last executing test programs: 32.549385895s ago: executing program 1 (id=499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000080)={0xc9}) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000140)) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000005"], 0x14}], 0x1}, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x40402, 0x0) read$FUSE(r8, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) pread64(r9, &(0x7f0000000000)=""/113, 0x71, 0x8) read$FUSE(r8, &(0x7f0000000380)={0x2020}, 0x2020) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) 32.160165755s ago: executing program 1 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000001b0017400700210030"], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r2, 0x390514407c3d2309, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x37}, @NL80211_ATTR_REG_RULES={0x98, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x13}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xf}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x41}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x4}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x14}]}, 0xc4}}, 0x20000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x2000c010) 32.159730319s ago: executing program 1 (id=501): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000280)=0x8, 0x4) unlinkat(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r4 = semget$private(0x0, 0x1, 0x461) semctl$SEM_STAT(r4, 0x1, 0x12, &(0x7f0000000340)=""/221) 32.030290174s ago: executing program 1 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x43a07f8bb95fbaaf, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xf0bd5b}]}, 0x1c}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000007fba53a01bc891563d0befcd4729da0000007111070007000000851000000200000085734e000000000095000000000000009500a50500000001"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000007fba53a01bc891563d0befcd4729da0000007111070007000000851000000200000085734e000000000095000000000000009500a50500000001"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c0008802800008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7237341b459b392214000200776732000000000000000000000000009e"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c0008802800008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7237341b459b392214000200776732000000000000000000000000009e"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @empty, @local}, &(0x7f0000000600)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @empty, @local}, &(0x7f0000000600)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000640)={@rand_addr, 0x0}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x0, 0x8020, 0xff, 0x400, {{0xe, 0x4, 0x1, 0x10, 0x38, 0x64, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@cipso={0x86, 0x23, 0x2, [{0x1, 0x6, "76b69da5"}, {0x7, 0x6, "5a569856"}, {0x4, 0x11, "8100cc15f5220f946cfd0f3787c089"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x8, 0x20, 0x8, 0x0, {{0x24, 0x4, 0x1, 0x7, 0x90, 0x68, 0x0, 0x8, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x6f, 0x0, 0xa, [0xffffffff, 0x3, 0x2b1, 0xfffffc70]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x1b, 0xde, [@multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @local, @dev={0xac, 0x14, 0x14, 0x3f}]}, @cipso={0x86, 0x42, 0x3, [{0x6, 0x11, "ece85ba8074da188588af408bd98a8"}, {0x0, 0xd, "dfae6abdb13f11db9cab66"}, {0x6, 0x6, "ca2afb13"}, {0x1, 0x5, "c01337"}, {0x6, 0x8, "19607531dd1b"}, {0x7, 0x3, "dd"}, {0x7, 0x8, "c5c2bb2861ea"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x8, 0x20, 0x8, 0x0, {{0x24, 0x4, 0x1, 0x7, 0x90, 0x68, 0x0, 0x8, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x6f, 0x0, 0xa, [0xffffffff, 0x3, 0x2b1, 0xfffffc70]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x1b, 0xde, [@multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @local, @dev={0xac, 0x14, 0x14, 0x3f}]}, @cipso={0x86, 0x42, 0x3, [{0x6, 0x11, "ece85ba8074da188588af408bd98a8"}, {0x0, 0xd, "dfae6abdb13f11db9cab66"}, {0x6, 0x6, "ca2afb13"}, {0x1, 0x5, "c01337"}, {0x6, 0x8, "19607531dd1b"}, {0x7, 0x3, "dd"}, {0x7, 0x8, "c5c2bb2861ea"}]}]}}}}}) r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x9}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x9}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000fc0)={0x164, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x804}, 0x240080c1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r13, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x36fe8a, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) (async) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="00050000", @ANYRES16=r3, @ANYBLOB="000226bd7000ffdbdf250100000008000700bd15000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e060006004e24000008000500010000000800050001000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40000d1) 31.899201517s ago: executing program 1 (id=510): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340"], 0xf0}, 0x1, 0x0, 0x0, 0x4c004}, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x191) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x100, 0xa0) fanotify_mark(r0, 0x10, 0x69, r1, &(0x7f0000000300)='./file0\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) io_uring_setup(0x2e32, &(0x7f0000000180)={0x0, 0x0, 0x2}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="9c", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$inet6(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x30400}], 0x1}, 0x0) sendmmsg$sock(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="b4", 0x1}], 0x1}}], 0x1, 0x40080) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000480)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x30, 0x30, 0x6d, 0x38, 0x65, 0x35, 0x34, 0x34, 0x39]}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x0, 0x28c067f062a5d7f7]}}, {@huge_never}], [{@dont_measure}, {@obj_type={'obj_type', 0x3d, 'usrquota_block_hardlimit'}}, {@fowner_lt={'fowner<', 0xee00}}, {@fowner_lt}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x400}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_user={'subj_user', 0x3d, ':\\+'}}]}) 31.740380732s ago: executing program 1 (id=516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800) r2 = dup(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) read$alg(r7, &(0x7f0000001540)=""/4131, 0x1023) (async) read$alg(r7, &(0x7f0000001540)=""/4131, 0x1023) sendmsg$alg(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)="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", 0x11f}, {&(0x7f0000003480)="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", 0x9a2}], 0x2, 0x0, 0x0, 0x4004835}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="36d8af10000f20e066355a0020000f22e0360f0144f23f7cec10a7148a10a7148a758a67f32e0f23e966b8010000000f01c1dbe20f01c3f0290b", 0x3a}], 0x1, 0x54, 0x0, 0x19) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="b84f0000000f23c80f21f8350800d0000f23f80f019b18000000b8520000000f01c136f30f1efb66b84b008ec00f79f266bad004b851000000ef66b857008ed8c4c3a1206706000fc774a400", 0x4c}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000154000/0x1000)=nil, 0x2, 0x0, 0x0, 0x2, 0xbb, 0x0, 0xc, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 31.70598568s ago: executing program 32 (id=516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800) r2 = dup(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) read$alg(r7, &(0x7f0000001540)=""/4131, 0x1023) (async) read$alg(r7, &(0x7f0000001540)=""/4131, 0x1023) sendmsg$alg(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)="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", 0x11f}, {&(0x7f0000003480)="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", 0x9a2}], 0x2, 0x0, 0x0, 0x4004835}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="36d8af10000f20e066355a0020000f22e0360f0144f23f7cec10a7148a10a7148a758a67f32e0f23e966b8010000000f01c1dbe20f01c3f0290b", 0x3a}], 0x1, 0x54, 0x0, 0x19) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="b84f0000000f23c80f21f8350800d0000f23f80f019b18000000b8520000000f01c136f30f1efb66b84b008ec00f79f266bad004b851000000ef66b857008ed8c4c3a1206706000fc774a400", 0x4c}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000154000/0x1000)=nil, 0x2, 0x0, 0x0, 0x2, 0xbb, 0x0, 0xc, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.612830006s ago: executing program 0 (id=774): getdents(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x2e32, &(0x7f0000000180)={0x0, 0x0, 0x2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9c", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x30400}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="b4", 0x1}], 0x1}}], 0x1, 0x40080) close_range(r0, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000480)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x30, 0x30, 0x6d, 0x38, 0x65, 0x35, 0x34, 0x34, 0x39]}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x0, 0x28c067f062a5d7f7]}}, {@huge_never}], [{@dont_measure}, {@obj_type={'obj_type', 0x3d, 'usrquota_block_hardlimit'}}, {@fowner_lt={'fowner<', 0xee00}}, {@fowner_lt}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x400}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_user={'subj_user', 0x3d, ':\\+'}}]}) 2.478687565s ago: executing program 0 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x4603}]}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x3e, "ad0d360298afc4445c9fcffe275cf68cdc979a85852acd9ed37aee729e213b390b2ed282448e40b2db686f80922aa60c8c2346260b3761975e01925d28e6"}, &(0x7f00000000c0)=0x46) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e24, 0x8001, @empty, 0x3529}}, 0x400, 0x49d}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x33, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}]}, 0x20}}, 0x0) 2.478235312s ago: executing program 0 (id=781): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f00000000c0)='eth0\x00') close(r0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {0xfff9}, {0xf247ec6a8d76f9ed, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1c33b}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r7, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4091}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="34100000", @ANYRES16=r7, @ANYBLOB="00082dbd7000fddbdf255400000008000300", @ANYRES32=r10, @ANYBLOB="0a00060008021100000000000a000600ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$inet6(0x10, 0x3, 0x0) r14 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x80000, 0x10100, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r15, r16, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r17, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r14, 0x46f6, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r18, &(0x7f0000000340), 0x8) write$binfmt_misc(r12, &(0x7f0000000000), 0xfffffecc) splice(r11, 0x0, r13, 0x0, 0x400000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x7c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x8, 0x5, 0x274, 0x4}, 0x0, 0x0, 0x200, 0x8, 0xfffffff3, 0x3, 0x1d, 0x1e, 0x4, 0xe98, {0x7, 0xfffffff8, 0x6, 0x9, 0x95d0, 0x40}}}}]}, 0x7c}}, 0x0) 2.340007469s ago: executing program 3 (id=787): fchown(0xffffffffffffffff, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0xfffffffd) 2.210370318s ago: executing program 3 (id=788): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x13, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x702, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc810}, 0x20000004) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) quotactl$Q_SYNC(0x0, 0x0, 0x0, 0x0) 2.209868861s ago: executing program 3 (id=789): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000414080029bd7000fddbdf25080001000000000008000100010000000800010000000000080001000200000004c4c94751d6867ab466884b2b06d67daf98a1120466fea177e05e6a6315611a036f9eb226a879e472002327f4"], 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x65) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r1 = memfd_secret(0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) dup2(r2, r2) (async) r3 = dup2(r2, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000880)="baf80c66b8979e498a66efbafc0cb0b2ee663487f30f1bfcb8b7008ed0363ef30f09ba420066b80080000066efba4100b8931aef266766660fdf4f00af0f005c94", 0x41}], 0x1, 0x43, &(0x7f0000000680), 0x0) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000880)="baf80c66b8979e498a66efbafc0cb0b2ee663487f30f1bfcb8b7008ed0363ef30f09ba420066b80080000066efba4100b8931aef266766660fdf4f00af0f005c94", 0x41}], 0x1, 0x43, &(0x7f0000000680), 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x282, 0x4) r6 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r6) sendfile(r3, r3, &(0x7f0000000680)=0x40, 0xfffffffffffffa26) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring={'key_or_keyring:', r7}) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring={'key_or_keyring:', r7}) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r6) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000600)={r3}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000600)={r3}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000640), 0x4) socket$igmp(0x2, 0x3, 0x2) (async) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r10, 0x89e1, &(0x7f0000000100)={@remote, @multicast2}) (async) ioctl$SIOCGETSGCNT(r10, 0x89e1, &(0x7f0000000100)={@remote, @multicast2}) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000001340)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000004c0)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f00000007c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x400000, 0x2, 0x2}) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f00000007c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x400000, 0x2, 0x2}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001200)=ANY=[@ANYRES8=r10], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001200)=ANY=[@ANYRES8=r10], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) 1.970606037s ago: executing program 3 (id=790): getdents(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x2e32, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9c", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x30400}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="b4", 0x1}], 0x1}}], 0x1, 0x40080) close_range(r0, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000480)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x30, 0x30, 0x6d, 0x38, 0x65, 0x35, 0x34, 0x34, 0x39]}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x0, 0x28c067f062a5d7f7]}}, {@huge_never}], [{@dont_measure}, {@obj_type={'obj_type', 0x3d, 'usrquota_block_hardlimit'}}, {@fowner_lt={'fowner<', 0xee00}}, {@fowner_lt}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x400}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_user={'subj_user', 0x3d, ':\\+'}}]}) 1.88021272s ago: executing program 4 (id=792): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r1, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500000027"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x330, 0x20a, 0x278, 0x330, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 1.790191105s ago: executing program 4 (id=793): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) getsockname$netrom(r2, 0x0, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x63) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) timer_delete(0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0xfc, 0xff, 0x0, 0x10, 0x0, 0x44, 0x5, 0x3, 0x0, 0x0, 0x20, 0xfd, 0x4, 0x0, 0xff}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xca9, 0x0, 0x9e, 0xffffffff7ffffffd, 0x1, 0x0, 0x2004c9, 0xa, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff], 0x2000, 0x2c0f10}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.660647491s ago: executing program 4 (id=794): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x80, 0x6, @link_local}, 0x14) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000011c0)="b9ffddc1ddc8cdde75537d0700", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="3e64f24e97590271b148ecac1121eb1a6ea6687b8d0d1f7ecf5aca1d22dd233f8051cd459a233eb4fcd7ee4a31bb1a68f6edcc09b710a7a5c0d048e5e2c9ab17f674045fa1127c0a30a36b1c3c3c61695e74bcce33a2d5aaf816a3c9700cfb04124a22cc4920c7a7817e64b2e91fd3bbdfff37f11874abfa587e2b89ffeb5ff8f376e05ee726"], 0x4c}}, 0x0) 1.579466785s ago: executing program 0 (id=795): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000080)={'pimreg1\x00'}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r4, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) pipe(&(0x7f00000045c0)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f00000015c0)='5', 0xfe70}], 0x1, 0xb) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4000007fffffff}) setrlimit(0x2, &(0x7f00000000c0)={0x4, 0x2400000}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) socket$packet(0x11, 0x1, 0x300) fcntl$lock(r8, 0x25, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x6}) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) 1.450457083s ago: executing program 2 (id=796): mkdir(&(0x7f0000000380)='./file1\x00', 0x0) (async, rerun: 32) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) (rerun: 32) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000140)='./file1\x00') (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5b81, 0x800000001, 0x5, 0x3, 0x8, 0x2, 0x0, 0xde}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) fanotify_mark(r0, 0x80, 0x10000002, r0, &(0x7f00000001c0)='./file1\x00') (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0x0, &(0x7f0000000280)) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) (rerun: 64) 1.447099113s ago: executing program 4 (id=797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f00000016c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc0fc4111, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000640)) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043406aaaaaaaaaa1059221a0e00e150e33d839c1b150a994fe5a898faafe73618b3edd0a7e1871c4365c7e20bc4b58e0c81d765be039bd50baabc29a090458857479b98dcd8cf657583504894ed41c89e2170793c95a68a810f0f8c04e2089112831f84e4e74d2ea99f27a12181d8a260062fd5b26dd08fe33fd4e8770d4b81577ed81bbc62ec76ba25af91d3dfea2ff38dad722e4a32c7e53dede405d54bc503b27d4fbc5144056f8254e3ae8dff20c4c0c14c0c69fd6f57cfe541d90523bd2a69d75c00fb5d71f99e89257f0f5585b257c456cd0bb1e007dee3bd0297533834ad62e0"], 0x9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xff91}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64], 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r2, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xede, 0x58}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc000}]}, 0x28}}, 0x80) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84e6c939", @ANYRES16=r11, @ANYBLOB="100028bd7000fedbdf2503000000050021000000000006001a004e23000008000900040000000c00160000000000010000001400080073797a5f74756e000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x8011) 1.447000998s ago: executing program 2 (id=798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2b0e2bbd7000fcdbdf258800000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff00002000330058817fd5d072d6a371710002004840"], 0x48}, 0x1, 0x0, 0x0, 0x4040084}, 0x20000000) 1.370182806s ago: executing program 2 (id=799): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) writev(r0, &(0x7f00000019c0)=[{&(0x7f0000000400)="a754b449ca", 0x5}], 0x1) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 1.369512378s ago: executing program 2 (id=800): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{}, "0945608e314ddb87", "5e3b76de4a038721e5d9e4c0dfe7a9b1", "4fe28383", "318b564873e5c2d8"}, 0x28) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0xfffffffffffffdc2, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x300, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x0, 0x1, 0x1}, @TCA_CODEL_ECN]}}]}, 0x44}}, 0x20008044) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_simple={0x30, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) (async) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r9, 0x0, 0x3, &(0x7f0000000080)=""/55, &(0x7f00000000c0)=0x37) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$alg(0x26, 0x5, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) (async) bind$alg(r10, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) socket$packet(0x11, 0x3, 0x300) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvfrom(r11, &(0x7f0000002f40)=""/4063, 0xfdf, 0x0, 0x0, 0x0) (async) recvfrom(r11, &(0x7f0000002f40)=""/4063, 0xfdf, 0x0, 0x0, 0x0) r12 = accept4$alg(r10, 0x0, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f0000003100)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="6bc9db7c62", 0x3f}], 0x1, 0x0, 0x0, 0x8800}], 0x1, 0x40080) 1.110226582s ago: executing program 3 (id=801): r0 = socket(0x21, 0x6, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640", @ANYBLOB="66e5d9be"], 0x6c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002abd7006ffdbdf251010e33abfda5be6", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x10}}}}}}}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r9 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r9, 0x4014563c, &(0x7f0000001200)={0x7, {0x20000001, 0x0, 0xfffffffe, 0x6}}) mount(&(0x7f00000002c0)=@sr0, &(0x7f0000000140)='./bus\x00', 0x0, 0x2001008, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r10 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r12, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0xc1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) 710.378575ms ago: executing program 0 (id=802): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x25f, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x1e, 0x80004, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f00000004c0)='5', 0x1}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r2) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="4d51fe0346257b9d905c225d2850e613533db1ea020585d6c8f742460bfdaedf5d9e376a9f99721058e33783007875b03dda094fb2b9540912b802b96d3964b5b227fbca0500b271335f74dc5356662ac46da856fedb90"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = dup3(r7, r1, 0x0) recvmsg$qrtr(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/140, 0x8c}], 0x1, 0x0, 0x0, 0x21}, 0x38, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x15, 0x80005, 0x0) getsockopt(r9, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) read$FUSE(r0, &(0x7f0000006440)={0x2020}, 0x2020) 508.208988ms ago: executing program 0 (id=803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x74, 0xb, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1a}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a89a584}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd6e6279}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x13c}, 