last executing test programs: 14.139879097s ago: executing program 1 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0xb}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x4084) 13.900020122s ago: executing program 1 (id=784): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000800)) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/diskstats\x00', 0x0, 0x0) (rerun: 64) read$watch_queue(r2, &(0x7f0000000140)=""/4096, 0x1000) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async, rerun: 64) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (rerun: 64) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) (async) close(r3) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) (async, rerun: 32) mmap(&(0x7f0000516000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async, rerun: 32) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010025bd7000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="380306004002020024001280110001006272696467655f736c617665000000000c00058008002a"], 0x44}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) (async, rerun: 64) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (rerun: 64) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_GET_XCRS(r11, 0x8188aea6, &(0x7f0000000280)) (async) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000040)='+-:\'(\x00', 0x6, 0x6) 13.829144502s ago: executing program 1 (id=787): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d52f90b9b500987f70e06d038e7ff7fc6e5539b324b298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801116bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb8744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea59796b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c46a348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5d2639a10477f1f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b942c1c7f12de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039e7799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2fe81ddb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec93b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fadeaa57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb10000000000000004d3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157fa2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416e4872aaad8c653f52cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f426596e1cd7655b904801784c78e2724f43f1e504f6a18a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f07b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f69f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf95a06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x0) 13.746251172s ago: executing program 1 (id=793): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}]}, 0x41}}, 0x2) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 13.67867741s ago: executing program 1 (id=795): add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) r0 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) (async) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f000001a240)={{r2}, "1e4e7fe070e989e0d342d980aeb4d46d8659c261f5a6c30a62665a7bf74f3bb92c9d87dde22fc7ae3c9f9a32ca554ef34b57e25e900f1efc9748231a3a324b25d615c6312c2ed260785ef468ae1617c2eea774fa3d6f73dd4c14546c8682d563431a8a573f3f7a1a0fca8125d75d7086d77d95f765b80a9f178600b5518faf8e6ab144e9f6a743beba1970bb955f50957fe644b2dbbb97a5dbd893ae58206e7aa898472d5b63ff9e837f5622a3cd1bb8cff7547b7c8d8414e40f11b6fd803e8f19b66ff0dd1a236a10515b1a350150df97fb88b63b9b352c92d17f350345891ed296952f5f752f6a5b1d15ead57e82750b309968dc441e811013e39207696b777e83defdcb03bcdb00eac97c921382629809b796078068c7341e7e290e4e25a9971c402a83ddc3a0cee0233ae1f11d76249ddbfca1b6826968492666ea2c76352a5398a47608db5b7e3da41506b62f13e983aa23afeb0a990c04614aad054988943e9721cb6a4c9d60307e97950c2d3d68d6dabf9868cdc5e9a3311b1c229ae36cf994d2fb15ea78fad3a22ee226a1494c082a666f48018624e4fed508e6fc27dad71647f3107a20160488285dd2f92a5012b9b28e7db202c5e23033bfc44ef9f88b90e53528bd7754305324477e2065759a1147d36abfd10cda65e89e8c965b0a6fc1186ba10fc6da528428211a63b41820aae57e78fab086f2b2174c7f56a85c84e1950e7ca4dc37d9e90ef23f859e51ca2937e76fd8fb78ae6119f6ab95cffd62ebca6573bb3a7aaf5ced27e737f85efb9d7edb2adbd60dbd957f151cd86810157480780939a0b2e38000c16f147d8f6ff8c7467b25e5697afbf608209b4e6169641b0d38ccdddbe58410ff8272d0e2569f8dc88f74af03bbab76e6d1c65adaf0b3bcee60160a6584d5fb706b16e53a4e5824e1191182c11eeddd612d4b775e133a569541a87ae4184dadec1fa8eacf4fd253b666eec7356a710fab33353c45da69f9f10897c1cc47080890304b25778e82f59e3fc7d4fd55e5a4b3f70c8b16b98307ee17287aea7c96fb48ee2116424f229cd30246eb9f6e01dd4890940b4d604d06497e177d30dd1455e5673726a0b0005e22939089ec498fe68e30ce9f54c1bb06520adae94cd4c9971b478b2cca851827669ba04e0cf9e46032b106098ff32bfcf30a9537f423a86afd9791e499aa7e50c5978a49b49676876a2ce792006d6dc3cb025725d032f78d098a82335719ff6b9b750000fc5a0e935e242c0aec2380236a8c2f428f27f58d670447eaf7b5ec547370c97e538beabf28e7a04039d3f3ce2dbc758fbf6533f394914135fb0936e9429fdab47e4563fab336a83c2966719dbd02044ef8b402071bd9709e121f990261bfce8064fd63252b2a13b81f0b607e0a88b8c2a8a083c7cb554159944020f34ff09d4d5ee9529fe14416fced589615ad4e235cef27975eaf41bae41e0612dc83fb80dd606010d41a336130b130963586df0ae4b93f6dd764af96433966088f7011dbe6c4b2bd6723b2a2969c8c9e84c976617ba09021067b96651e2a3ad9aa75eeba1b29a73bf4ea5440ee687a3f8ccc6973c1239ea468c7f0ca395d29a55433a4fed0d3314cee399f59809543e365df56b07ab05948367b961d8a0589a15c4d45633d0024a70aa93f6c58006c36645eac117c62d38cac2f3c6430b0319a394a53a2de0abb5c3b142fdfa39e5f2444220e7db69a0255637c25068a92c8f43a2c32b1070aa42ae9d8e1334a8ec6dc876378ca330439f8d49041104e06773042971c0a79e0957de5f517cda06cce97b634f86b8166ab973fbe8a2ee54cbfac4c7c9b1658c761364291e57effbf870004e51abc4c246869a0046659d8be342634754db4083a9ee421cf713aacfdbc6ef7a6998bc6635bae055545c8e4e5be2971860f6100e9a26d6a960fa1b27e784022288c6beaf83efd215c227ae19e68d861205df35f0ab3843398958f1ffa1830f75e0d8d4ba49dc86735c5cc2405ae6a4a007fa4bc7395b97ae881a0ac7e30869566e37c5760a88fa5a23b2405037fbdfbfbe8f6c513d85bf7d817cf659d1df5653ba1787210014966c6966236bc9ecbbfb9220f7a11a996b487a82ff2ad13eb5ec65b75412eff3192ed20cc2b007a1a4ff72df71dbfeff921bb30814921f9465eff0daccadf14891176374cc8a9a3b8d9560face9c7c9a64a7566c6584cbd5d6a4f80ea0e0cc968511b0183911f588a61c4b49b214a878d94cb181e78e41fb231bc2e105ca9bd66af7710cacfed1eafbde843e6eaafb5fa90496b41b63d7bd3d6c0aa6c502880011dac51f4c0b99154c41da869cb4b09121855bd522b12349e5e412a41ac9f788be9e22fd9c88602a8a10839f452fe6204ec19d75b68b1a33334c062fa454d949c35114d9fcae658dbfb8321ffa6ff9b9d79f9e2298c80420c89656faa1a63b74022e7a3502c8f427128093a714ca45df082052016f87aa004ab16699cbfd359e0114ba433357c4e6f39a329987566d60adbd25a79cd9836df79fc09a959f14c9b295d2060317bbc3390b1a1ebb6853b4f9e4055dbeb28cde7dbe8d3c647ec1d2c22707cf1582040f78a9c0187f4b337b340334f4c1257fbe0edda8ee79f5b435c1dd5dc6624f014624a4dc7a7f0f226a25cc744b0379e85d5e4b553c44d9646f4b81a78518d76e9c84f71d70233b15ec393022b51b347b9963adfdaf58e34b4aa177eae961160386914acf6337c4b839a5a5b1ddbd785f4fa4e3a94ff57adac675931e2bc4126da15ba432163e4e7baff3244b3001e43277a0387ee0bf7e4fdbdfa9b73c4c8f559a42ce758cfb5cde8ebd9b876c24a45bf3acf36978516e96cc52548d1441ca7e5ea042abb250f558dd4c892eb51b26602e3d51c2081f91ef57bac17f65f7c4c5531db61f2cebc324d4373402c86fe4f70216f312a14fcb8cea11635a38c988af48da0fdf74dd8f083d1b4cba06f9e6b0b9fbee61142b6f3e4caa061ff7b4d8d724ad81bd1aca78f5564174e5725871e37736157f99186057c381994130d59da575f2bf4623d8c173c916a1fe0d09e4bd35318d05be50ffd19b0df9586bc700cd21b5aee7afc3f16c248752f9c277a3113692543bd52dc39b233116b26ecc9f635b2e292217faf0ca73db1c57298f9bdfab0d564af728b65e8d8ab843973bab098ec98acf1ba5700f71512b8ee9fd6fd94b8e55729046e2e59d2ce08923e494ded6042092ae98478ee58dffca339f6c0da19ab67250173a4f1c2e51631b6370a41fe66f61bc68095bb6e748f4183e0be58df964a0c0c327473702b1691581541c0982ba9a377b859a951a6364b9b06388e9fa30a9ab72131d0941d59ffd5ebedda4542e77f87a98dfec09cfbdacd13836ceb46e1c42b9df42a7ec138ae89a04352c7250342b016c1541a796e6fff3527c13247ffbba92aa9445f01e61139f0de435df01958509947b05ae32fe198146cecc0f5e9d61a578372df1e5196c1188f935db7edeaad4403dc0efa561b5d8b4ecb196736576e15f50160572917000ee3854a22ac67e324e9287cdad6d5ecbb7446d2cb73a17fef0cab0f93c14eff000e66a965db8aa54ff2c8b32debe46ac33d473c9bd708819731df478ac1b9e560d0d5945cccca0ae92da32406981750fa5f844485550213ab7d52b60ae85309783a6384c6ee19c1da1b5f4d29a1d9dc9ed57b90cfc32fb961251ece99777b6842eb2392ca5e30a90cae06982609abb13beed1b062636878a69e08aad7935b561968b5484d39b0815eeb389ebfeebeadd81165c1f94f183e69e5636a4f1cfb078929b4622f3f4d939aad7bf82ba155afa4fc7d0143025c0f437d1151bbe3aa2f2686b7c4dbc7957ea9ace78a2d76771de04f02f5b4b17e71b3c13cf6a30e637537e2adf60eca73e38552876c8038f9b54ce1369d1a7e9276e13e9a0711619346f88d90a1c1466fe195b155203f30e8c83113788cec222e67de0125da1e53d8ae60f8ef29cebd57b88e3e6e900dfd59b2a25b81abf90c3e556fd2064fa8400bd100924b1df177105a14a393646ef98729060df248dbeff388ef33ee2d56bbe022298b36be99f9acb3314f7efdcb3db171281d04cef9ef5fa34efe70ebaf58c0e2bb7cec38a77d2ae90d610d7d3918163b1571474c925945e3f6d15b63b45047d4ee99aa916b9dc7d098123609a19bb8014017c9576cc9f66ec46a4298522a76419d7f42c0e9c289059c413dae4c96b0bdb29372fea5a0f23372d42ba9c2dcff1861321727f9f761953307dbb564