last executing test programs: 55.668121671s ago: executing program 0 (id=206): syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x167f, 0x5) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x5, 0x5) write$tun(0xffffffffffffffff, &(0x7f00000005c0)={@val={0x0, 0x8100}, @val={0x1, 0x1, 0x2, 0x6d, 0x2, 0x8}, @ipv4=@tcp={{0x32, 0x4, 0x1, 0x27, 0x1d0, 0x68, 0x0, 0xb, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xe8, 0x0, 0x4, [0x9, 0x5, 0x2, 0xfff]}, @lsrr={0x83, 0x17, 0x4c, [@remote, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, @rand_addr=0x64010100, @rand_addr=0x64010102]}, @ssrr={0x89, 0x2b, 0x36, [@multicast1, @multicast2, @broadcast, @local, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @local]}, @cipso={0x86, 0x16, 0x0, [{0x0, 0xb, "f4c3cc6ec0564a5717"}, {0x2, 0x5, "03db0c"}]}, @cipso={0x86, 0x41, 0x3, [{0x1, 0xa, "f49d30c7d9ae8273"}, {0x7, 0xc, "8d5d097236f21560bb46"}, {0x0, 0x10, "68be17b79d302f86d8ed2202534e"}, {0x6, 0x9, "38fdd2a89ac87f"}, {0x6, 0xc, "5b2c2044190f6486c6d0"}]}]}}, {{0x4e22, 0x4e24, r0, r1, 0x1, 0x0, 0x6, 0x80, 0x0, 0x0, 0x80, {[@eol]}}, {"971c52884f2206b0f27cce0b0d1558421a8ab6c6e6a152227502ac5999a91c17ed0111faaee610eb23da5f8aee3bb36cf4a63a5443ab528c465f44575e1e9a72723b7c6b6da2bb202ac88ba544229c35fadb66c22b1787e432a8dee6f56b58658d3f207e488f1ac7a16fe57ba776bb3e72feadb88aa12df9e80f6b7a0e70c7ff0780afe5374c2c768110d87f93f72fb6270a176c83037aab03f3b7ba18ff82c9557da8def41cd12662b7138585932ba2629fe96386636bfb81949500d14a4a531eee621ff0a09c2a69f8b37461fe3c64ec259094d959ea301ec60eec4d8f23b16eea40c43f6f84cce536d188cf6ff6c5"}}}}, 0x1de) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x2, @pix={0x0, 0xa, 0x4f424752, 0x2, 0x0, 0x1a18e3f7, 0x8, 0x81, 0x0, 0x0, 0x1, 0x61d03986f8975690}}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) close(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) 55.667940594s ago: executing program 0 (id=207): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001a00010000f0ffffffffffff0a00002400000000fc"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0x8, 0x18, @dev={0xfe, 0x80, '\x00', 0x2a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x20, 0x8, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@dev, 0x0}, &(0x7f0000000200)=0x14) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd8, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000000) 55.540280049s ago: executing program 0 (id=209): r0 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) r1 = io_uring_setup(0x4ccc, &(0x7f00000020c0)={0x0, 0x82cc, 0x200, 0x1, 0x2df}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f0000002140)={0x82, 0x4513, 0xc7}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000003580), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f00000035c0)) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f00000000c0)={0x1}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000540)={0x2c, 0x7, {0xaa04, @usage=0x7, 0x0, 0xff, 0xaa, 0xfffffffffffffffe, 0x4, 0x10000000000, 0xa6, @usage=0x7, 0x3368, 0x10, [0x8, 0x8, 0x8001, 0x4, 0x2, 0x100]}, {0x9, @usage=0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x6, 0x0, 0x5, 0xa, @struct={0xffffffff, 0x5}, 0x7fff, 0xfff, [0x9, 0x2, 0x2, 0x5, 0x9, 0x2]}, {0xfffffffffffffffd, @struct={0x8, 0xffff}, 0x0, 0x0, 0x200, 0x522, 0x7, 0xe, 0x4, @struct={0x816a, 0x6}, 0xffff, 0xffffffff, [0x8, 0x4, 0x9f9f, 0x2c, 0x34d, 0x5]}, {0x1c, 0x6, 0x8174}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000940)={0x7, 0x1, {0x40, @usage=0x5, 0x0, 0x7, 0x4, 0xd, 0x6, 0x1, 0x69, @usage=0x1, 0x5, 0xfffffffc, [0x100, 0x7f, 0x4, 0x0, 0xf1, 0x80000001]}, {0x490, @usage=0x5, 0x0, 0x3, 0xfffffffffffffffe, 0xffffffff7fffffff, 0xfffffffffffffff8, 0x8001, 0x0, @struct={0xa322, 0xfffff801}, 0x0, 0xffffcadd, [0x3ff, 0x0, 0x5d, 0x6, 0x9, 0x3]}, {0xf11, @struct={0x0, 0xfffffff6}, 0x0, 0x1, 0x6, 0x0, 0x5, 0x8485, 0x20, @usage=0x8, 0x1, 0x3, [0x9, 0x7, 0x7fff, 0x1, 0x7, 0x4a]}, {0x7, 0x1f, 0x2}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080), 0x1c) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r11 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000001000000005000300060000000400041f08000600", @ANYRES32=r12], 0x5c}, 0x1, 0x0, 0x0, 0x40484c1}, 0x4040014) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, '\x00', "09f700", "1ab6c0e5"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "0600", "c7e0263773934a6ccd3b843739b73a9f", '\x00', "5460b4c38a406346"}, 0x28) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000d40)={0x8, 0xf9b176b2ac7470d6, {0x9, @usage=0xfb, r3, 0x6, 0x2, 0x3, 0xd4, 0xfd, 0x80, @struct={0x3, 0x1000}, 0x8, 0xf4a, [0x3, 0x0, 0x8, 0x5, 0x3, 0x1]}, {0x6, @usage, r4, 0xa3d6, 0x9, 0x5, 0x40, 0x9f80, 0xc0, @struct={0x800, 0xa}, 0x6, 0x0, [0x6, 0x78000000000000, 0xff8000000, 0x4, 0x8001, 0x8]}, {0x4, @usage=0x5, r5, 0x1000, 0x9, 0x100, 0xc, 0x6, 0x0, @struct={0x1, 0x9}, 0x0, 0x1ff, [0x80000001, 0x2, 0x100, 0x6, 0x9, 0x803]}, {0x2, 0x0, 0x800}}) syz_open_dev$rtc(&(0x7f0000000000), 0x8, 0x202140) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000011c0)={'team0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r16, 0x40420, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000015c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001580)={&(0x7f0000001200)=ANY=[@ANYBLOB="58030000", @ANYRES16=r9, @ANYBLOB="00012bbd7000ffdbdf25ecffffff07000100", @ANYRES32=r12, @ANYBLOB="b400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004004000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000008000100", @ANYRES32=r12, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r12, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000008000100", @ANYRES32=r10, @ANYBLOB="780002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="b400028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0f000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="b40002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000080080007000000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040004000000"], 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 55.370700468s ago: executing program 0 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @p_u32=&(0x7f0000000100)=0x8}}) (async) close(r0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 55.370146666s ago: executing program 0 (id=214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x4, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) r5 = socket(0x28, 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x1a, 0x80000, 0x2) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x2, 0xf506, 0x4f565559, 0x3, 0x0, 0xff, 0x0, 0x6, 0x1, 0x4, 0x1, 0x4}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r8, 0x4b4c, &(0x7f0000000140)) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xc, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x4000) 55.320416175s ago: executing program 0 (id=215): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = inotify_init1(0x800) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xf) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) syz_usbip_server_init(0x1) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0xb) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000002060300"], 0x58}}, 0x0) mkdirat(r6, &(0x7f0000000080)='./file0\x00', 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 55.281079735s ago: executing program 32 (id=215): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = inotify_init1(0x800) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xf) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) syz_usbip_server_init(0x1) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0xb) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000002060300"], 0x58}}, 0x0) mkdirat(r6, &(0x7f0000000080)='./file0\x00', 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 49.816970886s ago: executing program 4 (id=320): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r0 = syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r1, 0x0) io_uring_enter(r0, 0x47f6, 0xffffffff, 0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f000071a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 49.129918531s ago: executing program 4 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001300010029bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="86ee01000904000005001100010000002c002b80080003000300000008000100", @ANYRES32=r2], 0x54}}, 0x24008844) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@RTM_NEWNSID={0x14, 0x58, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000c801}, 0x8040) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000600)=0x6, 0xfffffc6c) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={r6, r0, 0x401, 0x1000, &(0x7f00000031c0)="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", 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x7, 'syz0\x00'}) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x17, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f15239d200", "3f4300ff0008000000000100", [0x8001, 0x101]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x2400c000) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r7, &(0x7f0000000140)={0x18, 0x0, r8, {0x1}}, 0x18) 49.026104722s ago: executing program 4 (id=336): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) renameat2(r2, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r5, 0x0) listen(r4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x400, 0x0) 48.96861765s ago: executing program 4 (id=339): socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0xec62, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000000)={0x1, 0x200, 0x0, 0x5, 0xb9b, 0x9}) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r4, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 46.330386951s ago: executing program 4 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c0000000400000004000000090000000000", @ANYRES32=r1], 0x48) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0xed27, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x3, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) r8 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 46.180863538s ago: executing program 4 (id=387): shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="0000000000008000280012"], 0x50}}, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140017eefb020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x8084) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 31.200101378s ago: executing program 33 (id=387): shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="0000000000008000280012"], 0x50}}, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140017eefb020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x8084) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 27.73007152s ago: executing program 5 (id=577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') (async) chdir(&(0x7f0000000300)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000}, &(0x7f0000000040), &(0x7f0000000080)) (async) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) mkdir(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4000810) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4000810) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000bc0)={0x7fff, 0x0, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x81, 0x8, {0x0}, {0xffffffffffffffff}, 0x10000, 0xf5e}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000640)={r2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000640)={r2}) syz_emit_ethernet(0x4b, &(0x7f0000000680)={@random="775dd2fd9f82", @broadcast, @void, {@llc_tr={0x11, {@llc={0x1, 0x4, 'B', "774e0fb874d3a972d6d436649f47e6bbdd8d016defccf414333ae80130ab7ff8c2a51f936081d0b5341b6f73ed4b401407462264742ae084f36e"}}}}}, &(0x7f0000000700)={0x1, 0x4, [0x17a, 0xfa3, 0x2f5, 0x7cb]}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, r7, 0x1, 0x1, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40800) getpgid(r5) statx(r1, &(0x7f0000000980)='./file0\x00', 0x1000, 0x400, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) (async) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) sendmsg$netlink(r6, &(0x7f0000000600)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000040)={0x14, 0x18, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x4, 0xce}]}, 0x14}, {&(0x7f0000002000)={0x13ac, 0x34, 0x400, 0x70bd27, 0x25dfdbff, "", [@nested={0x9e, 0xea, 0x0, 0x1, [@nested={0x4, 0xc3}, @typed={0x4, 0x90}, @generic="ab496f0b1728d161c01dd2cd00113540d681c3f107dcf5de82aaddb152edac949ca6015be818dbe15a3c83c20c2524961fc1fbe85f66312627fcab1412012e1fa883e8aa7d732516380eec9306c128006071c2a9ba65dd24b1bce358ad6abb4bcfc2adfb20bfd2f1c5d630cc647ffbdd309ba77a3f55edd018a1d50f32db6d61f1bb", @nested={0x4, 0x151}, @nested={0x4, 0x127}, @typed={0x7, 0x124, 0x0, 0x0, @str='9p\x00'}]}, @nested={0x2db, 0x2d, 0x0, 0x1, [@nested={0xc6, 0x70, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @uid=r8}, @generic="9868a161e5ba01f50d5c53c18b28cd0ddc3a7c2c19e79c9a2aa7e1a7c83a0f266191dbb4b331ea615328b229a45e6caaa6cc490233f3521227e55a363d98a5de44e852a63c633d85c695d69b6b30ed4edfb5c151a09a2d1b91f930102d2c4ed834d152b9e09114810669a08697897346e617af69e919b23f89d1e922e13c216e858d01458e4bd39107754a867563c39df3b9aa59980b8809ec3510f307bbd71269e688c91244f0a4d431", @nested={0x4, 0xcb}, @nested={0x4, 0x13b}, @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@multicast2}]}, @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@local}, @generic="552ee04b112ecf0a35d76744ce6cadcc3bd752c69aa97cc9a460186c223c51cf2195ac3fb65f229a34bfb1e131b2af732269d6569b310807e9e3162af0609fa00d1588bfcc43dbc6ecc6dd098b0d5399eae84be8d222e8828fe675a9b2d3e0a533983e9ec1bfc1ceb6b508e7c34215e6b6b073eefb750ddf06c94518e675e45eb60c75684a17188ffdba3fdcb01bfdcac8e968c70899793478063961fdb92ea4400c7d789ebc5218561516d977df44fc1f02df2203831f2d70ef8deb509e632f31", @typed={0xda, 0x12e, 0x0, 0x0, @binary="86908114a383554f04bef8ede1759eab9d5513ce2ff1e5bb983115152a43971789a6ac7e7829db6e851a11c6df9e0569ff638c29dbeb58643c859e379f9e46c2e28b66d423958d35a8f6f892cfdbb0c65e7b58f586e0906c3ecc4793b370c48b22838a28565ec43a1a07dbb8ca8222fe864fa1bdb65fbe2a5387e195c25f43b1c1dae8c01bab0dfc33913e3b9c1c91acbb3fcdf1763bf919aaccb5e4b79a39d536ca00849139538039d982853cae2f915baab7479c6b75e309d161a091f11325c2b0608ad0f3120275bff937c6f54f0312acd97f7b1a"}, @generic="1c65a60ba38577a774ffd08ac6a2ad4e93aebcb7bcc897a35c651da8ca19f5c9dc1f7b3a2f532481d23acfafe59ed68dc754bfb70a58e23bf43497d7556d5e7e846ae9e591b4057cb849a424446a1b37f76764059c17a8f20dc4fc6c76fa"]}, @nested={0x4, 0xa2}, @typed={0x8, 0x13d, 0x0, 0x0, @u32}, @generic="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", @typed={0x4, 0x9a}, @typed={0x8, 0xc5, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, 0x13ac}], 0x2, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}], 0x40, 0x804}, 0x4000000) 27.539474295s ago: executing program 5 (id=637): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x3507, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0xffffffffffffff71, 0x1}, 0x28) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1b, &(0x7f0000000100)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x50, 0x7, 0x6, 0x9, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1fffc00}, @call={0x85, 0x0, 0x0, 0x13}, @alu={0xd, 0x1, 0x9, 0x0, 0x6, 0x30, 0x8}, @alu={0x4, 0x0, 0xc, 0x0, 0xb, 0xffffffffffffffa7, 0xfffffffffffffffc}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.870595204s ago: executing program 5 (id=643): r0 = syz_clone(0x804800, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200000000000000d00400"]) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x7, 0x9}) prctl$PR_CAPBSET_DROP(0x2f, 0x12) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000053000000000000000000440f22c0410f", @ANYRESOCT], 0x53}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r8, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async, rerun: 32) chdir(&(0x7f0000000140)='./bus\x00') (rerun: 32) renameat2(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f00000001c0)='./file1\x00', 0x6) lremovexattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='user.incfs.id\x00') capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000040)={0x1, 0x2, 0x9, 0x7, 0xf8000000, 0xfce}) (async) ptrace$cont(0x19, r0, 0xd, 0x4) 26.818123169s ago: executing program 34 (id=643): r0 = syz_clone(0x804800, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200000000000000d00400"]) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x7, 0x9}) prctl$PR_CAPBSET_DROP(0x2f, 0x12) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000053000000000000000000440f22c0410f", @ANYRESOCT], 0x53}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r8, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async, rerun: 32) chdir(&(0x7f0000000140)='./bus\x00') (rerun: 32) renameat2(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f00000001c0)='./file1\x00', 0x6) lremovexattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='user.incfs.id\x00') capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000040)={0x1, 0x2, 0x9, 0x7, 0xf8000000, 0xfce}) (async) ptrace$cont(0x19, r0, 0xd, 0x4) 4.864235357s ago: executing program 3 (id=1118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075c, 0xfffffffb}}]}, 0xc4}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r2], 0x24}}, 0x0) 4.861334821s ago: executing program 3 (id=1120): r0 = fsopen(&(0x7f0000000180)='befs\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20082cbd7000e1dbdf258600000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffffff1d000000080022013b0100000500180137000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4805) r3 = fsmount(r0, 0x0, 0x1) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101000) ioctl$CEC_DQEVENT(r5, 0xc0506107, &(0x7f0000000040)={0x0, 0x0, 0x0, @lost_msgs}) openat$cgroup_pressure(r3, &(0x7f0000000540)='memory.pressure\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89b1, &(0x7f00000000c0)={'vlan1\x00', @multicast}) ioctl$CDROMVOLCTRL(r4, 0x530a, &(0x7f0000000080)={0x5, 0xbb, 0x1, 0x7}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x25, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x85, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x6b67, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) r9 = fanotify_init(0x200, 0x0) r10 = dup(r9) fanotify_mark(r9, 0x1, 0x8001053, r10, 0x0) ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r13, r14, &(0x7f0000fe4000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="b805002000b9fa0000000f03d9c4c3d96dfac61bf7b805000000c4c27958fc0fae41d901107c7c00b87f8b7f26ba230000000f30660fc775022e0fe90c9866ba4100ec0f3566b8578b0000b842c700000f23c80f21f890380a0a23f8", 0x5c}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r15}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r11}, 0x10) 4.481005137s ago: executing program 3 (id=1130): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 4.480383282s ago: executing program 3 (id=1132): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x4, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@ignoreqv}, {@directio}], [{@audit}]}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) getpgid(r1) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c008ffe53cd8293a00cab1ca7f80585a716c65a4af36599850c71f66137c254fa9b14e17b546dd3c4362074b7e971383acc00d09d84937a23a51c7d5e8f428791d788395342fdf19eeac59ab99878337482a38eb7ee2cc92b8c5468f62ef85a707685ca0b78276dce8abf0e932d35f1fa2f14e1e15f6b51e72018fd28f8cb4caca5ff5d5cc47af54f06a9beb430a796221952d9dfe075a142aa0bb1e0bd6862368c88aabc950bd0fcc7eb3cb38bdcf1900efd586b6fce3f9f1659a36654d8e6381ccb3e442dc12255cdc0626ce4001effcda81920ed613969192d2b33451503f68bcd"]) 4.389885047s ago: executing program 3 (id=1133): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x53}], 0x1}, 0x40fd) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0xdddd0000, 0x56, &(0x7f00000000c0)=""/86}]}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1}) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000240)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) r7 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000ff00ff020000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) io_uring_enter(r4, 0x351a, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) (async) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x53}], 0x1}, 0x40fd) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$int_in(r3, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0xdddd0000, 