0x1, 0x0, 0x0, 0x40404}, 0x40000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x1, @local, 0x52}, @in={0x2, 0x4e24, @broadcast}], 0x3c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x448100, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x37, 0x6, "7860e1904dac03f6a86896ee1895236b966b3d9c6136a22640d3f8f3e14db2f5651f83deff0a05af161665e84782836c12c7e9"}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x5, 0xdc43, 0x455, 0x7}, &(0x7f0000000680)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000006c0)={r6, 0x7, 0xe2, "9b43ec8fb2934b4e73212de5b23ca244c97106bd71f692e318f64557a145676c20cf2a1aed17999c8da3d2fee6783f5ec2e3e2cfebc300a63ec996066fcb8834f3281c3b55551530bcbf1330906c821ed868619d73d9ac22671ea01e1dedbfb9ff314a74be5ca02d39a694484e94ad7b392b26e4e1625ce7c22136ae1d2f217200c052943beff671a2fdae8ad4632c824f55121612ddac997a3e9ed94bf20e21bff99308a5bb764e9426ef7dbd96623e8ae36039a6545370453bc9a9a804f22fc3b317260ec1d2120ef129674046c91bca674fd89653f01db698c599d8f472305476"}, 0xea) r7 = dup(r1) getsockname$packet(r4, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001a00)=0x14) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000001d40)=0x0, &(0x7f0000001d80)=0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f00000007c0)={0xa, 0x4e22, 0x4b6, @local, 0x4}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000000800)="3d7272defdc8902f6bb34477770ba4af33393b4794c1ace4d814e32e18baca2b21ab78d233fd23eb14178501131f28249f7465a0032d10a15999eea1dcaeb4e018089b5725d68c5582c6709e8dcddeee5d473520b6b53810a91c31191ec319051ed5db8e535d0cfbb407a99609c68926e6206baebd2792b9b6d416a6d78223a70389ec2cc246f652bde52fe7ff0265f6768c6f9b6b5e0e5e3349ea5cdb33f705224c9d4d755e193d9304f84930153eef6ac4e3123a4fceda3a82c6876143bcfccfc03d2b78089e0e7e16049992fe2f5f5f3e36fdba1632b527bfdcd89891ccd5bfe349dcfa1572d7b44ce68a4a4e133df00cc4d97ccdd6fe70b4c7b965160b0a17cd0c772947f735e8478f7802c1ea267e14082b8a1870735117734becb1305790a26346d6a2721a46e978e8c7880abd2b6717577c8a7df344e508def2dbb9e1221c2923156d5337f6f8cc27997e2d977c5cf42b0ab821dac8a4f45551ca6f22b7cf4df291ac471b289f6189bb642a8625eefff57b6af7a88857daa77d8205e8e8c9033b9a802739f87f6a1d16a20a589a2ca62881175c260f7cf85f786b8484cfdfed0d0f450b31c652e90879c8f2b0055496110cd1fe47763a994197c4c3b92995eac7f39dacb59c5bb974a491652ffc9013d16767fe10b17cc48e6df52ab1aeb4514d1097c3cc30655eb6248aa0ed95b8775282b58bc16bda3b6447e0b151c8d36cfd7fd0214744ab7d70616a083acdcbe43385ea190943da71f6b8488b05f1e563e1c2de098d29e9dc0c23e02361ab077cf6d9ae4cb851b91d6112bdf79215f11bfbdeb4fa3fef0f14117a27929d384a864a4dfc3cfb3728cee91b40ca6b09ef3af2f39ae88d8d0d1b6b61f679a35cf316e2b43d9120300cce7a43858f4b319dc033f39f560bbf0e58edc7a6a6a45c4e690668aa2181d2e62147ccca8323603684cbfe0e6ddeed801b862c565ae2cc04ffa4c24856b44df76c07cb93ce1185e0e2e96f18cdb34e20d1a20721eba9d99543a8ee86566289b30290f6c83868b9e9bdd5185dbabcf5e064c390d3eca13e1e4fbcab1ef6f6151ac139e91b90c2393206ecb09bf21fc564246b7a85d01b16abe5a74c4daa5bc90a32deb31e66d8fb0bf75c3b24f99820487303f5e8a8eb4427e31ef7f594304d06c2759eefb6e344f4e3760b4c860104384368b025fbe79ed9cb97c9b5b26bf3b7c97a278531aa6b44c1af9144322543c6a0d1ab0566487f121bc50a630e3aa50058081d924d0a45bf39ed852757d709a9f595034e43bab249f53cbe70939af1c8ec4ac98187c8c186717f74bce1187a9e0dbac5f961ff7f55618e8420e83582e2d66d509c7912b119f790500a647f54ae81276bf619f3ff85d65e5467c1550a29c74e240d09d472dcd0dd2816bf4ee2f4d019330120d3945f113fed7484c938ee3fdc2f1458bc812c2c5e02b650bc49ff233b02dccc9516d04412beafe269595ea5bb303e3ef9b10173d944f90346b7827ed770184d63690edc5ec43a34aa14e4d6e0f92099569f9575f4b6bac2c495abbde7003edc4c9bbc46662b970df2dc409d8b496277c4ba0bd74a68eafcf61670282be430c0fe755078479aab4e76ffb4bd591a370b582ee3f3dda313f13824810d7be941f3f811c1b6139bd1dfa991270b0753fae158acce44d4f0b9b083aa05d966725b1fbf1348d0be7cb0b81940498729fb90646befb94754296cad75439e4d3863ca3fd505c8fcaccde22a948b2229c4adfb424b91bfb9cafeaa72816463178ff4cbb16623dce239884a989135033b9de3b6248109192b104d5a53724a54756c3389f724c180d0eea6586a9db4b506eeced0ed5176f9bab42b8c6231892a01addc1ce7188ff4a9615f9a5b8df9ba13759fa981064c26e3f5bc7ef62a8a79a766b4e5c2d875ef522012adb1d8df57e5a6029101167fa1a9f7011eb6d25600ab1810197d8d709fb224981346c501484fdb494a08bb096cacb36b94446ebe72b8b341c2224f7f1102ead337433f3ee7f7ab6b9f2438edf538c25f21d2e4e2d58fbb2d4ee1803178660d89a324a33a737f01eca3068a04d4f86203aed5fbe0e01a332f61d8e47d0a7e51b837a652769ca76bcab0d484953fb581d325ba343d80b82c13f0b6f49487fc773b9145644950aee1117c9473ed945c56f66a62123043be019645b6a3d66ba7af303590d55420c2c508ac9ca83eb91021f90bd7bf4c36dd72e5e8c3edd74d580e1bece16d5a517925bae6f15af460d2d1771fe93e81cad34676bf7c16665d66d16941482f18ca56d67b0ca24304a14e54d7626afad70292e783cf2717e7c3b467a7e4871031fcbcdc564f132e8ee378f71d9b59fe487f1fc0f497ad72cae6cb71ee9f3e59529453b2d3db18c1e4f406b8a495fcd8ebfccef8e947ecc0f4345b64596c13ae247f60d91da4129b8b09c2cef885993a14629e6432aca27bda7c1b920e5124d5b09e39346a3ab907c871e72264aa70cad4831790adbda9e6464b535152b3cf4b5c48880b26f54863c3d95bec30eb14ef6923b7203d303ba7bbbd52d807ae83a25bb86cb991fbb1a55d1dbfd11cdeabd474a25825904782a2713a65de03249f63e175fa8a6d273355ac901856b88e6d45d171e16ef16c4c1436d7995a1c0fb11e41bd67b7fc9b40862f916eb32cbcb392838d378960723063c3d490f5ac42001eafddf161b770209d11a178dff30915113a32aa98f83d67a3233744d892792853b85cf5be69769efa98addb88f0e4c9c9d2fafb089795b38eb137151866566ddb30d0a3d189ea5e6b629d2c5d82103f6aafd09771f29b32823b3e2d5be13f4b9a83643ee8af3b68ace8872f862652c0e24869517af68c893919ca5bbb5aa8e9aeb2cc2e8330d2f597dc7f0db2722597b121ec04b65908757adb29e6e490558f4f62e925a3c443bb407bb3205686dcaa648375eb9b1b6adf2fafdc6f7809c33121701c0e22d665cc17e126bc3804bd59dde499a20e7a241cc8dca90753e8fdf2b7968052f2ea85df39a8932e90c47f22e26100befefdb33e16f1d7419ee9bc9208b345533f36fc1b6f1cd4f58a0084014d548c50d6497b5df8eb69b093cbd5777062b358647fe9975c03f609bcf87bb7aa1e8ca26c7ee58d0558fe7f45c93914e29428d177143ad9b72fff8bec7bd05045dec2b726a0b002452f1605d3420a2070666bacedc106cac066b4354af73b3d941aa32433805dad3292b4f91e2665ab13779b1b25550e4e6e2e1f8300515681d4ab80c518cb1c93e9cb38e3671f86d4bc3182c5215a6ca401839ef8df6a2990a4b1014d575066be96bc97462ea7abb25b03bca956d5d571a8a097fed422798e06a488acbbe0804c136234770fecd309b5256ca4c803c387dfa13895383efded5bdb4da08f23262c9bf7fb6b353e48217d9aceb94ff9ae589b34b1a95d7d949007aa0c6be487b89e8ca981b3f9ae9fe7e2c24f17befe7dd10a8803c06821391b48e2432149d0cbfdce339d5026ccaa9af96886449f07be6cbc96c6b2ab017dcb986fcbb232e9459d9c8cc0f4382e7cef0022d0236f96c14e14e7a7f5f9dd571b5ba21004a52b28a9eef8aa8dc7c3208ff6f110628da91f5746e06e3ce903ef2f7d0e72a3b3bb089dffa54438e956bf32b1a54e514f022988f587f79665775ef0838cc9f4b7bd8cefdf40b1f9da1eb6c41408f0eafc93b912a71eec1e6d81688dfac45437a0e25f0f8b72fb52587c0c2840d2d30bdd8ed517289270e7ea3484852aa12a23fed0793e6209881d268ece4c504500f165d3de66a84e1851f212e9ada4f38569d4b9d9dd0777a329b220aeb60023b92f424953d080b365bab7b6087ccb7c645e92e21a46adb39056a96613f1b1c835360cceb005a661622d15a5ee8cfcf92685415245d55d94d8659c6894857fddc30ae82f05b4b971814af4bc2fc9448d73a66debf4b9397d973bc1ce54c87e0ffb75838fc384ace4026685437bcaae83937ce0733724af445fb3052217d2c3a6e0e9b8ed94c0cdfe3131b4b9a70411735d74f2ff056fb70c8ccbd86f98cf57ef39b7b5bd874d559476fbf0155b4bdfb72c236b5940eba55b170a44d32c7c0495df7a8caf31cd3eaaf5fca4affde1d3c098ebd6fa21bfe36175d707710940b6ad664c7d6a747ac1010167884f1e72fe51935842cb9275223f9546f99dc545b0619ddb3faa2b817d9e76784c2cafb45b89cf750fc2956732b52b74a68bbfbda238202d61556af9e7e649c995a6536fccfe69c55932fb4bfda1cd986c5ec76b26cab3767fefabe10a0e3d36e230f89b308c49a792a1ce925e3b247bf993a4128c94a431a4ebbcff423d3e005cfbe99daac23044464f8c92b84934283230de743235c733849fdff4bb76f70bb582eeaf428e5812d3fd8a314c8df3695f30a9a727e197cc0bb34e19575f0185a8308af37268f3dfe2dd677646ff213dbf10a5523cef19bacd8ab186cc1397000d3402aa8a77399336954c317382e2df5363e2af862112e7ee00821646dbf7da4f66628ccd80a11e090a5a54bb72fadb863e14327aee3c8febfbdd39930f5d02c8612bbf0905983dbe9eb9b6f479f1cff45955ef872e94ad03e5dabef9a29d16a92a10ea5fcc5b1ffeda93cd0270036f5763f3a3b5cdefce983898a39a15f2bfab560b6c5eac34883059cdb258ae38f05790e7f9bee9bb8bf1e6714e45c4f6dc310110708ef1f23614bf316ab2d293e76770ec9a66e0f83d13f75433f41b774acd21bcdb6e59ba0886ca753c8893db93734a086e8d05994141d9b144a3ced8e7268ffaed349a8805b7006d8897ef9ac353fdf809036dde766ea662135a4866a7813adb53d5d06cfa2d04af60cb2cc79d232406c5506a61f180cb561930a4b39798fa68f323e39605e6f4703a23d2a6cf4ae835ba7c073756dc9158afe8316eebf1e289f4eaa712a7e92ce78395aa19a2d5f4de3055e98025ecf06cf760ea75957ef23a28b01f1a6aa725a5bd1f6e7aa487b26bc797c518d98a735555ce04d88bbf76d5f1f54825319a2aadbbe32f5ceb5d709bbccdfc8873325bda4b51cf26851d064542828e5eca4d864da40470389c67f0bfb2a9af1e548c7eb81950fc9c298dbbe0b899d0a5526f0e4351d4c1b4e3a9948ce2a521cf39f831ab7f4bc6c9bdc46ce539fad6ad2be20f6b0f7fc749d27bcaa18681d9cb2df073ffafc5d5eff7bf3d9ba3cb34b124c6fb381b5d8f7199d760af0e899c04f09a0df86ad6c3377d2011d44854a97d34ef0bfda2a7230d13c842a18fd5bab0a1b9350dc79a24584fffd5dca7236fe61a3443079eaf0a6e2efc9734c6e30462df329bb3b3972dab27d6d79f69a78e7db6ba3821df7a43c9c9f961a1c04ac306086b2a3ceb981649ca0ae93f384738e422e4e4c810c8c8e05ecad4a950e032d8112d786441ca4032244d882fa5c165394712ec11cfc4439e1ade72f5cd71173c62b028454647a187e2c777da1e7f05ce1d2e204bbb8a546cf38c815f9585899f3d8a08b2dd67c7815f39b500eb8fdaa9ff92c6e4042e83b6204eab65a422b5629e12545eb0d375a37ad48b3b30777310dfec22deb28258bd5767abd80283c371c41c1a2e2d37d4d93eba933b1d6843a58aba0f4981feb256aac7287f614eedeabe0da050a0717f0a33a2c22fd6295ebf68a126bda5b635e8ab4df7dedf1401e655c0975761e716b1f068d8eb099650ff90e4e1fb7edf5ecbce4bdc9df0d40880fd82105251832edb62c36155c4a4e1c8edfcdb655fbe3fe593b240a4bb407e8fc0b43d94b041", 0x1000}, {&(0x7f0000001800)="4054c893f8f2dac23e14fbf9ebe4e307192cb8848f418a25377ee372b93ad91d0d189ba5ec8b82e38755e564b5c1460e95333e72e498df5990847619c062e02b69627354ddabbb396838c4950dc3b3ded0d471cee7174edb5b6d1136d35408d32694eee8338180b0255ff862210c120b6b933ee4df96c79c5ea53c2eae1e824b12486471d22815e0d35f6c03eeebb882d34776e13e377d9ebc668f9547c76f1b16ad617937fb19cdce79b0cf68ba5285fe4449b0b0f58bb0dca1d6827ba62ca7e9e89aa913c526ac50f9b2b4f058af8850", 0xd1}, {&(0x7f0000001900)="a69a41999ddc4cd24217dcebdf1f25f199513d70097fb3f9759141a3a465f02b7f548281220aa2ff83168ee5688ee7c72b2698c304bbdc43bab065b069751aac975ad20c5df1c89227960bb9dfb89560130cf8455e595e5eb68203d27eaed9e668f394ed0ec3417e7bfe8b50f8d56c85aac8bac4", 0x74}], 0x3, &(0x7f0000001a40)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r8}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffc0}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0x8, 0x0, [@remote]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x80}}, {{&(0x7f0000001ac0)={0xa, 0x4e23, 0x4, @remote, 0xbd4}, 0x1c, &(0x7f0000001d00)=[{&(0x7f0000001b00)="3305bbe8370f64a16abd18fde8bec67c52842f9a9a2c212c2984450c3526113a74c124c0d578d3ba5359db38fd9453c1ea1d6d848a42c77f27e989ca976a1c8b354eb74b25fca8e75d4a8598c2a4145f8173df84104b11591f24797fc5e366d33c1a893fbc24a7e0b059346cc2dcdc476dfbc8117b595a5b1dc3596ca1ce89547fb1fc96eab6ee5970a7f1f26456957da86969940a7a56b1abe28c91e4c734d4737dc731e090c87322ffbd60923e909c91ac043a896e01d109d676977201ffc8a6ab466178fbfcadc66573b948002d1f840973be", 0xd4}, {&(0x7f0000001c00)="abdff510538f7cffe1c24dea82536b85bdcf5a014ab7840ec1b99656c907447b34c3212962467b713fc6bb95b6abced9ad1a4b977d4e1ac6a9a31b1d09c4927d76d73e1121d10f52b5658606af4abf8b1a8f4b915817a1b94f1e5357ec5d341d10e802785d830fdcb733bd4682655da2348215d5424d6bb2926c748634eae262377ca411f5b4d85276d8b96ff951dec4c12987decb05c428af84ec1014f098c57e622bff6114acc477f080c1efbdcc530d100e1c09f4f1e770c8254b3e3087923a2cb2bfcddd4476bb6e42bba70413f909aa2073cd35882c24fff2d249b2039b", 0xe0}], 0x2, &(0x7f0000001dc0)=[@rthdr={{0x78, 0x29, 0x39, {0x2f, 0xc, 0x1, 0x36, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r9}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x62, 0x4, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x15, 0x0, [0x6, 0xffff, 0xff8b]}}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xf6}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}, @hopopts={{0x38, 0x29, 0x36, {0x32, 0x3, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xa}, @ra={0x5, 0x2, 0xd}, @enc_lim={0x4, 0x1, 0xec}, @jumbo={0xc2, 0x4, 0x4}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x168}}], 0x2, 0x4048012) socket$igmp6(0xa, 0x3, 0x2) readv(r4, &(0x7f0000003040)=[{&(0x7f0000001fc0)=""/78, 0x4e}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000003080)={0x8001, 0x2}) sendfile(r2, r1, &(0x7f00000030c0)=0x10001, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000003200)={'syztnl2\x00', &(0x7f0000003100)={'syztnl1\x00', r8, 0x7, 0x1, 0x7, 0x8c, {{0x2c, 0x4, 0x3, 0x4, 0xb0, 0x64, 0x0, 0x6f, 0x2f, 0x0, @remote, @empty, {[@ssrr={0x89, 0x7, 0x42, [@remote]}, @generic={0x88, 0x9, "5bddab05415ba1"}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x5, 0x3, "fc"}, {0x5, 0xa, "fa2ee300b6322050"}, {0x5, 0xd, "090630bb2a02b79dc8b18d"}]}, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x37, 0x1, 0xe, [{@remote, 0xff}, {@private=0xa010100, 0xd60a}, {@loopback, 0x4f5}]}, @cipso={0x86, 0x24, 0x0, [{0x7, 0x10, "d94be055509d212733d84676c509"}, {0x2, 0x4, "1c8b"}, {0x6, 0x3, '%'}, {0x2, 0x7, "057861965a"}]}, @rr={0x7, 0x17, 0x96, [@multicast2, @multicast2, @empty, @loopback, @empty]}, @ssrr={0x89, 0xf, 0x53, [@rand_addr=0x64010102, @empty, @multicast2]}, @end]}}}}}) sendmmsg$inet6(r2, &(0x7f0000003d00)=[{{&(0x7f0000003240)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, &(0x7f0000003300)=[{&(0x7f0000003280)="365fbb9929028942752771ca4d28e1c119437d58aa862c1c44e5e9785b60bba2056275604fed6dc24763ecdaaa95022295e7898439164f38eeb51e498b543b0aba3c329cac4f7c11adbc87c08c35ba442120ed97c0f3", 0x56}], 0x1, &(0x7f0000003340)=[@dstopts_2292={{0xf0, 0x29, 0x4, {0x3b, 0x1a, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0x4, [0x4, 0x5, 0x3ff, 0x6, 0x401]}}, @generic={0x9, 0x69, "638404a76d8bb5a61e053521e3bdfb76bc8902362ae57a4cb084dac2fe8ff49c2f90be824f1066c45d943071ec3697af00788c88eadee7521b0b5aad71af4944f2626ab383479ff892265bcd16f84171be6ac2b7476908f669f00cb76e1428d117de7648dff460f20f"}, @ra={0x5, 0x2, 0xea}, @padn, @generic={0x3, 0x2e, "160325a0999c3f637ea1f37f9daad99d844c2430c7375176648d907fd9f415efd0b4a4a84be2eea34bf5ef669554"}]}}}], 0xf0}}, {{&(0x7f0000003440)={0xa, 0x4e22, 0x7, @local, 0x5}, 0x1c, &(0x7f0000003580)=[{&(0x7f0000003480)="86594fc045e7e42e2c6e52fb84c88523bc43096944fda0ed6e430cd95d3c9f3f1bd9f7fc24d5749acbae739be1e5c6d601f8b5780300b48ade60e5eb260bdb420cf2440f54bc7032760c38ac9a60aa6b94653ba2701e1850dff5cde0d78f241766841e0c51d5bab5670120c2cfd0af950a0b71282d23c934542a70579013da8240462de8dc88efd2e7b1b25a073617c5f590aa835d3b1e369a9f1701caf04322c70e07e4df7b424e6d2ef9333d5cae5a8a4dfb0164295a5a49ce14c2b0049839760aa64d3e220f47a6f97debbc4fe8b43d84d094b1815781583e3efa6955a31258602a85893834c7d1d25ce1b64c475af3dcd7", 0xf3}], 0x1, &(0x7f00000035c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts_2292={{0x118, 0x29, 0x4, {0x88, 0x1f, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0xdcfa, [0x83, 0x3, 0x3, 0x8, 0x8fe, 0x5917]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xc8}, @generic={0x0, 0xb1, "1950ed79947e2e777b47e6fc4825e1bca33882df3294f838cf1bef8cb453d2626301007f0d4dc82475a7993d595996314aff675b9fdb28f95e5c7066a69375e0bad68a4f6b168104ef1e17952f492693b3f3f5531f420cd4b79f7b4af937180e13e13c3bcfc0fabec567ffabc94531ca59c7f3d348f1f7c332f9deeb49d04a11cbedb8ef794000f948b398b10393912b25742a5301a7ef9a0693db17a83854db5179e9a8b40c54f3aac7627c1a1871ee92"}, @enc_lim={0x4, 0x1, 0x9}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x67, 0x6, 0x1, 0x2, 0x0, [@private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x67, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x2, 0xfd, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r10}}}, @hopopts={{0x80, 0x29, 0x36, {0x0, 0xc, '\x00', [@pad1, @pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0x40, 0x3, [0x5, 0x4ca, 0x0]}}, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x30, {0x3, 0xa, 0x9, 0x0, [0x2, 0x6, 0xe, 0x7, 0x1]}}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x98, 0x4, 0x1, 0x7, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dstopts_2292={{0x250, 0x29, 0x4, {0x3c, 0x46, '\x00', [@hao={0xc9, 0x10, @empty}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xf, 0xde, "eb6f191af85cdb055bae25b2cc886bc12b958ffa871389bfb5d64537cd8e7083fef7ed30e19ccdb111c727a439a8ac356b89e08d7edc3b436009eafa250d0adcd2adcfe8c64f488cdf9068c3dbad87c822163734ea3e5a3e3b4182e58bcc42c339ee87275976f02e01db2d7037fdb707268de3a546a85a587172b042407c62d1104c6bda885716ebc6a3f18a9098b25534f2b23bc876b8d04e77c76a0531d7f4f73163fac081c26f0f1b69fd07f841c18da290aeddc6fab01c8233f7a99f47eb55d0b1c782be496963ceb8d4c62d732fbcfb411b85c49c968404ac886daf"}, @generic={0x53, 0xd1, "d40d317c1b27de6007e107ec69ced01c041f24e22eaa7ed251b745654faef9e1d5c032ec602428057e220d0f4b7b1e122f65c42d1682a3d93aa87037c3e34ab9749cac367857b6b5c850b424b4e5bfa8d5fa208224f17d7f7d54ce466d557b445a529d92d6109d6dfdd244131a51ef7c7a97fb9ef255bf1cfd67b11e93f266932fec494708e75a352880b6c511547af9f7b94bcf7167dcbe59b076127646b43dd35d48427501d17fe9cb1529974bea05a0ca608d8825170c105b9756c8b790fd90f13b4c9ee53b42e9c3071892a2e75138"}, @generic={0x5, 0x5, "d5563747c1"}, @calipso={0x7, 0x58, {0x3, 0x14, 0xc6, 0x3, [0xc, 0x100, 0x1, 0x5, 0x80000000, 0x9, 0x9, 0x4, 0x3, 0x8000]}}]}}}], 0x510}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003b00)="4ac81548e7fdfa508305376eb5f25df63a63c6e882077612d747fa7fae88f70e9b1e4a10610c316acb92e24358797abb432d4dbd4d5ee318a8f0807147c2236c81627aee58541029cd274c", 0x4b}, {&(0x7f0000003b80)="9271b5fb0c8718caa0ee1fac9ea12c63830ab48155abf8efc5a752a83d", 0x1d}], 0x2, &(0x7f0000003c00)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x34, 0x10, 0x2, 0xd1, 0x0, [@loopback, @remote, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0xc8}}], 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000003dc0)={@rand_addr, @empty, 0x0}, &(0x7f0000003e00)=0xc) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003e40), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003e80)={0x1b, 0x0, 0x0, 0xba6, 0x0, r7, 0x499, '\x00', r11, r12, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r13 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003f00), 0x400400, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003f80), r4) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r13, &(0x7f0000004040)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004000)={&(0x7f0000003fc0)={0x34, r14, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}]}, 0x34}}, 0x4000000) r15 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r15, &(0x7f0000004d00)=[{{&(0x7f0000004080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000042c0)=[{&(0x7f00000040c0)="2fd282ba9c7cca78a2d86cfe5f4a5f8d1226555772921dd538f1e6de481bc6b3e7e4214937d4d79fc0e56b67becae3172e42c844d633b2fb66b772d726fb363a5580512cb6c809add89a43b5b37723c14cba8ed7a40e34d4fb42cc7c4f600930c28caa3f6e7b17e482994ebf7cfc1b837dc2dd59a00e4767bc7ce60d1c20b0eff55db41774ffb269c3e620f56fe2f6963cffbb76f0b9f417763b96009c9b2f2d0f26c45a1db2ffe812b81a60a2fc360b3aee6307b18b8d5d681525f79f1d0b4d9a7e3ad44f7553ff58755cbdfefc00ba95be28d2dc83", 0xd6}, {&(0x7f00000041c0)="99487314a90f7d566acf1655312e58d20f61f647e91c33d4cc630042d275ed0c4de529193e84bb0a2c7154738977a17712d53ab99f0bd269f138c4db376fbef448abd29d4679b2dbcccd137f3f1573228ac5642d1aad2b250b0f9db79b7ae5b4112d99ab0311b9c836369ac44db1bb8ac8d59ca03719b443162513ab5ff97a3d18a0dc9e2e1403636659", 0x8a}, {&(0x7f0000004280)="d224e85aa11c2dd9b0a2670623b4b580b3d738dd46be0b3d62a6bbc4071fd050d7199f51b91e3c3fe28e59d0db83ad48a06da073c441e1", 0x37}], 0x3, &(0x7f0000004300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6f04}}], 0x48}}, {{&(0x7f0000004380)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000045c0)=[{&(0x7f00000043c0)="434de7a7fa4c851ba1", 0x9}, {&(0x7f0000004400)="e8a1f21891ecc336c86c7e831c7271adee3274edfca64768b23c7919cc23e04dac0f6ccadc25dc12324fe1fe3f05a82beff3b9dba128356f3663fb388e2df826aad1e65384db901c210a", 0x4a}, {&(0x7f0000004480)="001c5588a4ee6efc8d0974155ba5cacf2446a06fd90d4996b6c00059e187acb5b0209d1249887e732ea166eb81dfd059598e0b37aa725f1c46200d4886c5d1c18f76d89b52aa16ff26febb2729b9becb56ca0d0a15ce39ea37f38d978789505a888c2073bca4450589ef5591e98409de53834c3d", 0x74}, {&(0x7f0000004500)="df197279370eabfc914cb6f67807e32978b805acba3df1c7f8556be6222aad292a91d0ddc7771a08", 0x28}, {&(0x7f0000004540)="44b0b808f82b76842981c4fb3ceabef620644124b72663fed79c57009d8fa1772d0dcec2e88874e35972c827f473d566892329c9758997d57478d901d4377f23c85f6429cc6dd85be74c20b3e8afca9206940418b17abf33830ab49ed0870480f7", 0x61}], 0x5}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004640)="4ab2e0328d38f7fe81df21ec6283a69d87cb7f2bbc2000529e727e3a039080d2f4d4264488ee87260da95f2eb298b2b35c7017f23443e2d03082497fac18bc52f37639bf8aacf8ff34cde4fe7db3469fb097f3f6cd3e0b6c3e3095db336604e51fb3a3972707f60272d485ea3df1089aa81dc81f1ecd2b043ed606a6aec9173327bc4e33bea7f146303391a8c0c7a7cc08102196b5742f2790cf7ccbca5704417245ce9bcebefcc6387c8effc60369d92ae446cc1b0d3b960fbfb5fb42f465468c316d33844ad841e4ce819303ca72e266bc611c6e2c86fc4e6ad104", 0xdc}, {&(0x7f0000004740)="9dc1e441e7991e97ad42829714a33513dd5e062f6a6397687257443e0d5bfe62672ecf8fd040944c4e69997138bf9015b7a5b730634f", 0x36}, {&(0x7f0000004780)="edb4540ee808ca0e4fc44499f7df004dfeaedf4817296c920543b524848d96b31500633bd0dacd22e9c06c5081613b087b01689d0488a9d974fe3196338ac94e87d9bb52fa0abdbab50b3dbdc6f284abdb173ddf71e927053f003a4f4cd7279315bb5c045e6c926e852afd9878785c363be94965c2f4ea247bad821ff44e1dcae183dea8a7e6c663f332c9df620b3f3d32a69eb6b5024b92d9f9ce1ef5574b1c3af521d3", 0xa4}, {&(0x7f0000004840)="be6a13684fab6e9087d3dfd1dedb5c67de7e9adc69c5d100cfbaebb1ab0bbccf1e9da3ae2814c3976d1f7817fb2f8b0c136439ff4a63ac80dc5efa8b8f3f19b93c5e23016c55228d89d69868f633bffc3a0486d02c5fe10b795c375b59c034736f296dde25d6256633c8167ec99880de3f8629c518d07703c9ac63d7acb6f08554df25f69ed44f1f9c47191914b68f0e502c9e5e3cd885e233879a2f0cef8465f48b5431bfcf2a894b2da9c51dd5a0a745863536f9ddc644221e5a524170f2bc1bd96545c33ed3fe353d75e90f9c111feedf9d1d31dc5a498cb98468f67e7f47dd9ab56d0ccced4d5297c5815b5cee8676fa", 0xf2}, {&(0x7f0000004940)="1d6d787d6dc781d11dbae86a457d91f526eb5abdf0c0e05ec50cea9bdc3233871dd673cf5dda8580a7f28f8e9bccce9b11b71731024b947173b388d82ebf3a649c44ea283c9c44e25234cd7e5932d4ce085f73b958ecf95193a9f2e321a5f01d7990b89d498c94abea9805896b71b955773822f048ddcb5f233316d92c8a8a4d515d22b59d991b7805cf1d9f24c8115e376725454c4477", 0x97}, {&(0x7f0000004a00)="cde35a0f9059353dc176e08527751318f73c20bc6f9fd124d34bccf9d3ee9c053c0aabbbb780bf79ce760082b7ad26a0aff70acace2ed9de1342d1fda3696bdd85c15f8e8ac950d4861335a1b0bae96a3309ae4ced9e931863c48d22216c7f2758bbdbcc4ba097963bd52b53187c661aa93c8237a4ef89a2195394aba6f3bb44bf276b80ccddcd4e7f6f784dc43fcb577b6fc5d9cbabff7a0dafb8a740487591160b3c1debc3e92e81f9b5e1f33c5839167c0af89e9c70dc811ccedb52fae59ec6a6782751ca25537c", 0xc9}], 0x6, &(0x7f0000004b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x29e31ba5}}, @ip_retopts={{0x40, 0x0, 0x7, {[@cipso={0x86, 0x2d, 0x0, [{0x1, 0xa, "0311e381d9231274"}, {0x1, 0xe, "b7949a052c065c7ce57cc3c7"}, {0x2, 0xf, "53fbc2f1e8ce80dd9e2f832852"}]}, @end]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x11, 0x3, 0x3, [{@broadcast, 0x6}, {@broadcast, 0x73}, {@private=0xa010102, 0x2}, {@local, 0x8}, {@loopback, 0x6d}, {@private=0xa010100, 0x3}]}, @timestamp={0x44, 0x14, 0x1b, 0x0, 0x0, [0x2, 0x200, 0xc656, 0xcbcf]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x84}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @loopback}}}], 0x150}}], 0x3, 0x4000000) 430.450237ms ago: executing program 2 (id=804): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setresuid(0x0, 0xee00, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) userfaultfd(0x801) (async) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000010140)={0x2020}, 0x2036) sendmmsg$inet(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c040) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) mount$nfs4(&(0x7f0000000280)='/dev/kvm\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2000, &(0x7f0000000400)={[{'/dev/video36\x00'}, {'/dev/dri/card#\x00'}, {'/-}!'