120d999cf814f5f6c9749e8cc9b288529171ea938f3f27b772ce2cbe91987e36f2faa7b2e44d858a9761c66407917372d5f20157c4702f79d7d0736abb101f303ab063fc2c125760252c6dae909fc6ba24fd679527a5a45860f0633f984ee1257e2cc6464765179093f60066bfb32725bcf887386cb657246694437ab8e61b193b26a46070c7d196a27b43e5119708be84221241feb2619bc4fa48d1f1227784c6a9ba4240c1728daa91d667601817658d228f7578f60d3aac1b20fe561f84058e2de5a96a2979549a5628f6b6e0cf811c03fbed63aa93b69c73031ccb0368a1fddcb22f6e2fa424513b2fa3a4ec1541a7ecca2668dbbf375621501eab72ea978189d829c7f311771136cb7b96722bd2601997c3515a4434435c0e4b07c2dd29a84116e711918329138112a9cfe35461e121202e69a9284d20160b734c91bfeaeaf3d2505aba24e0f8488334a6b2b32e94afe845aa232021d408b1bf35fc1fffb4d94a49ccc5c022ebd7d1a1d9a05f42b8c42554d6e9265dff748cb1bce0f2570e852a9ab0f9a37a53cd73459f92056ff2e9879d509a958eed5a098253a2a4051836c46dc3aaab6eda19691bd741cbb79097a94c8d5eb2e99e04a579fac48611edb6289c68c1d2fd2e350a53ec847540e5b15670df28c272014e887775b4ab0d328d2c19f132a4831640c1018db6b2c161e0982f1ca6d7224e3b4991b121262d58e3023c6eb46e197d3918227a0e273bde557871d4595fae3ee1cedeb19f13c68b615aae8ca8c70e2bb121798ea01508a0e9de9629d27a46b3181d54e77e30ea129fd4b3a0674fc83f5388df9ef5549ce90355056882b31c428e7b8b105c16c63c2d4ce05aa019ea9572957b71bd4eb0709f6dd989f37c32f11795633a57d7513c60760aa25b74bebfc6d994433052c8490fddee0be0727a4ac6382f55bfc3402055e6b3afa7fbbbbb5a0899221a5cc90380ccec1267020c5e3d590269b86649e457ddf1b1a4ee45e09e6b652d21ea430975ef9553c0e6389171afc33a089eb0668911c738b1be64ee4533990f7d73302f44cf2bcb53cd687d5f11b324053b796b1c22d9f18e3481b325a2a9aac986b34fe7597a327cef1b349d376f41ff13b568c3ffe39a4dadf90466d885bf812030ca864ebe591f5f64812eceec7df74212e452184dc5cdf6cb82e3bcc241fcbfd8d7ddc53c8e609ea5ea90723351898dd526c22d1df879f9c4520e0911fd3b2f76e0d3f09d3b9ed45d46a4be9c3e4fe7f7f287867f6a0d1c90b404c165468eb9b8735c8ee0b3cba994d4ca392626021a3dbb1c6037a930c16bc2cdfbdfe109ee57f0089b91d6d0c9cfc36d1a3d96411911a24dca98b2d28aeee32fde33a2c8fa1f0e09abb3dad802eeba6d5028451f79f8c834109f8ef63a390604b64f563f789099ed266162ce40acbef7c8873bb3838b66f4b292d577c1a882e77ae9f4efbccb101568af37a378d386599e9c"}) keyctl$unlink(0x9, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000080)={'syz', 0x3}, r0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x418a4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x3c}}, 0x0) 13.123121625s ago: executing program 1 (id=803): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x4) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\\x00#\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x42) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='vfat\x00', 0x81, &(0x7f0000000100)='nfs\x00') 13.122927745s ago: executing program 32 (id=803): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x4) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\\x00#\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x42) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='vfat\x00', 0x81, &(0x7f0000000100)='nfs\x00') 3.463574995s ago: executing program 0 (id=937): bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb60}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2040000}, 0x40488c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02a53037b7af3c4500000004000000088b00000100000080000000e4a9b9d5aa9dda", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getgroups(0x1, &(0x7f0000000200)=[0xee01]) r5 = getgid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000400)=[r3, 0xee01, r4, r5, r6]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 3.388936733s ago: executing program 0 (id=939): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_int(r0, &(0x7f0000000440)=0xffffffff, 0x12) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x6, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf8136dc932d75483}, @broadcast, @random="f965542cea78", @random="c55e332101aa", @broadcast]}) 3.388067159s ago: executing program 0 (id=941): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f4"], 0x44}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x50202, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'dvmrp1\x00', @broadcast}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 3.338376882s ago: executing program 0 (id=943): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r2 = socket$inet6(0xa, 0x3, 0x87) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000", @ANYRES16=r6, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4000080}, 0x60000) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@private0, 0x4e23, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@private0, 0x4e23, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1}}, 0xe8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x23, 0x5, 0x0) (async) r10 = socket$kcm(0x23, 0x5, 0x0) sendmsg(r10, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=ANY=[], 0x11c8}, 0x408c0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000840)={'sit0\x00', r12, 0x0, 0x8000, 0x28, 0x10001, {{0xb, 0x4, 0x2, 0x9, 0x2c, 0x67, 0x0, 0x5, 0x29, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0xb, 0xa9, [@private=0xa010102, @multicast1]}, @rr={0x7, 0xb, 0xd5, [@local, @rand_addr=0x64010101]}]}}}}}) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname(r13, 0x0, &(0x7f0000000240)) (async) getsockname(r13, 0x0, &(0x7f0000000240)) r14 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMREADAUDIO(r14, 0x5392, &(0x7f0000000040)={@lba=0x10000, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x9], [0x0, 0x0, 0x4]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) 1.685146919s ago: executing program 4 (id=967): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (async) r2 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\x01\x00\x00\x00\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xbaL\xd3#\x87|J\xb9\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\x00\x00\x00\x00\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9Z\xd9G\xb6K[\x94\xfd^\xdd\x04\xa1\x83U\x900}!\x8b\x0e,M\xc0D\x15\x02\xde\xda', 0x0) fallocate(r2, 0x0, 0x0, 0x400001) (async) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x100000001}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c1300001a00010000000000000000001c1400000004000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 1.618471719s ago: executing program 2 (id=969): openat$cdrom(0xffffffffffffff9c, &(0x7f00000031c0), 0xe00, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x44880) 1.538912389s ago: executing program 2 (id=970): r0 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x1, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, 0x0, 0x32}, 0x20) futex(0x0, 0x18b, 0x0, 0x0, &(0x7f0000000100), 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000740)={r4, 0x3ff}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000007c0)={r5, 0xf0d8}, &(0x7f0000000800)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x0) 1.465001235s ago: executing program 4 (id=971): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7d73}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x4005000) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x412200, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x1, r2, 0x0, &(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x8}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f00000002c0)={0x115, 0x3, 0x3193, 0x8001, "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"}) (async) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000004c0)={0x20, 0x1, &(0x7f0000000400)="6f617df6fafaba44fe9f80cc025e771c2f08afc57c2db2c1bea4c6861759111c8a94bea3dce414583f6c79e6bca2bce8d971c67b92fae3ee68d04df884efee07c7edd662f72fb49ca8f8b4037dad3de4850b8cdbc488d9c1ce95fe23b5a3df8a207ab5ed2437f8a024481fcc5eeb6f6d472bdb2b2d7a3fbbc2be0df9dda43f831a897a53fdbdfd13b566b6ffa694eb5939d128a40ff605719beab989c6048f4b35205113f04b873373f29868d676049af9bbf512a7ccf65e233b5aa08a6dd102", 0x4, 0x4}) write$cgroup_int(r0, &(0x7f0000000500)=0x9, 0x12) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000540)={{0xa, 0x7}, 0x100, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) getsockopt$MRT6(r3, 0x29, 0xcf, &(0x7f00000006c0), &(0x7f0000000700)=0x4) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000740)=0x6) (async) r4 = openat$cgroup_int(r0, &(0x7f0000000780)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000007c0)=0x9, 0x12) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000800)={0x7}) write$cgroup_int(r0, &(0x7f0000000840)=0xb, 0x12) (async) sendmsg$nl_route(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@ipv6_newrule={0x74, 0x20, 0x4, 0x70bd28, 0x25dfdbfb, {0xa, 0x20, 0x0, 0x1, 0xf7, 0x0, 0x0, 0x0, 0x10002}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}}, @FRA_SRC={0x14, 0x2, @local}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x7fffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0xe0e709e7f3c64d92) r5 = syz_open_dev$evdev(&(0x7f00000009c0), 0x3, 