0x56, &(0x7f00000000c0)=""/86}]}) (async) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) (async) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1}) (async) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000240)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) (async) socket(0x10, 0x80002, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000ff00ff020000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x0) (async) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) io_uring_enter(r4, 0x351a, 0x0, 0x4, 0x0, 0x0) (async) 4.190460615s ago: executing program 3 (id=1134): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a000005001000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.143367968s ago: executing program 35 (id=1134): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a000005001000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.86671437s ago: executing program 6 (id=1155): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_BROADCAST={0x0, 0x2, @multicast}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.794858334s ago: executing program 6 (id=1157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000540)="8a21d57b0000", 0x0, 0x0, 0x10001, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xf, 0x7, 0x1, 0x0, "e389484d95d6f5067fc93d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4042080}, 0x34040001) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 2.794409229s ago: executing program 6 (id=1159): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0x246742, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x5, 0x12) (async, rerun: 32) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 1.81002728s ago: executing program 1 (id=1178): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r8 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{0x80000000}, {0x80000000}}, {{0x80000000, 0x0}}]}) r12 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r12, 0x5404) semget$private(0x0, 0x20000000102, 0x0) (async) r13 = semget$private(0x0, 0x20000000102, 0x0) semop(r13, &(0x7f0000000380)=[{0x2, 0xffff}], 0x1) semctl$SETALL(r13, 0x0, 0x11, &(0x7f0000000100)=[0x81]) semtimedop(r13, &(0x7f0000000000)=[{}, {}], 0x2, 0x0) (async) semtimedop(r13, &(0x7f0000000000)=[{}, {}], 0x2, 0x0) semctl$IPC_RMID(r13, 0x0, 0x10) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000200)={{r9, r11, 0x3, [0x6, 0x1]}, {r10, r11, 0x1, [0xfffffff7, 0x9]}, 0x2, [0x5, 0x80000000]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000200)={{r9, r11, 0x3, [0x6, 0x1]}, {r10, r11, 0x1, [0xfffffff7, 0x9]}, 0x2, [0x5, 0x80000000]}) 1.75017316s ago: executing program 6 (id=1179): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x80) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0x6, 0x1, [0x5, 0x5, 0x7, 0x2, 0xe], [0x5, 0x5, 0x101, 0x0, 0x6, 0x4, 0x4, 0x5, 0x7, 0x6, 0x6, 0x400, 0x9e2, 0x5, 0x7fffffff, 0x5, 0x10, 0x8, 0x4, 0x9, 0x2, 0x7fff, 0xa42, 0x2, 0x1000, 0x1, 0x5, 0x709a, 0x6, 0x8, 0x2, 0x6, 0x8, 0x1000, 0x73f1573b, 0x9, 0x0, 0x4, 0x0, 0x235, 0x6, 0x8, 0x3ff, 0x6, 0x100000000, 0x4, 0xaa0, 0x76, 0x4, 0x6be, 0x1, 0x3, 0x8, 0xe, 0x6, 0x1, 0x0, 0x3, 0x2, 0x0, 0x7, 0x6, 0x62b, 0x2, 0x400, 0x10000, 0x6, 0xfad9, 0x5, 0x9, 0xf02, 0x8000000000000000, 0x6, 0xf3, 0x4, 0xfffffffffffffff9, 0xe, 0x200, 0x1, 0x7, 0x9d, 0xed, 0x357, 0xfffffffffffffffa, 0x3, 0xffffffff, 0x1000, 0x9, 0x2, 0x3, 0x80, 0xf7a3, 0xffffffffffffffff, 0xfffffffffffffff7, 0xe, 0xa, 0x60e5, 0x0, 0x1, 0x1, 0x3, 0x1, 0xb9, 0x7, 0x4, 0x4, 0x6, 0xadc, 0x100000001, 0xa0d5, 0x3ff, 0x0, 0x4, 0x56, 0xa692, 0x6, 0x0, 0xd5d, 0xfffffffffffffff8, 0x5f, 0x400]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={r1, "c12f3a65d923cc7a98f8870ee2a5657d"}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000014c0)=@o_path={&(0x7f0000001480)='./file0\x00', 0x0, 0x10, r0}, 0x18) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x4, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x30, 0x2e, 0x5f]}}, &(0x7f0000001540)=""/63, 0x29, 0x3f, 0x1, 0x2}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x1f, 0x7fffffff, 0x6, 0xff, 0x8208, r2, 0x6, '\x00', 0x0, r3, 0x3, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000018c0)={0x1b, 0x0, 0x0, 0x5, 0x0, r2, 0x401, '\x00', 0x0, r3, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000019c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)='%-010d \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x8, 0x1e, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xcf}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @exit, @call={0x85, 0x0, 0x0, 0x8a}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001740)='GPL\x00', 0x0, 0x95, &(0x7f0000001780)=""/149, 0x21183cb2041f49eb, 0x12, '\x00', 0x0, @fallback=0x16, r3, 0x8, &(0x7f0000001840)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001880)={0x5, 0x6, 0x5, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a00)=[r4, r2, r5, r6, 0xffffffffffffffff, r4, r2], 0x0, 0x10, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001c40)={r5, &(0x7f0000001b00)="06e541be137cf04cb8a2b660b8f10dfadfe62b32ba73ed7b04b09bb99bdaf2bacc3d49dfed2a687521e087d1cf402798279123facbfa858df22edbb52c766d4b00e36ab7e5a0b28051", &(0x7f0000001b80)=""/161}, 0x20) readv(r7, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/236, 0xec}, {&(0x7f0000002d80)=""/146, 0x92}], 0x3) r8 = syz_open_dev$vcsu(&(0x7f0000002e80), 0x1, 0x100) ioctl$sock_bt_hci(r8, 0x400448e3, &(0x7f0000002ec0)="d230f0581cf041407092b22e56779ceaf4da0ac555cc08d40ebc86de37f2cd6eb17406ebecafaf05e5ea52cc685ef5722f5bd5e207a87780c7f2f4136868f7281decd4d6407f8d77f8c537a7b65ea1e7cb6448698fc0b3fb0908a3271e1d645fc16512a92cedb964cdf652887a6a2dba40571b9e2c2e") getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000003000)={@remote, @empty, 0x0}, &(0x7f0000003040)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003180)={0x18, 0x5, &(0x7f0000002f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000002f80)='GPL\x00', 0x10000, 0x4, &(0x7f0000002fc0)=""/4, 0x41100, 0x2, '\x00', r9, 0x0, r3, 0x8, &(0x7f0000003080)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000030c0)={0x4, 0xf, 0x1ff, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000003100)=[r2], &(0x7f0000003140)=[{0x5, 0x1, 0x4}, {0x2, 0x1, 0x9, 0x4}, {0x5, 0x1, 0x2, 0x3}, {0x1, 0x2, 0xe, 0x4}], 0x10, 0x1}, 0x94) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000035c0)={0x4, 0x0, [{0xdddd1000, 0xc1, &(0x7f0000003240)=""/193}, {0x2000, 0x53, &(0x7f0000003340)=""/83}, {0x4000, 0xc1, &(0x7f00000033c0)=""/193}, {0x100000, 0xd1, &(0x7f00000034c0)=""/209}]}) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000036c0)={&(0x7f0000003680)=""/47, 0x0, 0x800, 0x2, 0x3}, 0x20) epoll_pwait(r8, &(0x7f0000003700)=[{}, {}, {}], 0x3, 0x9, &(0x7f0000003740)={[0x6]}, 0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000003780)=0x1, 0x4) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000037c0)={'vcan0\x00', 0x201}) read(r10, &(0x7f0000003800)=""/186, 0xba) bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x12, 0x10, &(0x7f00000038c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ldst={0x3, 0x1, 0x4, 0x4, 0x7, 0x30}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003940)='syzkaller\x00', 0x0, 0xf2, &(0x7f0000003980)=""/242, 0x40f00, 0x21, '\x00', r9, @fallback=0x29, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003a80)={0x5, 0xf, 0x3fd, 0x3}, 0x10, 0xffffffffffffffff, r2, 0x8, 0x0, &(0x7f0000003ac0)=[{0x0, 0x3, 0x7}, {0x5, 0x5, 0xb, 0xa}, {0x2, 0x1, 0xa, 0xc}, {0x3, 0x2, 0xa, 0x4}, {0x1, 0x3, 0xf, 0x9}, {0x1, 0x2, 0x2, 0x5}, {0x2, 0x1, 0x7, 0xc}, {0x1, 0x2, 0xd, 0x4}], 0x10, 0xf}, 0x94) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000003c00)={0x3, r8}) inotify_init() r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448dc, &(0x7f0000003c40)="0463f38e6943123b44a1930b0cd46b9997ce644b22073bdc780390a6aa98f680b10a797634e4a8bf4ae438558cf36f8ed9bbadda24483a3d57d4646d07ef9f0e7253bfbff2e16319a498c177efcf4483b7743aaa57b8bd9397497ca3") openat$kvm(0xffffffffffffff9c, &(0x7f0000003cc0), 0xfa82ff720aa35df7, 0x0) mprotect(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0) accept4$tipc(r8, &(0x7f0000003d00)=@name, &(0x7f0000003d40)=0x10, 0x0) 1.749790353s ago: executing program 6 (id=1180): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="13a8892019f1989dcb3695d96b609322d26e29fc35fee071c96d80bd46d6966cbe6b7a2cae610580a28150f9f09c86ff97e05d454faac2546a34871e68f5cbd68fd4b71e2aac0dc7620672a5d97f2b82603a6f9c25d5b78524ab47fb3c477a39625e82d11bae649b50912c5c3749d587d40f3b177c88c8e1a95a9580e76e4915e7a4d9d1bac139a4c4b3ea19d86435997790b8f33ed64746f783dcbca965f77a4ebc4ee05aaa5e68d551b3cb668bb5be8cb0f5c6d64346d4aa329d80f904bee07383", 0xc2}, {&(0x7f0000000bc0)='T[X', 0x3}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x77e}], 0x1}}], 0x2, 0x4) lseek(r0, 0x0, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x7, 0x700, 0x3, 0x101, {{0x35, 0x4, 0x3, 0x2, 0xd4, 0x68, 0x0, 0xab, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @end, @timestamp={0x44, 0x14, 0xb5, 0x0, 0x9, [0x7, 0x2, 0xd6, 0xff]}, @rr={0x7, 0x7, 0x46, [@multicast1]}, @timestamp_addr={0x44, 0x14, 0x9c, 0x1, 0x0, [{@multicast1, 0x401}, {@local, 0xdf}]}, @timestamp={0x44, 0x14, 0xf2, 0x0, 0xc, [0x6, 0x9, 0x8, 0x34000000]}, @lsrr={0x83, 0x7, 0x3f, [@empty]}, @lsrr={0x83, 0x27, 0x94, [@loopback, @multicast2, @rand_addr=0x64010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @remote, @remote]}, @timestamp_addr={0x44, 0x4c, 0x17, 0x1, 0x3, [{@private=0xa010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfffff238}, {@broadcast, 0x2}, {@empty, 0x1}, {@multicast1, 0x2}, {@rand_addr=0x64010101, 0x2}, {@remote, 0x3}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010101, 0x5}]}]}}}}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x0, '\x00', r2, r0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb, 0x9, 0x0, 0x1, 0x3010000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x5}, [@CGW_CS_XOR={0x8, 0x5, {0x3, 0x0, 0x0, 0x7}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "ee1990a380ecab90"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="13a8892019f1989dcb3695d96b609322d26e29fc35fee071c96d80bd46d6966cbe6b7a2cae610580a28150f9f09c86ff97e05d454faac2546a34871e68f5cbd68fd4b71e2aac0dc7620672a5d97f2b82603a6f9c25d5b78524ab47fb3c477a39625e82d11bae649b50912c5c3749d587d40f3b177c88c8e1a95a9580e76e4915e7a4d9d1bac139a4c4b3ea19d86435997790b8f33ed64746f783dcbca965f77a4ebc4ee05aaa5e68d551b3cb668bb5be8cb0f5c6d64346d4aa329d80f904bee07383", 0xc2}, {&(0x7f0000000bc0)='T[X', 0x3}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x77e}], 0x1}}], 0x2, 0x4) (async) lseek(r0, 0x0, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x7, 0x700, 0x3, 0x101, {{0x35, 0x4, 0x3, 0x2, 0xd4, 0x68, 0x0, 0xab, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @end, @timestamp={0x44, 0x14, 0xb5, 0x0, 0x9, [0x7, 0x2, 0xd6, 0xff]}, @rr={0x7, 0x7, 0x46, [@multicast1]}, @timestamp_addr={0x44, 0x14, 0x9c, 0x1, 0x0, [{@multicast1, 0x401}, {@local, 0xdf}]}, @timestamp={0x44, 0x14, 0xf2, 0x0, 0xc, [0x6, 0x9, 0x8, 0x34000000]}, @lsrr={0x83, 0x7, 0x3f, [@empty]}, @lsrr={0x83, 0x27, 0x94, [@loopback, @multicast2, @rand_addr=0x64010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @remote, @remote]}, @timestamp_addr={0x44, 0x4c, 0x17, 0x1, 0x3, [{@private=0xa010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfffff238}, {@broadcast, 0x2}, {@empty, 0x1}, {@multicast1, 0x2}, {@rand_addr=0x64010101, 0x2}, {@remote, 0x3}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010101, 0x5}]}]}}}}}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x0, '\x00', r2, r0, 0x0, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb, 0x9, 0x0, 0x1, 0x3010000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x5}, [@CGW_CS_XOR={0x8, 0x5, {0x3, 0x0, 0x0, 0x7}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "ee1990a380ecab90"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 1.630289561s ago: executing program 6 (id=1181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) (async) r1 = syz_usb_connect$cdc_ncm(0x1, 0x78, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0xac, 0x10, 0xfd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "fb431e9e01"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0xa, 0xc, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xf9}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0x3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x2, 0x8}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xa2, 0xc7, 0xf, 0x8, 0x1}, 0x146, &(0x7f0000000200)={0x5, 0xf, 0x146, 0x4, [@generic={0x18, 0x10, 0x4, "b73087fcf5045191953e4cfe53d5d3840329cf1077"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7f, 0xc9, 0x9}, @generic={0x103, 0x10, 0xa, "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"}, @ssp_cap={0x1c, 0x10, 0xa, 0xca, 0x4, 0x0, 0xf00, 0x8, [0xf0, 0xc0, 0xe7ecf02552eef187, 0x3f]}]}, 0x2, [{0x81, &(0x7f0000000380)=@string={0x81, 0x3, "e6f3b16e41ac6def61ae18fcc6f0e4bb5ac3c2a38caa107cfed6938ef4587b4441d1bb2092c8233112f36931e90119eba28d5474e2c286d413c01755e2e6e69c690472cf718f3679c1a556eec8b924f840d60257790aec2c272a68078dfa5e48143a94d746bca022191db6e450ed8530589a2e2b8796c681f0c7b1b8819e50"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_disconnect(r1) 910.178075ms ago: executing program 1 (id=1186): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000380)=[{0x80, 0x7, 0x0, 0x2}, {0x16}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd2b, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0xfffffffffffffdfa, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) recvmsg$unix(r4, &(0x7f00000001c0)={&(0x7f0000000440)=@abs, 0xfffffffffffffffc, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/173, 0xad}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x5a, &(0x7f0000000140)}, 0x40) 910.044294ms ago: executing program 2 (id=1187): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x1, 0x1, 0x3, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x30314142}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000000c0)={{0x80, 0x6}, {0x48, 0x5}, 0x4, 0x7}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) fcntl$notify(r2, 0x402, 0x26) 849.469041ms ago: executing program 2 (id=1188): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x300, 0x181) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffdfc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483e0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4040004) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0xb5) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 846.924355ms ago: executing program 2 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffdfc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483e0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4040004) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x28, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 749.08977ms ago: executing program 2 (id=1190): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000f3dbdf255c00000008000300", @ANYRES32=r1, @ANYBLOB="0000000000000000ba48e077fcf574"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x320, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000040)={'wlan0\x00'}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000f3dbdf255c00000008000300", @ANYRES32=r1, @ANYBLOB="0000000000000000ba48e077fcf574"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x320, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000040)={'wlan0\x00'}) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) (async) 700.264494ms ago: executing program 2 (id=1191): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x401) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x486000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000040)={r6, r4, 0x0, 0x80000001, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000700)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="0b96441095e765850a23d0c7ddb2a41e60154a98670f35822d7a2ac00a21b3095c84bf90f52d77deaefb5289ddd67edc3d1c2ec68b890ababdaaa615abb5b27d83234516c891f1780aaf6abefee99bc1015382375335c141f20de19d7d182152c6267f3c557c0a6eff07e6fc74bbfc07c8afdbf4bb33119b02f075f671d90fb53744926e073a6a400a4f811dee3b2d00aa77eea24f0da7965cd80c4ee309fee471571bce589bd79bc6e65b2a98d09166ba7e75a51e10c0f3a0dcbb0bcb", 0xbd}, {&(0x7f0000000380)="34d23ad8d7f311c27c7896c2a28efc64bed062393d9cc491e6b6f2d574f7bd604d58b2ddcfb39271b928744d9a2008eccb7ff480f9f04d7fde6fcc919dbef697b8666f413ecc818ee91046226feeb545dec0ba2160c85d9b6847cbca6eb1e60d165683a8bd436c1aca715d11942be18cde4d167138146c33c8ccf365dde36693d78d2e49e836a2dde964025644bce2c85ad3a886d4f5f826c5d78d80732e1fb6968b956c0b551fee3a5781", 0xab}, {&(0x7f0000000440)="ce", 0x1}, {&(0x7f0000000480)="d8f659e9e3413c95ddc665a80e7141f60eaf439951b98c154a55ac66d20e45c2452c05d3845138c673877ce3fce3da072fd980c0966927bda1b250eddebf57d99c2a7ae417f26793e3f9dc224a580e58482e4182d5c7ce1bc9f2080a6a064c4f6cc0cb2b7612befd9f1fbbf2c64865889f90ed0a11d084", 0x77}, {&(0x7f0000000500)="8128452f17e4bc25c1cdce14979312ba852843e066ab3b4ccaace98189cc6529aca4c0a3dfcd63974f2fc76a855e316b88aff5c16257f7382cdadeab3b738bf97a", 0x41}, {&(0x7f0000000600)="4c3315d2027b527f51adbb75880cc591c1c329dba6fd547ec7add061e59ba38906202ceaa4f748864b2cd003323e79ee5e9fe33d6d397a0349969f6a33174c7fcce024fd7c40d84c6865188c4f250b2a75a307ce24d1c7923c8f1ebb9ce4854c8e6fbd99384e530e63322af60b5fe356328bd80dbef64c8f00a384717118a4fe365d3e820e42018977095b1fcb713fa5e6d716f1a7855216fa4e9057b5d8291308ea4c0461531dd7b743113bcb18c0a14bdfbd73fb356b80613f1b8d5ae9f371bf532bef9e95a16ea891909d4a7f0db68732b315c1986994fbf2bdab8a168ffd5fdb505a5c8aa08a5e44d8300aab4ff47519a63a8a60f1", 0xf7}], 0x7, 0x3, 0xb) write$dsp(r0, &(0x7f0000000080)="5ce54843e3e7d320bfd8d4f092b1a81e3fbbea1df81254069014fa50111b21ab19d32ea757af2e112d15dc4f8441bd2d66344dccdd16b530351bd48a42e9d302ea2cf964744cd484b5cf91b1b1771d946736ce95d6df693453753a2d5ed34fdd1da7f0125ae0b6f4f9ff908b019997cc4ae6f8bc24055ef4c1b5da5cb7ebde7088c19161c9a60109d5c17267440fab8b7b1bcccdfc9eb18979c7a79ec9b99c63c506da7aec37fc3f8908a11b9a86f2548300fb812788f94f384b01c9ce2db3cc750bf35c034fabb44d72b7976473e4fe1a8225d9ea45378e23d87adf", 0xdc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xed5d, 0x12d00, 0x0, 0xcb}, &(0x7f0000000180), &(0x7f0000000200)) 616.798592ms ago: executing program 2 (id=1192): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0900de5c", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="080026008009000008002700030000000800a00001000100"], 0x34}}, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abdff00fcdbdf250100000006000800a1aa000005001d001200000006000af41b0014000000"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4042, 0x0) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06864ce, &(0x7f0000000100)={r13, 0x0, 0x6, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f0000000300)={r13}) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f00000002c0)={r14, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f0000000180)={r15}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'ni_daq_700\x00', [0x4f27, 0x2, 0x10004, 0x4, 0x3, 0xcc4, 0x4, 0x8000a, 0xe, 0x6, 0x6, 0x0, 0x1, 0x10000, 0x6, 0x10000105, 0x0, 0x1a44d, 0x3, 0x3fff7fff, 0x89, 0x10, 0xc1a, 0x20001e59, 0x1, 0xe69, 0x0, 0x3, 0x6, 0xffffffff, 0xfffffff8]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x51}, 0x94) r16 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r16, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r16, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x800, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) ioctl$COMEDI_DEVCONFIG(r16, 0x40946400, &(0x7f0000000180)={'mpc624\x00', [0xfffffff8, 0x6, 0xffffffff, 0x7fff, 0x5, 0x5, 0x7, 0x0, 0x4, 0x5, 0x2, 0x6, 0xfffffff9, 0x0, 0x8, 0xc, 0x10001, 0x7, 0xfffffffd, 0x1, 0xfff, 0x0, 0x8, 0x0, 0xf0, 0x2, 0x3, 0x6, 0x7, 0x8, 0x6e, 0xea]}) 437.81109ms ago: executing program 7 (id=1195): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x7, 0x34343452, 0x27e, 0x10000, 0x0, @discrete={0x0, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) fsopen(&(0x7f0000000ec0)='zonefs\x00', 0x0) r1 = creat(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) 437.677046ms ago: executing program 7 (id=1196): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000004c80)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @default}, 0x1c) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000000)=""/90) 