}, {'/dev/kvm\x00'}, {'\\^^{#\x15-['}, {}, {'/dev/dri/card#\x00'}], [{@appraise_type}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@flag='mand'}, {@dont_hash}, {@context={'context', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000140)={0x2, 0x101, 0x0, {0x7640, 0x2ff, 0x3ff, 0x8}}) (async) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000140)={0x2, 0x101, 0x0, {0x7640, 0x2ff, 0x3ff, 0x8}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 430.141405ms ago: executing program 4 (id=805): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000740)={0x40, 0x1ad, 0x800}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0xa}, @TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x44}}, 0x0) 429.671449ms ago: executing program 3 (id=806): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x20040018) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00'}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x1, 0x2000c044) (async) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34120bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) (async) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200106000000fbdbdf25010000000000000007410000004c00180000008075647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x24008094}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200106000000fbdbdf25010000000000000007410000004c00180000008075647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x24008094}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1_macvtap\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@local}], 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x468040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv2(r9, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000300)=@x86={0x6, 0x7, 0x10, 0x0, 0x7fff, 0x2, 0x6, 0xa, 0x9, 0xff, 0x10, 0x9, 0x0, 0x3938c342, 0x3, 0xfb, 0x85, 0x5, 0x2, '\x00', 0x0, 0x2}) (async) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000300)=@x86={0x6, 0x7, 0x10, 0x0, 0x7fff, 0x2, 0x6, 0xa, 0x9, 0xff, 0x10, 0x9, 0x0, 0x3938c342, 0x3, 0xfb, 0x85, 0x5, 0x2, '\x00', 0x0, 0x2}) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0xf, 0x2e, 0x6, 0x4, 0x5, 0x6bb6, 0x2, 0x168}}) syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 280.489915ms ago: executing program 2 (id=807): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x4041) ioctl$LOOP_CLR_FD(r0, 0x4c01) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x7000) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x12400, 0x0) fstatfs(r1, &(0x7f0000000080)=""/4096) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ppoll(&(0x7f00000010c0)=[{r1, 0x6a1}, {r0, 0xc20a}, {r1, 0x402}, {r0, 0x204}, {r2, 0x200}, {r1, 0x4080}, {r0, 0x400}, {r0, 0x4194}], 0x8, &(0x7f0000001100)={0x77359400}, &(0x7f0000001140)={[0x6]}, 0x8) write$nbd(r2, &(0x7f0000001180)={0x67446698, 0x0, 0x3, 0x0, 0x4, "d6918ec3aa7b0428c5587e6d6f065b75f5970f501c9adb9e403246fbf01082fce667d8a02df6003cf70fd8dc731b34d3df0eca6ee971b806557ef3cab67ae845fab13708bfd288588057a6684247825c6d8090769c2c67e73426a5c384731fcc33b8cc415a30f2e0287419d62f17ec90f34c43d9dc8a08f0ceb4c8fe65748eee54e10255980d18642350664bf1e4cf7e2870103007db3708b1342dc00b4b2297aab0bf281234cdf4d2d0df0867f3a89235ee618a"}, 0xc4) ioctl$SNAPSHOT_FREE(r2, 0x3305) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000001280)=0x6, 0x4) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x8b5) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000012c0)={0x0, 0x4, 0x30, 0x60000000000, 0x4}, &(0x7f0000001300)=0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001340)={r3, 0x5}, &(0x7f0000001380)=0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = fcntl$dupfd(r4, 0x406, r2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000013c0), 0x48282, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r6, 0x8008330e, &(0x7f0000001400)) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000001440), &(0x7f0000001480)=0x8) pwritev2(r0, &(0x7f0000001540)=[{&(0x7f00000014c0)="82b0c038109fd67be35830e47896ef43c57514b01d2e25611dd6a9ca4947ce39ce37b1d457d58fd8a58f894097b6af060e955bb0e2377d2dd65003ad311db724a10d5633939be4e71dbad147741790f992e6da92ad47f531c22c791547de1b5e", 0x60}], 0x1, 0x5, 0x1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) preadv2(r5, &(0x7f0000002780)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/125, 0x7d}, {&(0x7f0000002600)=""/139, 0x8b}, {&(0x7f00000026c0)=""/166, 0xa6}], 0x4, 0x1, 0x3ff, 0xb) ioctl$TCFLSH(r2, 0x540b, 0x2) read$FUSE(r5, &(0x7f00000027c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000004800)=r7) syz_open_dev$dri(&(0x7f0000004840), 0x8001, 0x80a02) ioctl$CDROMEJECT_SW(r5, 0x530f, 0x1) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000004880)) dup3(r6, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000048c0)) 0s ago: executing program 4 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)={0x175c, 0x0, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [{{0x254, 0x1, {{0x2, 0x4}, 0x1, 0x5, 0x1, 0x1, 0x7, 'syz1\x00', "edce539937da7949aa500c9edde74fbadb8bbdcf2293384dae054960c5d00a80", "c88597b1c661ffc4b586746488b47b8bfb2eb17bd5b1be92fa4a43e59a13afef", [{0x5, 0xfffd, {0x0, 0x2}}, {0xf26, 0xc, {0x2, 0x4}}, {0x5, 0x3, {0x1, 0x9}}, {0x6, 0xcc, {0x2, 0x3}}, {0x6c13, 0x40, {0x2, 0x7}}, {0x3, 0x1ff, {0x3, 0x4b}}, {0x1, 0xf2, {0x2, 0x1000}}, {0x9, 0x3, {0x2, 0x2}}, {0x5, 0x2, {0x1, 0x3}}, {0x4c5, 0xb, {0x0, 0x400}}, {0x6f, 0xbc, {0x0, 0x9}}, {0x9, 0x5f0c, {0x0, 0x8}}, {0x10, 0x8, {0x0, 0xa3}}, {0xffff, 0x3, {0x3, 0x7f}}, {0xff, 0x2, {0x2, 0x9}}, {0x6, 0x7d, {0x0, 0x8}}, {0x5, 0x1, {0x1, 0xdfa}}, {0x6e, 0x3}, {0x8, 0x8001, {0x0, 0x2}}, {0x9b, 0xfb, {0x3, 0x40}}, {0xcf, 0x3, {0x0, 0x2}}, {0x3, 0x1, {0x0, 0x5}}, {0x2, 0x101, {0x1, 0x101}}, {0xff, 0x3ff, {0x3, 0x8}}, {0x5, 0x8, {0x2, 0x7}}, {0x4, 0x1ff, {0x2}}, {0x8000, 0x6, {0x3, 0x400}}, {0x3, 0x514, {0x1, 0x7f}}, {0x7, 0x8, {0x4ad2a8dddd5bccd0, 0x3}}, {0x8000, 0x8000, {0x0, 0x81}}, {0x8, 0x1, {0x3, 0x9}}, {0x9, 0xa, {0x0, 0x80000001}}, {0xe22, 0x6186, {0x1, 0xc}}, {0x101, 0xf8, {0x3, 0x7}}, {0x1, 0x10, {0x2, 0xffff}}, {0x0, 0x5, {0x0, 0x3}}, {0x8, 0x83ff, {0x1, 0x5}}, {0xe8f, 0x5, {0x2, 0x4}}, {0x1, 0x0, {0x2, 0x3}}, {0x3, 0xa1, {0x3, 0xd}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x10, 0x5, 0x2, 0x1, 0x9, 'syz0\x00', "b82bf347981140ea6abb1d379a58d3247cb0af4e94c70bb1001132c9a225b39d", "dd6b9d52d1677f395879193e06099eb50a1c96aff9c29b40a16215b7bfbb2c2e", [{0x4, 0x1, {0x0, 0x1}}, {0x1c, 0x1, {0x0, 0x7}}, {0x5db, 0x9, {0x1}}, {0x7fff, 0xfff8, {0x2, 0x401}}, {0x8, 0x6, {0x1, 0x200000}}, {0x0, 0x7, {0x1}}, {0x7, 0x2, {0x3, 0x39}}, {0x2000, 0x9, {0x3, 0x4000}}, {0x3, 0x401, {0xa24527685acf7538, 0x3}}, {0x6, 0x8, {0x2, 0x5}}, {0x1, 0x4, {0x3, 0x8}}, {0x9, 0x800, {0x2, 0x8b63}}, {0x0, 0x5, {0x0, 0xe7b}}, {0x200, 0xa, {0x1, 0xb}}, {0x4, 0x7, {0x2, 0x47}}, {0x8, 0x101, {0x1, 0x2}}, {0x8, 0xfffe, {0x0, 0x4}}, {0xb64, 0x2800, {0x2, 0x4}}, {0x4, 0x7, {0x0, 0x5}}, {0x400, 0xb2a, {0x3, 0x3}}, {0xbc48, 0x4}, {0x5, 0x800, {0x0, 0x6}}, {0x4, 0x6, {0x3, 0x6}}, {0x3, 0x585, {0x2}}, {0x3, 0x0, {0x0, 0x8}}, {0x7, 0x2, {0x2, 0xab}}, {0x9, 0x5000, {0x3, 0x5}}, {0x8, 0x10, {0x3, 0x5}}, {0x9, 0x9, {0x3, 0x3}}, {0x628, 0xe, {0x0, 0x8}}, {0xffff, 0x212a, {0x0, 0xffffffff}}, {0x6, 0x4, {0x0, 0xc}}, {0x3, 0x8, {0x1, 0xc}}, {0x1, 0x8, {0x3, 0x6}}, {0x4a60, 0x5b9, {0x0, 0x3}}, {0x7ff, 0x4, {0x1, 0x2}}, {0x3ff, 0x616, {0x0, 0x2}}, {0xf3, 0x9b03, {0x3, 0x9}}, {0x3, 0x8, {0x3, 0x1}}, {0x2, 0x9, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x2d2}, 0x4, 0xe7, 0x1, 0x9, 0x3, 'syz0\x00', "a428ece443b223c4052ec38f4c5c985b1dfd357243320ccdbba970019884b5c3", "77513dff702257ea6db64987ea4fbcda9de0c304079d7ebec96e10552f0e8f62", [{0x7, 0xb, {0x3, 0x8001}}, {0x4, 0xb, {0x3, 0x5668}}, {0x8, 0x4, {0x1, 0x9632}}, {0xfd1b, 0x7fff, {0x3, 0x3}}, {0xf, 0x9, {0x2, 0x9}}, {0x5, 0x7, {0x0, 0x200000}}, {0xfffa, 0x705b, {0x1, 0x2}}, {0x1, 0x8, {0x1, 0x8}}, {0x9, 0x1, {0x2, 0x80}}, {0x2, 0x3, {0x3, 0x400}}, {0xecd, 0x8, {0x3, 0x4}}, {0x200, 0x1, {0x0, 0xf}}, {0x9, 0x0, {0x2, 0xfffffffd}}, {0xbd, 0x65, {0x0, 0x7}}, {0x2, 0x5, {0x3, 0x7}}, {0x4, 0x2, {0x2, 0x10000}}, {0xff, 0xfeff, {0x1, 0xa6}}, {0x8, 0x5, {0x3, 0x1}}, {0x9, 0x200, {0x1, 0x2}}, {0xe5, 0x6, {0x0, 0xf9}}, {0x2, 0x6, {0x1, 0x8}}, {0xfff9, 0x3, {0x0, 0xd0}}, {0x0, 0x8000, {0x0, 0x74ddbc8e}}, {0x8, 0xffff, {0x1, 0xffff}}, {0x40, 0x6, {0x1, 0x3}}, {0x3, 0x1000, {0x3, 0xff}}, {0x9, 0x8, {0x2, 0x2}}, {0x0, 0x8001}, {0xffff, 0x8218, {0x3, 0xe601}}, {0x5, 0x6, {0x1, 0xce26}}, {0x80b, 0x2, {0x2, 0x100000}}, {0xd8, 0x9, {0x1, 0x584}}, {0x2, 0x5, {0x0, 0x4f6}}, {0x8, 0x0, {0x3}}, {0x4, 0x5b, {0x1, 0x5}}, {0x8001, 0x5, {0x0, 0x7}}, {0xfffe, 0xa, {0x3, 0xffffffff}}, {0x205, 0x7f, {0x3, 0x1}}, {0x1, 0xff, {0x0, 0xd}}, {0x1, 0x9, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x6, 0x6, 0x4, 0x40, 0x18, 'syz0\x00', "c509ca056e1075daab44e82fff45ca0a20f4956b30218d3ce8393ee835fb9327", "28ad48a90f56e78bdd884f7142cdae9989e04b6d9e7e0a3b83acdcf9bd874815", [{0x8, 0x9, {0x0, 0xdc4}}, {0x85, 0x0, {0x3, 0x6}}, {0xc, 0x9, {0x0, 0xf}}, {0xff, 0x7f, {0x1, 0x8}}, {0x558, 0x800, {0x2, 0x7}}, {0x0, 0x6, {0x3, 0x5f79}}, {0x5, 0x3ff, {0x0, 0x9}}, {0x4, 0x0, {0xb479a54f16209cbe, 0x2}}, {0x7, 0x0, {0x2, 0x2}}, {0x6, 0x5, {0x0, 0x43fb}}, {0xe, 0xc709, {0x0, 0x803}}, {0x5, 0xfffb, {0x2, 0xb39}}, {0x9, 0xe, {0x2, 0x7fffffff}}, {0xfffc, 0x6, {0x1, 0x7fff}}, {0x2, 0x0, {0x0, 0xe}}, {0x4, 0x7ff, {0x1, 0x100}}, {0x6, 0xe8, {0x0, 0x19}}, {0xd, 0x4, {0x2, 0x9}}, {0x1, 0x9, {0x1, 0xcd6a}}, {0x0, 0x2, {0x1, 0xa2a}}, {0x442, 0x4, {0x2, 0x3ff}}, {0x485, 0x0, {0x1, 0x6}}, {0xac9, 0x7, {0x0, 0x200}}, {0x0, 0x8, {0x0, 0x6}}, {0xffff, 0x8000, {0x1, 0x9}}, {0xfbff, 0x2, {0x2, 0x40b}}, {0x6, 0x3b, {0x0, 0xa82e}}, {0x9, 0xe, {0x2}}, {0x7, 0x400, {0x2, 0xffff}}, {0xb, 0x5, {0x0, 0x8}}, {0xc27c, 0x8, {0x0, 0x4}}, {0xda23, 0x0, {0x3, 0x5212}}, {0x3, 0x7, {0x1, 0x800}}, {0x8, 0x7, {0x2, 0x4}}, {0x7ff, 0x2, {0x2, 0x124}}, {0x5, 0x0, {0x0, 0x8001}}, {0x5, 0x8, {0x3, 0x10001}}, {0x5, 0x5, {0x0, 0x1}}, {0xa, 0xae6, {0x2, 0x7ff}}, {0x3706, 0x9, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x9, 0xa, 0xbf7, 0x9aac, 0x2, 'syz0\x00', "ffd4cf5a6b5f313e5b1fd6195d46f4636a309cd850a936cd8149b519798868c2", "49873bbdb933618c87bfc2a74a052474889ec2506c0f01abce1c05d2c039c7ef", [{0x0, 0x6, {0x1, 0x24b4}}, {0x0, 0x4, {0x3, 0xff}}, {0x1, 0x400, {0x2, 0xffffff7f}}, {0x8, 0x8, {0x1}}, {0x2, 0x9, {0x0, 0x3}}, {0x3, 0x3000, {0x1, 0x5}}, {0xd, 0x2, {0x1, 0x800}}, {0x1ff, 0x1, {0x1, 0x6}}, {0x3, 0xffff, {0x0, 0x57}}, {0x4, 0xfc00, {0x2, 0x8}}, {0x5, 0x5, {0x0, 0xfffffff9}}, {0x1, 0x6, {0x3, 0x5c}}, {0x9, 0x280, {0x2, 0x6}}, {0xfe, 0x4, {0x3, 0x8}}, {0x8, 0x8, {0x0, 0xa3}}, {0x3, 0x6, {0x1, 0x8}}, {0x2, 0x5, {0x1, 0x7}}, {0xfff, 0x9, {0x1, 0x401}}, {0x6, 0x8}, {0xc10f, 0xb, {0x2, 0xd34d}}, {0x6, 0x45, {0x2, 0x3}}, {0x54, 0x9, {0x2, 0x5}}, {0x6, 0x8001, {0x3, 0xfffffffc}}, {0xe1, 0x200, {0x1, 0x48}}, {0x200, 0x8, {0x0, 0x6}}, {0xb7ce, 0x9, {0x3, 0x7}}, {0xff04, 0x6, {0x0, 0x5}}, {0x101, 0x5, {0x3, 0xfffffffb}}, {0x8, 0x0, {0x2, 0x4}}, {0x0, 0x3, {0x2, 0x6}}, {0x7f, 0x0, {0x0, 0x822}}, {0x8, 0x6, {0x2, 0x5}}, {0x4, 0x7, {0x3, 0xffff}}, {0x80, 0xf85a, {0x3, 0x400}}, {0x5, 0x2000, {0x2, 0x1f0168ff}}, {0x10, 0xfffb, {0x3, 0xb4}}, {0x1, 0x1, {0x1, 0x5}}, {0xf77b, 0x2, {0x2, 0x1400000}}, {0x4, 0x9, {0x3, 0xfffffff3}}, {0x1, 0x7, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0xb, 0xd, 0x5, 0x4, 0x12, 'syz1\x00', "eb484a4e46285dc827657793d39d9c4466898efbbdba87c4f67dcd897dcd47be", "419de7dec80aed121196467ea8ece31d7d9a425106719b557b9e2f1bc3aaa5e2", [{0x3, 0x31a0, {0x1, 0x59}}, {0x7fff, 0x10, {0x3, 0x6}}, {0x0, 0x5, {0x2, 0xe}}, {0xbf99, 0x180, {0x2, 0x3}}, {0x8, 0x7ff, {0x0, 0x8}}, {0x5, 0x80, {0x1, 0x8}}, {0x7, 0xd, {0x2, 0x40}}, {0xfffa, 0x5, {0x0, 0x34d}}, {0x10, 0x2e77, {0x3, 0xa}}, {0x40, 0x3ff, {0x0, 0xffff}}, {0x129e, 0x7, {0x2, 0x8}}, {0x51c, 0x6, {0x0, 0x800}}, {0x5, 0x4, {0x3, 0x5}}, {0xba2, 0xa2, {0x1, 0xe}}, {0xfff4, 0x80, {0x2, 0xfffffff3}}, {0x81, 0x29e8, {0x1, 0x5}}, {0xfffa, 0x8, {0x2, 0x5948f83c}}, {0x0, 0x9, {0x0, 0x4}}, {0x1, 0x9, {0x3, 0x6}}, {0x400, 0xb, {0x1}}, {0x4, 0x644e, {0x1, 0x7}}, {0x5, 0x9, {0x1, 0x4}}, {0x4, 0xffc0, {0x0, 0x400}}, {0x9, 0x583, {0x1, 0x39}}, {0xee, 0x4, {0x1, 0x52ca}}, {0xff, 0xa, {0x0, 0x2}}, {0x6, 0x7f, {0x2, 0x100}}, {0x6, 0x10, {0x2, 0x4}}, {0x8, 0x3, {0x3, 0x8001}}, {0xb, 0x4, {0x3, 0x2}}, {0x5, 0x6, {0x1, 0x9}}, {0x3, 0x101, {0x1, 0x6}}, {0xfff, 0x4, {0x0, 0x6}}, {0x2, 0x8f, {0x1, 0x5}}, {0x5, 0x5, {0x0, 0x6}}, {0x8, 0x2, {0x0, 0x8}}, {0x7, 0x2, {0x0, 0x6}}, {0x9, 0x4c9, {0x3, 0xf}}, {0x413, 0x39, {0x2, 0xbd}}, {0x9, 0x8, {0x2, 0xb}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x7f, 0x8, 0x8, 0x1, 0x2, 'syz0\x00', "590fa2d5cc374944898990a1a7501281d9b9c84f3fc2472947f30729a28c4f84", "1238b72d4140278edde40b86ce784a0583da0f455752d20adc8b00c62c6e2306", [{0x6, 0x9, {0x2}}, {0x2, 0x7, {0x2, 0x10001}}, {0x9c8, 0x8, {0x0, 0x1}}, {0x0, 0x8d, {0x2, 0x6}}, {0xf024, 0x8, {0x1, 0x1}}, {0x2, 0x2, {0x2, 0xf}}, {0xfff8, 0x5, {0x3, 0x9}}, {0x5, 0x3, {0x1, 0x6}}, {0x303, 0x0, {0x0, 0x4}}, {0x9, 0x9, {0x1, 0xc}}, {0x1000, 0x90c5, {0x2}}, {0x6, 0xffff, {0x2, 0x6}}, {0x7, 0x2, {0x1}}, {0xa7, 0x9, {0x3, 0x8}}, {0x9, 0x2, {0x0, 0x5f}}, {0x93, 0xd51d, {0x3, 0x100}}, {0x2, 0x3, {0x3, 0xffffb69b}}, {0x40, 0x2, {0x0, 0x10}}, {0x5, 0x3, {0x3, 0x763f9f54}}, {0x3, 0xcec9, {0x0, 0x3}}, {0x86e, 0x7df, {0x3, 0x2}}, {0x5, 0x3ff, {0x2, 0x8}}, {0x2, 0x8, {0x1, 0x4}}, {0x6, 0x5, {0x1, 0x2}}, {0x9, 0x4, {0x0, 0xffff}}, {0x9, 0x9e5f, {0x2, 0x8000}}, {0x400, 0x9b, {0x3, 0x5f0}}, {0x0, 0x1, {0x2, 0x3}}, {0x0, 0xf800, {0x1, 0x6}}, {0xfffb, 0x4}, {0x0, 0x7, {0x0, 0x3}}, {0xfffd, 0x2, {0x1, 0x5}}, {0x1, 0x5, {0x3, 0x101000}}, {0xfffd, 0x8, {0x0, 0x400}}, {0x10, 0x7, {0x0, 0x7fff}}, {0x8, 0x1d50, {0x3, 0xfff}}, {0x7ff, 0x5, {0x0, 0x8001}}, {0x7, 0x800, {0x2, 0x2}}, {0x2, 0x4, {0x3, 0x2}}, {0xfff9, 0x40, {0x0, 0x3ff}}]}}}, {{0x254, 0x1, {{0x2, 0x5d}, 0xe0, 0xb, 0xf, 0x3e98, 0x5, 'syz1\x00', "263323b64f6ff3a144e9a9ba980ad989893afc17f582fa7e7750e84d6aa069a9", "d9f6d9f47303d22e89fbee739da662451e8ef5fb7ee058a17cbbaf487007145b", [{0x6, 0x9, {0x3, 0x2}}, {0x570, 0x3ff, {0x3, 0x6}}, {0x4, 0x8000, {0x3}}, {0x5, 0xb, {0x2, 0x7}}, {0xe87b, 0x8, {0x1, 0x4}}, {0x6, 0x3, {0x0, 0x5}}, {0x3, 0x7fff, {0x3, 0x77}}, {0x2, 0x9, {0x0, 0x4000}}, {0xe93, 0x5, {0x3, 0xfff}}, {0x7f, 0x81, {0x1, 0x956}}, {0x101, 0x7ff, {0x1, 0x9}}, {0x2, 0x8, {0x3, 0x7}}, {0x1, 0x1, {0x1, 0x3}}, {0x3, 0x101, {0x1, 0x1d9e5ec4}}, {0xe, 0x7, {0x2, 0x9}}, {0x2, 0x5, {0x0, 0x2}}, {0xb, 0x180, {0x2, 0x7}}, {0x2, 0x4, {0x2, 0x4ff}}, {0x3, 0x9c1, {0x2, 0x8a}}, {0x0, 0x5, {0x3, 0x8}}, {0x1c6, 0x6, {0x0, 0x6}}, {0x2, 0x800, {0x1, 0x9}}, {0x2, 0x761d, {0x2, 0x3}}, {0xbeee, 0xfffc, {0x2, 0x9000000}}, {0x69af, 0xffff, {0x3, 0x3}}, {0x0, 0xff, {0x1, 0x80}}, {0xff9d, 0x8a80, {0x1, 0x5}}, {0x9, 0x8, {0x3, 0x6}}, {0x6, 0xca33, {0x3, 0x7f}}, {0x8, 0xa, {0x3, 0x8}}, {0x80, 0x6214, {0x2, 0xfffeffff}}, {0x9, 0xffe3, {0x0, 0xa50c}}, {0x5, 0x1, {0x2, 0x4}}, {0x49bb, 0x2}, {0x3, 0x1000, {0x3, 0x9}}, {0x5, 0x1, {0x1, 0x4}}, {0x2, 0x1ff, {0x3, 0x7f}}, {0x7, 0xfffb, {0x0, 0x3}}, {0x1, 0x97, {0x3, 0x7f}}, {0x5, 0x4, {0x1, 0x8000}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x4, 0x4, 0x2, 0x9, 0x18, 'syz1\x00', "f6652c29f3896c6433679f39660bbe22450b37446eb132f51a027b53a489db44", "683231849c16e33739399d9f1a3492bc4c1fc893d1c27b1dca099b55c35558b0", [{0x1, 0x6, {0x3, 0xfffffffc}}, {0x6e2a, 0x4, {0x1, 0x39c}}, {0x0, 0x2, {0x3}}, {0xd4, 0x1, {0x0, 0x10}}, {0x8000, 0x9, {0x1, 0x10001}}, {0x9, 0x3, {0x0, 0xd}}, {0x7, 0x1, {0x1}}, {0x8, 0x0, {0x1, 0x40}}, {0x8001, 0x200, {0x0, 0x2}}, {0x9, 0xaeb, {0x1, 0x3}}, {0x5a3, 0x3, {0x1, 0x1000}}, {0xd, 0xf, {0x1, 0x10000}}, {0x88b8, 0x3, {0x1, 0x9}}, {0x9, 0x7f, {0x0, 0x40}}, {0x3, 0x7, {0x3, 0xd5e6}}, {0xdf3, 0x7, {0x3, 0x9}}, {0x81, 0x9, {0x0, 0xfffffffd}}, {0x0, 0x3f48, {0x1, 0xff}}, {0x4, 0x8, {0x0, 0x2}}, {0x9, 0xf294, {0x2, 0x1000}}, {0x1ff, 0x4, {0x2, 0x200}}, {0x93, 0x6c, {0x1, 0xa}}, {0x4, 0x2, {0x0, 0x9}}, {0x67, 0x5, {0x0, 0xfffffff7}}, {0xfff, 0xfff, {0x0, 0x9}}, {0x7, 0x80, {0x0, 0x40}}, {0x5, 0x1, {0x0, 0x5}}, {0x3, 0x8, {0x2, 0x5}}, {0xb, 0x1000, {0x2, 0x2}}, {0x9, 0x8, {0x0, 0x1}}, {0x341e, 0x1, {0x2, 0x7}}, {0x0, 0x8, {0x0, 0x85cc}}, {0x6, 0x6, {0x2, 0x4}}, {0x800, 0x2, {0x3, 0x9}}, {0x1000, 0x4, {0x2, 0x2}}, {0x5, 0xc58, {0x2, 0x800}}, {0x101, 0xa7f, {0x2, 0x6}}, {0x1, 0x7, {0x2, 0x1}}, {0x4, 0x9, {0x0, 0x34}}, {0xf000, 0x3, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x800}, 0x9, 0x2, 0x5, 0x0, 0x28, 'syz1\x00', "a244f2fd07563860010be620d51b82e7e65b01b47dea4488b5d95dacc7b60785", "71520848d15f7e6a264a7c668e5a3021b80d54d3b9849b33bb5c8710b8b08282", [{0x2, 0x1, {0x1, 0x4}}, {0x200, 0x7, {0x2, 0x2}}, {0x800, 0xaf7, {0x0, 0x2}}, {0x3, 0x8, {0x2, 0x8}}, {0x7, 0x8, {0x2, 0x9}}, {0x8, 0xfffd, {0x0, 0x101}}, {0x0, 0xfffe, {0x0, 0x3e}}, {0x2, 0x2, {0x0, 0x1}}, {0x80, 0xff, {0x1, 0xb4}}, {0x77, 0x9, {0x3, 0x5}}, {0xff, 0x6, {0x1, 0xc}}, {0x7, 0x8, {0x2, 0x1}}, {0x4, 0x1, {0x0, 0x5}}, {0x6, 0x8001, {0x0, 0x6}}, {0x400, 0x3}, {0x0, 0x77d, {0x3, 0xf9}}, {0x4, 0x4643, {0x2, 0x80000000}}, {0xc, 0x2345, {0x1, 0xffff}}, {0x5, 0x7, {0x0, 0xa00}}, {0x2, 0xe, {0x2, 0x7}}, {0x5, 0x7, {0x0, 0x2}}, {0x2, 0x8000, {0x2, 0xb4f}}, {0x3, 0x1, {0x0, 0xc49c}}, {0x2ea, 0x0, {0x3, 0xff}}, {0xfe9, 0x4a, {0x0, 0x1}}, {0x1, 0x2, {0x2, 0x5}}, {0x4, 0x9, {0x2, 0x4e6a}}, {0x18, 0x5, {0x1, 0x40000}}, {0x4, 0x9, {0x2, 0x3}}, {0xffff, 0x1, {0x2, 0x7ff}}, {0x3ff, 0x3ff, {0x2, 0x2}}, {0x200, 0x8, {0x3, 0xf}}, {0x7, 0x7b39, {0x2, 0x2}}, {0x8000, 0x3, {0x0, 0x7}}, {0x1000, 0x9, {0x0, 0xfffffca8}}, {0x4, 0x1, {0x1}}, {0x3, 0x800, {0x2, 0x3}}, {0x9c, 0x5, {0x1, 0x8000}}, {0x9, 0x0, {0x0, 0x706}}, {0x7, 0x7, {0x1, 0x10000}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mknod(&(0x7f0000000400)='./file0\x00', 0x1, 0x8) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, r4}}]}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd25, 0x25dfdbfb, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x1, {@ip4=@empty, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000000) kernel console output (not intermixed with test programs): : avc: denied { write } for pid=6296 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 55.058806][ T6293] bond0: (slave bond_slave_0): Releasing backup interface [ 55.147132][ T834] IPVS: starting estimator thread 0... [ 55.150850][ T40] audit: type=1400 audit(1737167691.181:281): avc: denied { getopt } for pid=6306 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.150996][ T6307] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 55.227430][ T6317] syz.0.98: attempt to access beyond end of device [ 55.227430][ T6317] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 55.231770][ T6317] XFS (nbd0): SB validate failed with error -5. [ 55.232755][ T6309] IPVS: using max 38 ests per chain, 91200 per kthread [ 55.261422][ T6326] binder: 6325:6326 ioctl c0306201 20000680 returned -14 [ 55.291833][ T5949] Bluetooth: hci3: command 0x0419 tx timeout [ 55.300903][ T5948] Bluetooth: hci2: command 0x0419 tx timeout [ 55.303352][ T5949] Bluetooth: hci1: command 0x0419 tx timeout [ 55.303510][ T6334] Zero length message leads to an empty skb [ 55.336773][ T6339] futex_wake_op: syz.1.104 tries to shift op by 32; fix this program [ 55.390334][ T6342] Invalid ELF header magic: != ELF [ 55.720890][ T835] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.870777][ T835] usb 6-1: Using ep0 maxpacket: 16 [ 55.873603][ T835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.877927][ T835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.882137][ T835] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 55.885191][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.889059][ T835] usb 6-1: config 0 descriptor?? [ 56.094970][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.098864][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.299687][ T835] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:05AC:8241.0002/input/input5 [ 56.369541][ T835] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 56.972981][ T5938] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 56.976716][ T5938] CPU: 1 UID: 0 PID: 5938 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 56.980534][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.983932][ T5938] Call Trace: [ 56.984930][ T5938] [ 56.985806][ T5938] dump_stack_lvl+0x16c/0x1f0 [ 56.987269][ T5938] dump_header+0x101/0x900 [ 56.988598][ T5938] oom_kill_process+0x270/0xa60 [ 56.990050][ T5938] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 56.991802][ T5938] out_of_memory+0x351/0x1700 [ 56.993264][ T5938] ? __pfx_out_of_memory+0x10/0x10 [ 56.994823][ T5938] ? rcu_read_unlock+0x17/0x60 [ 56.996249][ T5938] ? find_held_lock+0x2d/0x110 [ 56.997669][ T5938] mem_cgroup_out_of_memory+0x207/0x270 [ 56.999332][ T5938] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 57.001108][ T5938] ? do_raw_spin_unlock+0x172/0x230 [ 57.003067][ T5938] try_charge_memcg+0x54c/0xaf0 [ 57.004755][ T5938] ? __pfx_try_charge_memcg+0x10/0x10 [ 57.006350][ T5938] ? __pfx_lock_release+0x10/0x10 [ 57.007832][ T5938] ? trace_lock_acquire+0x14e/0x1f0 [ 57.009368][ T5938] mem_cgroup_swapin_charge_folio+0x14c/0x380 [ 57.011190][ T5938] __read_swap_cache_async+0x436/0x660 [ 57.012831][ T5938] ? __pfx___read_swap_cache_async+0x10/0x10 [ 57.014588][ T5938] ? swp_swap_info+0xcf/0x130 [ 57.016009][ T5938] ? __pfx_swp_swap_info+0x10/0x10 [ 57.017544][ T5938] ? mark_lock+0xb5/0xc60 [ 57.018808][ T5938] swap_cluster_readahead+0x4e2/0x740 [ 57.020390][ T5938] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 57.022207][ T5938] ? filemap_get_entry+0x1a8/0x3c0 [ 57.023729][ T5938] ? get_vma_policy+0x248/0x3c0 [ 57.025196][ T5938] swapin_readahead+0x12c/0xd60 [ 57.026586][ T5938] ? get_swap_device+0x362/0x5e0 [ 57.028006][ T5938] ? __pfx_swapin_readahead+0x10/0x10 [ 57.029600][ T5938] ? __filemap_get_folio+0x2a5/0xaf0 [ 57.031153][ T5938] ? swap_cache_get_folio+0x1e0/0x460 [ 57.032838][ T5938] ? get_swap_device+0x245/0x5e0 [ 57.034315][ T5938] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 57.035989][ T5938] ? __pfx___lock_acquire+0x10/0x10 [ 57.037537][ T5938] do_swap_page+0x680/0x5970 [ 57.038903][ T5938] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 57.040556][ T5938] ? rcu_is_watching+0x12/0xc0 [ 57.042080][ T5938] ? trace_lock_acquire+0x14e/0x1f0 [ 57.043913][ T5938] ? __pfx_do_swap_page+0x10/0x10 [ 57.045411][ T5938] ? lock_acquire+0x2f/0xb0 [ 57.046745][ T5938] ? ___pte_offset_map+0x42/0x540 [ 57.048200][ T5938] ? __pfx_default_wake_function+0x10/0x10 [ 57.049937][ T5938] ? ___pte_offset_map+0x1b9/0x540 [ 57.051451][ T5938] __handle_mm_fault+0x1055/0x2a40 [ 57.053000][ T5938] ? lock_vma_under_rcu+0x6b9/0x980 [ 57.054546][ T5938] ? __pfx___handle_mm_fault+0x10/0x10 [ 57.056167][ T5938] handle_mm_fault+0x3fa/0xaa0 [ 57.057699][ T5938] do_user_addr_fault+0x60d/0x13f0 [ 57.059195][ T5938] exc_page_fault+0x5c/0xc0 [ 57.060529][ T5938] asm_exc_page_fault+0x26/0x30 [ 57.061909][ T5938] RIP: 0033:0x7f3077badb45 [ 57.063190][ T5938] Code: 00 00 f0 83 88 08 03 00 00 10 64 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b 66 2e 0f 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 8b 90 [ 57.068627][ T5938] RSP: 002b:00007fff5543c0a8 EFLAGS: 00010297 [ 57.070392][ T5938] RAX: 0000000000000002 RBX: 0000000000000041 RCX: 0000000000000000 [ 57.072730][ T5938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555bbf0808 [ 57.074989][ T5938] RBP: 00007fff5543c14c R08: 0000000000000000 R09: 00007f3078a9f000 [ 57.077228][ T5938] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 57.079484][ T5938] R13: 000000000000d939 R14: 00007fff5543c1a0 R15: 0000000000000bb8 [ 57.081766][ T5938] [ 57.085374][ T5938] memory: usage 307076kB, limit 307200kB, failcnt 453 [ 57.087375][ T5938] memory+swap: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 57.089710][ T5938] kmem: usage 1924kB, limit 9007199254740988kB, failcnt 0 [ 57.091854][ T5938] Memory cgroup stats for /syz0: [ 57.092083][ T5938] cache 312057856 [ 57.094858][ T5938] rss 167936 [ 57.095025][ T6368] syz.0.113 (6368) used greatest stack depth: 20528 bytes left [ 57.095931][ T5938] rss_huge 0 [ 57.100311][ T5938] shmem 311791616 [ 57.101458][ T5938] mapped_file 4096 [ 57.102521][ T5938] dirty 4096 [ 57.103506][ T5938] writeback 0 [ 57.104474][ T5938] workingset_refault_anon 48 [ 57.105865][ T5938] workingset_refault_file 64 [ 57.107221][ T5938] swap 102400 [ 57.108194][ T5938] swapcached 126976 [ 57.109294][ T5938] pgpgin 83309 [ 57.110291][ T5938] pgpgout 7061 [ 57.111380][ T5938] pgfault 8262 [ 57.112392][ T5938] pgmajfault 39 [ 57.113544][ T5938] inactive_anon 311791616 [ 57.114786][ T5938] active_anon 249856 [ 57.115964][ T5938] inactive_file 0 [ 57.117031][ T5938] active_file 118784 [ 57.118195][ T5938] unevictable 0 [ 57.118721][ T6390] wireguard0: entered promiscuous mode [ 57.119190][ T5938] hierarchical_memory_limit 314572800 [ 57.119197][ T5938] hierarchical_memsw_limit 9223372036854771712 [ 57.121199][ T6390] wireguard0: entered allmulticast mode [ 57.126283][ T5938] total_cache 312057856 [ 57.127494][ T5938] total_rss 167936 [ 57.128587][ T5938] total_rss_huge 0 [ 57.129662][ T5938] total_shmem 311791616 [ 57.130934][ T5938] total_mapped_file 4096 [ 57.132173][ T5938] total_dirty 4096 [ 57.133261][ T5938] total_writeback 0 [ 57.134360][ T5938] total_workingset_refault_anon 48 [ 57.135869][ T5938] total_workingset_refault_file 64 [ 57.137342][ T5938] total_swap 102400 [ 57.138440][ T5938] total_swapcached 126976 [ 57.139682][ T5938] total_pgpgin 83309 [ 57.140861][ T5938] total_pgpgout 7061 [ 57.142455][ T5938] total_pgfault 8262 [ 57.144538][ T5938] total_pgmajfault 39 [ 57.145694][ T5938] total_inactive_anon 311791616 [ 57.147103][ T5938] total_active_anon 249856 [ 57.148392][ T5938] total_inactive_file 0 [ 57.149599][ T5938] total_active_file 118784 [ 57.150945][ T5938] total_unevictable 0 [ 57.152127][ T5938] anon_cost 0 [ 57.153107][ T5938] file_cost 0 [ 57.154067][ T5938] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.113,pid=6367,uid=0 [ 57.158554][ T5938] Memory cgroup out of memory: OOM victim 6367 (syz.0.113) is already exiting. Skip killing the task [ 57.259373][ T6399] team0 (unregistering): Port device team_slave_0 removed [ 57.263756][ T6399] team0 (unregistering): Port device team_slave_1 removed [ 57.370827][ T5949] Bluetooth: hci1: command 0x0419 tx timeout [ 57.373522][ T5949] Bluetooth: hci2: command 0x0419 tx timeout [ 57.375929][ T5949] Bluetooth: hci3: command 0x0419 tx timeout [ 57.471428][ T835] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 57.504301][ T6428] program syz.1.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.602516][ T6439] program syz.1.135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.942085][ T6449] tipc: Started in network mode [ 57.943633][ T6449] tipc: Node identity 7, cluster identity 5 [ 57.945458][ T6449] tipc: Node number set to 7 [ 57.971923][ T6454] kAFS: unable to lookup cell '/,c¾ûL' [ 58.022432][ T5936] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 58.025110][ T5936] Bluetooth: hci0: Injecting HCI hardware error event [ 58.027693][ T5936] Bluetooth: hci0: hardware error 0x00 [ 58.091523][ T6472] /dev/sg0: Can't lookup blockdev [ 58.119898][ T5949] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 58.133405][ T6479] mkiss: ax0: crc mode is auto. [ 58.420570][ T6499] xt_l2tp: v2 sid > 0xffff: 150994944 [ 58.700797][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.788701][ T6526] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6526 comm=syz.0.159 [ 58.844128][ T6530] evm: overlay not supported [ 58.850769][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 58.854931][ T25] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.857698][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.861505][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 58.864431][ T25] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.869003][ T25] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 58.870523][ T6536] overlay: filesystem on ./bus not supported [ 58.871878][ T25] usb 8-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 58.876163][ T25] usb 8-1: Product: syz [ 58.877478][ T6536] warning: `syz.2.164' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.887529][ T6538] Bluetooth: MGMT ver 1.23 [ 59.080375][ T25] usb 8-1: GET_CAPABILITIES returned 0 [ 59.082143][ T25] usbtmc 8-1:16.0: can't read capabilities [ 59.338772][ T6564] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 59.450820][ T5949] Bluetooth: hci3: command 0x0419 tx timeout [ 59.450886][ T5948] Bluetooth: hci2: command 0x0419 tx timeout [ 59.450905][ T5294] Bluetooth: hci1: command 0x0419 tx timeout [ 59.502308][ T30] usb 8-1: USB disconnect, device number 3 [ 59.855350][ T6578] netlink: 'syz.2.177': attribute type 8 has an invalid length. [ 59.857541][ T6578] __nla_validate_parse: 40 callbacks suppressed [ 59.857549][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 59.926464][ T6580] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 59.962195][ T1109] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 59.964206][ T1109] ata1: failed to read log page 10h (errno=-5) [ 59.966057][ T1109] ata1.00: exception Emask 0x1 SAct 0x20000000 SErr 0x0 action 0x0 [ 59.968415][ T1109] ata1.00: irq_stat 0x40000000 [ 59.969757][ T1109] ata1.00: failed command: WRITE FPDMA QUEUED [ 59.971573][ T1109] ata1.00: cmd 61/40:e8:5a:05:10/00:00:00:00:00/40 tag 29 ncq dma 32768 out [ 59.971573][ T1109] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 59.976514][ T1109] ata1.00: status: { DRDY } [ 59.981311][ T1109] ata1.00: configured for UDMA/100 [ 59.983641][ T1109] ata1: EH complete [ 59.997171][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 59.997181][ T40] audit: type=1400 audit(1737167696.021:343): avc: denied { create } for pid=6581 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.004677][ T40] audit: type=1400 audit(1737167696.021:344): avc: denied { setopt } for pid=6581 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.012294][ T40] audit: type=1400 audit(1737167696.041:345): avc: denied { getopt } for pid=6584 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 60.014310][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 60.090817][ T5936] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 60.094149][ T6551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.101002][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 60.103960][ T40] audit: type=1400 audit(1737167696.131:346): avc: denied { create } for pid=6592 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 60.124245][ T6595] team0: No ports can be present during mode change [ 60.185312][ T40] audit: type=1400 audit(1737167696.211:347): avc: denied { getopt } for pid=6596 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.186556][ T6610] netlink: 92 bytes leftover after parsing attributes in process `syz.1.189'. [ 60.355509][ T6617] netlink: 'syz.2.190': attribute type 25 has an invalid length. [ 60.357828][ T6617] netlink: 'syz.2.190': attribute type 8 has an invalid length. [ 60.364261][ T40] audit: type=1400 audit(1737167696.391:348): avc: denied { open } for pid=6618 comm="syz.1.191" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 60.372010][ T40] audit: type=1400 audit(1737167696.401:349): avc: denied { ioctl } for pid=6618 comm="syz.1.191" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 60.559384][ T40] audit: type=1400 audit(1737167696.581:350): avc: denied { write } for pid=6634 comm="syz.1.195" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.565911][ T40] audit: type=1400 audit(1737167696.581:351): avc: denied { open } for pid=6634 comm="syz.1.195" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.628755][ T40] audit: type=1400 audit(1737167696.651:352): avc: denied { ioctl } for pid=6634 comm="syz.1.195" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.634518][ T6636] hsr0: entered allmulticast mode [ 60.637800][ T6636] hsr_slave_0: entered allmulticast mode [ 60.640052][ T6636] hsr_slave_1: entered allmulticast mode [ 60.644224][ T6635] hsr_slave_0: left promiscuous mode [ 60.691024][ T6635] hsr_slave_1: left promiscuous mode [ 60.831422][ T6635] hsr0 (unregistering): left allmulticast mode [ 60.946382][ T6639] netlink: 32 bytes leftover after parsing attributes in process `syz.1.196'. [ 60.949989][ T6639] netlink: 32 bytes leftover after parsing attributes in process `syz.1.196'. [ 60.966907][ T6641] usb usb8: usbfs: process 6641 (syz.2.197) did not claim interface 0 before use [ 60.971159][ T6641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.005143][ T6641] netlink: 72 bytes leftover after parsing attributes in process `syz.2.197'. [ 61.502682][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 61.505326][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.208'. [ 61.532269][ T5936] Bluetooth: hci1: command 0x0419 tx timeout [ 61.533394][ T1147] wlan1: Trigger new scan to find an IBSS to join [ 61.533686][ T5948] Bluetooth: hci3: command 0x0419 tx timeout [ 61.785842][ T6678] netlink: 364 bytes leftover after parsing attributes in process `syz.1.209'. [ 61.789299][ T6678] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 62.015137][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.110902][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.122316][ T6694] netlink: 'syz.2.214': attribute type 16 has an invalid length. [ 62.202700][ T6701] fuse: Bad value for 'user_id' [ 62.204213][ T6701] fuse: Bad value for 'user_id' [ 62.239165][ T6707] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 1, id = 0 [ 62.271238][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 62.273990][ T25] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 62.276687][ T25] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 62.279970][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 62.283985][ T25] usb 5-1: config 1 has no interface number 0 [ 62.286313][ T25] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 62.290420][ T25] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 62.295747][ T25] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 62.299176][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.306517][ T25] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 62.315961][ T6717] netlink: 'syz.1.222': attribute type 32 has an invalid length. [ 62.337004][ T6676] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 62.360937][ T6722] 9pnet_fd: Insufficient options for proto=fd [ 62.518387][ T6733] netlink: 'syz.1.227': attribute type 15 has an invalid length. [ 62.529498][ T6735] Can't find a SQUASHFS superblock on nullb0 [ 62.640769][ T835] usb 6-1: device descriptor read/64, error -110 [ 62.864171][ T25] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 62.881388][ T835] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 62.962621][ T6757] 9pnet_fd: Insufficient options for proto=fd [ 62.963568][ T6758] netlink: 'syz.3.235': attribute type 5 has an invalid length. [ 63.010786][ T835] usb 6-1: device descriptor read/64, error -32 [ 63.138872][ T6762] usb usb7: usbfs: interface 0 claimed by hub while 'syz.3.236' resets device [ 63.143931][ T35] usb 5-1: USB disconnect, device number 3 [ 63.147491][ T35] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 63.167384][ T6764] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 63.169969][ T6764] overlayfs: missing 'lowerdir' [ 63.173111][ T6764] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 63.175672][ T6764] overlayfs: missing 'lowerdir' [ 63.245236][ T5936] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 63.251510][ T835] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 63.271326][ T835] usb 6-1: device descriptor read/8, error -32 [ 63.402121][ T6788] 9pnet_fd: Insufficient options for proto=fd [ 63.510912][ T835] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 63.530870][ T6522] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.531148][ T835] usb 6-1: device descriptor read/8, error -32 [ 63.610947][ T5936] Bluetooth: hci3: command 0x0419 tx timeout [ 63.620803][ T6447] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 63.640827][ T835] raw-gadget.0 gadget.1: failed to queue suspend event [ 63.645036][ T64] usb 6-1: USB disconnect, device number 2 [ 63.690844][ T6522] usb 8-1: Using ep0 maxpacket: 32 [ 63.693842][ T6522] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 63.696271][ T6522] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 63.699338][ T6522] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 63.702527][ T6522] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 63.706221][ T6522] usb 8-1: config 0 interface 0 has no altsetting 0 [ 63.710479][ T6522] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 63.713257][ T6522] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 63.715662][ T6522] usb 8-1: Product: syz [ 63.716955][ T6522] usb 8-1: Manufacturer: syz [ 63.718341][ T6522] usb 8-1: SerialNumber: syz [ 63.720585][ T6522] usb 8-1: config 0 descriptor?? [ 63.723288][ T6522] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 63.728514][ T6522] ldusb 8-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 63.738652][ T64] raw-gadget.0 gadget.1: failed to queue reset event [ 63.771482][ T6447] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 63.774456][ T6447] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.777055][ T6447] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.780276][ T6447] usb 7-1: config 0 interface 0 has no altsetting 0 [ 63.784047][ T6447] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.786968][ T6447] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.790191][ T6447] usb 7-1: config 0 interface 0 has no altsetting 0 [ 63.792905][ T6447] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.795375][ T6447] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.798509][ T6447] usb 7-1: config 0 interface 0 has no altsetting 0 [ 63.801165][ T6447] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.803713][ T6447] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.806742][ T6447] usb 7-1: config 0 interface 0 has no altsetting 0 [ 63.809280][ T6447] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.812062][ T64] raw-gadget.0 gadget.1: failed to queue resume event [ 63.814179][ T6447] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.817266][ T6447] usb 7-1: config 0 interface 0 has no altsetting 0 [ 63.820113][ T6447] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.823147][ T6447] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.826244][ T6447] usb 7-1: config 0 interface 0 has no altsetting 0 [ 63.828768][ T6447] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.831295][ T6447] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.834345][ T6447] usb 7-1: config 0 interface 0 has no altsetting 0 [ 63.838689][ T6447] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.841316][ T6447] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.844454][ T6447] usb 7-1: config 0 interface 0 has no altsetting 0 [ 63.847649][ T6447] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 63.850189][ T6447] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 63.852003][ T6793] syz.0.247: attempt to access beyond end of device [ 63.852003][ T6793] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 63.852861][ T6447] usb 7-1: Product: syz [ 63.856708][ T6793] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 63.857759][ T6447] usb 7-1: Manufacturer: syz [ 63.861430][ T6447] usb 7-1: SerialNumber: syz [ 63.863554][ T6447] usb 7-1: config 0 descriptor?? [ 63.866735][ T6447] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 63.870795][ T64] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.873159][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 63.875283][ T64] raw-gadget.0 gadget.1: failed to queue reset event [ 63.941242][ T64] raw-gadget.0 gadget.1: failed to queue resume event [ 64.004338][ T64] usb 6-1: device descriptor read/64, error -32 [ 64.053835][ T6799] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 64.071947][ T6786] xt_time: unknown flags 0xc [ 64.074049][ T835] usb 7-1: USB disconnect, device number 2 [ 64.076893][ T835] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 64.110804][ T64] raw-gadget.0 gadget.1: failed to queue suspend event [ 64.114393][ T64] raw-gadget.0 gadget.1: failed to queue reset event [ 64.170512][ T6804] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 64.180765][ T64] raw-gadget.0 gadget.1: failed to queue resume event [ 64.196101][ T6807] input: syz0 as /devices/virtual/input/input6 [ 64.242539][ T64] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.244979][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 64.247037][ T64] raw-gadget.0 gadget.1: failed to queue reset event [ 64.309056][ T6811] netlink: 'syz.3.241': attribute type 10 has an invalid length. [ 64.311420][ T64] raw-gadget.0 gadget.1: failed to queue resume event [ 64.311434][ T6811] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 64.370823][ T64] usb 6-1: device descriptor read/64, error -32 [ 64.480847][ T64] raw-gadget.0 gadget.1: failed to queue suspend event [ 64.483820][ T64] usb usb6-port1: attempt power cycle [ 64.486185][ T64] raw-gadget.0 gadget.1: failed to queue disconnect event [ 64.490333][ T64] raw-gadget.0 gadget.1: failed to queue reset event [ 64.560873][ T64] raw-gadget.0 gadget.1: failed to queue resume event [ 64.563957][ T64] raw-gadget.0 gadget.1: failed to queue reset event [ 64.780870][ T64] raw-gadget.0 gadget.1: failed to queue resume event [ 64.834759][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 64.851774][ T64] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 64.874527][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 64.876958][ T64] usb 6-1: device descriptor read/8, error -32 [ 64.893612][ T6826] delete_channel: no stack [ 64.981539][ T64] raw-gadget.0 gadget.1: failed to queue suspend event [ 64.983642][ T64] raw-gadget.0 gadget.1: failed to queue reset event [ 65.060799][ T64] raw-gadget.0 gadget.1: failed to queue resume event [ 65.074959][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 65.074970][ T40] audit: type=1326 audit(1737167701.101:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.2.259" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2acb185d29 code=0x0 [ 65.094841][ T6838] program syz.0.261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.096878][ T40] audit: type=1400 audit(1737167701.121:384): avc: denied { bind } for pid=6834 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.103261][ T40] audit: type=1400 audit(1737167701.121:385): avc: denied { connect } for pid=6834 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.121356][ T64] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 65.139653][ T6841] __nla_validate_parse: 7 callbacks suppressed [ 65.139667][ T6841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.262'. [ 65.151745][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 65.153334][ T40] audit: type=1400 audit(1737167701.181:386): avc: denied { ioctl } for pid=6834 comm="syz.1.260" path="socket:[15724]" dev="sockfs" ino=15724 ioctlcmd=0x8b06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.155815][ T64] usb 6-1: device descriptor read/8, error -32 [ 65.280775][ T64] raw-gadget.0 gadget.1: failed to queue suspend event [ 65.283511][ T64] usb usb6-port1: unable to enumerate USB device [ 65.477373][ T40] audit: type=1400 audit(1737167701.501:387): avc: denied { read write } for pid=6855 comm="syz.1.265" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.478182][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.484447][ T40] audit: type=1400 audit(1737167701.501:388): avc: denied { open } for pid=6855 