0x400000) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000a00)=""/114) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/locks\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x20004000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001740)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f0000000c80)={0xa50, r7, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x624, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x10}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x298, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xac67, 0xf, 0x6, 0x3, 0xf801, 0x36ca, 0x2]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x4, 0x3, 0x9, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1cac, 0xc, 0x8001, 0x8, 0x600, 0x3, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x60, 0x92bb, 0x4, 0x3, 0xfeff, 0xfff8, 0x9, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x3}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x1e}, {0x5, 0x2}, {0x3, 0x4}, {0x4, 0x6}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x8}, {0x6, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {}, {0x5, 0x7}, {0x6, 0x3}, {0x5, 0x2}, {0x7, 0x7}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x7}, {0x4, 0x6}, {0x4, 0x8}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x2}, {0x1, 0xa}, {0x0, 0x8}, {0x7, 0x1}, {0x2}, {0x7, 0x9}, {0x7, 0x5}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x1}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0x8}, {0x3, 0x8}, {0x5, 0x3}, {0x5, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x6, 0x7}, {0x5, 0x8}, {0x4, 0x8}, {0x7}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0x8}, {0x1, 0xa}, {0x4, 0x3}, {0x4, 0x7}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0xa}, {0x4, 0x1}, {0x1}, {0x0, 0x8}, {0x7, 0x4}, {0x4, 0x9}, {0x3, 0x4}, {0x3}, {0x7, 0x2}, {0x7, 0x5}, {0x3, 0x3}, {0x1, 0x2}, {0x4, 0x9}, {0x1, 0x4}, {0x6, 0xa}, {0x5, 0x6}, {0x1, 0x2}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x2}, {0x5, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0xd, 0x168d9a728d5cdd23, 0xc, 0x5, 0x48, 0x16, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x4, 0x7}, {0x5, 0x1}, {0x3, 0x3}, {0x3, 0x6}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x3, 0x4}, {0x1, 0x1}, {0x6, 0x3}, {0x4, 0x4}, {0x2, 0x8}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0xa}, {0x4, 0x7}, {0x4}, {0x0, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x18, 0x1, 0x0, 0x4, 0xc, 0x2, 0xb, 0x3, 0x1, 0x36, 0x18]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0xa}, {0x4, 0x2}, {0x4, 0xa}, {0x5, 0x1}, {0x3, 0x8}, {0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x6, 0x8}, {0x5, 0x6}, {0x6, 0x3}, {0x4, 0x6}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x8}, {0x5, 0x4}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {0x1, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x4, 0xa}, {0x2}, {0x4, 0x6}, {0x0, 0xa}, {0x4, 0x7}, {0x3}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x8}, {0x5, 0x1}, {0x7}, {0x5, 0xa}, {0x0, 0x2}, {0x3, 0x8}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0xa}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x4}, {0x5, 0x8}, {0x1, 0x9}, {0x6, 0xa}, {0x7, 0x2}, {0x1, 0x1}, {0x3, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0xfff8, 0x2, 0x2, 0x4, 0x8]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x18, 0x6, 0x24, 0x6, 0x18, 0x4, 0x12, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x8}, {0x6, 0x8}, {0x7}, {0x5, 0x9}, {}, {0x6, 0x8}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x7}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x2}, {0x4, 0x3}, {0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x2, 0x7}, {0x5, 0x9}, {0x7}]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x30, 0x1b, 0x30, 0x16, 0x1b, 0x16, 0x3, 0x5, 0x16, 0x18, 0x6c, 0x18, 0x4, 0x60, 0x30, 0x1, 0x24, 0x988af00aedc906fe, 0x3, 0x36, 0x9, 0x5, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0x3, 0x54, 0x3, 0x24, 0x12, 0x2, 0x5, 0xb, 0x9, 0x60, 0x30, 0x1b]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x2, 0xa}, {0x2, 0xa}, {0x2, 0x4}, {0x2, 0x6}, {0x6, 0x8}, {0x5}, {0x7}, {0x1, 0x1}, {0x6}, {0x0, 0x3}, {0x3, 0x6}, {0x4}, {0x6, 0x9}, {0x3, 0x9}, {0x3, 0x5}, {0x7}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x5}, {0x0, 0x8}, {0x4, 0x7}, {0x7}, {0x0, 0x6}, {0x5, 0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x2}, {0x3, 0xa}, {0x2, 0x9}, {0x1, 0x8}, {0x3, 0x1d}, {0x0, 0x6}, {0x1, 0x5}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0x3}, {0x6, 0x4}, {0x3, 0x6}, {0x4, 0x8}, {0x6, 0x7}, {0x1, 0x8}, {0x4, 0x7}, {0x1, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x1, 0x2}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x9}, {0x4, 0x5}, {0x3}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x6, 0x5}, {0x7, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe7f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x18, 0x48, 0x5, 0x60, 0x60, 0x65, 0x60, 0x0, 0x9, 0x32, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4bb, 0x1, 0xf3f, 0x3, 0x2, 0x0, 0x6b]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x6}, {0x4}, {0x3, 0x7}, {0x7, 0x9}, {0x3, 0x1}, {0x3, 0x3}, {0x2, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xad}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x228, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0x30, 0x48, 0x2, 0x60, 0x9, 0xb, 0xb, 0x0, 0x48, 0x6c, 0x24]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x3, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfa, 0x1, 0x1, 0xb2, 0x3, 0x2, 0x8, 0x488]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x36, 0x36, 0x60, 0x48, 0x30, 0x24, 0xb, 0x36, 0x12, 0x1, 0xc, 0xc, 0x16, 0x6, 0x6c]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x6}, {0x6, 0x8}, {0x7, 0x6}, {0x3, 0x5}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0xc}, {0x2, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x4}, {0x7, 0x4}, {0x2, 0x4}, {0x3}, {0x4, 0x5}, {0x0, 0x1}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0x6}, {0x3, 0x7}, {0x1, 0x9}, {0x6, 0x9}, {0x6, 0x6}, {0x7, 0x5}, {0x5, 0x1}, {0x0, 0x6}, {0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x2}, {0x2}, {0x0, 0x4}, {}, {0x5, 0x5}, {0x7, 0x8}, {0x6, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x4}, {0x7, 0x2}, {0x3, 0x8}, {0x3, 0x7}, {0x2, 0xa}, {0x2}, {0x5, 0x2}, {0x7, 0x1}, {0x5, 0x5}, {0x4, 0x11}, {0x5, 0x6}, {0x7, 0x2}, {0x6}, {0x5, 0x3}, {0x7, 0x9}, {0x3}, {0x2, 0x9}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7fff, 0x0, 0x3, 0x0, 0x2, 0x91, 0x3]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x8339, 0xf, 0x0, 0x6, 0x5, 0x3]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x3}, {0x6, 0x6}, {0x0, 0x8}, {0x7}, {0x5, 0x4}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0x7}, {0x3, 0x8}, {}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x7}, {0x4}, {0x4, 0x3}, {0x5, 0xa}, {0x0, 0xa}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x5}, {0x4}, {0x6, 0x3}, {0x5, 0x4}, {0x3, 0x9}, {0x7, 0x4}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xb00, 0xda, 0x7f, 0x6, 0x7ff, 0x975, 0x10]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x4}, {}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x4}, {}, {0x4, 0x4}, {0x0, 0x7}, {0x4, 0x8}, {0x5, 0x6}, {0x3, 0x5}, {0x4, 0x1}, {0x1, 0x7}, {0x7}, {0x2, 0x7}, {0x1, 0x1}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9005, 0x101, 0x2, 0x7, 0xf3, 0x2, 0x1, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x419, 0x2, 0x729, 0x1, 0x401, 0x401, 0x4]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0xc, 0x6c, 0x1, 0x24, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x6, 0x0, 0xdbea, 0x65, 0x174d, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x2}, {0x5, 0x3}, {0x5}, {0x5, 0xa}, {0x4, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0xa}, {0x1, 0x2}, {}, {0x2, 0xa}, {0x2, 0xa}, {0x3, 0xa}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x3}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x1}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x5}, {0x4, 0x5}, {0x1, 0x7}, {0x5, 0x2}, {0x4, 0x7}, {}, {0x5, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x1}, {0x3, 0x4}, {0x2, 0x9}, {0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x2, 0x6}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x8}, {0x3, 0xa}, {0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x6, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x5, 0x2}, {0x7, 0x1}, {0x1}, {0x5, 0x8}, {0x4, 0x6}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x3}, {0x3, 0x7}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0x5}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x334, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6c}]}, {0x2e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0x6c, 0x16, 0x5, 0x12, 0x9, 0x12, 0x16, 0xc, 0x4, 0x60, 0xc, 0xb, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x5}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0x2}, {0x2}, {0x3}, {0x0, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x3, 0x7}, {0x3, 0x8}, {0x4, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3ff, 0x4, 0x79, 0x4, 0x3b, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x8}, {0x6, 0x2}, {0x4}, {0x3, 0x3}, {0x4, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x7}]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0xb, 0x0, 0x3, 0x3, 