370.093608ms ago: executing program 7 (id=1197): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffc, 0x2, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="8688", &(0x7f0000002240)=""/4079, 0x0, 0x6, 0xfffffffc, 0x0}) 368.568911ms ago: executing program 7 (id=1198): mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc111f000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "ffffffffffffffff", "75e207f9124edc5b938000", "ed0b4000", "578619a280c847dd"}, 0x28) sendfile(r1, r2, &(0x7f0000000100)=0xd00, 0x10001) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x0, 0x3231564e, 0x0, 0x3, [{0x101, 0x9fb}, {0xb, 0x4}, {0x6, 0x1}, {0x3, 0x7fffffff}, {0x1, 0x8}, {0x7ff, 0x2007}, {0x7, 0x8}, {0x6, 0x2d19}], 0x1, 0x0, 0x0, 0x2, 0x1}}) 309.986598ms ago: executing program 7 (id=1199): futex(&(0x7f0000000180)=0x4, 0x1, 0x1, 0x0, 0x0, 0xfffffffe) r0 = syz_io_uring_setup(0x2b06, &(0x7f0000000040), &(0x7f0000ffd000), &(0x7f0000ffe000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) mq_timedsend(r1, &(0x7f0000000440)="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", 0x1000, 0x18e, &(0x7f00000000c0)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f00000003c0), 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 250.441995ms ago: executing program 7 (id=1200): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000c47000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000c47000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000000)={0x23, 0xff, 0x8, 0x7}) (async) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000000)={0x23, 0xff, 0x8, 0x7}) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x1, 0x1c0}, @l2cap_cid_signaling={{0x1bc}, [@l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x7, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x4, 0x4}}, @l2cap_info_rsp={{0xb, 0x5, 0xa1}, {0x1, 0x8, "89f3c31484540714939851c9740321a15269f2b492efa6680d629e23c92b722473b973998041bcf6e517688b8cb65716a2dbe70332f072056294d07b1d25a4dee741ba378b961c3b524fc102e1effd543b1846142d96a46471dafee0e4c797823b231210f1bb2432eecb0dbb0b7a5ca0822f18ed1807b3cec85f67bbef6669b1677991ccb1d83b9a4e7fa72d5b8376b2f0d25850f8032c51e960abdb40"}}, @l2cap_info_rsp={{0xb, 0x2, 0xf7}, {0x10, 0x81, "6a60c74af2708173003149057ab77fc3463d82565cee598d7d398ba195cdb7e06de6848745c743e33e4c3ffd3838e70c821c006f219882d4c084c77f124033038b3c45f529645e4324afa9bd3ee91afd38cc320dc0c9971793a265f4dbc1abda6240ddf7effe89ce23317bf8c7f1ed8911cfd8999066762e2b3732ae802024ff55368558b4b4c54c5682b59b318d2359ccae8f962617aba5e1e34e53bc26f84b7083b6a5e3a337e03ec4345eacfdc3f386291dcc574c0846e5c0010eb34720f88517213bbf39edbeea831ef32f053dbc3cf1ec28adfec030f352b31811001e028cfaf88e8e2b2497779f5b821ed59f91499ec4"}}, @l2cap_create_chan_rsp={{0xd, 0x32, 0x8}, {0x42a, 0x2cc2, 0x9, 0x8}}]}}, 0x1c5) 60.393017ms ago: executing program 1 (id=1201): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) (async) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x10f400, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000080)={0x1b, 0x2}) (async) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f00000000c0)={0x550, 0x360, 0x9e0, 0x300, 0x33d, 0x6b00, 0xf, 0x1, {0x3, 0x8000, 0x1}, {0x4, 0x9}, {0xff, 0x8}, {0x7cde, 0x5, 0x1}, 0x2, 0x10, 0x1ff, 0x1, 0x1, 0xa, 0xf4ca, 0x7f, 0x7, 0x1, 0x4, 0x401, 0x0, 0x200, 0x0, 0xb}) fcntl$setstatus(r1, 0x4, 0x7b28d195458c09b4) read$fb(r1, &(0x7f0000000180)=""/87, 0x57) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000240)={0x2e, 0x1}) mmap(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x8, 0x11, r0, 0x80204000) fcntl$setstatus(r0, 0x4, 0x7800) (async) write$fb(0xffffffffffffffff, &(0x7f0000000280)="60f869ac9a0b257e4e00f8e0004bddfd09a92f84d6c87e81345e6eab6055d239774b5902ea8366018a2193bdcf14c8cbd3a1b429cb4e898d0b28975d07cd2e055fd2308489e5e9561ed7a52876ad9e6b6c105a6c474daba2ff285fa42cdecdf155927c84b7a6935d2770e0982328e09b76a33687d1320ce60b18c967bec85eb6366392fef79ebdc14ab5172369c549e05b6ca77f8e9dbafce292450ec4d5bb2b4b6fd58c205f4ddefc", 0xa9) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x202200, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000380)={0x0, r1, 0xb, 0x7, 0xfffffffffffffff2, 0x621}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000400)={0x0, 0x3ff}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) ioctl$KVM_CAP_SYNC_REGS(r6, 0x4068aea3, &(0x7f0000000480)) (async) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000500)) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xeb, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x29, 0xf1, 0x34, 0x9, 0x12, @remote, @dev={0xfe, 0x80, '\x00', 0x40}, 0x80, 0x80, 0xffffff01, 0x7fff}}) (async) getsockopt$inet6_mreq(r6, 0x29, 0x0, &(0x7f0000000a00)={@private0, 0x0}, &(0x7f0000000a40)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000bc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xfc, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) (async) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f0000000c00)={0x2, 0x3, 0x8}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r5) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000c80)={0x6, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000cc0)={0x7, r13}) 60.169192ms ago: executing program 1 (id=1202): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000001c0)={0x1, 0x5, 0x1}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="140000004a00010200800000000000000a"], 0x14}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="140000004a00010200800000000000000a"], 0x14}}, 0x0) 246.406µs ago: executing program 1 (id=1203): r0 = syz_io_uring_setup(0x10e, 0x0, &(0x7f00000003c0), &(0x7f0000000300)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000100)={0x1ff, 0x2, 0x2}, 0x0) 0s ago: executing program 1 (id=1204): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xf1ff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}]}}]}, 0x40}}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x80000002, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xe, 0x100, 0x2, 0x1, 0x1, 0x800, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x4c, 0xb, 0xe69, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8]}) kernel console output (not intermixed with test programs): d allmulticast mode [ 75.684336][ T7370] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 75.719017][ T40] audit: type=1400 audit(1752991407.267:508): avc: denied { setopt } for pid=7373 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.083380][ T40] audit: type=1400 audit(1752991407.627:509): avc: denied { remount } for pid=7386 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.656597][ T40] audit: type=1400 audit(1752991408.197:510): avc: denied { getattr } for pid=7396 comm="syz.1.405" name="/" dev="9p" ino=35913888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.656634][ T7397] overlayfs: statfs failed on './file0' [ 76.669312][ T7398] fuse: Bad value for 'fd' [ 76.669313][ T7397] fuse: Bad value for 'fd' [ 76.837030][ T7409] fuse: Bad value for 'group_id' [ 76.839150][ T7409] fuse: Bad value for 'group_id' [ 77.039366][ T7420] block device autoloading is deprecated and will be removed. [ 77.042712][ T7422] tmpfs: Unknown parameter ' [ 77.042712][ T7422] ~C|{WK_NrЩ҅a0j}Z_`m\pߑ'*yr(' [ 77.042742][ T7420] syz.1.412: attempt to access beyond end of device [ 77.042742][ T7420] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 77.289032][ T7435] fuse: Unknown parameter 'fmݔFƯiՏd' [ 77.308636][ T5364] udevd[5364]: worker [6769] terminated by signal 33 (Unknown signal 33) [ 77.311272][ T5364] udevd[5364]: worker [6769] failed while handling '/devices/virtual/block/loop3' [ 77.388451][ T7448] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 77.416269][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.422'. [ 77.459527][ T7452] netlink: 'syz.2.423': attribute type 13 has an invalid length. [ 77.462251][ T7452] macvtap0: entered promiscuous mode [ 77.464764][ T7452] macvtap0: refused to change device tx_queue_len [ 77.734891][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 77.776175][ T7484] input: syz1 as /devices/virtual/input/input13 [ 77.797574][ T7484] fuse: Unknown parameter 'fd>0x0000000000000009' [ 77.839752][ T7478] binder: 7477:7478 ioctl 4018620d 0 returned -22 [ 77.902907][ T7488] netlink: 200 bytes leftover after parsing attributes in process `syz.2.435'. [ 77.972387][ T7496] program syz.1.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.073272][ T7507] netlink: 'syz.2.443': attribute type 14 has an invalid length. [ 78.075034][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 78.113409][ T7510] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 78.115018][ T7513] JFS: charset not found [ 78.116997][ T7510] netlink: 'syz.2.445': attribute type 2 has an invalid length. [ 78.222266][ T7529] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7529 comm=syz.1.450 [ 78.983192][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 78.983206][ T40] audit: type=1400 audit(1752991410.527:527): avc: denied { kexec_image_load } for pid=7534 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 79.019180][ T40] audit: type=1400 audit(1752991410.567:528): avc: denied { read } for pid=7536 comm="syz.2.453" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.026078][ T40] audit: type=1400 audit(1752991410.567:529): avc: denied { open } for pid=7536 comm="syz.2.453" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.127446][ T40] audit: type=1400 audit(1752991410.677:530): avc: denied { mounton } for pid=7549 comm="syz.2.457" path="/108/bus" dev="tmpfs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 79.130239][ T7552] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 79.134398][ T7548] vivid-000: ================= START STATUS ================= [ 79.139256][ T7548] vivid-000: Test Pattern: 75% Colorbar [ 79.141199][ T7548] vivid-000: Fill Percentage of Frame: 100 [ 79.143009][ T7548] vivid-000: Horizontal Movement: No Movement [ 79.144893][ T7548] vivid-000: Vertical Movement: Move Down Slow [ 79.146831][ T7548] vivid-000: OSD Text Mode: All [ 79.148822][ T7548] vivid-000: Show Border: false [ 79.150379][ T7548] vivid-000: Show Square: false [ 79.151901][ T7548] vivid-000: Sensor Flipped Horizontally: false [ 79.153843][ T7548] vivid-000: Sensor Flipped Vertically: false [ 79.155684][ T7548] vivid-000: Insert SAV Code in Image: false [ 79.158606][ T7550] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 79.158610][ T7548] vivid-000: Insert EAV Code in Image: false [ 79.162643][ T7548] vivid-000: Insert Video Guard Band: false [ 79.164499][ T7548] vivid-000: Reduced Framerate: true [ 79.166171][ T7548] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 79.169013][ T7548] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 79.171830][ T7548] vivid-000: Enable Capture Cropping: true grabbed [ 79.173870][ T7548] vivid-000: Enable Capture Composing: true grabbed [ 79.175919][ T7548] vivid-000: Enable Capture Scaler: true grabbed [ 79.178085][ T7548] vivid-000: Timestamp Source: End of Frame [ 79.179988][ T7548] vivid-000: Colorspace: SMPTE 170M [ 79.181629][ T7548] vivid-000: Transfer Function: Default [ 79.183359][ T7548] vivid-000: Y'CbCr Encoding: Default [ 79.185043][ T7548] vivid-000: HSV Encoding: Hue 0-179 [ 79.186723][ T7548] vivid-000: Quantization: Default [ 79.188491][ T7548] vivid-000: Apply Alpha To Red Only: false [ 79.190362][ T7548] vivid-000: Standard Aspect Ratio: 4x3 [ 79.192097][ T7548] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 79.194499][ T7548] vivid-000: DV Timings: 640x480p59 inactive [ 79.196326][ T7548] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 79.198864][ T7548] vivid-000: Maximum EDID Blocks: 2 [ 79.200514][ T7548] vivid-000: Limited RGB Range (16-235): false [ 79.202443][ T7548] vivid-000: Rx RGB Quantization Range: Automatic [ 79.204443][ T7548] vivid-000: Power Present: 0x00000001 [ 79.206182][ T7548] tpg source WxH: 720x576 (Y'CbCr) [ 79.207900][ T7548] tpg field: 3 [ 79.209112][ T7548] tpg crop: (0,0)/64x64 [ 79.210457][ T7548] tpg compose: (0,0)/16x8 [ 79.211825][ T7548] tpg colorspace: 1 [ 79.213036][ T7548] tpg transfer function: 0/1 [ 79.214482][ T7548] tpg Y'CbCr encoding: 0/1 [ 79.215895][ T7548] tpg quantization: 0/2 [ 79.217326][ T7548] tpg RGB range: 0/2 [ 79.218585][ T7548] vivid-000: ================== END STATUS ================== [ 79.323017][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 79.463860][ T7575] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.465861][ T40] audit: type=1400 audit(1752991411.007:531): avc: denied { write } for pid=7574 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.472662][ T40] audit: type=1400 audit(1752991411.007:532): avc: denied { map } for pid=7574 comm="syz.2.465" path="socket:[18782]" dev="sockfs" ino=18782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.480567][ T40] audit: type=1400 audit(1752991411.007:533): avc: denied { read } for pid=7574 comm="syz.2.465" path="socket:[18782]" dev="sockfs" ino=18782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.487629][ T7566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.461'. [ 79.575019][ T7577] infiniband syz1: set down [ 79.577285][ T7577] infiniband syz1: added syz_tun [ 79.601394][ T7577] RDS/IB: syz1: added [ 79.603060][ T7577] smc: adding ib device syz1 with port count 1 [ 79.605094][ T7577] smc: ib device syz1 port 1 has pnetid [ 79.771198][ T7585] random: crng reseeded on system resumption [ 79.777433][ T40] audit: type=1400 audit(1752991411.317:534): avc: denied { write } for pid=7584 comm="syz.1.468" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.784612][ T40] audit: type=1400 audit(1752991411.317:535): avc: denied { open } for pid=7584 comm="syz.1.468" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.796630][ T7585] Hibernate inconsistent memory map detected! [ 79.799143][ T7585] PM: hibernation: Image mismatch: architecture specific data [ 80.057199][ T61] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 80.180524][ T40] audit: type=1400 audit(1752991411.727:536): avc: denied { setopt } for pid=7590 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 80.207227][ T61] usb 6-1: Using ep0 maxpacket: 32 [ 80.215945][ T61] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 80.219074][ T61] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 80.222720][ T61] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 235, changing to 11 [ 80.226865][ T61] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 17467, setting to 1024 [ 80.230981][ T61] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 80.235431][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.241413][ T61] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 80.244730][ T61] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 80.248329][ T61] usb 6-1: Product: syz [ 80.249879][ T61] usb 6-1: Manufacturer: syz [ 80.251528][ T61] usb 6-1: SerialNumber: syz [ 80.254978][ T61] usb 6-1: config 0 descriptor?? [ 80.257725][ T7585] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.261392][ T61] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 80.266145][ T61] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 80.719520][ T53] usb 6-1: USB disconnect, device number 3 [ 80.728151][ T53] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 81.162710][ T7608] max out of range [ 81.164330][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 81.167147][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 81.289392][ T7620] usb usb1: usbfs: process 7620 (syz.2.477) did not claim interface 0 before use [ 81.293999][ T7620] net_ratelimit: 8 callbacks suppressed [ 81.294007][ T7620] openvswitch: netlink: EtherType 0 is less than min 600 [ 81.304811][ T7623] overlay: ./file1 is not a directory [ 81.305353][ T7624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'. [ 81.349901][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 81.360244][ T10] cfg80211: failed to load regulatory.db [ 81.423163][ T7636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7636 comm=syz.1.482 [ 81.575903][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.579180][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.582423][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.585713][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.588989][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.591556][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.594710][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.596696][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.600161][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.602034][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.604326][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.605350][ T7653] openvswitch: netlink: Duplicate key (type 0). [ 81.606207][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.614480][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.616484][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.619813][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.621839][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.624384][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.626376][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.629346][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.631287][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.633681][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.635672][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.639125][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.641991][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.645182][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.648364][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.651488][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.653963][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.657648][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.659597][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.662001][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.663885][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.666586][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.669134][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.671511][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.673400][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.675716][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.677880][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.680234][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.682106][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.684437][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.686237][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.689651][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.692059][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.695245][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.697639][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.700127][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.702036][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.704296][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.705320][ T7665] overlayfs: conflicting lowerdir path [ 