0_to_bond: left promiscuous mode [ 87.905043][ T8379] netlink: 'syz.4.625': attribute type 39 has an invalid length. [ 88.333102][ T8395] Bluetooth: MGMT ver 1.23 [ 88.388558][ T40] kauditd_printk_skb: 191 callbacks suppressed [ 88.388570][ T40] audit: type=1400 audit(1753840077.568:815): avc: denied { read } for pid=8394 comm="syz.4.628" path="socket:[20668]" dev="sockfs" ino=20668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.440536][ T40] audit: type=1400 audit(1753840077.618:816): avc: denied { nlmsg_read } for pid=8394 comm="syz.4.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.447580][ T8404] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 88.468960][ T8404] 8021q: adding VLAN 0 to HW filter on device bond4 [ 88.586553][ T8414] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53 sclass=netlink_xfrm_socket pid=8414 comm=syz.0.634 [ 88.640600][ T40] audit: type=1400 audit(1753840077.818:817): avc: denied { setopt } for pid=8421 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.647791][ T40] audit: type=1400 audit(1753840077.818:818): avc: denied { accept } for pid=8421 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.653876][ T40] audit: type=1400 audit(1753840077.818:819): avc: denied { write } for pid=8421 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.663488][ T40] audit: type=1400 audit(1753840077.818:820): avc: denied { read } for pid=8421 comm="syz.0.636" path="socket:[18970]" dev="sockfs" ino=18970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.671215][ T40] audit: type=1400 audit(1753840077.828:821): avc: denied { setopt } for pid=8396 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.678338][ T40] audit: type=1400 audit(1753840077.838:822): avc: denied { getopt } for pid=8396 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.696386][ T40] audit: type=1400 audit(1753840077.868:823): avc: denied { write } for pid=8410 comm="syz.1.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.710995][ T8412] batman_adv: batadv0: Adding interface: gretap1 [ 88.713269][ T8412] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.724213][ T40] audit: type=1400 audit(1753840077.898:824): avc: denied { mount } for pid=8396 comm="syz.2.630" name="/" dev="ramfs" ino=18313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.726221][ T8412] batman_adv: batadv0: Interface activated: gretap1 [ 88.761438][ T8434] capability: warning: `syz.0.638' uses 32-bit capabilities (legacy support in use) [ 88.851425][ T8444] syz_tun: entered allmulticast mode [ 88.866361][ T8444] dvmrp1: entered allmulticast mode [ 88.892246][ T8443] syz_tun: left allmulticast mode [ 89.376576][ T8466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.510277][ T8481] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 89.529604][ T8483] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 89.713324][ T8509] bridge0: entered promiscuous mode [ 89.717838][ T8509] macvlan2: entered promiscuous mode [ 89.833887][ T8519] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 89.840687][ T8519] overlayfs: failed to set xattr on upper [ 89.843272][ T8519] overlayfs: ...falling back to redirect_dir=nofollow. [ 89.846908][ T8519] overlayfs: ...falling back to index=off. [ 89.849612][ T8519] overlayfs: ...falling back to uuid=null. [ 89.852520][ T8519] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 89.864345][ T8519] : entered promiscuous mode [ 89.894845][ T8524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.899725][ T8524] netlink: 'syz.4.666': attribute type 2 has an invalid length. [ 89.902236][ T8524] nbd: must specify a device to reconfigure [ 89.943641][ T5955] bt_warn_ratelimited: 23 callbacks suppressed [ 89.943653][ T5955] Bluetooth: hci3: unexpected event 0x3e length: 357 > 260 [ 89.945644][ T5955] Bluetooth: hci3: unexpected subevent 0x0d length: 356 > 260 [ 89.950711][ T5955] Bluetooth: hci3: adv larger than maximum supported [ 89.950745][ T5955] Bluetooth: hci3: Malformed LE Event: 0x0d [ 90.152654][ T8556] dummy0: entered allmulticast mode [ 90.209584][ T8567] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 90.210824][ T8565] netlink: 'syz.4.681': attribute type 11 has an invalid length. [ 90.452851][ T8609] hpfs: Bad magic ... probably not HPFS [ 90.776580][ T8629] dummy0: entered promiscuous mode [ 90.779785][ T8629] bridge0: port 3(dummy0) entered blocking state [ 90.781896][ T8629] bridge0: port 3(dummy0) entered disabled state [ 90.784005][ T8629] dummy0: entered allmulticast mode [ 90.787757][ T8629] bridge0: port 3(dummy0) entered blocking state [ 90.789811][ T8629] bridge0: port 3(dummy0) entered forwarding state [ 90.879280][ T8635] i2c i2c-1: Invalid block write size 34 [ 91.213763][ T8668] binder: 8658:8668 ioctl 400c620e 200000000680 returned -22 [ 91.226651][ T8672] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.335963][ T8694] tmpfs: Bad value for 'mpol' [ 91.394622][ T8700] Cache volume key already in use (9p,syz,) [ 91.415714][ T8701] validate_nla: 2 callbacks suppressed [ 91.415727][ T8701] netlink: 'syz.4.715': attribute type 22 has an invalid length. [ 91.435440][ T8701] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.438744][ T8701] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.441652][ T8701] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.444538][ T8701] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.452163][ T8701] netlink: 'syz.4.715': attribute type 22 has an invalid length. [ 91.522646][ T8709] Cannot find del_set index 4 as target [ 91.630326][ T8713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.673276][ T8713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.915589][ T8728] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 91.946643][ T8734] ipt_REJECT: TCP_RESET invalid for non-tcp [ 92.120891][ T8767] fuse: Bad value for 'group_id' [ 92.123109][ T8767] fuse: Bad value for 'group_id' [ 92.203070][ T8779] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 92.216142][ T8779] __nla_validate_parse: 15 callbacks suppressed [ 92.216155][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.741'. [ 92.388499][ T8801] rdma_op ffff8880127da9f0 conn xmit_rdma 0000000000000000 [ 92.656862][ T838] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 92.666933][ T8827] fuse: Unknown parameter 'nd' [ 92.671191][ T8827] overlayfs: failed to resolve './file1': -2 [ 92.798551][ T8836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.760'. [ 92.816804][ T838] usb 6-1: Using ep0 maxpacket: 8 [ 92.820490][ T838] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 92.823108][ T838] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 92.826032][ T838] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 92.830865][ T838] usb 6-1: config 250 has no interface number 0 [ 92.833592][ T838] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 92.838684][ T838] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 92.843019][ T838] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 45193, setting to 1024 [ 92.847979][ T838] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 92.852330][ T838] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 92.858271][ T838] usb 6-1: config 250 interface 228 has no altsetting 0 [ 92.862993][ T838] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 92.867607][ T838] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 92.871147][ T838] usb 6-1: Product: syz [ 92.873081][ T838] usb 6-1: SerialNumber: syz [ 92.890626][ T838] hub 6-1:250.228: bad descriptor, ignoring hub [ 92.893487][ T838] hub 6-1:250.228: probe with driver hub failed with error -5 [ 93.090933][ T838] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 93.260030][ T8858] netlink: 36 bytes leftover after parsing attributes in process `syz.4.766'. [ 93.262858][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.766'. [ 93.265711][ T8858] netlink: 36 bytes leftover after parsing attributes in process `syz.4.766'. [ 93.269157][ T8858] netlink: 36 bytes leftover after parsing attributes in process `syz.4.766'. [ 93.369495][ C0] usblp0: nonzero read bulk status received: -71 [ 93.386858][ T8877] ip6t_srh: unknown srh invflags 7863 [ 93.436375][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 93.436391][ T40] audit: type=1400 audit(1753840082.608:877): avc: denied { bind } for pid=8885 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.450546][ T40] audit: type=1400 audit(1753840082.628:878): avc: denied { name_bind } for pid=8885 comm="syz.2.775" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 93.460884][ T40] audit: type=1400 audit(1753840082.628:879): avc: denied { node_bind } for pid=8885 comm="syz.2.775" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 93.502329][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 93.508018][ T3335] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 93.605524][ T8897] netlink: 'syz.2.778': attribute type 4 has an invalid length. [ 93.653852][ T40] audit: type=1400 audit(1753840082.828:880): avc: denied { connect } for pid=8907 comm="syz.2.