0x0, 0xa1, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x3, 0xfc01, 0x87, 0x2, 0x9, 0x6e]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff, 0xf884, 0x8b2e, 0x7, 0x4, 0x710, 0x9]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x24, 0xb, 0x36, 0x0, 0x12, 0x16, 0x6c, 0x18, 0x1, 0x16, 0xf, 0x24, 0x6, 0x24, 0xc, 0xe, 0x18, 0x6c, 0x48, 0x60, 0x16, 0x6c, 0x30, 0xc, 0x16, 0xc, 0xc, 0x6c, 0xb, 0x2, 0x5]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x3}, {0x5, 0x8}, {0x3, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x4, 0x8}, {0x7, 0x2}, {0x0, 0x1}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x4, 0xa}, {0x2, 0x9}, {0x3, 0x6}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {}, {0x6, 0x5}, {0x5, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x7}, {0x3, 0x9}, {0x5, 0x9}, {0x0, 0x9}, {0x1, 0x4}, {0x3, 0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x3}, {0x4, 0x7}, {0x1, 0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0xa}, {0x4, 0x7}, {0x3, 0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x8}, {0x6, 0x1}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0x1}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {}, {0x4, 0xa}, {0x1, 0x9}, {0x7}, {0x6, 0x8}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x6}, {0x2}, {0x1, 0x8}, {0x2, 0x5}, {}, {0x2, 0x5}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x7}, {0x4, 0x9}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1}, {0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0x6}, {0x2, 0x8}, {0x6, 0x3}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x6, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x5, 0x2}, {0x7}, {0x2, 0x8}, {0x7, 0x8}, {0x3, 0x3}, {0x5, 0xc}, {0x2, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0x3, 0x7}, {0x5}, {0x4, 0x2}]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7ff, 0xfde, 0x0, 0x1, 0x9b64, 0x100, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x6, 0xfff, 0x344a, 0x3, 0x400, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf91, 0x800, 0x1, 0x5eab, 0x4, 0x7, 0x3, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x7}, {0x1, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x6, 0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x30, 0x3, 0x1, 0xc, 0xeb, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x7, 0x5, 0xfffd, 0x1, 0x0, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x7, 0x1000, 0xd0b, 0x0, 0x1, 0xff6a, 0x1]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x9, 0x6c, 0x1b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x1]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x14, 0x1, 0x4, 0x5, 0xe, 0x44, 0x8cf, 0x8]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0x4}, {0x0, 0x1}, {0x2, 0xa}, {0x1, 0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x6}, {0x7, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x6, 0x0, 0x31, 0xad, 0x101, 0x7fff, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x68}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc2a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe}]}]}, @NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0xa50}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) (async) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000017c0), r3) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001800)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000001e40)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001840)={0x5b4, r9, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x544, 0x8, 0x0, 0x1, [{0x540, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x50c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5}}]}, {0x154, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}]}]}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x404}, 0x1) close_range(0xffffffffffffffff, r5, 0x2) 1.46210689s ago: executing program 4 (id=972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x141002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000a00)=0x40000) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x2) socket$unix(0x1, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000003ee50100fc0000010000000400000014000180100010800c00128012ccbd379ce6cd69d6581bb50900be4d061fe80c3fba6f840c000200ddffffff000021f2"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.289226616s ago: executing program 4 (id=973): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0xfffffffc, 0x1, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb936aa680b652a88ccf56a1b9ca5386103a5ccbe47b7b9aa6d8d7fca2ba00000000b97800001022f987617c318545790d2200", 0x12}, 0x60) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="3d5ff4dbfafa28b24fe5501c6dfb21f27bbc9e82d3bf3c5232ad3ef6cfe557709a91a2765bd97c143732a3af216772bc66ec01c503af283cb49dc4664e8e1e988cc15cd8462a13a6", 0x48}], 0x1}}, {{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x1001, @link_local, 'rose0\x00'}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000380)="fd7d6e346455937b55bd18cc11ceebeb0d39e933e94b2f919bf15884f387a10632da04d6135051dfe747736cafdadc03333aefcf092ddc0f67033f11e837f59376b4423ba24f846121cb1e3c37d656e6d6b22561b30db051a05f8bc4c80182c2152c84a6cc84a3f1d1e35c7ae2e940f53005ed9b12a3bbafe2", 0x79}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000000a40)="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", 0x10a}, {&(0x7f00000008c0)="17cd9ac02cd7443eb61fd48cbc75933316e72b8bbb02e6f58e29f12c299fbdcfef7a2b7ff99d80424774077a5dba2db78306e1441a0deec2d05506151cb007cd3c2ab85450b2a2a3e237e741fa62e9b1f02b0dfdf246f4f51f76bbd2b4097f39bbe963b266986199945af3382853b21e12d254bcf5d64bf0bef688d511306fd766d1bdfc4a68b081921f766bc8fc1356956357", 0x93}], 0x4, &(0x7f0000000980)=[{0x40, 0x112, 0xff, "90bf7d95fb19d3052993a8917f241e5980a04ca8addaa3fa84b4d8f3d73399e3a8eebb36ce7416bc88ee06dcd5b447"}, {0x80, 0x115, 0xdb0, "8dc8f52abfffa89c8423215a624ab7500dddb10bfb05050e02fa26f536a8ce4ab7c0607dea0ec81ea544d7728ba387f587f8385d81525cd8ab808f4f872f67c19aa39e99156246dd4e9a7f03f2ff5c7b3140946e00c5160e21df4890f5759fa73eb8453c291bab98051862d8"}], 0xc0}}], 0x2, 0x8014) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000340), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000140), 0x0}, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000000280)={@remote}, &(0x7f00000004c0)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d80)={0x0, 0x5, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x6, 0x7, 0x607, 0x49a, 0x1000, r7, 0x9d2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x80, 0x0, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) recvmmsg$unix(r11, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000022c0)="f14889c2ad234ad6f0a71da7", 0xc}, {&(0x7f0000000400)="5a9d44d659d597287904819c593f6409cd53318f71b61d82111445c97ef5b404dd71e51485c8d64133e239ab645bac2f39340afc9b0033559da48b8f08a576a46d66d5051d67ec25afac936968249cbb26177c4ec590963f1a0207efba2f972e78c57262584135be55af2a0900060dac506863ac9eb4f2ed973775579fc4e5f2cce2c581378720fe0247be86d274c464f77117f9", 0x94}, {&(0x7f0000000500)="6a34969fa01bc806b34ee3ea98e8f2c3e46e5e06452ed10caf9ba32d46dfd654c6df744d50bf9d44433e827a10487911d5f54227a75fb08da44340758aff63484eabf2958117806b0028e27143a2d512be350b24f5a5ac60ab32d6d3cdb07f013e5f54dce9237ade5736902065abd30cf8c3fdd02d7856aeb0420858b7a84961ba957228a10d80311870b74c446076b472aa69db4660fa4ad60c83dc468c00f16eb88a5ba026326a44875cfb5dfd8080b7ded8f2f6b6ef26f05714964c3bbc759533ecb39a351128667822f4ce1cb1", 0xcf}, {&(0x7f0000000600)="919817bfec4fe553fb4c40ac696d5d458645008e4cc5c4fc31cf99eaa6da28b67227fb819fea64978cd72c15397ede6279149d6c3ee87f63bfc3b4c30eb729c25dd916d889aa4370e2d15cc0f1e47109a0be9a9215c9896c6590fd82122b4e18d159cd99b152eb69fcdfd1a4a273d69ac3819dcc56f706935f44fd80298ff4e06c3a463cc4560539afbda2b65c88a82ee06546eae7cb307389152b873a304c1dbd692a6c11d71b12dc6c2de3339e523f3fe164081b8998450a7d52d2b571285613fec5a3598fdd484e6d160fb61eb263f290f07abd4eb3bb890aad783dc660e3af745d76e0c831aba23a5f20ab2118d3eb8087505434fc492c", 0xf9}, {&(0x7f0000002300)="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", 0x921}], 0x5}, 0x20000044) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) socket$nl_route(0x10, 0x3, 0x0) 670.027223ms ago: executing program 2 (id=975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 669.531575ms ago: executing program 2 (id=976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000500)='io_uring_defer\x00', r0, 0x0, 0x10000}, 0x18) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r4) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') (async) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0xa2]}, 0x8, 0x100800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syncfs(r6) (async) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f00000000c0)=0x80000001) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = syz_io_uring_setup(0x5bf, &(0x7f0000000440)={0x0, 0x7aca, 0x400, 0x1, 0x294}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000c40)) (async) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x4000, @fd=r7, 0x9002, 0x0, 0x0, 0x4, 0x1, {0x3}}) (async) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0x2000) 