81.706174][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.710282][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.712055][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.712109][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.716282][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.718681][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.720512][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.722739][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.724583][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.726939][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.728892][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.731230][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.733140][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.735459][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.737393][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.739690][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.741553][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.743860][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.746775][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.749658][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.751524][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.753846][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.755714][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.758173][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.760030][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.762295][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.764139][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.766477][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.768413][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.770759][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.772640][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.775024][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.776899][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.779292][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.781094][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.783392][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.785261][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.788060][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.789949][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.792268][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.794137][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.796404][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.798392][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.800700][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.802565][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.804876][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.806788][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.809276][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.811134][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.813459][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.815319][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.817692][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.819548][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.821846][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.823691][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.826021][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.827937][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.830264][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.832102][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.834424][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.836288][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.838935][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.840827][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.843333][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.845206][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.847614][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.849478][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.851788][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.853654][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.856013][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.857970][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.860277][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.862144][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.864445][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.866469][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.868866][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.871222][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.874122][ T7649] binder: BINDER_SET_CONTEXT_MGR already set [ 81.876455][ T7649] binder: 7647:7649 ioctl 4018620d 200000000040 returned -16 [ 81.917473][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 82.010489][ T7681] overlayfs: failed to resolve 'verity=require': -2 [ 82.097338][ T61] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 82.227235][ T61] usb 7-1: device descriptor read/64, error -71 [ 82.467270][ T61] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 82.586226][ T7691] program syz.3.498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.589431][ T60] Bluetooth: Error in BCSP hdr checksum [ 82.607447][ T61] usb 7-1: device descriptor read/64, error -71 [ 82.719020][ T61] usb usb7-port1: attempt power cycle [ 82.825179][ T7693] macsec0: entered promiscuous mode [ 82.827558][ T7693] macsec0: entered allmulticast mode [ 82.829681][ T7693] veth1_macvtap: entered allmulticast mode [ 82.836879][ T7693] pim6reg9: entered allmulticast mode [ 83.057296][ T61] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 83.077834][ T61] usb 7-1: device descriptor read/8, error -71 [ 83.317158][ T61] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 83.337569][ T61] usb 7-1: device descriptor read/8, error -71 [ 83.366410][ T7714] xt_socket: unknown flags 0x50 [ 83.447299][ T61] usb usb7-port1: unable to enumerate USB device [ 84.637266][ T5961] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 84.637282][ T5964] Bluetooth: hci4: command 0x1003 tx timeout [ 84.694379][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 84.944493][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 84.944507][ T40] audit: type=1400 audit(1752991416.487:539): avc: denied { execmem } for pid=7737 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.976755][ T7738] syzkaller0: entered promiscuous mode [ 84.979201][ T7738] syzkaller0: entered allmulticast mode [ 84.986939][ T40] audit: type=1400 audit(1752991416.527:540): avc: denied { relabelfrom } for pid=7733 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.993667][ T40] audit: type=1400 audit(1752991416.527:541): avc: denied { relabelto } for pid=7733 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 85.155893][ T7745] binder: 7744:7745 ioctl 4018620d 0 returned -22 [ 85.158339][ T7745] binder: 7744:7745 ioctl c0306201 2000000003c0 returned -14 [ 85.161233][ T7745] binder: 7744:7745 ioctl c0306201 0 returned -14 [ 85.172405][ T7743] netlink: 'syz.1.512': attribute type 39 has an invalid length. [ 86.040354][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 86.045371][ T7751] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 86.057128][ T40] audit: type=1400 audit(1752991417.597:542): avc: denied { bind } for pid=7750 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.063186][ T40] audit: type=1400 audit(1752991417.607:543): avc: denied { listen } for pid=7750 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.069647][ T40] audit: type=1400 audit(1752991417.607:544): avc: denied { connect } for pid=7750 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.077559][ T40] audit: type=1400 audit(1752991417.607:545): avc: denied { accept } for pid=7750 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.098169][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 86.169226][ T7758] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 86.184302][ T40] audit: type=1400 audit(1752991417.727:546): avc: denied { map } for pid=7756 comm="syz.1.518" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.204539][ T40] audit: type=1400 audit(1752991417.747:547): avc: denied { getopt } for pid=7759 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.281836][ T40] audit: type=1400 audit(1752991417.827:548): avc: denied { write } for pid=7774 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.317791][ T7782] netlink: 'syz.1.526': attribute type 29 has an invalid length. [ 86.320989][ T7783] netlink: 'syz.1.526': attribute type 29 has an invalid length. [ 86.323852][ T7783] netlink: 500 bytes leftover after parsing attributes in process `syz.1.526'. [ 86.326757][ T7782] netlink: 'syz.1.526': attribute type 29 has an invalid length. [ 86.428445][ T7789] workqueue: Failed to create a rescuer kthread for wq "nfc11_nci_tx_wq": -EINTR [ 86.580570][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 86.589886][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 86.592717][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 86.596070][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 86.599189][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 86.601965][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 86.604793][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 86.607919][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 86.612380][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 86.716199][ T7858] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 86.721702][ T7862] wireguard0: entered promiscuous mode [ 86.723486][ T7862] wireguard0: entered allmulticast mode [ 86.838199][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.842727][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.850535][ T7876] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.854175][ T7876] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.857687][ T7876] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.861082][ T7876] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.010598][ T7893] netlink: 'syz.3.548': attribute type 4 has an invalid length. [ 87.015858][ T7893] : renamed from bond0 (while UP) [ 87.063094][ T7897] trusted_key: syz.3.550 sent an empty control message without MSG_MORE. [ 87.080327][ T53] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 87.156500][ T7907] option changes via remount are deprecated (pid=7906 comm=syz.2.553) [ 87.200179][ T7911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.205136][ T7911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.210256][ T7911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.215583][ T7911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7911 comm=syz.3.555 [ 87.238861][ T53] usb 6-1: unable to get BOS descriptor or descriptor too short [ 87.242370][ T53] usb 6-1: not running at top speed; connect to a high speed hub [ 87.246067][ T53] usb 6-1: config 1 has an invalid descriptor of length 89, skipping remainder of the config [ 87.250567][ T53] usb 6-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.255416][ T53] usb 6-1: config 1 interface 0 has no altsetting 0 [ 87.259947][ T53] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.263397][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.266498][ T53] usb 6-1: Product: syz [ 87.279273][ T53] usb 6-1: Manufacturer: syz [ 87.281094][ T53] usb 6-1: SerialNumber: syz [ 87.349780][ T7921] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.490829][ T53] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 87.497466][ T53] usb 6-1: USB disconnect, device number 4 [ 88.021860][ T7926] program syz.1.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.182836][ T7938] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 88.199846][ T7938] bond2: entered promiscuous mode [ 88.202044][ T7938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.211747][ T7939] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.214500][ T7939] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 88.219248][ T7939] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 88.224873][ T7939] bond2: (slave ip6gre1): making interface the new active one [ 88.228138][ T7939] ip6gre1: entered promiscuous mode [ 88.231015][ T7939] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 88.352653][ T7952] netlink: 'syz.1.568': attribute type 10 has an invalid length. [ 88.427197][ T6041] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 88.590303][ T6041] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 115, changing to 10 [ 88.594047][ T6041] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 24671, setting to 1024 [ 88.599176][ T6041] usb 7-1: config 0 interface 0 has no altsetting 0 [ 88.603331][ T6041] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.606188][ T6041] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.611446][ T6041] usb 7-1: Product: syz [ 88.612768][ T6041] usb 7-1: Manufacturer: syz [ 88.614239][ T6041] usb 7-1: SerialNumber: syz [ 88.618312][ T6041] usb 7-1: config 0 descriptor?? [ 88.624099][ T6041] usb 7-1: selecting invalid altsetting 0 [ 88.651886][ T7975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.654909][ T7975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.658518][ T7975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.825140][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.828135][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.837407][ T1024] usb 7-1: USB disconnect, device number 11 [ 88.842382][ T5964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.852353][ T5964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.855743][ T5964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.860971][ T5964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.864331][ T5964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.878730][ T7992] bridge_slave_1: entered allmulticast mode [ 89.048518][ T7995] chnl_net:caif_netlink_parms(): no params data found [ 89.109555][ T90] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.130051][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.170076][ T7995] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.172452][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.175337][ T7995] bridge_slave_0: entered allmulticast mode [ 89.178139][ T7995] bridge_slave_0: entered promiscuous mode [ 89.181334][ T7995] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.183802][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.186261][ T7995] bridge_slave_1: entered allmulticast mode [ 89.189219][ T7995] bridge_slave_1: entered promiscuous mode [ 89.189737][ T8006] sctp: [Deprecated]: syz.3.582 (pid 8006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.189737][ T8006] Use struct sctp_sack_info instead [ 89.225588][ T90] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.233548][ T7995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.238123][ T7995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.276645][ T7995] team0: Port device team_slave_0 added [ 89.280829][ T7995] team0: Port device team_slave_1 added [ 89.313171][ T90] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.327514][ T7995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.329691][ T7995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.338069][ T7995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.342144][ T7995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.344307][ T7995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.353125][ T7995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.395471][ T90] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.429093][ T7995] hsr_slave_0: entered promiscuous mode [ 89.431291][ T7995] hsr_slave_1: entered promiscuous mode [ 89.433684][ T7995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.436664][ T7995] Cannot create hsr debugfs directory [ 89.517636][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.588486][ T8014] syz.3.586 (8014) used greatest stack depth: 17976 bytes left [ 89.651199][ T8037] fuse: Unknown parameter 'rootm|e' [ 89.666150][ T90] bridge_slave_1: left allmulticast mode [ 89.668691][ T90] bridge_slave_1: left promiscuous mode [ 89.671182][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.678840][ T1183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.682301][ T6038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.686685][ T90] bridge_slave_0: left allmulticast mode [ 89.690593][ T90] bridge_slave_0: left promiscuous mode [ 89.692422][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.772490][ T8046] nbd: couldn't find a device at index -1605786504 [ 89.953924][ T8061] netlink: 'syz.1.599': attribute type 3 has an invalid length. [ 89.960649][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 89.960659][ T40] audit: type=1400 audit(1752991421.507:571): avc: denied { ioctl } for pid=8060 comm="syz.1.599" path="socket:[22830]" dev="sockfs" ino=22830 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.972496][ T40] audit: type=1400 audit(1752991421.507:572): avc: denied { setopt } for pid=8060 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.994729][ T40] audit: type=1400 audit(1752991421.537:573): avc: denied { map } for pid=8065 comm="syz.1.601" path="/dev/nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.007778][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.019874][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.024767][ T90] bond0 (unregistering): Released all slaves [ 90.038985][ T8075] SELinux: Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped). [ 90.042906][ T40] audit: type=1400 audit(1752991421.587:574): avc: denied { relabelfrom } for pid=8074 comm="syz.3.603" name="" dev="pipefs" ino=20248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 90.054204][ T40] audit: type=1400 audit(1752991421.587:575): avc: denied { relabelto } for pid=8074 comm="syz.3.603" name="" dev="pipefs" ino=20248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:ptchown_exec_t:s0" [ 90.084052][ T7995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.098751][ T7995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.103106][ T7995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.109643][ T7995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.150255][ T40] audit: type=1400 audit(1752991421.697:576): avc: denied { read } for pid=8094 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.173234][ T40] audit: type=1400 audit(1752991421.717:577): avc: denied { setopt } for pid=8087 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.254815][ T40] audit: type=1400 audit(1752991421.797:578): avc: denied { mount } for pid=8105 comm="syz.2.611" name="/" dev="9p" ino=35913888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.268632][ T40] audit: type=1400 audit(1752991421.817:579): avc: denied { remount } for pid=8105 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.296879][ T40] audit: type=1400 audit(1752991421.837:580): avc: denied { unmount } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.302608][ T7995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.312502][ T7995] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.323178][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.325504][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.333022][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.335276][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.473114][ T8132] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 90.477017][ T90] hsr_slave_0: left promiscuous mode [ 90.480422][ T90] hsr_slave_1: left promiscuous mode [ 90.482526][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.484968][ T90] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.488884][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.491382][ T90] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.513066][ T90] veth1_macvtap: left promiscuous mode [ 90.515181][ T90] veth0_macvtap: left promiscuous mode [ 90.517044][ T90] veth1_vlan: left promiscuous mode [ 90.519125][ T90] veth0_vlan: left promiscuous mode [ 90.562098][ T8139] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 90.877451][ T5961] Bluetooth: hci3: command tx timeout [ 91.054929][ T90] team0 (unregistering): Port device team_slave_1 removed [ 91.111374][ T90] team0 (unregistering): Port device team_slave_0 removed [ 91.527221][ T8132] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 91.592401][ T7995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.804455][ T8177] __nla_validate_parse: 34 callbacks suppressed [ 91.804466][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 91.863701][ T8179] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 91.875656][ T7995] veth0_vlan: entered promiscuous mode [ 91.877114][ T8179] CIFS: Unable to determine destination address [ 91.891385][ T7995] veth1_vlan: entered promiscuous mode [ 91.936859][ T7995] veth0_macvtap: entered promiscuous mode [ 91.941731][ T7995] veth1_macvtap: entered promiscuous mode [ 91.952666][ T7995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.956971][ T7995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.970233][ T7995] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.972494][ T8199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.627'. [ 91.975786][ T7995] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.979273][ T7995] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.982345][ T7995] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.006585][ T8199] netlink: 'syz.2.627': attribute type 1 has an invalid length. [ 92.015550][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 92.027062][ T8199] vlan3: entered allmulticast mode [ 92.029400][ T8199] geneve1: entered allmulticast mode [ 92.056766][ T8196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.062984][ T8196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.092248][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.094735][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.203941][ T1183] Bluetooth: Error in BCSP hdr checksum [ 92.209622][ T8234] usb usb9: usbfs: process 8234 (syz.1.635) did not claim interface 15 before use [ 92.230374][ T8229] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 92.241632][ T8235] net_ratelimit: 7 callbacks suppressed [ 92.241642][ T8235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.307828][ T6035] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 92.457191][ T6035] usb 8-1: Using ep0 maxpacket: 16 [ 92.460096][ T6035] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 92.462616][ T6035] usb 8-1: config 0 has no interface number 0 [ 92.466395][ T6035] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 92.469809][ T6035] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.472268][ T6035] usb 8-1: Product: syz [ 92.473451][ T6035] usb 8-1: Manufacturer: syz [ 92.474864][ T6035] usb 8-1: SerialNumber: syz [ 92.479347][ T6035] usb 8-1: config 0 descriptor?? [ 92.481950][ T6035] hub 8-1:0.132: bad descriptor, ignoring hub [ 92.483872][ T6035] hub 8-1:0.132: probe with driver hub failed with error -5 [ 92.491285][ T6035] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.132/input/input15 [ 92.727345][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.848634][ T61] usb 8-1: USB disconnect, device number 7 [ 92.876354][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.899548][ T8288] vlan1: entered promiscuous mode [ 92.901235][ T8288] vlan1: entered allmulticast mode [ 92.902906][ T8288] veth0_vlan: entered allmulticast mode [ 92.957894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.212763][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.216025][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.218979][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.221676][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.224171][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.279319][ T8235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.414251][ T6035] IPVS: starting estimator thread 0... [ 93.416372][ T8323] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 93.427028][ T8315] chnl_net:caif_netlink_parms(): no params data found [ 93.517858][ T8330] IPVS: using max 41 ests per chain, 98400 per kthread [ 93.560374][ T8315] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.563291][ T8315] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.566263][ T8315] bridge_slave_0: entered allmulticast mode [ 93.570040][ T8315] bridge_slave_0: entered promiscuous mode [ 93.577290][ T8315] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.579542][ T8315] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.581904][ T8315] bridge_slave_1: entered allmulticast mode [ 93.584487][ T8315] bridge_slave_1: entered promiscuous mode [ 93.645622][ T8315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.652876][ T8315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.716199][ T8315] team0: Port device team_slave_0 added [ 93.731963][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.740212][ T8315] team0: Port device team_slave_1 added [ 93.796498][ T8315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.800133][ T8315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.809472][ T8315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.815425][ T8315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.821733][ T8315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.834349][ T8315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.898968][ T8315] hsr_slave_0: entered promiscuous mode [ 93.901227][ T8315] hsr_slave_1: entered promiscuous mode [ 93.907536][ T8315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.909896][ T8315] Cannot create hsr debugfs directory [ 94.063365][ T8315] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.068789][ T8315] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.072735][ T8315] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.076501][ T8315] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.130215][ T8315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.145681][ T8315] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.154024][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.156251][ T8193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.161983][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.164255][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.237177][ T5961] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 94.283759][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.310024][ T8315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.328226][ T8235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.453770][ T8315] veth0_vlan: entered promiscuous mode [ 94.462225][ T8315] veth1_vlan: entered promiscuous mode [ 94.486388][ T8315] veth0_macvtap: entered promiscuous mode [ 94.496759][ T8315] veth1_macvtap: entered promiscuous mode [ 94.506028][ T8315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.542459][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.559904][ T8315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.564056][ T8315] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.566670][ T8315] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.570165][ T8315] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.572871][ T8315] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.592492][ T8376] Option ''MO' to dns_resolver key: bad/missing value [ 94.635734][ T8196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.638953][ T8378] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 94.638966][ T8196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.647332][ T8235] IPVS: starting estimator thread 0... [ 94.692314][ T8193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.694871][ T8193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.702238][ T60] bridge_slave_1: left allmulticast mode [ 94.703960][ T60] bridge_slave_1: left promiscuous mode [ 94.705768][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.757246][ T8379] IPVS: using max 41 ests per chain, 98400 per kthread [ 94.757546][ T60] bridge_slave_0: left allmulticast mode [ 94.761227][ T60] bridge_slave_0: left promiscuous mode [ 94.763125][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.807212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.810299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.967263][ T40] kauditd_printk_skb: 16679 callbacks suppressed [ 94.967275][ T40] audit: type=1326 audit(1752991426.517:17260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.1.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898fb8e9a9 code=0x7ff00000 [ 94.976493][ T40] audit: type=1326 audit(1752991426.517:17261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.1.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898fb8e9a9 code=0x7ff00000 [ 94.983627][ T40] audit: type=1326 audit(1752991426.517:17262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.1.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898fb8e9a9 code=0x7ff00000 [ 94.990934][ T40] audit: type=1326 audit(1752991426.517:17263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.1.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898fb8e9a9 code=0x7ff00000 [ 94.998051][ T40] audit: type=1326 audit(1752991426.517:17264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.1.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898fb8e9a9 code=0x7ff00000 [ 95.005035][ T40] audit: type=1326 audit(1752991426.517:17265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.1.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898fb8e9a9 code=0x7ff00000 [ 95.012338][ T40] audit: type=1326 audit(1752991426.517:17266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.1.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898fb8e9a9 code=0x7ff00000 [ 95.019725][ T40] audit: type=1326 audit(1752991426.517:17267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.1.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898fb8e9a9 code=0x7ff00000 [ 95.026735][ T40] audit: type=1326 audit(1752991426.517:17268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.1.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898fb8e9a9 code=0x7ff00000 [ 95.033949][ T40] audit: type=1326 audit(1752991426.517:17269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.1.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898fb8e9a9 code=0x7ff00000 [ 95.059192][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.063391][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.066875][ T60] bond0 (unregistering): Released all slaves [ 95.089417][ T8394] can0: slcan on ttyS3. [ 95.113857][ T8402] overlayfs: conflicting options: userxattr,metacopy=on [ 95.133803][ T8402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.663'. [ 95.144903][ T8405] [U] ^R [ 95.177759][ T8397] can0 (unregistered): slcan off ttyS3. [ 95.234736][ T8418] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 95.277192][ T5961] Bluetooth: hci3: command tx timeout [ 95.345279][ T8423] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 95.347782][ T8423] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.666'. [ 95.368100][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.393618][ T8423] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.538390][ T60] hsr_slave_0: left promiscuous mode [ 95.545922][ T60] hsr_slave_1: left promiscuous mode [ 95.551115][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.555770][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.558861][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.561498][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.595513][ T60] veth1_macvtap: left promiscuous mode [ 95.597788][ T60] veth0_macvtap: left promiscuous mode [ 95.599636][ T60] veth1_vlan: left promiscuous mode [ 95.601671][ T60] veth0_vlan: left promiscuous mode [ 95.758635][ T6038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.144178][ T8450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8450 comm=syz.2.670 [ 96.249421][ T60] team0 (unregistering): Port device team_slave_1 removed [ 96.306569][ T60] team0 (unregistering): Port device team_slave_0 removed [ 96.398280][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.757342][ T8437] tipc: Started in network mode [ 96.758974][ T8437] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 96.762529][ T8437] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 96.765440][ T8437] tipc: Enabled bearer , priority 10 [ 96.792191][ T8459] syz.3.672: attempt to access beyond end of device [ 96.792191][ T8459] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 96.834293][ T8462] 9pnet_virtio: no channels available for device syz [ 96.843449][ T8468] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 96.876963][ T8472] bond0: entered promiscuous mode [ 96.957964][ T8487] vivid-000: disconnect [ 96.958210][ T8485] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 96.962452][ T8486] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 96.975816][ T8483] kvm: emulating exchange as write [ 96.979519][ T8483] Bluetooth: hci0: invalid len left 7, exp >= 41 [ 96.994934][ T8485] vivid-000: reconnect [ 97.145419][ T8507] netlink: 108 bytes leftover after parsing attributes in process `syz.2.684'. [ 97.149666][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 97.328076][ T8541] netlink: 'syz.2.692': attribute type 5 has an invalid length. [ 97.330575][ T8541] netlink: 132 bytes leftover after parsing attributes in process `syz.2.692'. [ 97.437475][ T8193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.440383][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.444455][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.839996][ T8494] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.844619][ T8494] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.855199][ T8494] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.899003][ T1024] tipc: Node number set to 1 [ 97.922341][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'. [ 98.217660][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.701'. [ 98.220531][ T8594] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.298285][ T8599] autofs4:pid:8599:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 98.303188][ T8600] autofs4:pid:8600:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 98.477473][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.530392][ T8620] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 98.706621][ T8639] comedi comedi2: comedi_config --init_data is deprecated [ 98.775572][ T8647] input: syz1 as /devices/virtual/input/input17 [ 98.780183][ T8647] input: failed to attach handler leds to device input17, error: -6 [ 98.797989][ T1183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.801149][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.807241][ T6038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.864011][ T8657] kvm: user requested TSC rate below hardware speed [ 98.897873][ T8665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.902265][ T8665] netlink: 36 bytes leftover after parsing attributes in process `syz.3.721'. [ 98.906056][ T8668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.939684][ T8678] bond0: entered promiscuous mode [ 98.941307][ T8678] bond_slave_0: entered promiscuous mode [ 98.943138][ T8678] bond_slave_1: entered promiscuous mode [ 98.947219][ T8678] bond0: left promiscuous mode [ 98.948956][ T8678] bond_slave_0: left promiscuous mode [ 98.950969][ T8678] bond_slave_1: left promiscuous mode [ 99.055392][ T8690] binder: 8689:8690 ioctl c018620b 0 returned -14 [ 99.061269][ T8688] netlink: 28 bytes leftover after parsing attributes in process `syz.6.724'. [ 99.127249][ T5961] Bluetooth: hci3: command 0x040f tx timeout [ 99.304961][ T8698] kvm: pic: non byte write [ 99.307337][ T1024] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 99.393260][ T8706] pimreg: entered allmulticast mode [ 99.447166][ T1024] usb 6-1: device descriptor read/64, error -71 [ 99.528056][ T6035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.544479][ T8714] fuse: Unknown parameter '"Hyotmode' [ 99.659749][ T8725] 9pnet: Could not find request transport: v [ 99.662071][ T8728] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 99.687393][ T1024] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 99.696790][ T8731] jfs: Unknown parameter 'discard2 }Kyx&UKN0#ɳ^/%o}UC7CfH$' [ 99.697677][ T8733] FAULT_INJECTION: forcing a failure. [ 99.697677][ T8733] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.704053][ T8733] CPU: 3 UID: 0 PID: 8733 Comm: syz.3.738 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 99.704068][ T8733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.704074][ T8733] Call Trace: [ 99.704078][ T8733] [ 99.704083][ T8733] dump_stack_lvl+0x16c/0x1f0 [ 99.704119][ T8733] should_fail_ex+0x512/0x640 [ 99.704144][ T8733] _copy_from_user+0x2e/0xd0 [ 99.704156][ T8733] do_ip_vs_set_ctl+0xdfa/0x11d0 [ 99.704172][ T8733] ? __lock_acquire+0xb8a/0x1c90 [ 99.704184][ T8733] ? __mutex_trylock_common+0xe0/0x250 [ 99.704195][ T8733] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 99.704210][ T8733] ? __pfx___mutex_trylock_common+0x10/0x10 [ 99.704221][ T8733] ? __pfx___might_resched+0x10/0x10 [ 99.704239][ T8733] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 99.704256][ T8733] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 99.704278][ T8733] ? nf_setsockopt+0x8d/0xf0 [ 99.704289][ T8733] nf_setsockopt+0x8d/0xf0 [ 99.704303][ T8733] ip_setsockopt+0xcb/0xf0 [ 99.704320][ T8733] sctp_setsockopt+0x169/0xb870 [ 99.704336][ T8733] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 99.704357][ T8733] ? __pfx_sctp_setsockopt+0x10/0x10 [ 99.704372][ T8733] ? find_held_lock+0x2b/0x80 [ 99.704388][ T8733] ? selinux_socket_setsockopt+0x6a/0x80 [ 99.704403][ T8733] ? sock_common_setsockopt+0x2e/0xf0 [ 99.704416][ T8733] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 99.704430][ T8733] do_sock_setsockopt+0xf0/0x1d0 [ 99.704444][ T8733] __sys_setsockopt+0x1a0/0x230 [ 99.704463][ T8733] __x64_sys_setsockopt+0xbd/0x160 [ 99.704479][ T8733] ? do_syscall_64+0x91/0x4c0 [ 99.704489][ T8733] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.704506][ T8733] do_syscall_64+0xcd/0x4c0 [ 99.704517][ T8733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.704530][ T8733] RIP: 0033:0x7f34c858e9a9 [ 99.704539][ T8733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.704550][ T8733] RSP: 002b:00007f34c93c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 99.704560][ T8733] RAX: ffffffffffffffda RBX: 00007f34c87b5fa0 RCX: 00007f34c858e9a9 [ 99.704567][ T8733] RDX: 0000000000000489 RSI: 0000000000000000 RDI: 0000000000000003 [ 99.704573][ T8733] RBP: 00007f34c93c2090 R08: 0000000000000044 R09: 0000000000000000 [ 99.704580][ T8733] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 99.704586][ T8733] R13: 0000000000000000 R14: 00007f34c87b5fa0 R15: 00007ffde3d39ac8 [ 99.704599][ T8733] [ 99.810164][ T8739] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 99.811846][ T8738] netlink: 48 bytes leftover after parsing attributes in process `syz.3.741'. [ 99.822133][ T8738] bridge1: entered promiscuous mode [ 99.823792][ T8738] bridge1: entered allmulticast mode [ 99.837280][ T1024] usb 6-1: device descriptor read/64, error -71 [ 99.856217][ T8743] overlay: filesystem on ./bus not supported as upperdir [ 99.898192][ T8744] mmap: syz.2.742 (8744) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.919600][ T1183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.947523][ T1024] usb usb6-port1: attempt power cycle [ 100.158241][ T8754] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 100.255916][ T8762] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 100.259426][ T8762] FAULT_INJECTION: forcing a failure. [ 100.259426][ T8762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.263990][ T8762] CPU: 0 UID: 0 PID: 8762 Comm: syz.3.750 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 100.264005][ T8762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.264012][ T8762] Call Trace: [ 100.264016][ T8762] [ 100.264021][ T8762] dump_stack_lvl+0x16c/0x1f0 [ 100.264042][ T8762] should_fail_ex+0x512/0x640 [ 100.264063][ T8762] _copy_to_user+0x32/0xd0 [ 100.264075][ T8762] simple_read_from_buffer+0xcb/0x170 [ 100.264094][ T8762] proc_fail_nth_read+0x197/0x270 [ 100.264111][ T8762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.264127][ T8762] ? rw_verify_area+0xcf/0x680 [ 100.264142][ T8762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.264157][ T8762] vfs_read+0x1e1/0xc60 [ 100.264175][ T8762] ? __pfx___mutex_lock+0x10/0x10 [ 100.264186][ T8762] ? __pfx_vfs_read+0x10/0x10 [ 100.264205][ T8762] ? __fget_files+0x20e/0x3c0 [ 100.264219][ T8762] ksys_read+0x12a/0x250 [ 100.264234][ T8762] ? __pfx_ksys_read+0x10/0x10 [ 100.264253][ T8762] do_syscall_64+0xcd/0x4c0 [ 100.264265][ T8762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.264276][ T8762] RIP: 0033:0x7f34c858d3bc [ 100.264285][ T8762] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 100.264296][ T8762] RSP: 002b:00007f34c93c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.264307][ T8762] RAX: ffffffffffffffda RBX: 00007f34c87b5fa0 RCX: 00007f34c858d3bc [ 100.264313][ T8762] RDX: 000000000000000f RSI: 00007f34c93c20a0 RDI: 0000000000000004 [ 100.264320][ T8762] RBP: 00007f34c93c2090 R08: 0000000000000000 R09: 0000000000000000 [ 100.264326][ T8762] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 100.264332][ T8762] R13: 0000000000000000 R14: 00007f34c87b5fa0 R15: 00007ffde3d39ac8 [ 100.264345][ T8762] [ 100.324173][ T1024] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 100.331263][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'. [ 100.336807][ T8764] xfrm1: entered promiscuous mode [ 100.341749][ T8764] xfrm1: entered allmulticast mode [ 100.344461][ T8764] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 100.358068][ T1024] usb 6-1: device descriptor read/8, error -71 [ 100.434788][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 100.441060][ T8788] block nbd3: shutting down sockets [ 100.471007][ T8793] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 100.530994][ T8799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8799 comm=syz.3.760 [ 100.573529][ T40] kauditd_printk_skb: 9236 callbacks suppressed [ 100.573539][ T40] audit: type=1400 audit(1752991432.117:26506): avc: denied { bind } for pid=8801 comm="syz.2.