comm="syz.1.265" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.486925][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.493488][ T40] audit: type=1400 audit(1737167701.501:389): avc: denied { ioctl } for pid=6855 comm="syz.1.265" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.902076][ T6859] syzkaller0: entered promiscuous mode [ 65.903907][ T6859] syzkaller0: entered allmulticast mode [ 66.067969][ T40] audit: type=1400 audit(1737167702.091:390): avc: denied { bind } for pid=6862 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.074499][ T40] audit: type=1400 audit(1737167702.091:391): avc: denied { write } for pid=6862 comm="syz.1.268" path="socket:[13214]" dev="sockfs" ino=13214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.281190][ T40] audit: type=1400 audit(1737167702.311:392): avc: denied { mount } for pid=6873 comm="syz.0.271" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 66.283193][ T6874] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 66.290870][ T6874] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 66.303082][ T64] usb 8-1: USB disconnect, device number 4 [ 66.312003][ T64] ldusb 8-1:0.0: LD USB Device #1 now disconnected [ 66.431747][ T6882] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 66.571026][ T1147] wlan1: Trigger new scan to find an IBSS to join [ 66.640746][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.811923][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.815820][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.819365][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.823116][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.826121][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.829315][ T25] usb 5-1: config 0 descriptor?? [ 67.236582][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 67.239678][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 67.242796][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 67.245842][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 67.248776][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 67.251903][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 67.255247][ T25] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 67.261551][ T25] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 67.504129][ T35] usb 5-1: USB disconnect, device number 4 [ 67.571073][ T1147] wlan1: Creating new IBSS network, BSSID 42:c4:c5:21:84:9a [ 71.143789][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.146315][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.272721][ T9] cfg80211: failed to load regulatory.db [ 78.806004][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 78.806015][ T40] audit: type=1400 audit(1737167714.831:399): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 78.820443][ T5936] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 78.820570][ T5936] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 78.833062][ T6901] IPVS: length: 49 != 8 [ 78.894841][ T40] audit: type=1400 audit(1737167714.921:400): avc: denied { create } for pid=6909 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.903077][ T6912] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 78.905303][ T6912] PKCS7: Only support pkcs7_signedData type [ 78.958148][ T6915] vlan2: entered allmulticast mode [ 78.966708][ T40] audit: type=1326 audit(1737167714.991:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.282" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283a985d29 code=0x7fc00000 [ 78.975985][ T40] audit: type=1326 audit(1737167715.001:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.282" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f283a985d29 code=0x7fc00000 [ 79.100777][ T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.228740][ T6921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.284'. [ 79.231925][ T40] audit: type=1400 audit(1737167715.261:403): avc: denied { write } for pid=6920 comm="syz.1.284" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 79.238526][ T40] audit: type=1400 audit(1737167715.261:404): avc: denied { open } for pid=6920 comm="syz.1.284" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 79.245314][ T40] audit: type=1400 audit(1737167715.261:405): avc: denied { ioctl } for pid=6920 comm="syz.1.284" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 79.252098][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 79.257406][ T64] usb 5-1: no configurations [ 79.259114][ T64] usb 5-1: can't read configurations, error -22 [ 79.270277][ T6927] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 79.274701][ T40] audit: type=1400 audit(1737167715.301:406): avc: denied { mount } for pid=6925 comm="syz.1.287" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 79.281143][ T40] audit: type=1400 audit(1737167715.301:407): avc: denied { read } for pid=6925 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.390933][ T64] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.408980][ T40] audit: type=1400 audit(1737167715.431:408): avc: denied { map } for pid=6933 comm="syz.1.290" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 79.524615][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 79.531945][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 79.540779][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 79.542730][ T64] usb 5-1: no configurations [ 79.544140][ T64] usb 5-1: can't read configurations, error -22 [ 79.546131][ T64] usb usb5-port1: attempt power cycle [ 79.664112][ T6951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.667624][ T6951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.680802][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 79.683702][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.685943][ T9] usb 7-1: config 0 has no interface number 0 [ 79.688007][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.691545][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 79.694321][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.698074][ T9] usb 7-1: config 0 descriptor?? [ 79.702444][ T9] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 79.724073][ T6952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.727085][ T6952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.862334][ T6954] netlink: 72 bytes leftover after parsing attributes in process `syz.3.295'. [ 79.880840][ T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.901143][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 79.903112][ T64] usb 5-1: no configurations [ 79.904465][ T64] usb 5-1: can't read configurations, error -22 [ 80.040776][ T64] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 80.061312][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 80.063290][ T64] usb 5-1: no configurations [ 80.064863][ T64] usb 5-1: can't read configurations, error -22 [ 80.068132][ T64] usb usb5-port1: unable to enumerate USB device [ 80.073526][ T25] usb 7-1: USB disconnect, device number 3 [ 80.174975][ T6961] hugetlbfs: Unknown parameter 'u d' [ 80.625880][ T6981] xt_hashlimit: size too large, truncated to 1048576 [ 80.687613][ T6983] trusted_key: syz.2.302 sent an empty control message without MSG_MORE. [ 80.896881][ T5948] Bluetooth: hci1: command 0x0419 tx timeout [ 81.167183][ T5936] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 81.178068][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'. [ 81.509282][ T7013] /dev/sg0: Can't lookup blockdev [ 81.960932][ T835] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 82.120832][ T835] usb 8-1: Using ep0 maxpacket: 32 [ 82.123617][ T835] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 82.126111][ T835] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 82.128684][ T835] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 82.131330][ T835] usb 8-1: config 1 has no interface number 0 [ 82.133126][ T835] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.136229][ T835] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 82.139989][ T835] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 82.142625][ T835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.147806][ T835] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 82.291233][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 82.349153][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.315'. [ 82.450855][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 82.454257][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 82.457405][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.461288][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.464994][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.468793][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.474377][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.477824][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.700785][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 82.703096][ T9] usbtmc 5-1:16.0: can't read capabilities [ 82.876540][ T7055] ptrace attach of "/syz-executor exec"[7056] was attempted by "/syz-executor exec"[7055] [ 82.897770][ T6522] usb 5-1: USB disconnect, device number 9 [ 82.970880][ T5936] Bluetooth: hci1: command 0x0419 tx timeout [ 82.982714][ T7067] pim6reg1: entered promiscuous mode [ 82.983729][ T7064] sg_write: data in/out 6554589/20 bytes for SCSI command 0x0-- guessing data in; [ 82.983729][ T7064] program syz.0.328 not setting count and/or reply_len properly [ 82.984337][ T7067] pim6reg1: entered allmulticast mode [ 83.240334][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.243118][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.481032][ T6522] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 83.650777][ T6522] usb 5-1: Using ep0 maxpacket: 32 [ 83.653737][ T6522] usb 5-1: too many configurations: 183, using maximum allowed: 8 [ 83.657292][ T6522] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 83.659615][ T6522] usb 5-1: can't read configurations, error -61 [ 83.790773][ T6522] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 83.823060][ T7078] fuse: Bad value for 'fd' [ 83.824627][ T7078] fuse: Bad value for 'fd' [ 83.826114][ T7078] fuse: Bad value for 'fd' [ 83.827949][ T7078] fuse: Bad value for 'fd' [ 83.829542][ T7078] fuse: Bad value for 'fd' [ 83.831355][ T7078] fuse: Bad value for 'fd' [ 83.833048][ T7078] fuse: Bad value for 'fd' [ 83.834493][ T7078] fuse: Bad value for 'fd' [ 83.835089][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 83.835098][ T40] audit: type=1400 audit(1737167719.861:439): avc: denied { read } for pid=7079 comm="syz.1.333" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.835976][ T7078] fuse: Bad value for 'fd' [ 83.837676][ T40] audit: type=1400 audit(1737167719.861:440): avc: denied { open } for pid=7079 comm="syz.1.333" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.844471][ T7078] fuse: Bad value for 'fd' [ 83.845841][ T40] audit: type=1400 audit(1737167719.861:441): avc: denied { map } for pid=7079 comm="syz.1.333" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.852829][ T7078] fuse: Bad value for 'fd' [ 83.852921][ T7078] fuse: Bad value for 'fd' [ 83.856448][ T40] audit: type=1400 audit(1737167719.861:442): avc: denied { ioctl } for pid=7079 comm="syz.1.333" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.862191][ T7078] fuse: Bad value for 'fd' [ 83.874311][ T7078] fuse: Bad value for 'fd' [ 83.875276][ T7083] : entered promiscuous mode [ 83.875879][ T7078] fuse: Bad value for 'fd' [ 83.878754][ T7078] fuse: Bad value for 'fd' [ 83.880236][ T7078] fuse: Bad value for 'fd' [ 83.881876][ T7078] fuse: Bad value for 'fd' [ 83.882195][ T7083] Process accounting resumed [ 83.883379][ T7078] fuse: Bad value for 'fd' [ 83.886296][ T7078] fuse: Bad value for 'fd' [ 83.887761][ T7078] fuse: Bad value for 'fd' [ 83.889194][ T7078] fuse: Bad value for 'fd' [ 83.890978][ T7078] fuse: Bad value for 'fd' [ 83.892755][ T7078] fuse: Bad value for 'fd' [ 83.894224][ T7078] fuse: Bad value for 'fd' [ 83.895729][ T7078] fuse: Bad value for 'fd' [ 83.896423][ T7083] Process accounting resumed [ 83.897528][ T7078] fuse: Bad value for 'fd' [ 83.900133][ T7078] fuse: Bad value for 'fd' [ 83.902190][ T7078] fuse: Bad value for 'fd' [ 83.903657][ T7078] fuse: Bad value for 'fd' [ 83.905094][ T7078] fuse: Bad value for 'fd' [ 83.906546][ T7078] fuse: Bad value for 'fd' [ 83.907990][ T7078] fuse: Bad value for 'fd' [ 83.950789][ T6522] usb 5-1: Using ep0 maxpacket: 32 [ 83.952888][ T6522] usb 5-1: too many configurations: 183, using maximum allowed: 8 [ 83.957093][ T6522] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 83.959350][ T6522] usb 5-1: can't read configurations, error -61 [ 83.961511][ T6522] usb usb5-port1: attempt power cycle [ 83.963504][ T40] audit: type=1400 audit(1737167719.991:443): avc: denied { search } for pid=5333 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.058688][ T7088] overlayfs: failed to get inode (-116) [ 84.061030][ T7088] overlayfs: failed to get inode (-116) [ 84.156958][ T40] audit: type=1400 audit(1737167720.181:444): avc: denied { ioctl } for pid=7091 comm="syz.2.337" path="socket:[14333]" dev="sockfs" ino=14333 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 84.310775][ T6522] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 84.331150][ T6522] usb 5-1: Using ep0 maxpacket: 32 [ 84.333231][ T6522] usb 5-1: too many configurations: 183, using maximum allowed: 8 [ 84.336670][ T6522] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 84.338848][ T6522] usb 5-1: can't read configurations, error -61 [ 84.441249][ T7114] efs: device does not support 512 byte blocks [ 84.443528][ T7114] device does not support 512 byte blocks [ 84.443528][ T7114] [ 84.470774][ T6522] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 84.492480][ T6522] usb 5-1: Using ep0 maxpacket: 32 [ 84.494461][ T6522] usb 5-1: too many configurations: 183, using maximum allowed: 8 [ 84.497776][ T6522] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 84.500005][ T6522] usb 5-1: can't read configurations, error -61 [ 84.502266][ T6522] usb usb5-port1: unable to enumerate USB device [ 84.734567][ T835] snd_usb_pod 8-1:1.1: set_interface failed [ 84.736467][ T835] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 84.738461][ T835] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 84.741707][ T835] usb 8-1: USB disconnect, device number 5 [ 84.760862][ T40] audit: type=1400 audit(1737167720.781:445): avc: denied { ioctl } for pid=7129 comm="syz.3.347" path="socket:[16662]" dev="sockfs" ino=16662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 84.813321][ T7131] tipc: Enabling of bearer rejected, failed to enable media [ 84.828546][ T40] audit: type=1400 audit(1737167720.851:446): avc: denied { mount } for pid=7134 comm="syz.2.348" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 84.829630][ T7135] fuse: Unknown parameter '0xffffffffffffffff' [ 84.837233][ T40] audit: type=1400 audit(1737167720.851:447): avc: denied { mounton } for pid=7134 comm="syz.2.348" path="/102/file0" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 84.900235][ T40] audit: type=1400 audit(1737167720.921:448): avc: denied { write } for pid=7139 comm="syz.1.350" name="ipv6_route" dev="proc" ino=4026533420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.212765][ T5936] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 85.215293][ T5936] Bluetooth: hci2: Injecting HCI hardware error event [ 85.218292][ T5936] Bluetooth: hci2: hardware error 0x00 [ 85.363124][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.406040][ T7186] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.421664][ T5977] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 85.433041][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 85.436247][ T7189] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 85.466439][ T7191] netlink: 'syz.1.368': attribute type 27 has an invalid length. [ 85.521502][ T7192] mmap: syz.1.368 (7192) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.525994][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.580766][ T5977] usb 7-1: Using ep0 maxpacket: 32 [ 85.583554][ T5977] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 85.585951][ T5977] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 85.588454][ T5977] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 85.592012][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.594749][ T5977] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 85.597482][ T5977] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.601270][ T5977] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 85.604168][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.608268][ T5977] usb 7-1: config 0 descriptor?? [ 85.812363][ T5977] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 85.816427][ T5977] usb 7-1: USB disconnect, device number 4 [ 85.819627][ T5977] usblp0: removed [ 85.922049][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.932633][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.197297][ T7191] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.200550][ T7191] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.203850][ T7191] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.207059][ T7191] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.454138][ T7209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.371'. [ 86.457281][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 86.846801][ T7230] netlink: 'syz.2.378': attribute type 3 has an invalid length. [ 86.848861][ T7230] netlink: 'syz.2.378': attribute type 3 has an invalid length. [ 86.850274][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.853868][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.089551][ T7246] tap0: tun_chr_ioctl cmd 1074025673 [ 87.091417][ T7243] tap0: tun_chr_ioctl cmd 1074025675 [ 87.100919][ T7243] tap0: persist enabled [ 87.102227][ T7246] tap0: tun_chr_ioctl cmd 1074025675 [ 87.104157][ T7246] tap0: persist enabled [ 87.108118][ T7246] tap0: tun_chr_ioctl cmd 1074025675 [ 87.109991][ T7246] tap0: persist enabled [ 87.111637][ T7243] tap0: tun_chr_ioctl cmd 1074025675 [ 87.113231][ T7243] tap0: persist enabled [ 87.290820][ T5936] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 87.649514][ T7266] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 87.670769][ T35] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 87.727657][ T7269] x_tables: duplicate underflow at hook 1 [ 87.830739][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 87.833556][ T35] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 87.836332][ T35] usb 5-1: config 179 has no interface number 0 [ 87.838230][ T35] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 87.841466][ T35] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 87.844704][ T35] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.847982][ T35] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 87.851644][ T35] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.855497][ T35] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 87.858385][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.862255][ T7264] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 88.029302][ T7277] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 88.456152][ T7291] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 88.574201][ T7296] capability: warning: `syz.2.400' uses 32-bit capabilities (legacy support in use) [ 88.979336][ T40] kauditd_printk_skb: 319 callbacks suppressed [ 88.979348][ T40] audit: type=1400 audit(1737167725.001:768): avc: denied { read } for pid=7309 comm="syz.1.404" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 88.988555][ T40] audit: type=1400 audit(1737167725.001:769): avc: denied { open } for pid=7309 comm="syz.1.404" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 89.475459][ T7314] loop2: detected capacity change from 0 to 7 [ 89.478696][ T7314] Dev loop2: unable to read RDB block 7 [ 89.480433][ T7314] loop2: AHDI p1 p2 p3 [ 89.481710][ T7314] loop2: partition table partially beyond EOD, truncated [ 89.483761][ T7314] loop2: p2 size 150995456 extends beyond EOD, truncated [ 89.536177][ T1147] Bluetooth: hci4: Frame reassembly failed (-84) [ 89.539196][ T1147] Bluetooth: hci4: Frame reassembly failed (-90) [ 89.541923][ T7317] Bluetooth: hci4: Frame reassembly failed (-84) [ 90.449292][ T9] usb 5-1: USB disconnect, device number 14 [ 90.449388][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 90.454474][ C3] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 90.473078][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.410'. [ 91.085132][ T40] audit: type=1400 audit(1737167727.111:770): avc: denied { read } for pid=7335 comm="syz.3.412" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.094166][ T40] audit: type=1400 audit(1737167727.111:771): avc: denied { open } for pid=7335 comm="syz.3.412" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.103697][ T40] audit: type=1400 audit(1737167727.111:772): avc: denied { ioctl } for pid=7335 comm="syz.3.412" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.118063][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 91.123000][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.413'. [ 91.390823][ T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 91.550776][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 91.553486][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.556465][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.559728][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 91.563802][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 91.567561][ T25] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 91.570613][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.575673][ T25] hub 8-1:1.0: bad descriptor, ignoring hub [ 91.578744][ T25] hub 8-1:1.0: probe with driver hub failed with error -5 [ 91.581802][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 91.583878][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 91.587230][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 91.589609][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 91.610874][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 91.610946][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 91.753648][ T40] audit: type=1400 audit(1737167727.781:773): avc: denied { bind } for pid=7341 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 91.778024][ T7340] Cannot find add_set index 0 as target [ 91.783779][ T40] audit: type=1400 audit(1737167727.811:774): avc: denied { read write } for pid=7339 comm="syz.3.414" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 