529.173078ms ago: executing program 2 (id=977): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x14a, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 523.349034ms ago: executing program 0 (id=978): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x84, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x85}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9c, 0x1000}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_MASTER={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x600}, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r1 = syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 522.84903ms ago: executing program 2 (id=979): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x7, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x100039, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffa, 0x4, 0xba81, 0x4, 0x3, 0x4, 0xf257, 0x80, 0xb, 0x300000, 0x7, 0x11, 0x4623f, 0x6, 0x8, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xd4b8, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x20de, 0x8, 0x9, 0x1, 0x199f, 0xa, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0xffffffff, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x2, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x5, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0xfffff001, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x81, 0xfffffffe, 0x1, 0xffffff, 0x10, 0xfffffff9, 0xfffffffa, 0x9, 0x1, 0xffffdfff, 0x6, 0x5, 0x0, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0xffffffff], [0x401, 0x2, 0x89a3, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x800, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfefffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x3, 0x9, 0x8001, 0x47, 0x4000000, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x8, 0x8, 0xffff, 0x0, 0x3ff, 0x3, 0x6, 0x6, 0x2005, 0x9, 0x4, 0x5575, 0x9, 0x7, 0x6, 0xd9, 0x5, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4005, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f493f9, 0xfffffff8, 0x20008, 0x8a8, 0x4, 0x800, 0x409, 0x7, 0x4, 0x4, 0xc, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x401, 0x1, 0xe7a, 0x5, 0x4edf, 0xfffffffd, 0xa, 0x8, 0x2, 0xf, 0x10, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) removexattr(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000030c0)}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a004000"], 0xb8}, 0x1, 0x0, 0x0, 0x45532d211f602d4f}, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) 429.176838ms ago: executing program 0 (id=980): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c000004000000140001"], 0x2c}}, 0x8004) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000840)={0x3, 0x1, &(0x7f00000005c0)=""/168, &(0x7f0000000680)=""/251, &(0x7f0000000780)=""/183, 0x1005}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000440)="5cdd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000440)="5cdd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) exit(0x0) r4 = syz_io_uring_setup(0x43b6, &(0x7f0000000380)={0x0, 0x15c7, 0x4, 0x0, 0x37e}, &(0x7f0000000500), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f, 0x0, r4}, &(0x7f00000000c0), &(0x7f0000000080)) (async) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000300)=0x7, 0x0, 0x4) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r1) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r9, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x16}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2a, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0) io_uring_enter(r6, 0x47bc, 0x0, 0x6, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000340)={0x1, 0x4, 0x7ff, 0xba7, 0x401}) (async) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000340)={0x1, 0x4, 0x7ff, 0xba7, 0x401}) write$cgroup_subtree(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="2d626c6b696f202d626c6b696f302d68756765746c62200e64657669636573202d68756765746c62202b667265697a766963657320c0f7e76379deca349b3ad5d2622930ad94ce6647334f19c258"], 0x42) openat$iommufd(0xffffffffffffff9c, &(0x7f00000078c0), 0x80, 0x0) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000078c0), 0x80, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r10, 0x3b87, &(0x7f0000007900)={0x18, 0x0, 0x1, 0x0, 0x0, 0x2}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r10, 0x3b87, &(0x7f0000007900)={0x18, 0x0, 0x1, 0x0, 0x0, 0x2}) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x600, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES64=r10, @ANYRESDEC=r4, @ANYRESDEC=r4, @ANYRES8=r5], 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0x2000c840) 428.535536ms ago: executing program 4 (id=981): openat$cdrom(0xffffffffffffff9c, &(0x7f00000031c0), 0xe00, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x44880) 359.882807ms ago: executing program 4 (id=982): r0 = socket(0x15, 0x5, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x10, 0x0) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xffff, 0x1, 0x7fffffff, 0x9, 0xa}) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x80, {[@window={0x3, 0x3, 0xda}]}}}}}}}}, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000) 359.581087ms ago: executing program 3 (id=983): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x30100b, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x133) lseek(r0, 0x3, 0x1) 345.207976ms ago: executing program 3 (id=984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 266.534751ms ago: executing program 3 (id=985): mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, 0xffffffffffffffff, 0x19ef4000) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x410a00, 0x0) socket$rds(0x15, 0x5, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) (rerun: 64) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000340)={0x2a, 0x2}) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 64) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r3, &(0x7f0000006340)={0x2020}, 0x2020) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) (async, rerun: 32) read$FUSE(r4, &(0x7f0000008380)={0x2020}, 0x2020) (rerun: 32) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000380)) (async) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) (async, rerun: 32) openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) (async) sched_setscheduler(0x0, 0x1, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) socket(0xa, 0x3, 0x3a) (async) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r10, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, 0x3}, 0x28) (async, rerun: 64) ioctl$SYNC_IOC_FILE_INFO(r11, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={r6, 0x2c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x400, @mcast2, 0xbef}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f00000001c0)=0x10) 188.527738ms ago: executing program 3 (id=986): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x50) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x89, @local, 0x0, 0x0, 'rr\x00', 0x29, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x3a, 0x0, 0x7f}, 0x2c) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 89.797127ms ago: executing program 3 (id=987): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x2, 0x80000) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f00000000c0)) r2 = socket(0x11, 0x80a, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0xfffffffd, 0x80000001, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x4, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) ioctl(r2, 0x5, &(0x7f0000001040)="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") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080007003b070000050006"], 0x4c}}, 0x0) 0s ago: executing program 3 (id=988): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161042, 0x91) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0x0, 0x1}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000140)=ANY=[], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',posixacl']) kernel console output (not intermixed with test programs): :50:50:50:50 [ 66.153311][ T5975] veth0_vlan: entered promiscuous mode [ 66.154301][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.170664][ T5985] veth0_macvtap: entered promiscuous mode [ 66.183653][ T63] Bluetooth: hci2: command tx timeout [ 66.191096][ T5985] veth1_macvtap: entered promiscuous mode [ 66.198769][ T5975] veth1_vlan: entered promiscuous mode [ 66.205068][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.208751][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.217344][ T5979] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.236051][ T5985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.247803][ T5985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.252441][ T63] Bluetooth: hci3: command tx timeout [ 66.252901][ T5981] Bluetooth: hci0: command tx timeout [ 66.252918][ T5991] Bluetooth: hci1: command tx timeout [ 66.294344][ T5975] veth0_macvtap: entered promiscuous mode [ 66.298512][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.310299][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.323450][ T5975] veth1_macvtap: entered