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.584450][ T40] audit: type=1400 audit(1752991432.127:26507): avc: denied { listen } for pid=8801 comm="syz.2.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.608188][ T1024] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 100.627853][ T1024] usb 6-1: device descriptor read/8, error -71 [ 100.653563][ T8811] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 100.665475][ T40] audit: type=1400 audit(1752991432.207:26508): avc: denied { block_suspend } for pid=8812 comm="syz.6.766" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.737713][ T1024] usb usb6-port1: unable to enumerate USB device [ 100.752639][ T40] audit: type=1400 audit(1752991432.297:26509): avc: denied { getopt } for pid=8824 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.768552][ T40] audit: type=1400 audit(1752991432.317:26510): avc: denied { append } for pid=8826 comm="syz.6.772" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 100.858914][ T40] audit: type=1400 audit(1752991432.407:26511): avc: denied { write } for pid=8839 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.867431][ T40] audit: type=1400 audit(1752991432.417:26512): avc: denied { ioctl } for pid=8839 comm="syz.2.776" path="socket:[25437]" dev="sockfs" ino=25437 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.871614][ T8840] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 100.995391][ T8861] use of bytesused == 0 is deprecated and will be removed in the future, [ 100.998212][ T8861] use the actual size instead. [ 101.071476][ T40] audit: type=1400 audit(1752991432.617:26513): avc: denied { bind } for pid=8868 comm="syz.6.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.079598][ T8864] syzkaller1: entered promiscuous mode [ 101.081688][ T8864] syzkaller1: entered allmulticast mode [ 101.188250][ T8878] xt_hashlimit: size too large, truncated to 1048576 [ 101.207321][ T5961] Bluetooth: hci3: command 0x040f tx timeout [ 101.382787][ T40] audit: type=1400 audit(1752991432.927:26514): avc: denied { append } for pid=8893 comm="syz.3.792" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.440830][ T8894] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.495919][ T8888] futex_wake_op: syz.6.790 tries to shift op by -1; fix this program [ 101.608201][ T8925] netlink: 'syz.3.796': attribute type 1 has an invalid length. [ 101.611582][ T8925] nbd: error processing sock list [ 101.666308][ T40] audit: type=1400 audit(1752991433.207:26515): avc: denied { read write } for pid=8929 comm="syz.3.797" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 102.047429][ T8969] loop2: detected capacity change from 0 to 7 [ 102.051588][ T8969] Dev loop2: unable to read RDB block 7 [ 102.053366][ T8969] loop2: unable to read partition table [ 102.055221][ T8969] loop2: partition table beyond EOD, truncated [ 102.058125][ T8969] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 102.204200][ T8990] futex_wake_op: syz.3.811 tries to shift op by 32; fix this program [ 102.544199][ T9009] binder: BINDER_SET_CONTEXT_MGR already set [ 102.546161][ T9009] binder: 9008:9009 ioctl 4018620d 200000000040 returned -16 [ 102.747717][ T9032] fuse: Bad value for 'fd' [ 102.845602][ T9049] net_ratelimit: 6 callbacks suppressed [ 102.845619][ T9049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.859938][ T9048] netlink: 'syz.6.828': attribute type 12 has an invalid length. [ 102.862533][ T9048] __nla_validate_parse: 5 callbacks suppressed [ 102.862541][ T9048] netlink: 32 bytes leftover after parsing attributes in process `syz.6.828'. [ 102.962510][ T1183] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.983171][ T9073] syzkaller1: entered promiscuous mode [ 102.984985][ T9073] syzkaller1: entered allmulticast mode [ 102.997513][ T9073] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 103.068610][ T9085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.071556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.074468][ T9085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.078113][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.079422][ T9085] netlink: 56 bytes leftover after parsing attributes in process `syz.1.838'. [ 103.086287][ T9083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.089419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.149737][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 103.207155][ T9102] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 103.208231][ T9099] bond3: entered promiscuous mode [ 103.260566][ T9098] netlink: 84 bytes leftover after parsing attributes in process `syz.6.842'. [ 103.280163][ T9116] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 103.333271][ T9125] team0: No ports can be present during mode change [ 103.367762][ T9127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.371506][ T9127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.374268][ T9127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.517876][ T5961] Bluetooth: hci3: command 0x040f tx timeout [ 103.577698][ T9148] can0: slcan on ttyS3. [ 103.597987][ T9152] netlink: 32 bytes leftover after parsing attributes in process `syz.6.858'. [ 103.605018][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.6.858'. [ 103.649396][ T9149] can0 (unregistered): slcan off ttyS3. [ 103.682105][ T9162] /dev/sg0: Can't lookup blockdev [ 103.970956][ T9183] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 104.029982][ T9189] netlink: 'syz.1.868': attribute type 7 has an invalid length. [ 104.042524][ T9189] : entered promiscuous mode [ 104.268033][ T9209] gretap1: entered allmulticast mode [ 104.271481][ T9209] bridge0: port 3(gretap1) entered blocking state [ 104.273669][ T9209] bridge0: port 3(gretap1) entered disabled state [ 104.276430][ T9209] gretap1: entered promiscuous mode [ 104.348868][ T9221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.874'. [ 104.352136][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'. [ 104.620135][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 104.718859][ T9257] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 104.805933][ T9269] overlayfs: failed to resolve './file1': -2 [ 104.891256][ T9285] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 104.966235][ T9301] netlink: 'syz.6.898': attribute type 1 has an invalid length. [ 104.970287][ T9301] netlink: 216 bytes leftover after parsing attributes in process `syz.6.898'. [ 105.124440][ T9327] IPVS: ip_vs_edit_dest(): server weight less than zero [ 105.169152][ T9313] netlink: 'syz.6.901': attribute type 1 has an invalid length. [ 105.171650][ T9313] nbd: error processing sock list [ 105.213717][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.213977][ T9316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.249264][ T9345] loop2: detected capacity change from 0 to 7 [ 105.254259][ T7976] Dev loop2: unable to read RDB block 7 [ 105.256249][ T7976] loop2: unable to read partition table [ 105.258608][ T7976] loop2: partition table beyond EOD, truncated [ 105.263331][ T9345] Dev loop2: unable to read RDB block 7 [ 105.265205][ T9345] loop2: unable to read partition table [ 105.267012][ T9345] loop2: partition table beyond EOD, truncated [ 105.270201][ T9345] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 105.273899][ T5961] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 105.280266][ T5961] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 105.293540][ T9349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.294709][ T9349] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 105.310336][ T9352] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 105.312432][ T9352] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 105.315869][ T9352] vhci_hcd vhci_hcd.0: Device attached [ 105.557292][ T6035] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 106.050335][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 106.050344][ T40] audit: type=1400 audit(1752991437.597:26531): avc: denied { accept } for pid=9402 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.059422][ T40] audit: type=1400 audit(1752991437.607:26532): avc: denied { connect } for pid=9402 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.059866][ T9401] afs: Unknown parameter '' [ 106.067769][ T40] audit: type=1400 audit(1752991437.617:26533): avc: denied { watch_mount } for pid=9399 comm="syz.1.923" path="/277/file0" dev="tmpfs" ino=1510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 106.095735][ T9403] "syz.2.924" (9403) uses obsolete ecb(arc4) skcipher [ 106.099153][ T40] audit: type=1400 audit(1752991437.647:26534): avc: denied { create } for pid=9407 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 106.104970][ T40] audit: type=1400 audit(1752991437.647:26535): avc: denied { bind } for pid=9407 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 106.142282][ T9353] vhci_hcd: connection reset by peer [ 106.145687][ T8190] vhci_hcd: stop threads [ 106.147844][ T8190] vhci_hcd: release socket [ 106.151449][ T8190] vhci_hcd: disconnect device [ 106.215326][ T9417] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 106.797280][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 106.819319][ T9430] kvm: pic: non byte read [ 106.822045][ T9430] kvm: pic: non byte read [ 106.824915][ T9430] kvm: pic: non byte read [ 106.827810][ T9430] kvm: pic: non byte read [ 106.830565][ T9430] kvm: pic: non byte read [ 106.833267][ T9430] kvm: pic: non byte read [ 106.835965][ T9430] kvm: pic: non byte read [ 106.839285][ T9430] kvm: pic: non byte read [ 106.841986][ T9430] kvm: pic: non byte read [ 106.844671][ T9430] kvm: pic: non byte read [ 106.855296][ T9430] kvm: pic: level sensitive irq not supported [ 106.936847][ T9448] program syz.6.933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.964891][ T9452] Context (ID=0x1) not attached to queue pair (handle=0x1:0x2) [ 107.155433][ T9476] dvmrp1: entered allmulticast mode [ 107.313862][ T40] audit: type=1400 audit(1752991438.857:26536): avc: denied { ioctl } for pid=9479 comm="syz.3.943" path="socket:[28422]" dev="sockfs" ino=28422 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.483040][ T9504] hugetlbfs: syz.1.950 (9504): Using mlock ulimits for SHM_HUGETLB is obsolete [ 107.684234][ T9521] netlink: 'syz.1.957': attribute type 10 has an invalid length. [ 107.704289][ T9521] team0: Device veth0_vlan failed to register rx_handler [ 107.724105][ T9525] netlink: 'syz.6.959': attribute type 5 has an invalid length. [ 107.733791][ T40] audit: type=1400 audit(1752991439.277:26537): avc: denied { accept } for pid=9526 comm="syz.2.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.810621][ T9532] bond0: (slave bond_slave_1): Releasing backup interface [ 107.852456][ T9540] support for the xor transformation has been removed. [ 107.854863][ T9539] delete_channel: no stack [ 107.879541][ T9544] __nla_validate_parse: 9 callbacks suppressed [ 107.879552][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 107.899979][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 107.912163][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 107.936806][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 107.963015][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 107.974647][ T9560] netlink: 576 bytes leftover after parsing attributes in process `+\{]'. [ 107.976399][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 107.990585][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 108.003106][ T9567] netlink: 'syz.6.971': attribute type 21 has an invalid length. [ 108.017183][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 108.035193][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 108.080437][ T9574] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 108.082509][ T9574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.085754][ T9574] vhci_hcd vhci_hcd.0: Device attached [ 108.157210][ T40] audit: type=1400 audit(1752991439.697:26538): avc: denied { setopt } for pid=9572 comm="syz.6.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.219944][ T40] audit: type=1400 audit(1752991439.767:26539): avc: denied { write } for pid=9591 comm="syz.2.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.338732][ T9592] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 108.388520][ T9616] sp0: Synchronizing with TNC [ 108.394193][ T9616] sp0: Found TNC [ 108.398829][ T40] audit: type=1326 audit(1752991439.947:26540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.3.975" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34c858e9a9 code=0x0 [ 108.403879][ T9618] netlink: 'syz.2.976': attribute type 12 has an invalid length. [ 108.420255][ T9618] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 108.509906][ T9634] qnx4: no qnx4 filesystem (no root dir). [ 108.624042][ T9649] netlink: 'syz.2.979': attribute type 10 has an invalid length. [ 108.638181][ T9649] team0: left promiscuous mode [ 108.642856][ T9649] batman_adv: batadv0: Adding interface: team0 [ 108.644807][ T9649] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.647542][ T8235] net_ratelimit: 17 callbacks suppressed [ 108.647555][ T8235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.653828][ T9649] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 108.663956][ T9649] netlink: 'syz.2.979': attribute type 10 has an invalid length. [ 108.673650][ T9649] team0: entered promiscuous mode [ 108.675722][ T9649] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.678690][ T9649] batman_adv: batadv0: Interface activated: team0 [ 108.680817][ T9649] batman_adv: batadv0: Interface deactivated: team0 [ 108.682843][ T9649] batman_adv: batadv0: Removing interface: team0 [ 108.685294][ T9649] bridge0: port 1(team0) entered blocking state [ 108.687724][ T9649] bridge0: port 1(team0) entered disabled state [ 108.689803][ T9649] team0: entered allmulticast mode [ 108.760355][ T9667] cdrom: dropping to single frame dma [ 108.774224][ T9675] autofs4:pid:9675:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 108.781216][ T9677] libceph: resolve '4' (ret=-3): failed [ 108.846274][ T9680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.850796][ T9680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.897168][ T9577] vhci_hcd: connection closed [ 108.900274][ T1183] vhci_hcd: stop threads [ 108.904187][ T1183] vhci_hcd: release socket [ 108.905750][ T1183] vhci_hcd: disconnect device [ 108.931640][ T9680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.934868][ T9680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.000300][ T9680] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 109.004301][ T9680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.008175][ T9680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.008274][ T9699] program syz.2.992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.014439][ T9699] ata1.00: non-matching transfer count (32/0) [ 109.066199][ T9680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.069606][ T9680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.072540][ T9700] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 109.176835][ T9680] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.208392][ T9680] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.217211][ T9680] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.219766][ T9680] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.226567][ T9680] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.229373][ T9680] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.235914][ T9680] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.238573][ T9680] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.476761][ T9715] netlink: 'syz.3.996': attribute type 23 has an invalid length. [ 109.528485][ T1183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.532559][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.535394][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.539243][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.617180][ T34] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 109.680270][ T8235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.768791][ T34] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.773041][ T34] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 109.780164][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 109.785392][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.796710][ T34] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 109.801001][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.804019][ T34] usb 6-1: Product: syz [ 109.805658][ T34] usb 6-1: Manufacturer: syz [ 109.808211][ T34] usb 6-1: SerialNumber: syz [ 109.812598][ T34] usb 6-1: config 0 descriptor?? [ 109.819790][ T34] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input20 [ 110.024911][ T9792] overlayfs: failed to resolve './file0': -2 [ 110.053288][ T9795] sch_fq: defrate 4294967295 ignored. [ 110.085311][ T9704] [U]  [ 110.094637][ T838] usb 6-1: USB disconnect, device number 9 [ 110.103697][ T9805] netlink: 'syz.2.1015': attribute type 6 has an invalid length. [ 110.106466][ T9805] netlink: 'syz.2.1015': attribute type 5 has an invalid length. [ 110.109269][ T9805] netlink: 'syz.2.1015': attribute type 4 has an invalid length. [ 110.135953][ T9808] veth0_to_bond: entered allmulticast mode [ 110.254625][ T9818] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 110.259391][ T9818] cramfs: wrong magic [ 110.270719][ T9820] tipc: Started in network mode [ 110.272280][ T9820] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 110.285127][ T9820] tipc: Enabled bearer , priority 10 [ 110.296136][ T9820] IPv6: sit1: Disabled Multicast RS [ 110.299252][ T9820] sit1: entered allmulticast mode [ 110.410609][ T9829] tmpfs: Bad value for 'mpol' [ 110.463820][ T9832] syz.2.1024: attempt to access beyond end of device [ 110.463820][ T9832] nbd2: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 110.468383][ T9832] XFS (nbd2): SB validate failed with error -5. [ 110.566295][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.571855][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.574868][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.578160][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.581266][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.584433][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.587037][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.590657][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.593872][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.597296][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.600574][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.603367][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.606655][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.610264][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.613482][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.616681][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.620213][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.623410][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.626650][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.630771][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.634074][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.637524][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.640777][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.643967][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.647385][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.650626][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.653837][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.657059][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.660349][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.663545][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.666745][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.669887][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.672294][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.674705][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.677451][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.680048][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.682474][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.684843][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.687399][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.689813][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.692222][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.694630][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.697051][ T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 110.717407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.721532][ T34] hid-generic 0000:007F:FFFFFFFE.