91.790738][ T40] audit: type=1400 audit(1737167727.811:775): avc: denied { open } for pid=7339 comm="syz.3.414" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 91.960879][ T8] usb 8-1: USB disconnect, device number 6 [ 92.000885][ T834] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 92.152394][ T834] usb 7-1: Using ep0 maxpacket: 8 [ 92.155229][ T834] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 92.157930][ T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.160846][ T834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.163671][ T834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.166518][ T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.170555][ T834] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.173310][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.378991][ T834] usb 7-1: usb_control_msg returned -32 [ 92.380733][ T834] usbtmc 7-1:16.0: can't read capabilities [ 94.760631][ T6522] usb 7-1: USB disconnect, device number 5 [ 94.784244][ T7352] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:19999 [ 97.619477][ T65] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 102.699108][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 102.725736][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 102.756952][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 102.756955][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 102.804902][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'. [ 102.812223][ T40] audit: type=1400 audit(1737167738.841:776): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.951991][ T6522] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 102.959235][ T7403] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 102.962220][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.964428][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.968780][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.970889][ T7403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.972052][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 102.973101][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.977625][ T7403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.981671][ T7403] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 102.995250][ T7403] hpfs: hpfs_map_sector(): read error [ 103.025200][ T40] audit: type=1400 audit(1737167739.051:777): avc: denied { read } for pid=7399 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.043541][ T40] audit: type=1400 audit(1737167739.071:778): avc: denied { bind } for pid=7407 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.045811][ T7408] netem: change failed [ 103.121150][ T6522] usb 5-1: Using ep0 maxpacket: 8 [ 103.124718][ T6522] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 103.127802][ T6522] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 103.131425][ T6522] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.134904][ T6522] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.138022][ T6522] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.142260][ T6522] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.146021][ T6522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.355880][ T6522] usb 5-1: usb_control_msg returned -32 [ 103.358149][ T6522] usbtmc 5-1:16.0: can't read capabilities [ 103.682036][ T7420] ALSA: mixer_oss: invalid OSS volume '' [ 103.720333][ T7430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7430 comm=syz.3.439 [ 103.755447][ T7434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.440'. [ 104.111032][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 104.264607][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.268406][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.272040][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.276437][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.277670][ T7474] sctp: [Deprecated]: syz.1.452 (pid 7474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.277670][ T7474] Use struct sctp_sack_info instead [ 104.279773][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.288614][ T9] usb 7-1: config 0 descriptor?? [ 104.288906][ T7474] input: syz0 as /devices/virtual/input/input8 [ 104.701266][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.703446][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.705553][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.707668][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.710640][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.712842][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.714957][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.716964][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.718943][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.721023][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.723041][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.725124][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.727227][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.729330][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.731586][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 104.734268][ T9] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 104.738474][ T9] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 104.918890][ T35] usb 7-1: USB disconnect, device number 6 [ 105.228611][ T40] audit: type=1400 audit(1737167741.251:779): avc: denied { compute_member } for pid=7479 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.376734][ T40] audit: type=1400 audit(1737167741.401:780): avc: denied { mounton } for pid=7491 comm="syz.1.457" path="/152/file0" dev="tmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 105.412465][ T7498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.415852][ T7498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.424975][ T7498] hugetlbfs: syz.1.459 (7498): Using mlock ulimits for SHM_HUGETLB is obsolete [ 105.443586][ T7500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.460'. [ 105.445831][ T40] audit: type=1400 audit(1737167741.471:781): avc: denied { create } for pid=7501 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 105.499697][ T7507] random: crng reseeded on system resumption [ 105.501350][ T40] audit: type=1400 audit(1737167741.521:782): avc: denied { append } for pid=7506 comm="syz.2.463" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 105.535717][ T7510] netlink: 'syz.3.464': attribute type 10 has an invalid length. [ 105.545140][ T7510] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.552414][ T40] audit: type=1400 audit(1737167741.581:783): avc: denied { write } for pid=7508 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.609088][ T40] audit: type=1400 audit(1737167741.631:784): avc: denied { map } for pid=7513 comm="syz.3.465" path="socket:[18135]" dev="sockfs" ino=18135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.686740][ T7522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=7522 comm=syz.2.468 [ 105.695524][ T40] audit: type=1400 audit(1737167741.721:785): avc: denied { setattr } for pid=7521 comm="syz.2.468" name="HCI" dev="sockfs" ino=17055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.724792][ T35] usb 5-1: USB disconnect, device number 15 [ 105.816370][ T7531] netlink: 48 bytes leftover after parsing attributes in process `syz.0.471'. [ 106.020772][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 106.104987][ T7541] FAULT_INJECTION: forcing a failure. [ 106.104987][ T7541] name failslab, interval 1, probability 0, space 0, times 1 [ 106.108920][ T7541] CPU: 0 UID: 0 PID: 7541 Comm: syz.0.475 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 106.112133][ T7541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.115855][ T7541] Call Trace: [ 106.117207][ T7541] [ 106.118445][ T7541] dump_stack_lvl+0x16c/0x1f0 [ 106.120445][ T7541] should_fail_ex+0x497/0x5b0 [ 106.122456][ T7541] ? fs_reclaim_acquire+0xae/0x150 [ 106.124641][ T7541] should_failslab+0xc2/0x120 [ 106.126539][ T7541] __kmalloc_noprof+0xcb/0x510 [ 106.128055][ T7541] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 106.130389][ T7541] tomoyo_realpath_from_path+0xb9/0x720 [ 106.132683][ T7541] ? tomoyo_path_number_perm+0x235/0x590 [ 106.135039][ T7541] ? tomoyo_path_number_perm+0x235/0x590 [ 106.136696][ T7541] tomoyo_path_number_perm+0x248/0x590 [ 106.138307][ T7541] ? tomoyo_path_number_perm+0x235/0x590 [ 106.139969][ T7541] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.141767][ T7541] ? __pfx_lock_release+0x10/0x10 [ 106.143388][ T7541] ? trace_lock_acquire+0x14e/0x1f0 [ 106.145027][ T7541] ? lock_acquire+0x2f/0xb0 [ 106.146442][ T7541] ? __fget_files+0x40/0x3a0 [ 106.147886][ T7541] ? __fget_files+0x206/0x3a0 [ 106.149287][ T7541] security_file_ioctl+0x9b/0x240 [ 106.150761][ T7541] __x64_sys_ioctl+0xb7/0x200 [ 106.152182][ T7541] do_syscall_64+0xcd/0x250 [ 106.153524][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.155261][ T7541] RIP: 0033:0x7f3077b85d29 [ 106.156572][ T7541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.162344][ T7541] RSP: 002b:00007f3078a9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.164796][ T7541] RAX: ffffffffffffffda RBX: 00007f3077d75fa0 RCX: 00007f3077b85d29 [ 106.167106][ T7541] RDX: 0000000020000c00 RSI: 000000004400ae8f RDI: 0000000000000007 [ 106.169421][ T7541] RBP: 00007f3078a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 106.171731][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.173934][ T7541] R13: 0000000000000000 R14: 00007f3077d75fa0 R15: 00007fff5543bd88 [ 106.176164][ T7541] [ 106.177309][ T7541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.192179][ T9] usb 7-1: unable to get BOS descriptor set [ 106.194632][ T9] usb 7-1: config 8 has an invalid interface number: 255 but max is 1 [ 106.197019][ T9] usb 7-1: config 8 has an invalid interface number: 250 but max is 1 [ 106.199342][ T9] usb 7-1: config 8 has no interface number 0 [ 106.201292][ T9] usb 7-1: config 8 has no interface number 1 [ 106.203052][ T9] usb 7-1: config 8 interface 255 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 106.206094][ T9] usb 7-1: config 8 interface 255 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0 [ 106.208856][ T9] usb 7-1: config 8 interface 255 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 106.211953][ T9] usb 7-1: config 8 interface 255 altsetting 3 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 106.215311][ T9] usb 7-1: config 8 interface 255 altsetting 3 endpoint 0x85 has an invalid bInterval 245, changing to 11 [ 106.218467][ T9] usb 7-1: config 8 interface 255 altsetting 3 endpoint 0x85 has invalid maxpacket 59096, setting to 1024 [ 106.221737][ T9] usb 7-1: config 8 interface 255 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 106.224801][ T9] usb 7-1: config 8 interface 255 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 106.227805][ T9] usb 7-1: config 8 interface 255 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 106.231846][ T9] usb 7-1: config 8 interface 255 altsetting 3 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 106.236914][ T9] usb 7-1: config 8 interface 250 altsetting 249 has a duplicate endpoint with address 0x4, skipping [ 106.240824][ T9] usb 7-1: config 8 interface 250 altsetting 249 has a duplicate endpoint with address 0xC, skipping [ 106.244262][ T9] usb 7-1: config 8 interface 250 altsetting 249 has a duplicate endpoint with address 0xC, skipping [ 106.247571][ T9] usb 7-1: config 8 interface 255 has no altsetting 0 [ 106.249868][ T9] usb 7-1: config 8 interface 250 has no altsetting 0 [ 106.254261][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=75.73 [ 106.256852][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.259207][ T9] usb 7-1: Product: á´ã»°å˜«î¼£ëŠ£î³¼é®˜ç¿ëº’糤⿼ᇌ삲鈜繜ã˜é»–쟖ì•ä¯Žá¡«ä½€æŽšâ©œèŠ˜ë¼«â•Žâ¤€å…洧謡給 [ 106.263089][ T9] usb 7-1: Manufacturer: ÑŒ [ 106.264437][ T9] usb 7-1: SerialNumber: 凷➼况¹ꞿ沺䙊ﾛ鈓㕧瓮ㄊമ輟髪籖䚕̺൬‭ⓣ婞䜒톽Ôå × à¦”ì°å‰´ä—¥ë“Ÿâ¨žãŽ¿ïš˜å‰–秌쉾佡᪉襧죹籔濬ط蟞갯䵲䖋ꥷ鸰凵㉷ [ 106.272389][ T7529] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 106.379774][ T7559] ALSA: seq fatal error: cannot create timer (-19) [ 106.578294][ T7567] program syz.3.484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.581634][ T7575] FAULT_INJECTION: forcing a failure. [ 106.581634][ T7575] name failslab, interval 1, probability 0, space 0, times 0 [ 106.585473][ T7575] CPU: 1 UID: 0 PID: 7575 Comm: syz.1.485 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 106.588400][ T7575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.591013][ T7567] x_tables: duplicate underflow at hook 3 [ 106.591956][ T7575] Call Trace: [ 106.591967][ T7575] [ 106.596728][ T7575] dump_stack_lvl+0x16c/0x1f0 [ 106.598420][ T7575] should_fail_ex+0x497/0x5b0 [ 106.600296][ T7567] openvswitch: netlink: Flow actions attr not present in new flow. [ 106.600361][ T7575] ? fs_reclaim_acquire+0xae/0x150 [ 106.605838][ T7575] should_failslab+0xc2/0x120 [ 106.607826][ T7575] __kmalloc_noprof+0xcb/0x510 [ 106.609680][ T7575] ? rcu_is_watching+0x12/0xc0 [ 106.611547][ T7575] tomoyo_encode2+0x100/0x3e0 [ 106.613536][ T7575] tomoyo_encode+0x29/0x50 [ 106.615425][ T7575] tomoyo_realpath_from_path+0x19d/0x720 [ 106.617709][ T7575] ? tomoyo_path_number_perm+0x235/0x590 [ 106.620042][ T7575] tomoyo_path_number_perm+0x248/0x590 [ 106.622235][ T7575] ? tomoyo_path_number_perm+0x235/0x590 [ 106.624492][ T7575] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.626986][ T7575] ? __pfx_lock_release+0x10/0x10 [ 106.629087][ T7575] ? trace_lock_acquire+0x14e/0x1f0 [ 106.631248][ T7575] ? lock_acquire+0x2f/0xb0 [ 106.633112][ T7575] ? __fget_files+0x40/0x3a0 [ 106.634619][ T7575] ? __fget_files+0x206/0x3a0 [ 106.636019][ T7575] security_file_ioctl+0x9b/0x240 [ 106.637500][ T7575] __x64_sys_ioctl+0xb7/0x200 [ 106.638901][ T7575] do_syscall_64+0xcd/0x250 [ 106.640245][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.642462][ T7575] RIP: 0033:0x7eff08985d29 [ 106.644317][ T7575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.651672][ T7575] RSP: 002b:00007eff0989c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.655134][ T7575] RAX: ffffffffffffffda RBX: 00007eff08b75fa0 RCX: 00007eff08985d29 [ 106.658399][ T7575] RDX: 0000000020000c00 RSI: 000000004400ae8f RDI: 0000000000000007 [ 106.661652][ T7575] RBP: 00007eff0989c090 R08: 0000000000000000 R09: 0000000000000000 [ 106.664884][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.668097][ T7575] R13: 0000000000000000 R14: 00007eff08b75fa0 R15: 00007fff7f8e1ca8 [ 106.671411][ T7575] [ 106.674301][ T7575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.704926][ T9] usb 7-1: USB disconnect, device number 7 [ 106.705614][ T7586] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 106.709256][ T7586] overlayfs: missing 'lowerdir' [ 106.839477][ T7601] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 106.984091][ T7607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.099556][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.184655][ T7623] xfs: Unknown parameter 'nOrecoveIðzv¹ryiÌÜDoN‘Û“.‰…W4RŠx­¡KÜP6g;æ¿' [ 107.260316][ T7620] kvm: kvm [7619]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 107.271705][ T7620] kvm: kvm [7619]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x14500000800 [ 107.275940][ T7620] kvm: kvm [7619]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x14600000000 [ 107.287920][ T7620] kvm: kvm [7619]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1cd00000800 [ 107.576621][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 107.743558][ T7647] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 107.746484][ T7647] ata1.00: invalid cdb length 6 [ 107.765678][ T7652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.776764][ T7652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=7652 comm=syz.3.508 [ 107.779386][ T6386] raw-gadget.0 gadget.1: failed to queue disconnect event [ 107.998204][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 107.998215][ T40] audit: type=1400 audit(1737167744.021:797): avc: denied { execute } for pid=7670 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 108.007417][ T40] audit: type=1400 audit(1737167744.021:798): avc: denied { execute_no_trans } for pid=7670 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 108.102921][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.106869][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.110532][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.117640][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.120531][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.122746][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.133380][ T40] audit: type=1400 audit(1737167744.161:799): avc: denied { mounton } for pid=7675 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 108.196984][ T7675] chnl_net:caif_netlink_parms(): no params data found [ 108.201537][ T7685] netlink: 'syz.3.520': attribute type 4 has an invalid length. [ 108.215624][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 108.219793][ T7685] netlink: 'syz.3.520': attribute type 4 has an invalid length. [ 108.251580][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.253670][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.255677][ T7675] bridge_slave_0: entered allmulticast mode [ 108.257920][ T7675] bridge_slave_0: entered promiscuous mode [ 108.262365][ T40] audit: type=1400 audit(1737167744.291:800): avc: denied { ioctl } for pid=7689 comm="syz.3.521" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.262641][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.273627][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.273774][ T7675] bridge_slave_1: entered allmulticast mode [ 108.274428][ T7675] bridge_slave_1: entered promiscuous mode [ 108.305350][ T7675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.310180][ T7675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.317987][ T40] audit: type=1400 audit(1737167744.341:801): avc: denied { append } for pid=7692 comm="syz.3.522" name="pfkey" dev="proc" ino=4026533284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 108.337719][ T7675] team0: Port device team_slave_0 added [ 108.343114][ T7675] team0: Port device team_slave_1 added [ 108.362553][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.364636][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.369025][ T40] audit: type=1400 audit(1737167744.391:802): avc: denied { write } for pid=7694 comm="syz.3.523" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.372239][ T7675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.385507][ T40] audit: type=1400 audit(1737167744.401:803): avc: denied { open } for pid=7694 comm="syz.3.523" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.385793][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.395510][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.404070][ T7675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.473185][ T7675] hsr_slave_0: entered promiscuous mode [ 108.485055][ T7699] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 108.541095][ T7675] hsr_slave_1: entered promiscuous mode [ 108.600873][ T7675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.603545][ T7675] Cannot create hsr debugfs directory [ 108.716430][ T7675] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.720438][ T7675] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.724024][ T7675] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.728273][ T7675] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.757154][ T7675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.763758][ T7675] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.769765][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.771898][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.777292][ T1215] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.779428][ T1215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.862272][ T7675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.886462][ T7715] netlink: 'syz.0.528': attribute type 10 has an invalid length. [ 108.889416][ T7715] syz_tun: entered promiscuous mode [ 108.895103][ T7715] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 108.967129][ T40] audit: type=1326 audit(1737167744.991:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.0.531" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3077b85d29 code=0x7ffc0000 [ 108.969604][ T7675] veth0_vlan: entered promiscuous mode [ 108.973835][ T40] audit: type=1326 audit(1737167744.991:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.0.531" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3077b85d29 code=0x7ffc0000 [ 108.984566][ T40] audit: type=1326 audit(1737167744.991:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.0.531" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3077b85d29 code=0x7ffc0000 [ 108.984690][ T7675] veth1_vlan: entered promiscuous mode [ 109.007569][ T7675] veth0_macvtap: entered promiscuous mode [ 109.010616][ T7675] veth1_macvtap: entered promiscuous mode [ 109.018923][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.023344][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.026325][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.029413][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.032681][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.035777][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.040846][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.047063][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.050048][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.053433][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.056730][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.059629][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.062570][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.067075][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.076053][ T7675] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.079601][ T7675] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.083640][ T7675] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.086226][ T7675] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.122306][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.125486][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.139022][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.141717][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.240843][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.534'. [ 109.533732][ T7788] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 109.659502][ T7801] binfmt_misc: register: failed to install interpreter file ./file0 [ 109.752788][ T7812] xt_bpf: check failed: parse error [ 109.785179][ T7808] No control pipe specified [ 109.826307][ T7818] netlink: 140 bytes leftover after parsing attributes in process `syz.4.548'. [ 109.857332][ T7822] 9pnet_virtio: no channels available for device syz [ 109.930882][ T7826] netlink: 156 bytes leftover after parsing attributes in process `syz.4.551'. [ 109.971545][ T7830] netlink: 'syz.4.552': attribute type 12 has an invalid length. [ 110.059192][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.554'. [ 110.060899][ T64] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 110.182967][ T5936] Bluetooth: hci2: command tx timeout [ 110.202665][ T7837] netlink: 'syz.4.555': attribute type 2 has an invalid length. [ 110.212410][ T64] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.215814][ T64] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 110.218797][ T64] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.231987][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.238102][ T7816] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.244282][ T64] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.443281][ T7855] binder: BINDER_SET_CONTEXT_MGR already set [ 110.445866][ T7855] binder: 7815:7855 ioctl 4018620d 200001c0 returned -16 [ 110.461749][ T5945] usb 8-1: USB disconnect, device number 7 [ 110.473540][ T7858] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 110.551119][ T7867] tipc: Enabled bearer , priority 0 [ 110.595225][ T7876] netlink: 'syz.4.565': attribute type 2 has an invalid length. [ 110.597507][ T7876] netlink: 32 bytes leftover after parsing attributes in process `syz.4.565'. [ 110.610846][ T7878] delete_channel: no stack [ 110.634231][ T7880] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 110.723007][ T12] tipc: Resetting bearer [ 110.735295][ T7887] FAULT_INJECTION: forcing a failure. [ 110.735295][ T7887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.739143][ T7887] CPU: 0 UID: 0 PID: 7887 Comm: syz.2.569 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 110.742545][ T7887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.745709][ T7887] Call Trace: [ 110.746684][ T7887] [ 110.747574][ T7887] dump_stack_lvl+0x16c/0x1f0 [ 110.748939][ T7887] should_fail_ex+0x497/0x5b0 [ 110.750630][ T7887] _copy_to_user+0x32/0xd0 [ 110.752404][ T7887] simple_read_from_buffer+0xd0/0x160 [ 110.754314][ T7887] proc_fail_nth_read+0x198/0x270 [ 110.755987][ T7887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.757842][ T7887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.759634][ T7887] vfs_read+0x1df/0xbe0 [ 110.761029][ T7887] ? __fget_files+0x1fc/0x3a0 [ 110.762612][ T7887] ? __pfx___mutex_lock+0x10/0x10 [ 110.764353][ T7887] ? __pfx_vfs_read+0x10/0x10 [ 110.765916][ T7887] ? __fget_files+0x206/0x3a0 [ 110.767541][ T7887] ksys_read+0x12b/0x250 [ 110.769123][ T7887] ? __pfx_ksys_read+0x10/0x10 [ 110.770871][ T7887] do_syscall_64+0xcd/0x250 [ 110.772458][ T7887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.774508][ T7887] RIP: 0033:0x7f2acb18473c [ 110.776074][ T7887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 110.782688][ T7887] RSP: 002b:00007f2acbfa6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.785553][ T7887] RAX: ffffffffffffffda RBX: 00007f2acb375fa0 RCX: 00007f2acb18473c [ 110.788262][ T7887] RDX: 000000000000000f RSI: 00007f2acbfa60a0 RDI: 0000000000000008 [ 110.790993][ T7887] RBP: 00007f2acbfa6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.793692][ T7887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.796327][ T7887] R13: 0000000000000000 R14: 00007f2acb375fa0 R15: 00007ffcd3754a18 [ 110.799015][ T7887] [ 110.907652][ T7892] netlink: zone id is out of range [ 110.909257][ T7892] netlink: zone id is out of range [ 110.910957][ T7892] netlink: zone id is out of range [ 110.912519][ T7892] netlink: zone id is out of range [ 110.914416][ T7892] netlink: zone id is out of range [ 110.918752][ T7892] netlink: zone id is out of range [ 110.920880][ T7892] netlink: zone id is out of range [ 110.922981][ T7892] netlink: zone id is out of range [ 111.028757][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 111.032295][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.574'. [ 111.037095][ T7898] gtp0: entered promiscuous mode [ 111.038904][ T7898] gtp0: entered allmulticast mode [ 111.271953][ T7908] netlink: 703 bytes leftover after parsing attributes in process `syz.0.578'. [ 111.448522][ T7916] input: syz1 as /devices/virtual/input/input10 [ 111.523289][ T7865] tipc: Resetting bearer [ 112.250837][ T5936] Bluetooth: hci2: command tx timeout [ 114.340807][ T5936] Bluetooth: hci2: command tx timeout [ 116.410957][ T5936] Bluetooth: hci2: command tx timeout [ 120.016686][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 120.016701][ T40] audit: type=1326 audit(1737167756.041:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.585" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2acb185d29 code=0x0 [ 120.146176][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 124.721952][ T7865] tipc: Disabling bearer [ 124.730595][ T7925] xfrm1: entered allmulticast mode [ 125.044848][ T7960] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 125.046861][ T7960] PKCS7: Only support pkcs7_signedData type [ 125.049649][ T7960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.592'. [ 125.052429][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 125.068194][ T7962] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 125.070127][ T7962] PKCS7: Only support pkcs7_signedData type [ 125.123687][ T7969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=7969 comm=syz.0.594 [ 125.315185][ T40] audit: type=1400 audit(1737167761.341:836): avc: denied { connect } for pid=7986 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.334861][ T7985] Can't find a SQUASHFS superblock on nullb0 [ 125.373831][ T8002] tmpfs: Invalid uid '0x00000000ffffffff' [ 125.376917][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 125.376930][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 125.500878][ T5977] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 125.580509][ T40] audit: type=1400 audit(1737167761.601:837): avc: denied { accept } for pid=8021 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.583875][ T8013] kvm: pic: non byte write [ 125.595360][ T8013] kvm: pic: non byte write [ 125.680778][ T5977] usb 9-1: Using ep0 maxpacket: 32 [ 125.684568][ T5977] usb 9-1: config 0 has no interfaces? [ 125.686283][ T5977] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 125.689617][ T5977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.694900][ T5977] usb 9-1: config 0 descriptor?? [ 125.707600][ T8024] kvm: kvm [8023]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000008) [ 125.820756][ T835] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 125.897920][ T7980] FAULT_INJECTION: forcing a failure. [ 125.897920][ T7980] name failslab, interval 1, probability 0, space 0, times 0 [ 125.902025][ T7980] CPU: 3 UID: 0 PID: 7980 Comm: syz.4.597 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 125.903642][ T8042] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 125.905120][ T7980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.905130][ T7980] Call Trace: [ 125.905134][ T7980] [ 125.912897][ T7980] dump_stack_lvl+0x16c/0x1f0 [ 125.914859][ T7980] should_fail_ex+0x497/0x5b0 [ 125.916381][ T7980] ? fs_reclaim_acquire+0xae/0x150 [ 125.917946][ T7980] should_failslab+0xc2/0x120 [ 125.919376][ T7980] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 125.920923][ T7980] ? getname_flags.part.0+0x4c/0x550 [ 125.922506][ T7980] ? vfs_write+0x306/0x1150 [ 125.924039][ T7980] getname_flags.part.0+0x4c/0x550 [ 125.925980][ T7980] getname+0x8d/0xe0 [ 125.927449][ T7980] do_sys_openat2+0x104/0x1e0 [ 125.928904][ T7980] ? __pfx_do_sys_openat2+0x10/0x10 [ 125.930482][ T7980] ? __fget_files+0x206/0x3a0 [ 125.931894][ T7980] __x64_sys_openat+0x175/0x210 [ 125.933350][ T7980] ? __pfx___x64_sys_openat+0x10/0x10 [ 125.935235][ T7980] ? ksys_write+0x1ba/0x250 [ 125.937050][ T7980] do_syscall_64+0xcd/0x250 [ 125.938384][ T7980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.940356][ T7980] RIP: 0033:0x7f1050f84690 [ 125.941815][ T7980] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 125.947442][ T7980] RSP: 002b:00007f1051e97f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 125.949854][ T7980] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1050f84690 [ 125.952277][ T7980] RDX: 0000000000000002 RSI: 00007f1051e97fa0 RDI: 00000000ffffff9c [ 125.954515][ T7980] RBP: 00007f1051e97fa0 R08: 0000000000000000 R09: 00007f1051e97cd6 [ 125.957411][ T7980] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 125.959869][ T7980] R13: 0000000000000000 R14: 00007f1051175fa0 R15: 00007ffd9ca85238 [ 125.962263][ T7980] [ 125.965710][ T30] usb 9-1: USB disconnect, device number 2 [ 125.980740][ T835] usb 8-1: Using ep0 maxpacket: 8 [ 125.983140][ T835] usb 8-1: no configurations [ 125.984562][ T835] usb 8-1: can't read configurations, error -22 [ 126.110793][ T835] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 126.260765][ T835] usb 8-1: Using ep0 maxpacket: 8 [ 126.262692][ T835] usb 8-1: no configurations [ 126.264033][ T835] usb 8-1: can't read configurations, error -22 [ 126.265932][ T835] usb usb8-port1: attempt power cycle [ 126.361033][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 126.363966][ T8063] netlink: 'syz.0.620': attribute type 29 has an invalid length. [ 126.366179][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 126.397973][ T8065] xt_hashlimit: size too large, truncated to 1048576 [ 126.610768][ T835] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 126.631201][ T835] usb 8-1: Using ep0 maxpacket: 8 [ 126.633105][ T835] usb 8-1: no configurations [ 126.634446][ T835] usb 8-1: can't read configurations, error -22 [ 126.673202][ T8073] vlan2: entered promiscuous mode [ 126.674801][ T8073] vlan2: entered allmulticast mode [ 126.676296][ T8073] hsr_slave_1: entered allmulticast mode [ 126.720879][ T8075] gfs2: gfs2 mount does not exist [ 126.772060][ T835] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 126.791244][ T835] usb 8-1: Using ep0 maxpacket: 8 [ 126.793902][ T835] usb 8-1: no configurations [ 126.795854][ T835] usb 8-1: can't read configurations, error -22 [ 126.798642][ T835] usb usb8-port1: unable to enumerate USB device [ 127.100841][ T8] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 127.260828][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 127.265728][ T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.269592][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.275341][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.279855][ T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.285401][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.289060][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.409329][ T8107] team0: Cannot enslave team device to itself [ 127.497343][ T8] usb 7-1: usb_control_msg returned -71 [ 127.499057][ T8] usbtmc 7-1:16.0: can't read capabilities [ 127.503325][ T8] usb 7-1: USB disconnect, device number 8 [ 127.599470][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 127.603344][ T8122] bridge_slave_1: left allmulticast mode [ 127.605570][ T8122] bridge_slave_1: left promiscuous mode [ 127.607934][ T8122] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.613964][ T8122] bridge_slave_0: left allmulticast mode [ 127.616012][ T8122] bridge_slave_0: left promiscuous mode [ 127.617784][ T8122] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.629515][ T8126] ./bus: Can't lookup blockdev [ 127.689607][ T8133] loop6: detected capacity change from 0 to 524287999 [ 127.693975][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.696931][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.699391][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.702150][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.705316][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.708008][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.710433][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.713176][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.715576][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.719148][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.723946][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.727491][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.730780][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.734358][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.737501][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.740177][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.742491][ T8133] ldm_validate_partition_table(): Disk read failed. [ 127.744521][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.748184][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.751574][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.754666][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.760950][ T8133] Dev loop6: unable to read RDB block 0 [ 127.763885][ T8133] loop6: unable to read partition table [ 127.765682][ T8136] nfs: Unknown parameter 'fsc«8œÖ^q3qšÍ—Ï¡Ô$íÅFZ“+wçN€*B¼`™­#' [ 127.765959][ T8133] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 127.770093][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 128.633016][ T8136] hsr_slave_1 (unregistering): left allmulticast mode [ 128.646545][ T65] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 128.713302][ T8136] hsr_slave_1 (unregistering): left promiscuous mode [ 128.864002][ T8170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.646'. [ 128.868649][ T8172] vivid-001: ================= START STATUS ================= [ 128.869266][ T8173] XFS (nullb0): no-recovery mounts must be read-only. [ 128.872021][ T8172] vivid-001: Radio HW Seek Mode: Bounded [ 128.872054][ T8172] vivid-001: Radio Programmable HW Seek: false [ 128.872065][ T8172] vivid-001: RDS Rx I/O Mode: Block I/O [ 128.872076][ T8172] vivid-001: Generate RBDS Instead of RDS: false [ 128.872087][ T8172] vivid-001: RDS Reception: true [ 128.872097][ T8172] vivid-001: RDS Program Type: 0 inactive [ 128.884071][ T8172] vivid-001: RDS PS Name: inactive [ 128.885658][ T8172] vivid-001: RDS Radio Text: inactive [ 128.887760][ T8172] vivid-001: RDS Traffic Announcement: false inactive [ 128.890489][ T8172] vivid-001: RDS Traffic Program: false inactive [ 128.892861][ T8172] vivid-001: RDS Music: false inactive [ 128.894490][ T8172] vivid-001: ================== END STATUS ================== [ 128.939113][ T40] audit: type=1400 audit(1737167764.961:838): avc: denied { override_creds } for pid=8178 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 128.951818][ T8181] netlink: 32 bytes leftover after parsing attributes in process `syz.4.647'. [ 128.996186][ T8183] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 129.002951][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 129.188940][ T40] audit: type=1400 audit(1737167765.211:839): avc: denied { mounton } for pid=8209 comm="syz.0.655" path="/127/file1" dev="autofs" ino=23511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 129.213011][ T40] audit: type=1400 audit(1737167765.241:840): avc: denied { append } for pid=8214 comm="syz.4.657" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.247101][ T8222] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.659'. [ 129.250817][ T8222] net_ratelimit: 2 callbacks suppressed [ 129.250831][ T8222] openvswitch: netlink: Flow actions attr not present in new flow. [ 129.256580][ T40] audit: type=1400 audit(1737167765.281:841): avc: denied { connect } for pid=8220 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 129.264400][ T40] audit: type=1400 audit(1737167765.291:842): avc: denied { getopt } for pid=8220 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 129.294832][ T40] audit: type=1400 audit(1737167765.321:843): avc: denied { mounton } for pid=8231 comm="syz.2.663" path="/179/file0/file0" dev="9p" ino=38535868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.303511][ T40] audit: type=1400 audit(1737167765.321:844): avc: denied { search } for pid=8233 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.309852][ T8235] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 129.316541][ T40] audit: type=1400 audit(1737167765.331:845): avc: denied { read } for pid=8234 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.331625][ T8232] netfs: Couldn't get user pages (rc=-14) [ 129.348553][ T8238] fuse: Bad value for 'group_id' [ 129.350024][ T8238] fuse: Bad value for 'group_id' [ 129.380482][ T8230] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 129.744147][ T8275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.746633][ T8275] IPv6: NLM_F_CREATE should be set when creating new route [ 129.822621][ T8304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8304 comm=syz.3.670 [ 129.976437][ T8309] bond0: entered promiscuous mode [ 129.977989][ T8309] bond_slave_1: entered promiscuous mode [ 129.980333][ T8309] bridge0: entered promiscuous mode [ 129.982349][ T8309] team0: entered promiscuous mode [ 129.991091][ T8309] team_slave_0: entered promiscuous mode [ 129.994045][ T8309] team_slave_1: entered promiscuous mode [ 130.000921][ T8313] loop6: detected capacity change from 0 to 524287999 [ 130.061749][ T8309] batadv0: entered promiscuous mode [ 130.121464][ T8309] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 130.147740][ T8323] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 130.237212][ T8331] netlink: 'syz.2.681': attribute type 3 has an invalid length. [ 130.239494][ T8331] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 130.243318][ T8331] nbd: couldn't find device at index 63 [ 130.325293][ T8346] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 130.327405][ T8346] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 130.332061][ T8346] vhci_hcd vhci_hcd.0: Device attached [ 130.335257][ T8346] vhci_hcd vhci_hcd.0: port 0 already used [ 130.351981][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 130.351991][ T40] audit: type=1400 audit(1737167766.381:867): avc: denied { connect } for pid=8348 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.361309][ T8350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.463130][ T8363] binder: 8362:8363 ioctl c0306201 20000280 returned -22 [ 130.512999][ T8370] random: crng reseeded on system resumption [ 130.570939][ T835] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 130.620916][ T6447] usb 44-1: SetAddress Request (2) to port 0 [ 130.623019][ T6447] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 130.633438][ T40] audit: type=1400 audit(1737167766.661:868): avc: denied { mount } for pid=8373 comm="syz.0.694" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 130.639766][ T40] audit: type=1400 audit(1737167766.661:869): avc: denied { search } for pid=8373 comm="syz.0.694" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 130.654397][ T40] audit: type=1400 audit(1737167766.681:870): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 130.679026][ T40] audit: type=1400 audit(1737167766.701:871): avc: denied { connect } for pid=8375 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.687707][ T40] audit: type=1400 audit(1737167766.721:872): avc: denied { ioctl } for pid=8369 comm="syz.2.693" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.702799][ T8371] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.721326][ T835] usb 8-1: device descriptor read/64, error -71 [ 130.753703][ T11] tipc: Subscription rejected, illegal request [ 130.966514][ T40] audit: type=1400 audit(1737167766.991:873): avc: denied { ioctl } for pid=8394 comm="syz.0.701" path="socket:[24144]" dev="sockfs" ino=24144 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.973879][ T40] audit: type=1400 audit(1737167766.991:874): avc: denied { getopt } for pid=8394 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.987280][ T835] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 131.130766][ T835] usb 8-1: device descriptor read/64, error -71 [ 131.243849][ T835] usb usb8-port1: attempt power cycle [ 131.457229][ T8418] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1319647122 (42228707904 ns) > initial count (3230260288 ns). Using initial count to start timer. [ 131.463107][ T25] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 131.577996][ T40] audit: type=1400 audit(1737167767.601:875): avc: denied { read } for pid=8420 comm="syz.0.708" path="socket:[27055]" dev="sockfs" ino=27055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.590905][ T835] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 131.611394][ T835] usb 8-1: device descriptor read/8, error -71 [ 131.632122][ T25] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 131.635073][ T25] usb 7-1: config 0 has no interface number 0 [ 131.635689][ T40] audit: type=1400 audit(1737167767.661:876): avc: denied { connect } for pid=8420 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.637224][ T25] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.647757][ T25] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 131.651597][ T25] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 131.655685][ T25] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 131.659581][ T25] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 131.663307][ T25] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.667993][ T25] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 131.671283][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.675550][ T25] usb 7-1: config 0 descriptor?? [ 131.677981][ T8414] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 131.682303][ T25] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 131.850762][ T835] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 131.871610][ T835] usb 8-1: device descriptor read/8, error -71 [ 131.981184][ T835] usb usb8-port1: unable to enumerate USB device [ 132.444434][ T8426] __nla_validate_parse: 6 callbacks suppressed [ 132.444443][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.710'. [ 132.485031][ T8433] dns_resolver: Unsupported content type (24) [ 132.501629][ T11] wlan1: Trigger new scan to find an IBSS to join [ 132.581984][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.583903][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.770791][ T6522] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 132.778551][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 