promiscuous mode [ 66.325801][ T6069] Bluetooth: MGMT ver 1.23 [ 66.331392][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.336017][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.391442][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.404316][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.424045][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.428078][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.439890][ T103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.454429][ T103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.462475][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.469505][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.484433][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.488732][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.525444][ T6086] Zero length message leads to an empty skb [ 66.557234][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.562132][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.577751][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 66.577763][ T40] audit: type=1400 audit(1756523609.951:128): avc: denied { getopt } for pid=6087 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.588328][ T40] audit: type=1400 audit(1756523609.951:129): avc: denied { read write } for pid=6087 comm="syz.0.1" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.588611][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.597728][ T40] audit: type=1400 audit(1756523609.951:130): avc: denied { open } for pid=6087 comm="syz.0.1" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.601484][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.612150][ T40] audit: type=1400 audit(1756523609.951:131): avc: denied { create } for pid=6087 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.624818][ T40] audit: type=1400 audit(1756523609.951:132): avc: denied { bind } for pid=6087 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.634054][ T40] audit: type=1400 audit(1756523609.951:133): avc: denied { node_bind } for pid=6087 comm="syz.0.1" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 66.640928][ T40] audit: type=1400 audit(1756523610.011:134): avc: denied { read write } for pid=6089 comm="syz.0.10" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.653247][ T40] audit: type=1400 audit(1756523610.011:135): avc: denied { open } for pid=6089 comm="syz.0.10" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.666646][ T40] audit: type=1400 audit(1756523610.011:136): avc: denied { ioctl } for pid=6089 comm="syz.0.10" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.677092][ T40] audit: type=1400 audit(1756523610.021:137): avc: denied { map_read map_write } for pid=6089 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.857957][ T6107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14'. [ 67.172527][ T6118] kvm: user requested TSC rate below hardware speed [ 67.178649][ T6118] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 67.231944][ T1026] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.329153][ T6126] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.333867][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 67.360470][ T6135] block nbd3: Attempted send on invalid socket [ 67.367066][ T6135] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 67.371054][ T6135] SQUASHFS error: Failed to read block 0x0: -5 [ 67.376023][ T6135] unable to read squashfs_super_block [ 67.405195][ T1026] usb 6-1: config 0 has no interfaces? [ 67.409578][ T1026] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 67.413209][ T1026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.415829][ T1026] usb 6-1: Product: syz [ 67.418103][ T1026] usb 6-1: Manufacturer: syz [ 67.419666][ T1026] usb 6-1: SerialNumber: syz [ 67.423730][ T1026] usb 6-1: config 0 descriptor?? [ 67.492567][ T6145] syz.3.25 uses obsolete (PF_INET,SOCK_PACKET) [ 67.557254][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'. [ 67.638797][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 67.647038][ T10] usb 6-1: USB disconnect, device number 2 [ 67.791024][ T6161] netlink: 'syz.2.29': attribute type 21 has an invalid length. [ 67.793950][ T6161] netlink: 156 bytes leftover after parsing attributes in process `syz.2.29'. [ 67.894986][ T6167] syz.0.31 (6167): /proc/6166/oom_adj is deprecated, please use /proc/6166/oom_score_adj instead. [ 67.958998][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 67.977124][ T6169] (syz.2.32,6169,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 67.980149][ T6169] (syz.2.32,6169,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 68.251921][ T5981] Bluetooth: hci2: command tx timeout [ 68.323960][ T6181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=6181 comm=syz.2.36 [ 68.332345][ T5981] Bluetooth: hci0: command tx timeout [ 68.332432][ T63] Bluetooth: hci1: command tx timeout [ 68.334125][ T5981] Bluetooth: hci3: command tx timeout [ 68.505829][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'. [ 68.614430][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 68.727326][ T6217] capability: warning: `syz.3.46' uses deprecated v2 capabilities in a way that may be insecure [ 68.784299][ T6219] capability: warning: `syz.3.46' uses 32-bit capabilities (legacy support in use) [ 69.090435][ T6206] vlan2: entered allmulticast mode [ 69.110882][ T6206] veth0_to_hsr: entered allmulticast mode [ 69.162318][ T6241] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 69.165015][ T6241] netlink: 224 bytes leftover after parsing attributes in process `syz.0.53'. [ 69.233285][ T6233] /dev/sr0: Can't open blockdev [ 69.853863][ T6245] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.857244][ T6245] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.866896][ T6245] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.871895][ T6245] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.874610][ T6245] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.886108][ T6245] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.891359][ T6245] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.894469][ T6245] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.900299][ T6245] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.908247][ T6245] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.910400][ T6245] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.913748][ T6245] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.978458][ T6277] binder: 6276:6277 ioctl c0306201 200000000380 returned -22 [ 70.066355][ T6279] netlink: 84 bytes leftover after parsing attributes in process `syz.1.63'. [ 70.141919][ T6294] netlink: 'syz.3.65': attribute type 3 has an invalid length. [ 70.148473][ T6293] tipc: Started in network mode [ 70.150412][ T6293] tipc: Node identity 4, cluster identity 4711 [ 70.150738][ T6290] program syz.1.66 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.154059][ T6293] tipc: Node number set to 4 [ 70.204873][ T6302] openvswitch: netlink: Duplicate key (type 0). [ 70.759452][ T6365] process 'syz.0.85' launched './file0' with NULL argv: empty string added [ 70.819256][ T6373] fuse: Bad value for 'user_id' [ 70.823118][ T6373] fuse: Bad value for 'user_id' [ 70.858336][ T6375] tipc: Enabled bearer , priority 0 [ 70.861378][ T6375] syzkaller0: entered promiscuous mode [ 70.865408][ T6375] syzkaller0: entered allmulticast mode [ 70.871332][ T6375] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 70.893215][ T6375] tipc: Resetting bearer [ 70.909064][ T6377] tipc: Resetting bearer [ 70.918642][ T6377] tipc: Disabling bearer [ 70.999011][ T6380] Illegal XDP return value 8 on prog (id 17) dev N/A, expect packet loss! [ 71.372715][ T5981] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.445994][ T6417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=6417 comm=syz.3.96 [ 71.628215][ T40] kauditd_printk_skb: 121 callbacks suppressed [ 71.628230][ T40] audit: type=1400 audit(1756523615.001:259): avc: denied { read } for pid=6423 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.629069][ T6424] netlink: 'syz.1.98': attribute type 7 has an invalid length. [ 71.630771][ T40] audit: type=1400 audit(1756523615.001:260): avc: denied { write } for pid=6423 comm="syz.1.98" path="socket:[10933]" dev="sockfs" ino=10933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.654481][ T40] audit: type=1400 audit(1756523615.021:261): avc: denied { connect } for pid=6423 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.689951][ T40] audit: type=1400 audit(1756523615.061:262): avc: denied { accept } for pid=6427 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.703723][ T40] audit: type=1400 audit(1756523615.071:263): avc: denied { write } for pid=6427 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.812614][ T40] audit: type=1400 audit(1756523615.191:264): avc: denied { name_bind } for pid=6433 comm="syz.1.102" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 71.826170][ T40] audit: type=1400 audit(1756523615.201:265): avc: denied { ioctl } for pid=6436 comm="syz.2.103" path="socket:[9971]" dev="sockfs" ino=9971 