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 110.721583][ T8235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.728192][ T6035] vhci_hcd: vhci_device speed not set [ 110.754295][ T9851] fido_id[9851]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.812825][ T9863] netlink: 'syz.2.1031': attribute type 12 has an invalid length. [ 110.863908][ T9866] program syz.6.1034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.864800][ T9870] xt_hashlimit: size too large, truncated to 1048576 [ 110.919373][ T9874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.922994][ T9874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.023598][ T9887] overlayfs: overlapping lowerdir path [ 111.083890][ T9897] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 111.108484][ T9897] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 111.116941][ T9897] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 111.128298][ T9897] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 111.130905][ T9897] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 111.133451][ T9897] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 111.136388][ T9897] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 111.139299][ T9897] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 111.224218][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 111.224229][ T40] audit: type=1400 audit(1752991442.767:26548): avc: denied { map } for pid=9896 comm="syz.1.1043" path="socket:[32081]" dev="sockfs" ino=32081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 111.225003][ T9897] fuse: Bad value for 'rootmode' [ 111.262849][ T9918] rdma_op ffff888031a9d9f0 conn xmit_rdma 0000000000000000 [ 111.284677][ T9915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.297239][ T9927] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 111.299329][ T9927] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.302297][ T9927] vhci_hcd vhci_hcd.0: Device attached [ 111.304910][ T9928] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 111.309906][ T12] vhci_hcd: stop threads [ 111.311401][ T12] vhci_hcd: release socket [ 111.313249][ T12] vhci_hcd: disconnect device [ 111.326879][ T9934] vivid-000: disconnect [ 111.331131][ T9933] vivid-000: reconnect [ 111.408542][ T9] tipc: Node number set to 4269801488 [ 111.478551][ T9948] syz.1.1060: attempt to access beyond end of device [ 111.478551][ T9948] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 111.482785][ T9948] (syz.1.1060,9948,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 111.485207][ T9948] (syz.1.1060,9948,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 111.489807][ T9948] (syz.1.1060,9948,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 111.492508][ T9948] (syz.1.1060,9948,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 111.519684][ T9936] netlink: 'syz.3.1056': attribute type 10 has an invalid length. [ 111.522308][ T9936] dummy0: entered promiscuous mode [ 111.525096][ T9936] bridge0: port 1(dummy0) entered blocking state [ 111.527644][ T9936] bridge0: port 1(dummy0) entered disabled state [ 111.529976][ T9936] dummy0: entered allmulticast mode [ 111.533017][ T9936] bridge0: port 1(dummy0) entered blocking state [ 111.535116][ T9936] bridge0: port 1(dummy0) entered forwarding state [ 111.613773][ T9936] kvm: pic: non byte write [ 111.794875][ T9971] ipt_REJECT: TCP_RESET invalid for non-tcp [ 111.811093][ T9974] loop2: detected capacity change from 0 to 7 [ 111.814087][ T9974] Dev loop2: unable to read RDB block 7 [ 111.815947][ T9974] loop2: unable to read partition table [ 111.818296][ T9974] loop2: partition table beyond EOD, truncated [ 111.821050][ T9974] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 111.833143][ T9978] MINIX-fs: blocksize too small for device [ 112.057330][T10005] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 112.059539][T10005] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.063120][T10005] vhci_hcd vhci_hcd.0: Device attached [ 112.066999][T10006] usbip_core: unknown command [ 112.068722][T10006] vhci_hcd: unknown pdu 0 [ 112.070097][T10006] usbip_core: unknown command [ 112.078429][ T8190] vhci_hcd: stop threads [ 112.079771][ T8190] vhci_hcd: release socket [ 112.081148][ T8190] vhci_hcd: disconnect device [ 112.115217][T10012] FAT-fs (nullb0): bogus number of reserved sectors [ 112.118305][T10012] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 112.197184][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 112.200158][T10020] wg2: entered promiscuous mode [ 112.201779][T10020] wg2: entered allmulticast mode [ 112.328846][ T34] usb 8-1: device descriptor read/64, error -71 [ 112.421926][T10042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10042 comm=syz.1.1090 [ 112.567226][ T34] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 112.611428][ T40] audit: type=1400 audit(1752991444.157:26549): avc: denied { lock } for pid=10051 comm="syz.6.1093" path="/100/file0/file0" dev="9p" ino=35913893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.707270][ T34] usb 8-1: device descriptor read/64, error -71 [ 112.817971][ T34] usb usb8-port1: attempt power cycle [ 112.842756][T10064] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 112.980211][T10076] __nla_validate_parse: 70 callbacks suppressed [ 112.980229][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1101'. [ 113.021151][T10082] x_tables: duplicate underflow at hook 1 [ 113.117339][ T838] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 113.157562][ T34] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 113.194427][ T34] usb 8-1: device descriptor read/8, error -71 [ 113.277444][ T838] usb 11-1: Using ep0 maxpacket: 16 [ 113.283845][ T838] usb 11-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.290911][ T838] usb 11-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.296175][ T838] usb 11-1: config 1 interface 0 has no altsetting 0 [ 113.301817][ T838] usb 11-1: New USB device found, idVendor=1ff7, idProduct=0013, bcdDevice= 0.40 [ 113.305592][ T838] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.310697][ T838] usb 11-1: Product: ࠇ [ 113.312597][ T838] usb 11-1: Manufacturer: ⒯㙢ኣ䎺砫ـ毴䘵尬鿇겗ᏼ㙘᫊㘋닭꭪錂堵尗䂀鬂퓕鯯㓭な֓䜸뤆ｇ뷗͝컂붮培ᮣ眢泑鏉쾲⣨䶗☜⻝⇐↕ᘪ繨뎣ɠ롙ᢳ襉 [ 113.320803][ T838] usb 11-1: SerialNumber: syz [ 113.437465][ T34] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 113.460236][ T34] usb 8-1: device descriptor read/8, error -71 [ 113.549810][ T838] usbhid 11-1:1.0: can't add hid device: -71 [ 113.551964][ T838] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 113.560738][ T838] usb 11-1: USB disconnect, device number 2 [ 113.587290][ T34] usb usb8-port1: unable to enumerate USB device [ 113.842682][ T6035] net_ratelimit: 138 callbacks suppressed [ 113.842697][ T6035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.290374][ T40] audit: type=1400 audit(1752991445.837:26550): avc: denied { map } for pid=10099 comm="syz.1.1108" path="socket:[32554]" dev="sockfs" ino=32554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.298149][ T40] audit: type=1326 audit(1752991445.837:26551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10099 comm="syz.1.1108" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f898fb8e9a9 code=0x0 [ 114.427230][ T40] audit: type=1400 audit(1752991445.967:26552): avc: denied { read } for pid=10103 comm="syz.6.1109" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 114.434410][ T40] audit: type=1400 audit(1752991445.967:26553): avc: denied { open } for pid=10103 comm="syz.6.1109" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 114.637250][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 114.889561][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.893175][T10117] validate_nla: 2 callbacks suppressed [ 114.893189][T10117] netlink: 'syz.6.1113': attribute type 1 has an invalid length. [ 114.914664][T10117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.943145][T10117] bond1: (slave veth5): Enslaving as an active interface with a down link [ 114.950315][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1113'. [ 114.957404][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 114.957690][T10117] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 114.964105][T10117] bond1: (slave batadv1): making interface the new active one [ 114.967041][T10117] batadv1: entered promiscuous mode [ 114.969131][T10117] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 115.061368][T10138] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1120'. [ 115.065080][T10138] netlink: 'syz.3.1120': attribute type 6 has an invalid length. [ 115.068933][T10138] netlink: 'syz.3.1120': attribute type 5 has an invalid length. [ 115.071742][T10138] netlink: 'syz.3.1120': attribute type 4 has an invalid length. [ 115.101258][T10142] netlink: 'syz.6.1122': attribute type 11 has an invalid length. [ 115.105211][T10142] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 115.143133][T10138] kvm: kvm [10137]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0x2300200005 [ 115.160883][ T40] audit: type=1400 audit(1752991446.707:26554): avc: denied { ioctl } for pid=10144 comm="syz.6.1123" path="socket:[31617]" dev="sockfs" ino=31617 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.161687][T10138] kvm: kvm [10137]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0x2300200005 [ 115.172635][T10138] kvm: kvm [10137]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0x2300200005 [ 115.192471][T10138] kvm_intel: kvm [10137]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x1d9) = 0x2300200005 [ 115.273749][T10159] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 115.278928][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1128'. [ 115.279351][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.291763][T10159] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.294453][T10159] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.297407][T10159] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.300341][T10159] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.333334][T10161] vim2m vim2m.0: vidioc_s_fmt queue busy [ 115.340895][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 115.344587][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 115.357273][ T8190] smc: removing ib device syz1 [ 115.517268][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.520097][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.522644][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.525210][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.527846][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.530396][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.532942][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.840729][ T40] audit: type=1400 audit(1752991447.387:26555): avc: denied { create } for pid=10192 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.842585][T10194] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1137'. [ 115.846674][ T40] audit: type=1400 audit(1752991447.387:26556): avc: denied { write } for pid=10192 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.858250][T10194] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1137'. [ 115.863560][T10195] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 115.869018][T10194] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1137'. [ 115.877513][T10194] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1137'. [ 115.900471][ T40] audit: type=1800 audit(1752991447.447:26557): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1138" name="SYSV00000000" dev="tmpfs" ino=11 res=0 errno=0 [ 115.911050][ T5964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.914540][ T5964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.919530][ T5964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.923070][ T5964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.925593][ T5964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.040458][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.042871][T10217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.045663][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.049216][T10217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.095446][T10200] chnl_net:caif_netlink_parms(): no params data found [ 116.163800][T10200] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.166156][T10200] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.171514][T10200] bridge_slave_0: entered allmulticast mode [ 116.175582][T10200] bridge_slave_0: entered promiscuous mode [ 116.188868][T10200] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.191875][T10200] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.195155][T10200] bridge_slave_1: entered allmulticast mode [ 116.201776][T10200] bridge_slave_1: entered promiscuous mode [ 116.266775][T10200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.272637][T10200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.316770][T10236] binder: BINDER_SET_CONTEXT_MGR already set [ 116.320028][T10236] binder: 10235:10236 ioctl 4018620d 200000000040 returned -16 [ 116.323471][T10236] binder: 10235:10236 ioctl c0306201 200000001a80 returned -11 [ 116.326899][T10236] comedi comedi3: comedi_config --init_data is deprecated [ 116.333993][T10236] comedi: valid board names for 8255 driver are: [ 116.336640][T10236] 8255 [ 116.338087][T10236] comedi: valid board names for vmk80xx driver are: [ 116.340243][T10236] vmk80xx [ 116.341573][T10236] comedi: valid board names for usbduxsigma driver are: [ 116.343131][T10200] team0: Port device team_slave_0 added [ 116.344390][T10236] usbduxsigma [ 116.344414][T10236] comedi: valid board names for usbduxfast driver are: [ 116.344423][T10236] usbduxfast [ 116.344430][T10236] comedi: valid board names for usbdux driver are: [ 116.344438][T10236] usbdux [ 116.348397][T10200] team0: Port device team_slave_1 added [ 116.359409][T10236] comedi: valid board names for ni6501 driver are: [ 116.361563][T10236] ni6501 [ 116.362517][T10236] comedi: valid board names for dt9812 driver are: [ 116.364608][T10236] dt9812 [ 116.365569][T10236] comedi: valid board names for ni_labpc_cs driver are: [ 116.368153][T10236] ni_labpc_cs [ 116.369472][T10236] comedi: valid board names for ni_daq_700 driver are: [ 116.371691][T10236] ni_daq_700 [ 116.372762][T10236] comedi: valid board names for labpc_pci driver are: [ 116.374910][T10236] labpc_pci [ 116.376079][T10236] comedi: valid board names for adl_pci9118 driver are: [ 116.379132][T10236] pci9118dg [ 116.380522][T10236] pci9118hg [ 116.381569][T10236] pci9118hr [ 116.382719][T10236] comedi: valid board names for 8255_pci driver are: [ 116.386266][T10236] 8255_pci [ 116.387444][T10236] comedi: valid board names for s526 driver are: [ 116.389447][T10236] s526 [ 116.390365][T10236] comedi: valid board names for multiq3 driver are: [ 116.392349][T10236] multiq3 [ 116.393366][T10236] comedi: valid board names for pcmuio driver are: [ 116.395421][T10236] pcmuio48 [ 116.396421][T10236] pcmuio96 [ 116.397379][T10200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.399120][T10236] comedi: valid board names for pcmmio driver are: [ 116.399610][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.401613][T10236] pcmmio [ 116.401620][T10236] comedi: valid board names for pcmda12 driver are: [ 116.401625][T10236] pcmda12 [ 116.401629][T10236] comedi: valid board names for pcmad driver are: [ 116.401634][T10236] pcmad12 [ 116.401637][T10236] pcmad16 [ 116.401641][T10236] comedi: valid board names for ni_labpc driver are: [ 116.401646][T10236] lab-pc-1200 [ 116.401650][T10236] lab-pc-1200ai [ 116.409953][T10200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.410787][T10236] lab-pc+ [ 116.413822][T10200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.415830][T10236] comedi: valid board names for atmio16 driver are: [ 116.416851][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.417941][T10236] atmio16 [ 116.420089][T10200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.421070][T10236] atmio16d [ 116.421076][T10236] comedi: valid board names for ni_at_ao driver are: [ 116.445906][T10236] at-ao-6 [ 116.446915][T10236] at-ao-10 [ 116.448050][T10236] comedi: valid board names for ni_at_a2150 driver are: [ 116.450238][T10236] ni_at_a2150 [ 116.451323][T10236] comedi: valid board names for adq12b driver are: [ 116.453334][T10236] adq12b [ 116.454273][T10236] comedi: valid board names for mpc624 driver are: [ 116.456274][T10236] mpc624 [ 116.457682][T10236] comedi: valid board names for c6xdigio driver are: [ 116.459750][T10236] c6xdigio [ 116.460763][T10236] comedi: valid board names for aio_iiro_16 driver are: [ 116.462884][T10236] aio_iiro_16 [ 116.463963][T10236] comedi: valid board names for aio_aio12_8 driver are: [ 116.466125][T10236] aio_aio12_8 [ 116.467283][T10236] aio_ai12_8 [ 116.468349][T10236] aio_ao12_4 [ 116.469441][T10236] comedi: valid board names for fl512 driver are: [ 116.471458][T10236] fl512 [ 116.472408][T10236] comedi: valid board names for dmm32at driver are: [ 116.474446][T10236] dmm32at [ 116.475429][T10236] comedi: valid board names for dt282x driver are: [ 116.479203][T10236] dt2821 [ 116.480161][T10236] dt2821-f [ 116.481180][T10236] dt2821-g [ 116.482190][T10236] dt2823 [ 116.483131][T10236] dt2824-pgh [ 116.484187][T10236] dt2824-pgl [ 116.485267][T10236] dt2825 [ 116.486219][T10236] dt2827 [ 116.487300][T10236] dt2828 [ 116.488265][T10236] dt2829 [ 116.488336][T10200] hsr_slave_0: entered promiscuous mode [ 116.489206][T10236] dt21-ez [ 116.489212][T10236] dt23-ez [ 116.491705][T10200] hsr_slave_1: entered promiscuous mode [ 116.491955][T10236] dt24-ez [ 116.493252][T10200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.494660][T10236] dt24-ez-pgl [ 116.494666][T10236] comedi: valid board names for dt2817 driver are: [ 116.494671][T10236] dt2817 [ 116.498803][T10200] Cannot create hsr debugfs directory [ 116.501093][T10236] comedi: valid board names for dt2815 driver are: [ 116.508606][T10236] dt2815 [ 116.509600][T10236] comedi: valid board names for dt2814 driver are: [ 116.511645][T10236] dt2814 [ 116.512638][T10236] comedi: valid board names for dt2811 driver are: [ 116.514709][T10236] dt2811-pgh [ 116.515793][T10236] dt2811-pgl [ 116.516880][T10236] comedi: valid board names for dt2801 driver are: [ 116.520979][T10236] dt2801 [ 116.521936][T10236] comedi: valid board names for das6402 driver are: [ 116.523976][T10236] das6402-12 [ 116.525090][T10236] das6402-16 [ 116.526166][T10236] comedi: valid board names for das1800 driver are: [ 116.528281][T10236] das-1701st [ 116.529350][T10236] das-1701st-da [ 116.530507][T10236] das-1702st [ 116.531571][T10236] das-1702st-da [ 116.532718][T10236] das-1702hr [ 116.533800][T10236] das-1702hr-da [ 116.534933][T10236] das-1701ao [ 116.536001][T10236] das-1702ao [ 116.538700][T10236] das-1801st [ 116.539769][T10236] das-1801st-da [ 116.540908][T10236] das-1802st [ 116.541986][T10236] das-1802st-da [ 116.543119][T10236] das-1802hr [ 116.544173][T10236] das-1802hr-da [ 116.545332][T10236] das-1801hc [ 116.546464][T10236] das-1802hc [ 116.547684][T10236] das-1801ao [ 116.551144][T10236] das-1802ao [ 116.552270][T10236] comedi: valid board names for das800 driver are: [ 116.554280][T10236] das-800 [ 116.555267][T10236] cio-das800 [ 116.556325][T10236] das-801 [ 