132.801657][ T8448] bridge_slave_1: left allmulticast mode [ 132.803339][ T8448] bridge_slave_1: left promiscuous mode [ 132.805046][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.809991][ T8448] bridge_slave_0: left allmulticast mode [ 132.812330][ T8448] bridge_slave_0: left promiscuous mode [ 132.814028][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.881346][ T8449] xt_hashlimit: size too large, truncated to 1048576 [ 132.920794][ T6522] usb 9-1: Using ep0 maxpacket: 32 [ 132.923536][ T6522] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 132.925962][ T6522] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 132.928366][ T6522] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 132.930983][ T6522] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.933689][ T6522] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.936805][ T6522] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 132.941681][ T6522] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 132.944639][ T6522] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.949315][ T6522] usb 9-1: config 0 descriptor?? [ 133.183336][ T6522] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 133.190286][ T6522] usb 9-1: USB disconnect, device number 3 [ 133.198569][ T6522] usblp1: removed [ 133.328832][ T8347] vhci_hcd: connection reset by peer [ 133.333503][ T1215] vhci_hcd: stop threads [ 133.335462][ T1215] vhci_hcd: release socket [ 133.338461][ T1215] vhci_hcd: disconnect device [ 133.586646][ T8465] mkiss: ax0: crc mode is auto. [ 133.637528][ T8465] XFS (nullb0): Invalid superblock magic number [ 133.724726][ T8479] binder: 8478:8479 ioctl c0306201 200001c0 returned -22 [ 133.727058][ T8479] binder: 8478:8479 ioctl ae01 0 returned -22 [ 133.729481][ T8479] autofs: Unknown parameter './file1' [ 133.846819][ T8485] netlink: 64 bytes leftover after parsing attributes in process `syz.3.723'. [ 133.850442][ T8485] netlink: 64 bytes leftover after parsing attributes in process `syz.3.723'. [ 133.945649][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.729'. [ 133.948412][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.729'. [ 133.951216][ T8502] netlink: 'syz.4.729': attribute type 4 has an invalid length. [ 133.994358][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.997048][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.999619][ T5936] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 134.166352][ T1455] usb 7-1: USB disconnect, device number 9 [ 134.169025][ T1455] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 134.187893][ T8512] openvswitch: netlink: Message has 8 unknown bytes. [ 134.224403][ T8512] XFS (nullb0): Invalid superblock magic number [ 134.232552][ T5976] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 134.240979][ T835] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 134.370798][ T835] usb 8-1: device descriptor read/64, error -71 [ 134.399474][ T5976] usb 9-1: Using ep0 maxpacket: 32 [ 134.404974][ T5976] usb 9-1: config 0 has no interfaces? [ 134.407092][ T5976] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 134.411235][ T5976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.415288][ T5976] usb 9-1: config 0 descriptor?? [ 134.623201][ T5945] usb 9-1: USB disconnect, device number 4 [ 134.630774][ T835] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 134.645286][ T8534] mkiss: ax0: crc mode is auto. [ 134.760828][ T835] usb 8-1: device descriptor read/64, error -71 [ 134.788346][ T8538] geneve2: entered promiscuous mode [ 134.791325][ T8538] geneve2: entered allmulticast mode [ 134.794950][ T8538] batman_adv: batadv0: Adding interface: geneve2 [ 134.797276][ T8538] batman_adv: batadv0: Interface activated: geneve2 [ 134.871203][ T835] usb usb8-port1: attempt power cycle [ 135.071631][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'. [ 135.075542][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'. [ 135.220847][ T835] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 135.241198][ T835] usb 8-1: device descriptor read/8, error -71 [ 135.481147][ T835] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 135.501653][ T835] usb 8-1: device descriptor read/8, error -71 [ 135.610809][ T65] wlan1: Trigger new scan to find an IBSS to join [ 135.611006][ T835] usb usb8-port1: unable to enumerate USB device [ 135.643796][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 135.643808][ T40] audit: type=1400 audit(1737167771.671:882): avc: denied { ioctl } for pid=8556 comm="syz.4.746" path="socket:[26193]" dev="sockfs" ino=26193 ioctlcmd=0x5462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.664813][ T40] audit: type=1400 audit(1737167771.691:883): avc: denied { listen } for pid=8556 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.693027][ T6447] usb 44-1: device descriptor read/8, error -110 [ 135.933977][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.936879][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.939196][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.941651][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.943963][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.946235][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.948524][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.951083][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.953364][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.955653][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.957908][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.960189][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.962769][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.965047][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.967348][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.969687][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.972246][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.974681][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.976942][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.979225][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.981608][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.983951][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.986234][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.988477][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.990826][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.994287][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 135.998762][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 136.001167][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 136.003457][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 136.005685][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 136.007961][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 136.010247][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 136.013133][ T5936] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 136.083212][ T6447] usb usb44-port1: attempt power cycle [ 136.326644][ T8586] netlink: 156 bytes leftover after parsing attributes in process `syz.0.754'. [ 136.608792][ T40] audit: type=1400 audit(1737167772.631:884): avc: denied { write } for pid=8591 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.616796][ T40] audit: type=1400 audit(1737167772.631:885): avc: denied { connect } for pid=8591 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 136.651316][ T6447] usb usb44-port1: unable to enumerate USB device [ 136.683274][ T8596] netlink: 'syz.2.758': attribute type 3 has an invalid length. [ 136.685637][ T8596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.758'. [ 136.840397][ T8610] bond2: entered promiscuous mode [ 136.846894][ T8610] bond2: entered allmulticast mode [ 136.848561][ T8610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.858737][ T8610] overlay: Bad value for 'workdir' [ 136.861024][ T40] audit: type=1400 audit(1737167772.891:886): avc: denied { execute } for pid=8609 comm="syz.0.763" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 137.185105][ T40] audit: type=1400 audit(1737167773.211:887): avc: denied { setopt } for pid=8664 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.254916][ T40] audit: type=1400 audit(1737167773.281:888): avc: denied { listen } for pid=8668 comm="syz.4.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.261118][ T40] audit: type=1400 audit(1737167773.291:889): avc: denied { ioctl } for pid=8668 comm="syz.4.780" path="socket:[25443]" dev="sockfs" ino=25443 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.359246][ T8659] syz.3.776 (8659) used greatest stack depth: 18880 bytes left [ 137.919026][ T8706] kvm: pic: level sensitive irq not supported [ 137.919399][ T8706] kvm: pic: non byte read [ 138.007423][ T8709] bond0: entered promiscuous mode [ 138.009388][ T8709] bond_slave_0: entered promiscuous mode [ 138.011472][ T8709] bond_slave_1: entered promiscuous mode [ 138.014382][ T8709] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.071528][ T8709] bond0: left promiscuous mode [ 138.073396][ T8709] bond_slave_0: left promiscuous mode [ 138.075540][ T8709] bond_slave_1: left promiscuous mode [ 138.221659][ T40] audit: type=1400 audit(1737167774.251:890): avc: denied { write } for pid=8713 comm="syz.2.796" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 138.265878][ T8721] __nla_validate_parse: 3 callbacks suppressed [ 138.265894][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.797'. [ 138.293838][ T40] audit: type=1400 audit(1737167774.321:891): avc: denied { shutdown } for pid=8722 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.317067][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 138.369763][ T8728] netlink: 'syz.4.797': attribute type 11 has an invalid length. [ 138.381304][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 138.384405][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 138.575686][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 138.650845][ T65] wlan1: Trigger new scan to find an IBSS to join [ 138.851615][ T1119] sr 2:0:0:0: [sr0] tag#4 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 138.854619][ T1119] sr 2:0:0:0: [sr0] tag#4 Sense Key : Illegal Request [current] [ 138.856847][ T1119] sr 2:0:0:0: [sr0] tag#4 Add. Sense: Invalid command operation code [ 138.859256][ T1119] sr 2:0:0:0: [sr0] tag#4 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 138.861705][ T1119] blk_print_req_error: 36 callbacks suppressed [ 138.861713][ T1119] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x208800 phys_seg 1 prio class 0 [ 139.200502][ T8727] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 139.202827][ T8729] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 139.238511][ T8748] SELinux: Context Ü is not valid (left unmapped). [ 139.248893][ T8748] xt_policy: output policy not valid in PREROUTING and INPUT [ 139.650995][ T1147] wlan1: Creating new IBSS network, BSSID 2e:31:f0:88:a9:ba [ 139.661712][ T8762] tmpfs: Invalid gid '0x00000000ffffffff' [ 139.702411][ T1147] ------------[ cut here ]------------ [ 139.704739][ T1147] WARNING: CPU: 0 PID: 1147 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x4bb/0x560 [ 139.707916][ T1147] Modules linked in: [ 139.709203][ T1147] CPU: 0 UID: 0 PID: 1147 Comm: kworker/u32:8 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 139.714174][ T1147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.718088][ T1147] Workqueue: cfg80211 cfg80211_event_work [ 139.720026][ T1147] RIP: 0010:__cfg80211_ibss_joined+0x4bb/0x560 [ 139.722283][ T1147] Code: ff ff e8 a8 4b 0e f7 90 0f 0b 90 e9 66 fe ff ff e8 ba f8 70 f7 e9 3d fc ff ff e8 50 f8 70 f7 e9 81 fc ff ff e8 86 4b 0e f7 90 <0f> 0b 90 e9 8a fc ff ff e8 78 4b 0e f7 90 0f 0b e8 c0 f8 70 f7 e9 [ 139.728508][ T1147] RSP: 0018:ffffc90006017b50 EFLAGS: 00010293 [ 139.730307][ T1147] RAX: 0000000000000000 RBX: ffff8880435d0d90 RCX: 1ffffffff2dd10a6 [ 139.732933][ T1147] RDX: ffff8880273f2440 RSI: ffffffff8a8bd91a RDI: ffffffff8bd1efe0 [ 139.735335][ T1147] RBP: ffffc90006017c00 R08: 0000000000000001 R09: fffffbfff2dca7a8 [ 139.737708][ T1147] R10: ffffffff96e53d47 R11: 0000000000000003 R12: ffff8880435d0000 [ 139.740086][ T1147] R13: 1ffff92000c02f6e R14: 0000000000000000 R15: ffffc90006017b90 [ 139.742523][ T1147] FS: 0000000000000000(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 139.745220][ T1147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.747152][ T1147] CR2: 00007f1051e97f98 CR3: 000000001cac2000 CR4: 0000000000352ef0 [ 139.749501][ T1147] DR0: 000000000000126c DR1: 0000000000000003 DR2: 0000000000000081 [ 139.751896][ T1147] DR3: 0000000000000002 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 139.754272][ T1147] Call Trace: [ 139.755375][ T1147] [ 139.756407][ T1147] ? __warn+0xea/0x3c0 [ 139.757925][ T1147] ? __cfg80211_ibss_joined+0x4bb/0x560 [ 139.759776][ T1147] ? report_bug+0x3c0/0x580 [ 139.761283][ T1147] ? handle_bug+0x54/0xa0 [ 139.762882][ T1147] ? exc_invalid_op+0x17/0x50 [ 139.764594][ T1147] ? asm_exc_invalid_op+0x1a/0x20 [ 139.766126][ T1147] ? __cfg80211_ibss_joined+0x4ba/0x560 [ 139.767790][ T1147] ? __cfg80211_ibss_joined+0x4bb/0x560 [ 139.769411][ T1147] ? __pfx_lock_release+0x10/0x10 [ 139.771094][ T1147] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 139.772912][ T1147] ? mark_held_locks+0x9f/0xe0 [ 139.774309][ T1147] ? cfg80211_process_wdev_events+0x3e6/0x5d0 [ 139.776126][ T1147] cfg80211_process_wdev_events+0x3e6/0x5d0 [ 139.777880][ T1147] cfg80211_process_rdev_events+0x9f/0x130 [ 139.779616][ T1147] cfg80211_event_work+0x2b/0x40 [ 139.781246][ T1147] process_one_work+0x9c5/0x1ba0 [ 139.782755][ T1147] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 139.784422][ T1147] ? __pfx_process_one_work+0x10/0x10 [ 139.786031][ T1147] ? rcu_is_watching+0x12/0xc0 [ 139.787468][ T1147] ? assign_work+0x1a0/0x250 [ 139.788853][ T1147] worker_thread+0x6c8/0xf00 [ 139.790214][ T1147] ? __pfx_worker_thread+0x10/0x10 [ 139.791790][ T1147] kthread+0x2c1/0x3a0 [ 139.792995][ T1147] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.794580][ T1147] ? __pfx_kthread+0x10/0x10 [ 139.796026][ T1147] ret_from_fork+0x45/0x80 [ 139.797705][ T1147] ? __pfx_kthread+0x10/0x10 [ 139.799141][ T1147] ret_from_fork_asm+0x1a/0x30 [ 139.800552][ T1147] [ 139.801603][ T1147] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.803757][ T1147] CPU: 0 UID: 0 PID: 1147 Comm: kworker/u32:8 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 139.806962][ T1147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.810087][ T1147] Workqueue: cfg80211 cfg80211_event_work [ 139.811700][ T1147] Call Trace: [ 139.812905][ T1147] [ 139.813798][ T1147] dump_stack_lvl+0x3d/0x1f0 [ 139.815115][ T1147] panic+0x71d/0x800 [ 139.816201][ T1147] ? __pfx_panic+0x10/0x10 [ 139.817369][ T1147] ? show_trace_log_lvl+0x29d/0x3d0 [ 139.818786][ T1147] ? check_panic_on_warn+0x1f/0xb0 [ 139.820246][ T1147] ? __cfg80211_ibss_joined+0x4bb/0x560 [ 139.821921][ T1147] check_panic_on_warn+0xab/0xb0 [ 139.823439][ T1147] __warn+0xf6/0x3c0 [ 139.824613][ T1147] ? __cfg80211_ibss_joined+0x4bb/0x560 [ 139.826273][ T1147] report_bug+0x3c0/0x580 [ 139.827605][ T1147] handle_bug+0x54/0xa0 [ 139.828862][ T1147] exc_invalid_op+0x17/0x50 [ 139.830225][ T1147] asm_exc_invalid_op+0x1a/0x20 [ 139.831728][ T1147] RIP: 0010:__cfg80211_ibss_joined+0x4bb/0x560 [ 139.833601][ T1147] Code: ff ff e8 a8 4b 0e f7 90 0f 0b 90 e9 66 fe ff ff e8 ba f8 70 f7 e9 3d fc ff ff e8 50 f8 70 f7 e9 81 fc ff ff e8 86 4b 0e f7 90 <0f> 0b 90 e9 8a fc ff ff e8 78 4b 0e f7 90 0f 0b e8 c0 f8 70 f7 e9 [ 139.839212][ T1147] RSP: 0018:ffffc90006017b50 EFLAGS: 00010293 [ 139.841044][ T1147] RAX: 0000000000000000 RBX: ffff8880435d0d90 RCX: 1ffffffff2dd10a6 [ 139.843415][ T1147] RDX: ffff8880273f2440 RSI: ffffffff8a8bd91a RDI: ffffffff8bd1efe0 [ 139.845681][ T1147] RBP: ffffc90006017c00 R08: 0000000000000001 R09: fffffbfff2dca7a8 [ 139.847961][ T1147] R10: ffffffff96e53d47 R11: 0000000000000003 R12: ffff8880435d0000 [ 139.850421][ T1147] R13: 1ffff92000c02f6e R14: 0000000000000000 R15: ffffc90006017b90 [ 139.853044][ T1147] ? __cfg80211_ibss_joined+0x4ba/0x560 [ 139.854616][ T1147] ? __pfx_lock_release+0x10/0x10 [ 139.856036][ T1147] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 139.857729][ T1147] ? mark_held_locks+0x9f/0xe0 [ 139.859102][ T1147] ? cfg80211_process_wdev_events+0x3e6/0x5d0 [ 139.860825][ T1147] cfg80211_process_wdev_events+0x3e6/0x5d0 [ 139.862556][ T1147] cfg80211_process_rdev_events+0x9f/0x130 [ 139.864224][ T1147] cfg80211_event_work+0x2b/0x40 [ 139.865639][ T1147] process_one_work+0x9c5/0x1ba0 [ 139.867325][ T1147] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 139.868928][ T1147] ? __pfx_process_one_work+0x10/0x10 [ 139.870491][ T1147] ? rcu_is_watching+0x12/0xc0 [ 139.871918][ T1147] ? assign_work+0x1a0/0x250 [ 139.873301][ T1147] worker_thread+0x6c8/0xf00 [ 139.874669][ T1147] ? __pfx_worker_thread+0x10/0x10 [ 139.876143][ T1147] kthread+0x2c1/0x3a0 [ 139.877365][ T1147] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.878862][ T1147] ? __pfx_kthread+0x10/0x10 [ 139.880193][ T1147] ret_from_fork+0x45/0x80 [ 139.881498][ T1147] ? __pfx_kthread+0x10/0x10 [ 139.883256][ T1147] ret_from_fork_asm+0x1a/0x30 [ 139.885207][ T1147] [ 139.887089][ T1147] Kernel Offset: disabled [ 139.888707][ T1147] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:36:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c1355 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc900060174b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=0000000000000031 R14=ffffffff851c12f0 R15=0000000000000000 RIP=ffffffff851c137f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1051e97f98 CR3=000000001cac2000 CR4=00352ef0 DR0=000000000000126c DR1=0000000000000003 DR2=0000000000000081 DR3=0000000000000002 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1051002a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1051002aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1051002aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1051002ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1051002b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1051002c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f105114b488 00007f105114b480 00007f105114b478 00007f105114b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1051cad100 00007f105114b440 00007f105114b458 00007f105114b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f105114b498 00007f105114b490 00007f105114b488 00007f105114b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000196ba5 RBX=0000000000000001 RCX=ffffffff8b2a27c9 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1efe0 RBP=ffffed1003ad1910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801d68c880 R14=ffffffff905f4b50 R15=0000000000000000 RIP=ffffffff8b2a3baf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2ffec5 CR3=00000000324f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556f6b3b65 000055556f6b1db0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ff494bd00 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556f6a4c0e 000055556f6a4370 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02a0031808000290 0308808008001003 0008000803000400 0403200400000300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080604011f840210 0002cc9e08000100 000a080606010daa 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03d202a280041080 c398820800010000 0a0806060114fe01 cc9608000100000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff ffdf0802a3800300 1000010000020806 0100000c08060601 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102a3800404a4e6 0800010000040806 06012cf000000000 0000000000307664 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6174616201ffffff ffffffffffdf0802 a380030010000100 000208060100000c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806060103d202a2 80041080c3988208 000100000a080606 0114fe01cc960800 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000a08060401 1f8402100002cc9e 08000100000a0806 06010daa40a88410 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000bbd3aed1 RBX=00000000dd7e3854 RCX=00000000dd7e3854 RDX=0000000094db655a RSI=0000000000000008 RDI=ffffffff96e554a8 RBP=ffffffff96e56bd8 RSP=ffffc9000393f3a0 R8 =0000000000000000 R9 =fffffbfff2dca798 R10=ffffffff96e53cc7 R11=0000000000000003 R12=ffffed1004b2415b R13=ffff888025920000 R14=0000000000000003 R15=ffff888025920b58 RIP=ffffffff817696cf RFL=00000883 [-OS---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555575009808 CR3=000000003233a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb340d9d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f283aa02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f283aa02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f283aa02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f283aa02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f283aa02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f283aa02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000116801 RBX=0000000000000003 RCX=ffffffff8b2a27c9 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1efe0 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f4b50 R15=0000000000000000 RIP=ffffffff8b2a3baf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564d1ad54908 CR3=000000004f218000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030766461746162 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2acb202a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2acb202aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2acb202aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2acb202ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2acb202b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2acb202c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 24b71d31ad0350d6 2d7d37e2b05b950e 06afb69740898fa5 d88fd557d4b137ce ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e1bde4715792cc2 31f547ad92dae692 f990177447d10004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 24b71d31ad0350d6 2d7d37e2b05b950e 06afb69740898fa5 d88fd557d4b137ce ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a61ee3592a8f367 08dfd0d2f4cd3412 28bfb0aa97224b0b c02d34b10837db07 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 301070287ecfe4f1 4b66502364180d98 5502e154ee8e7465 fec8b4cef0088adc ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d9434cf390ec172f d6197428e0f2305a 41ccb833cc1f7384 c3a52634e7672c9c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7690806d5c824742 68a657805888d2bf 0837b1fa45e87ab6 caf37e5506b871e9 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000