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.656903][ T3335] usb 9-1: Using ep0 maxpacket: 8 [ 93.660121][ T40] audit: type=1400 audit(1753840082.828:881): avc: denied { shutdown } for pid=8907 comm="syz.2.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.664144][ T3335] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 93.671984][ T3335] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.675189][ T3335] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.679063][ T3335] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.683149][ T3335] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.686002][ T3335] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.710551][ T8911] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 93.853562][ T8921] netlink: 'syz.2.787': attribute type 27 has an invalid length. [ 93.891841][ T3335] usb 9-1: GET_CAPABILITIES returned 0 [ 93.893687][ T3335] usbtmc 9-1:16.0: can't read capabilities [ 93.899264][ T40] audit: type=1400 audit(1753840083.078:882): avc: denied { setopt } for pid=8924 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.929073][ T8928] netlink: 108 bytes leftover after parsing attributes in process `syz.2.789'. [ 93.964105][ T40] audit: type=1400 audit(1753840083.138:883): avc: denied { connect } for pid=8929 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.976384][ T8930] 8021q: adding VLAN 0 to HW filter on device bond4 [ 94.036078][ T40] audit: type=1400 audit(1753840083.208:884): avc: denied { getopt } for pid=8935 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.103401][ T3335] usb 9-1: USB disconnect, device number 7 [ 94.127532][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.794'. [ 94.371565][ T40] audit: type=1400 audit(1753840083.548:885): avc: denied { accept } for pid=8962 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 94.378951][ T40] audit: type=1400 audit(1753840083.548:886): avc: denied { bind } for pid=8962 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.572136][ T8968] netlink: 'syz.0.801': attribute type 10 has an invalid length. [ 94.575381][ T8968] openvswitch: netlink: Flow key attr not present in new flow. [ 94.656006][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 94.659775][ T8976] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 94.757379][ T6503] ------------[ cut here ]------------ [ 94.759734][ T6503] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 94.762456][ T6503] WARNING: CPU: 0 PID: 6503 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 94.765872][ T6503] Modules linked in: [ 94.767607][ T6503] CPU: 0 UID: 0 PID: 6503 Comm: kworker/u32:61 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 94.773200][ T6503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.776814][ T6503] Workqueue: bond0 bond_mii_monitor [ 94.778502][ T6503] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 94.780390][ T6503] Code: 05 ff ff ff e8 c4 23 4c f8 c6 05 18 f6 21 07 01 90 ba 48 00 00 00 48 c7 c6 e0 b7 e4 8c 48 c7 c7 80 b7 e4 8c e8 a4 2a 0b f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 93 a9 90 e8 9e 7d b1 f8 e9 [ 94.786387][ T6503] RSP: 0018:ffffc900061179f0 EFLAGS: 00010286 [ 94.788426][ T6503] RAX: 0000000000000000 RBX: ffff88805c938000 RCX: ffffffff817b01b8 [ 94.790946][ T6503] RDX: ffff8880249a0000 RSI: ffffffff817b01c5 RDI: 0000000000000001 [ 94.793462][ T6503] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 94.795933][ T6503] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000c22f48 [ 94.798518][ T6503] R13: ffff88805c938cc5 R14: ffffffff8d03d040 R15: ffffffff89a90cf0 [ 94.801025][ T6503] FS: 0000000000000000(0000) GS:ffff8880d66f9000(0000) knlGS:0000000000000000 [ 94.804067][ T6503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.806264][ T6503] CR2: 000000110c429cf2 CR3: 0000000050ab5000 CR4: 0000000000352ef0 [ 94.810599][ T6503] DR0: 0000000000008009 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.813973][ T6503] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 94.817352][ T6503] Call Trace: [ 94.818784][ T6503] [ 94.820061][ T6503] ethtool_op_get_link+0x1d/0x70 [ 94.822200][ T6503] bond_check_dev_link+0x3fc/0x710 [ 94.824429][ T6503] ? __pfx_bond_check_dev_link+0x10/0x10 [ 94.826974][ T6503] bond_mii_monitor+0x3c0/0x2dc0 [ 94.829082][ T6503] ? __pfx_bond_mii_monitor+0x10/0x10 [ 94.831339][ T6503] ? rcu_is_watching+0x12/0xc0 [ 94.833423][ T6503] process_one_work+0x9cc/0x1b70 [ 94.835540][ T6503] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 94.838247][ T6503] ? __pfx_process_one_work+0x10/0x10 [ 94.840540][ T6503] ? assign_work+0x1a0/0x250 [ 94.842542][ T6503] worker_thread+0x6c8/0xf10 [ 94.844535][ T6503] ? __pfx_worker_thread+0x10/0x10 [ 94.846819][ T6503] kthread+0x3c5/0x780 [ 94.848596][ T6503] ? __pfx_kthread+0x10/0x10 [ 94.850585][ T6503] ? rcu_is_watching+0x12/0xc0 [ 94.852647][ T6503] ? __pfx_kthread+0x10/0x10 [ 94.854636][ T6503] ret_from_fork+0x5d4/0x6f0 [ 94.856632][ T6503] ? __pfx_kthread+0x10/0x10 [ 94.858703][ T6503] ret_from_fork_asm+0x1a/0x30 [ 94.860753][ T6503] [ 94.862410][ T6503] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.865435][ T6503] CPU: 0 UID: 0 PID: 6503 Comm: kworker/u32:61 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 94.870371][ T6503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.874837][ T6503] Workqueue: bond0 bond_mii_monitor [ 94.877100][ T6503] Call Trace: [ 94.878811][ T6503] [ 94.880064][ T6503] dump_stack_lvl+0x3d/0x1f0 [ 94.882041][ T6503] panic+0x71c/0x800 [ 94.883690][ T6503] ? __pfx_panic+0x10/0x10 [ 94.885582][ T6503] ? show_trace_log_lvl+0x29b/0x3e0 [ 94.887807][ T6503] ? check_panic_on_warn+0x1f/0xb0 [ 94.889954][ T6503] ? __linkwatch_sync_dev+0x1ed/0x230 [ 94.892213][ T6503] check_panic_on_warn+0xab/0xb0 [ 94.894300][ T6503] __warn+0xf6/0x3c0 [ 94.895942][ T6503] ? __pfx_vprintk_emit+0x10/0x10 [ 94.898069][ T6503] ? __linkwatch_sync_dev+0x1ed/0x230 [ 94.900316][ T6503] report_bug+0x3c3/0x580 [ 94.902167][ T6503] ? __linkwatch_sync_dev+0x1ed/0x230 [ 94.904423][ T6503] handle_bug+0x184/0x210 [ 94.906295][ T6503] exc_invalid_op+0x17/0x50 [ 94.908206][ T6503] asm_exc_invalid_op+0x1a/0x20 [ 94.910016][ T6503] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 94.911914][ T6503] Code: 05 ff ff ff e8 c4 23 4c f8 c6 05 18 f6 21 07 01 90 ba 48 00 00 00 48 c7 c6 e0 b7 e4 8c 48 c7 c7 80 b7 e4 8c e8 a4 2a 0b f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 93 a9 90 e8 9e 7d b1 f8 e9 [ 94.917952][ T6503] RSP: 0018:ffffc900061179f0 EFLAGS: 00010286 [ 94.919881][ T6503] RAX: 0000000000000000 RBX: ffff88805c938000 RCX: ffffffff817b01b8 [ 94.922363][ T6503] RDX: ffff8880249a0000 RSI: ffffffff817b01c5 RDI: 0000000000000001 [ 94.924861][ T6503] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 94.927354][ T6503] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000c22f48 [ 94.929854][ T6503] R13: ffff88805c938cc5 R14: ffffffff8d03d040 R15: ffffffff89a90cf0 [ 94.932338][ T6503] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 94.934277][ T6503] ? __warn_printk+0x198/0x350 [ 94.935831][ T6503] ? __warn_printk+0x1a5/0x350 [ 94.937383][ T6503] ethtool_op_get_link+0x1d/0x70 [ 94.938966][ T6503] bond_check_dev_link+0x3fc/0x710 [ 94.940611][ T6503] ? __pfx_bond_check_dev_link+0x10/0x10 [ 94.942406][ T6503] bond_mii_monitor+0x3c0/0x2dc0 [ 94.943997][ T6503] ? __pfx_bond_mii_monitor+0x10/0x10 [ 94.945711][ T6503] ? rcu_is_watching+0x12/0xc0 [ 94.947248][ T6503] process_one_work+0x9cc/0x1b70 [ 94.948825][ T6503] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 94.950764][ T6503] ? __pfx_process_one_work+0x10/0x10 [ 94.952442][ T6503] ? assign_work+0x1a0/0x250 [ 94.953922][ T6503] worker_thread+0x6c8/0xf10 [ 94.955385][ T6503] ? __pfx_worker_thread+0x10/0x10 [ 94.957004][ T6503] kthread+0x3c5/0x780 [ 94.958291][ T6503] ? __pfx_kthread+0x10/0x10 [ 94.959761][ T6503] ? rcu_is_watching+0x12/0xc0 [ 94.961285][ T6503] ? __pfx_kthread+0x10/0x10 [ 94.962743][ T6503] ret_from_fork+0x5d4/0x6f0 [ 94.964204][ T6503] ? __pfx_kthread+0x10/0x10 [ 94.965832][ T6503] ret_from_fork_asm+0x1a/0x30 [ 94.967437][ T6503] [ 94.969137][ T6503] Kernel Offset: disabled [ 94.970524][ T6503] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:48:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8560d865 RDI=ffffffff9b0e1160 RBP=ffffffff9b0e1120 RSP=ffffc90006117360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9b0e1120 R15=ffffffff8560d800 RIP=ffffffff8560d88f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c429cf2 CR3=0000000050ab5000 CR4=00352ef0 DR0=0000000000008009 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff23f6a8f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d70c11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d70c11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d70c11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d70c11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d70c11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d70c11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000c6f3d RBX=0000000000000001 RCX=ffffffff8b8d1c99 RDX=0000000000000000 RSI=ffffffff8de35f27 RDI=ffffffff8c15bf20 RBP=ffffed1003bd1488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801de8a440 R14=ffffffff90a96150 R15=0000000000000000 RIP=ffffffff8b8d07ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff1d25cdf98 CR3=000000004f161000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd46770ec0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1d1811d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1d1811d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1d1811d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1d1811d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1d1811de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1d1811ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81f6e8b9 RDX=ffff88804caf8000 RSI=ffffffff81f5fb0e RDI=ffffea00017bb000 RBP=ffffea00017bb000 RSP=ffffc9000c87f520 R8 =0000000000000007 R9 =0000018000000000 R10=0000018000000000 R11=0000000000000001 R12=00fff5800000422c R13=0000018000000000 R14=0000018000000000 R15=0000008000000000 RIP=ffffffff81bbf928 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff1d1772760 CR3=00000000328d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00696669775f7472 69765f3168746576 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe976411d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe976411d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe976411d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe976411d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe976411de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe976411ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe976586488 00007fe976586480 00007fe976586478 00007fe976586450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9770ed100 00007fe976586440 00007fe976580004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe976586498 00007fe976586490 00007fe976586488 00007fe976586480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000892d9 RBX=0000000000000003 RCX=ffffffff8b8d1c99 RDX=0000000000000000 RSI=ffffffff8de35f27 RDI=ffffffff8c15bf20 RBP=ffffed1003c5c000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2e0000 R14=ffffffff90a96150 R15=0000000000000000 RIP=ffffffff8b8d07ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3c2292 CR3=000000003bce6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68eac11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68eac11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68eac11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68eac11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68eac11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68eac11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68ead86488 00007f68ead86480 00007f68ead86478 00007f68ead86450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68eb8ed100 00007f68ead86440 00007f68ead80004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68ead86498 00007f68ead86490 00007f68ead86488 00007f68ead86480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000