116.559918][T10236] cio-das801 [ 116.560988][T10236] das-802 [ 116.561944][T10236] cio-das802 [ 116.563036][T10236] cio-das802/16 [ 116.564183][T10236] comedi: valid board names for isa-das08 driver are: [ 116.566312][T10236] isa-das08 [ 116.567444][T10236] das08-pgm [ 116.568465][T10236] das08-pgh [ 116.569532][T10236] das08-pgl [ 116.570556][T10236] das08-aoh [ 116.571599][T10236] das08-aol [ 116.572612][T10236] das08-aom [ 116.573606][T10236] das08/jr-ao [ 116.574666][T10236] das08jr-16-ao [ 116.575783][T10236] pc104-das08 [ 116.576848][T10236] das08jr/16 [ 116.577979][T10236] comedi: valid board names for das16m1 driver are: [ 116.584029][T10236] das16m1 [ 116.585081][T10236] comedi: valid board names for dac02 driver are: [ 116.587162][T10236] dac02 [ 116.588078][T10236] comedi: valid board names for rti802 driver are: [ 116.590152][T10236] rti802 [ 116.591088][T10236] comedi: valid board names for rti800 driver are: [ 116.595109][T10236] rti800 [ 116.596129][T10236] rti815 [ 116.597315][T10236] comedi: valid board names for pcm3724 driver are: [ 116.600959][T10236] pcm3724 [ 116.602022][T10236] comedi: valid board names for pcl818 driver are: [ 116.604187][T10236] pcl818l [ 116.606329][T10236] pcl818h [ 116.609471][T10236] pcl818hd [ 116.610459][T10236] pcl818hg [ 116.611525][T10236] pcl818 [ 116.612475][T10236] pcl718 [ 116.613485][T10236] pcm3718 [ 116.614481][T10236] comedi: valid board names for pcl816 driver are: [ 116.616628][T10236] pcl816 [ 116.619334][T10236] pcl814b [ 116.620344][T10236] comedi: valid board names for pcl812 driver are: [ 116.622430][T10236] pcl812 [ 116.623413][T10236] pcl812pg [ 116.624482][T10236] acl8112pg [ 116.625604][T10236] acl8112dg [ 116.626708][T10236] acl8112hg [ 116.628413][T10236] a821pgl [ 116.629484][T10236] a821pglnda [ 116.630576][T10236] a821pgh [ 116.631582][T10236] a822pgl [ 116.632634][T10236] a822pgh [ 116.633625][T10236] a823pgl [ 116.634665][T10236] a823pgh [ 116.635776][T10236] pcl813 [ 116.636690][T10236] pcl813b [ 116.639390][T10236] acl8113 [ 116.640385][T10236] iso813 [ 116.641923][T10236] acl8216 [ 116.643024][T10236] a826pg [ 116.644097][T10236] comedi: valid board names for pcl730 driver are: [ 116.646311][T10236] pcl730 [ 116.647393][T10236] iso730 [ 116.648342][T10236] acl7130 [ 116.649397][T10236] pcm3730 [ 116.650392][T10236] pcl725 [ 116.651392][T10236] p8r8dio [ 116.653156][T10236] acl7225b [ 116.654280][T10236] p16r16dio [ 116.655386][T10236] pcl733 [ 116.656336][T10236] pcl734 [ 116.659108][T10236] opmm-1616-xt [ 116.660374][T10236] pearl-mm-p [ 116.662199][T10236] ir104-pbf [ 116.663499][T10236] comedi: valid board names for pcl726 driver are: [ 116.666054][T10236] pcl726 [ 116.667152][T10236] pcl727 [ 116.668113][T10236] pcl728 [ 116.669010][T10236] acl6126 [ 116.669981][T10236] acl6128 [ 116.670969][T10236] comedi: valid board names for pcl724 driver are: [ 116.672941][T10236] pcl724 [ 116.673882][T10236] pcl722 [ 116.674854][T10236] pcl731 [ 116.675819][T10236] acl7122 [ 116.676811][T10236] acl7124 [ 116.681602][T10236] pet48dio [ 116.682631][T10236] pcmio48 [ 116.683611][T10236] onyx-mm-dio [ 116.684667][T10236] comedi: valid board names for pcl711 driver are: [ 116.686732][T10236] pcl711 [ 116.687768][T10236] pcl711b [ 116.688728][T10236] acl8112hg [ 116.689705][T10236] acl8112dg [ 116.690710][T10236] comedi: valid board names for amplc_pc263 driver are: [ 116.692782][T10236] pc263 [ 116.693684][T10236] comedi: valid board names for amplc_pc236 driver are: [ 116.695754][T10236] pc36at [ 116.696707][T10236] comedi: valid board names for amplc_dio200 driver are: [ 116.699174][T10236] pc212e [ 116.700117][T10236] pc214e [ 116.701070][T10236] pc215e [ 116.702127][T10236] pc218e [ 116.703073][T10236] pc272e [ 116.704013][T10236] comedi: valid board names for comedi_parport driver are: [ 116.706317][T10236] comedi_parport [ 116.707556][T10236] comedi: valid board names for comedi_test driver are: [ 116.709718][T10236] comedi_test [ 116.710794][T10236] comedi: valid board names for comedi_bond driver are: [ 116.712925][T10236] comedi_bond [ 116.774644][T10200] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 116.778759][T10200] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 116.779716][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 116.779725][ T40] audit: type=1400 audit(1752991448.327:26561): avc: denied { write } for pid=10254 comm="syz.6.1148" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.791879][T10200] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 116.797620][T10200] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 116.810626][T10200] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.812881][T10200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.815209][T10200] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.817490][T10200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.846241][T10200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.857835][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.862797][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.886248][T10200] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.894441][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.896691][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.902254][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.904506][ T8193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.943161][ T40] audit: type=1400 audit(1752991448.487:26562): avc: denied { map } for pid=10276 comm="syz.6.1152" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 117.032138][T10200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.037362][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 117.104281][ T40] audit: type=1400 audit(1752991448.647:26563): avc: denied { connect } for pid=10301 comm="syz.2.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.114081][T10303] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=10303 comm=syz.2.1158 [ 117.186355][T10200] veth0_vlan: entered promiscuous mode [ 117.194674][T10200] veth1_vlan: entered promiscuous mode [ 117.209378][T10200] veth0_macvtap: entered promiscuous mode [ 117.213106][T10200] veth1_macvtap: entered promiscuous mode [ 117.216275][T10312] Failed to get privilege flags for destination (handle=0x2:0x4) [ 117.222151][T10200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.229669][T10200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.234147][T10200] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.237636][T10200] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.240385][T10200] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.243784][T10200] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.299333][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.301779][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.310918][T10306] infiniband syz1: set active [ 117.314654][T10306] infiniband syz1: added syz_tun [ 117.333701][ T8193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.339091][ T8193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.354986][T10306] RDS/IB: syz1: added [ 117.356338][T10306] smc: adding ib device syz1 with port count 1 [ 117.361710][T10306] smc: ib device syz1 port 1 has pnetid [ 117.446465][T10331] overlay: ./bus is not a directory [ 117.447234][ T40] audit: type=1400 audit(1752991448.987:26564): avc: denied { mounton } for pid=10329 comm="syz.7.1167" path="/bus" dev="ramfs" ino=36184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 117.467979][T10331] overlay: ./bus is not a directory [ 117.864641][T10347] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 117.867335][T10347] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.920415][ T40] audit: type=1326 audit(1752991449.467:26565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10350 comm="syz.2.1174" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65d498e9a9 code=0x0 [ 118.008174][ T63] Bluetooth: hci1: command tx timeout [ 118.085782][T10362] __nla_validate_parse: 39 callbacks suppressed [ 118.085799][T10362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1178'. [ 118.111446][T10362] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10362 comm=syz.1.1178 [ 118.115819][T10363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10363 comm=syz.1.1178 [ 118.123106][ T40] audit: type=1400 audit(1752991449.667:26566): avc: denied { read } for pid=10364 comm="syz.6.1179" path="socket:[33989]" dev="sockfs" ino=33989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.252215][T10375] netlink: 'syz.6.1181': attribute type 1 has an invalid length. [ 118.254797][T10375] netlink: 'syz.6.1181': attribute type 2 has an invalid length. [ 118.497177][ T6124] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 118.546079][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1182'. [ 118.657201][ T6124] usb 11-1: Invalid ep0 maxpacket: 64 [ 118.789113][ T6124] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 118.947236][ T6124] usb 11-1: Invalid ep0 maxpacket: 64 [ 118.949886][ T6124] usb usb11-port1: attempt power cycle [ 118.964025][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'. [ 118.983815][T10398] vcan1: entered allmulticast mode [ 118.999982][ T40] audit: type=1326 audit(1752991450.547:26567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.1186" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f898fb8e9a9 code=0x0 [ 119.032655][T10402] netlink: 'syz.2.1188': attribute type 10 has an invalid length. [ 119.041286][ T8235] net_ratelimit: 91 callbacks suppressed [ 119.041302][ T8235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.085585][T10404] netlink: 'syz.2.1189': attribute type 10 has an invalid length. [ 119.089826][T10404] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 119.117260][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 119.139549][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 119.145153][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 119.307323][ T6124] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 119.338424][ T6124] usb 11-1: Invalid ep0 maxpacket: 64 [ 119.411833][T10422] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 119.433763][T10422] comedi comedi3: comedi_config --init_data is deprecated [ 119.467197][ T6124] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 119.470555][ T40] audit: type=1400 audit(1752991451.017:26568): avc: denied { bind } for pid=10425 comm="syz.7.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 119.487950][ T6124] usb 11-1: Invalid ep0 maxpacket: 64 [ 119.490671][ T6124] usb usb11-port1: unable to enumerate USB device [ 119.533964][T10430] netlink: 'syz.7.1198': attribute type 5 has an invalid length. [ 119.933804][T10446] ------------[ cut here ]------------ [ 119.935626][T10446] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 119.940046][T10446] shift exponent -2147483646 is negative [ 119.942915][T10446] CPU: 0 UID: 0 PID: 10446 Comm: syz.1.1204 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 119.942931][T10446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.942938][T10446] Call Trace: [ 119.942943][T10446] [ 119.942948][T10446] dump_stack_lvl+0x16c/0x1f0 [ 119.942990][T10446] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 119.943030][T10446] pcl812_attach.cold+0x1a/0x1f [ 119.943058][T10446] comedi_device_attach+0x3b3/0x900 [ 119.943081][T10446] do_devconfig_ioctl+0x1a7/0x580 [ 119.943095][T10446] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 119.943117][T10446] ? find_held_lock+0x2b/0x80 [ 119.943135][T10446] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 119.943153][T10446] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.943171][T10446] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 119.943194][T10446] ? do_vfs_ioctl+0x523/0x1a60 [ 119.943219][T10446] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 119.943249][T10446] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 119.943266][T10446] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 119.943286][T10446] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 119.943312][T10446] ? hook_file_ioctl_common+0x145/0x410 [ 119.943340][T10446] ? selinux_file_ioctl+0x180/0x270 [ 119.943355][T10446] ? selinux_file_ioctl+0xb4/0x270 [ 119.943371][T10446] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 119.943394][T10446] __x64_sys_ioctl+0x18e/0x210 [ 119.943415][T10446] do_syscall_64+0xcd/0x4c0 [ 119.943427][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.943438][T10446] RIP: 0033:0x7f898fb8e9a9 [ 119.943448][T10446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.943460][T10446] RSP: 002b:00007f8990a58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.943471][T10446] RAX: ffffffffffffffda RBX: 00007f898fdb5fa0 RCX: 00007f898fb8e9a9 [ 119.943478][T10446] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 119.943485][T10446] RBP: 00007f898fc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 119.943491][T10446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.943498][T10446] R13: 0000000000000000 R14: 00007f898fdb5fa0 R15: 00007ffed3994708 [ 119.943512][T10446] [ 119.943516][T10446] ---[ end trace ]--- [ 120.014717][T10446] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 120.017020][T10446] CPU: 0 UID: 0 PID: 10446 Comm: syz.1.1204 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 120.021326][T10446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.024625][T10446] Call Trace: [ 120.025725][T10446] [ 120.026672][T10446] dump_stack_lvl+0x3d/0x1f0 [ 120.028234][T10446] panic+0x71c/0x800 [ 120.029497][T10446] ? __pfx_panic+0x10/0x10 [ 120.030911][T10446] ? __pfx__printk+0x10/0x10 [ 120.032374][T10446] check_panic_on_warn+0xab/0xb0 [ 120.034065][T10446] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 120.036094][T10446] pcl812_attach.cold+0x1a/0x1f [ 120.037803][T10446] comedi_device_attach+0x3b3/0x900 [ 120.039446][T10446] do_devconfig_ioctl+0x1a7/0x580 [ 120.041069][T10446] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 120.042814][T10446] ? find_held_lock+0x2b/0x80 [ 120.044296][T10446] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 120.046052][T10446] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.047993][T10446] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 120.049828][T10446] ? do_vfs_ioctl+0x523/0x1a60 [ 120.051339][T10446] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 120.052938][T10446] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 120.054963][T10446] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 120.057009][T10446] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 120.059174][T10446] ? hook_file_ioctl_common+0x145/0x410 [ 120.060907][T10446] ? selinux_file_ioctl+0x180/0x270 [ 120.062532][T10446] ? selinux_file_ioctl+0xb4/0x270 [ 120.064138][T10446] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 120.066010][T10446] __x64_sys_ioctl+0x18e/0x210 [ 120.067569][T10446] do_syscall_64+0xcd/0x4c0 [ 120.069007][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.070838][T10446] RIP: 0033:0x7f898fb8e9a9 [ 120.072228][T10446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.078175][T10446] RSP: 002b:00007f8990a58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.080749][T10446] RAX: ffffffffffffffda RBX: 00007f898fdb5fa0 RCX: 00007f898fb8e9a9 [ 120.083176][T10446] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 120.085630][T10446] RBP: 00007f898fc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 120.088095][T10446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.090543][T10446] R13: 0000000000000000 R14: 00007f898fdb5fa0 R15: 00007ffed3994708 [ 120.092983][T10446] [ 120.094638][T10446] Kernel Offset: disabled [ 120.096058][T10446] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:04:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a5665 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc9000c8ef4c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0b9e20 R15=ffffffff855a5600 RIP=ffffffff855a568f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8990a586c0 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000008 CR3=0000000012860000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006ca0000 RBX=ffff888105fe0000 RCX=ffffffff819ca8f7 RDX=1ffff11020bfc25a RSI=ffffffff86a7067f RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc900006a0eb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff90a94260 R13=dffffc0000000000 R14=ffff888105fe12d0 R15=0000000000000000 RIP=ffffffff86a706a7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f22ac2e7d60 CR3=0000000039031000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22ab7866a3 00007f22ab7866a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc35cfb240 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557efb9615 000055557efb9520 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557efbc46c 000055557efbbc60 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000806060112 a600080005a0031f fffffff008000598 030008000590030c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010380040889a390 8008000100000008 06060112a6000800 05a0031ffffffff0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800059803000800 0590030c08000588 030a080005800378 080004f80339d208 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004f00316080004 e8030198080004e0 0300080004d80306 aace080004d00302 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 92080004c8030880 808086080004c003 06080004b8030d91 92080004b0030008 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff88806a63a2c0 RCX=ffffffff8198d7a3 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff88806a63a2c0 RBP=ffffc90007177a80 RSP=ffffc90007177a08 R8 =0000000000000000 R9 =ffffed100d4c7458 R10=ffff88806a63a2c3 R11=0000000000000001 R12=ffff88806a63a2c0 R13=ffff88801e29c880 R14=0000000000000001 R15=ffff88806a63b130 RIP=ffffffff8198d7b8 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558b8a1500 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555818d1808 CR3=00000000511d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003432 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65d4a11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65d4a11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65d4a11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65d4a11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65d4a11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65d4a11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65d4b86488 00007f65d4b86480 00007f65d4b86478 00007f65d4b86450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65d56ed100 00007f65d4b86440 00007f65d4b80004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65d4b86498 00007f65d4b86490 00007f65d4b86488 00007f65d4b86480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffea0000d6c100 RCX=ffffffff8206d116 RDX=1ffffd40001ad821 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc9000c9ff5e8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00007f4057cd4000 R13=0000000000000000 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bbe420 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2887e9 CR3=0000000013927000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 06acea4e4c3b1073 2f268df41aa6b1f5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fdea19b54904d2c9 174c3166b878289e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9a2a6a65ab6e5c11 1f34d85fae620b63 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 52abae18132daf0d 19ce41c7ff1778f0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c9c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000049 d10afd20d4fd31e0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004900000049 0000004900000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000d06d6634 006ad7e3cecc6100 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c45ecd52ffb5c 0000004900defcce ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f48eebfc9486328d 26cf5e58b872860d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 65275d22816e0ded 3602c788c96e8871 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f898fd86488 00007f898fd86480 00007f898fd86478 00007f898fd86450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89908ed100 00007f898fd86440 00007f898fd80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f898fd86498 00007f898fd86490 00007f898fd86488 00007f898fd86480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000