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.838678][ T40] audit: type=1400 audit(1756523615.201:266): avc: denied { remove_name } for pid=6436 comm="syz.2.103" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.850591][ T40] audit: type=1400 audit(1756523615.201:267): avc: denied { unlink } for pid=6436 comm="syz.2.103" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.876602][ T6441] openvswitch: netlink: IPv4 tunnel dst address is zero [ 71.889625][ T6442] openvswitch: netlink: IPv4 tunnel dst address is zero [ 71.933971][ T5981] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.934022][ T5991] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.939665][ T5981] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.946355][ T40] audit: type=1400 audit(1756523615.321:268): avc: denied { connect } for pid=6445 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.008065][ T6451] __nla_validate_parse: 5 callbacks suppressed [ 72.008080][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'. [ 72.154816][ T6457] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 72.232063][ T55] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 72.277055][ T6463] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 72.353579][ T6468] evm: overlay not supported [ 72.372392][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 72.383897][ T55] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 72.388614][ T55] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 845, setting to 8 [ 72.393840][ T55] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.401240][ T55] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 72.406854][ T55] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 845, setting to 8 [ 72.411426][ T55] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.418003][ T55] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 72.423220][ T55] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 845, setting to 8 [ 72.428261][ T55] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.436676][ T55] usb 6-1: string descriptor 0 read error: -22 [ 72.440376][ T55] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 72.444617][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.457635][ T55] adutux 6-1:168.0: interrupt endpoints not found [ 72.561983][ T1026] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 72.658966][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'. [ 72.665384][ T24] usb 6-1: USB disconnect, device number 3 [ 72.723342][ T1026] usb 7-1: Using ep0 maxpacket: 8 [ 72.727485][ T1026] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 72.730618][ T1026] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.735505][ T1026] usb 7-1: config 0 has no interfaces? [ 72.737466][ T1026] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 72.740503][ T1026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.745433][ T1026] usb 7-1: config 0 descriptor?? [ 72.996930][ T6461] netlink: 'syz.2.112': attribute type 30 has an invalid length. [ 73.015435][ T53] usb 7-1: USB disconnect, device number 2 [ 73.037705][ T6497] /dev/sg0: Can't lookup blockdev [ 73.240268][ T6505] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 73.265790][ T6505] bond1: (slave geneve2): making interface the new active one [ 73.269701][ T6505] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 73.274527][ T74] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 73.278241][ T74] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 73.284224][ T74] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 73.288704][ T74] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 73.368074][ T6521] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.376947][ T6521] tipc: Enabling of bearer rejected, failed to enable media [ 73.451990][ T5981] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.519945][ T6521] random: crng reseeded on system resumption [ 73.572472][ T6540] ipip0: entered promiscuous mode [ 73.621580][ T6544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.652239][ T6546] program syz.1.136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.915090][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 73.955995][ T6562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6562 comm=syz.1.143 [ 73.960292][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'. [ 74.023788][ T5981] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.024354][ T5991] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.028184][ T6565] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 74.028245][ T5981] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.034540][ T6565] PKCS7: Only support pkcs7_signedData type [ 74.053128][ T6567] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 74.071994][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 74.076161][ T6567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.076387][ T24] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 74.085066][ T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 74.085645][ T6570] tipc: Started in network mode [ 74.090553][ T24] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 74.096039][ T6570] tipc: Node identity ba169850017c, cluster identity 4711 [ 74.097520][ T24] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 74.101288][ T6570] tipc: Enabled bearer , priority 0 [ 74.104961][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 74.107409][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 74.114433][ T6570] syzkaller0: entered promiscuous mode [ 74.116161][ T24] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 74.118456][ T6570] syzkaller0: entered allmulticast mode [ 74.122559][ T24] usb 8-1: Product: syz [ 74.125770][ T24] usb 8-1: Manufacturer: syz [ 74.127357][ T24] usb 8-1: SerialNumber: syz [ 74.131016][ T6570] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 74.132485][ T24] usb 8-1: config 0 descriptor?? [ 74.142176][ T24] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 74.154993][ T24] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 74.161537][ T6569] tipc: Resetting bearer [ 74.176544][ T6569] tipc: Disabling bearer [ 74.228706][ T6582] wireguard0: entered allmulticast mode [ 74.233183][ T5991] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 74.341562][ T24] usb 8-1: USB disconnect, device number 2 [ 74.359108][ T6599] loop2: detected capacity change from 0 to 7 [ 74.366309][ T6599] loop2: [ 74.367706][ T6599] loop2: partition table partially beyond EOD, truncated [ 74.370490][ T24] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 74.495404][ T6605] netlink: 68 bytes leftover after parsing attributes in process `syz.1.158'. [ 74.561942][ T72] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.714930][ T72] usb 7-1: config 0 has no interfaces? [ 74.720245][ T72] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 74.723774][ T72] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.726745][ T72] usb 7-1: Product: syz [ 74.728647][ T72] usb 7-1: Manufacturer: syz [ 74.730363][ T72] usb 7-1: SerialNumber: syz [ 74.740215][ T72] usb 7-1: config 0 descriptor?? [ 74.763788][ T6632] openvswitch: netlink: Unknown key attributes 2 [ 74.767149][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 74.771253][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 74.837196][ T6637] trusted_key: encrypted_key: key trusted:8sX not found [ 74.839749][ T6637] Option ''MO' to dns_resolver key: bad/missing value [ 74.965767][ T55] usb 7-1: USB disconnect, device number 3 [ 75.432003][ T55] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 75.506421][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'. [ 75.510354][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'. [ 75.521162][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'. [ 75.549359][ T5991] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.626926][ T55] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.630486][ T55] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.636231][ T55] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 75.642288][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 75.645417][ T55] usb 6-1: SerialNumber: syz [ 75.707969][ T6674] bond_slave_0: entered promiscuous mode [ 75.710822][ T6674] bond_slave_1: entered promiscuous mode [ 75.719566][ T6674] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 75.725355][ T6674] bond_slave_0: left promiscuous mode [ 75.727350][ T6674] bond_slave_1: left promiscuous mode [ 75.912144][ T53] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.924313][ T55] usb 6-1: 0:2 : does not exist [ 75.939782][ T55] usb 6-1: USB disconnect, device number 4 [ 76.016976][ T6348] udevd[6348]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.027531][ T6687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.030537][ T6687] IPv6: NLM_F_CREATE should be set when creating new route [ 76.034741][ T6687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.041997][ T53] usb 5-1: device descriptor read/64, error -71 [ 76.094993][ T5991] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.095105][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.321990][ T53] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.472047][ T53] usb 5-1: device descriptor read/64, error -71 [ 76.583640][ T53] usb usb5-port1: attempt power cycle [ 76.747778][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.750874][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.791852][ T72] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.931888][ T53] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.945815][ T72] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.950617][ T72] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.955321][ T72] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.959281][ T72] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.963225][ T53] usb 5-1: device descriptor read/8, error -71 [ 76.970330][ T6728] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.977620][ T72] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 77.207695][ T29] usb 6-1: USB disconnect, device number 5 [ 77.227064][ T53] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.242531][ T53] usb 5-1: device descriptor read/8, error -71 [ 77.278353][ T6732] overlay: Unknown parameter 'permit_directio' [ 77.292077][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.352287][ T53] usb usb5-port1: unable to enumerate USB device [ 77.356239][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 77.356257][ T40] audit: type=1400 audit(1756523620.731:314): avc: denied { create } for pid=6737 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 77.366724][ T40] audit: type=1400 audit(1756523620.741:315): avc: denied { ioctl } for pid=6729 comm="syz.2.193" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.377055][ T40] audit: type=1400 audit(1756523620.741:316): avc: denied { write } for pid=6737 comm="syz.3.196" path="socket:[12548]" dev="sockfs" ino=12548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 77.397597][ T6740] __nla_validate_parse: 43 callbacks suppressed [ 77.397615][ T6740] netlink: 80 bytes leftover after parsing attributes in process `syz.3.197'. [ 77.437027][ T40] audit: type=1400 audit(1756523620.811:317): avc: denied { read } for pid=6742 comm="syz.3.198" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.442412][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 77.447266][ T40] audit: type=1400 audit(1756523620.811:318): avc: denied { open } for pid=6742 comm="syz.3.198" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.451470][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 77.458162][ T40] audit: type=1400 audit(1756523620.831:319): avc: denied { write } for pid=6742 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.462871][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 77.474815][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.478057][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.483963][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.487038][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.647316][ T6743] kvm: kvm [6742]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 77.653049][ T6743] kvm: kvm [6742]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 77.674202][ T6743] kvm: kvm [6742]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 77.695714][ T6743] kvm: kvm [6742]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 77.699176][ T6743] kvm: kvm [6742]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 77.703498][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 77.705954][ T24] usbtmc 7-1:16.0: can't read capabilities [ 77.755547][ T40] audit: type=1400 audit(1756523621.131:320): avc: denied { read write } for pid=6746 comm="syz.1.199" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.764714][ T40] audit: type=1400 audit(1756523621.131:321): avc: denied { open } for pid=6746 comm="syz.1.199" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.992004][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 78.141974][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 78.147527][ T24] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 78.151966][ T24] usb 6-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.156222][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 78.160182][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 78.163119][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.165883][ T24] usb 6-1: Product: ࠚ [ 78.167328][ T24] usb 6-1: Manufacturer: 桯 [ 78.168998][ T24] usb 6-1: SerialNumber: ǘ삛ᢵ쑖럱曤熲㺿宿骯⥟ᇴᗞ瞕ᗬꎙ咮㍵촍ᵬݢ㹩쀇嵌铝蒛遲㭼悵邞㐴諁٩ﻆ⣯怆泲劣켈钟꓌鄠齉䶠࿪趂ช찏쩛ﮰҦ蜂筝ᆅ [ 78.178268][ T6747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.597197][ T24] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 6 if 0 alt 4 proto 1 vid 0x0525 pid 0xA4A8 [ 78.614282][ T24] usb 6-1: USB disconnect, device number 6 [ 78.626653][ T24] usblp1: removed [ 78.657864][ T40] audit: type=1400 audit(1756523622.031:322): avc: denied { create } for pid=6757 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.713902][ T40] audit: type=1400 audit(1756523622.091:323): avc: denied { getopt } for pid=6757 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.719792][ T6759] batadv_slave_0: entered promiscuous mode [ 78.727113][ T6759] batadv_slave_0: left promiscuous mode [ 78.894560][ T6766] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 78.897988][ T6766] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 78.903169][ T6766] vhci_hcd vhci_hcd.0: Device attached [ 78.964627][ T6767] vhci_hcd: connection closed [ 78.967717][ T61] vhci_hcd: stop threads [ 78.973899][ T61] vhci_hcd: release socket [ 78.976154][ T61] vhci_hcd: disconnect device [ 79.129069][ T6776] netlink: 44 bytes leftover after parsing attributes in process `syz.1.207'. [ 79.278986][ T6781] loop7: detected capacity change from 0 to 524255232 [ 79.359096][ T6782] overlayfs: failed lookup in lower (newroot/61, name='bus', err=-40): overlapping layers [ 79.434708][ T6784] program syz.3.210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.439661][ T6784] netlink: 'syz.3.210': attribute type 4 has an invalid length. [ 79.505260][ T6789] syz.0.212 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.808001][ T6804] random: crng reseeded on system resumption [ 79.819068][ T6804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 79.861891][ T55] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 79.974187][ T6806] lo speed is unknown, defaulting to 1000 [ 79.977126][ T6806] lo speed is unknown, defaulting to 1000 [ 79.981828][ T6806] lo speed is unknown, defaulting to 1000 [ 79.989034][ T6806] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.999171][ T6806] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 80.012992][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 80.016345][ T55] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 80.019705][ T55] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.023887][ T55] usb 8-1: config 0 has no interfaces? [ 80.024844][ T6806] lo speed is unknown, defaulting to 1000 [ 80.026291][ T55] usb 8-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 80.030579][ T6806] lo speed is unknown, defaulting to 1000 [ 80.032042][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.033576][ T55] usb 8-1: config 0 descriptor?? [ 80.035095][ T6806] lo speed is unknown, defaulting to 1000 [ 80.043130][ T6806] lo speed is unknown, defaulting to 1000 [ 80.067110][ T55] usb 7-1: USB disconnect, device number 4 [ 80.086934][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 80.097811][ T6815] pimreg: entered allmulticast mode [ 80.248577][ T6824] dlm: no locking on control device [ 80.338260][ T24] usb 8-1: USB disconnect, device number 3 [ 80.495420][ T6839] mmap: syz.2.228 (6839) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.570215][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 80.584960][ T6848] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 80.590638][ T6848] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 80.595551][ T6848] overlayfs: overlapping lowerdir path [ 80.853112][ T72] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 81.004070][ T72] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.009993][ T72] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.014804][ T72] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.019208][ T72] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.026529][ T6844] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 81.030822][ T6853] syz_tun: entered allmulticast mode [ 81.033304][ T72] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.040914][ T6853] dvmrp1: entered allmulticast mode [ 81.050193][ T6853] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 81.062628][ T6852] syz_tun: left allmulticast mode [ 81.163429][ T6860] netlink: 68 bytes leftover after parsing attributes in process `syz.0.235'. [ 81.236768][ T55] usb 7-1: USB disconnect, device number 5 [ 81.274763][ T6871] ubifs: Unknown parameter 'norecovery' [ 81.428879][ T6881] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.435725][ T6881] block device autoloading is deprecated and will be removed. [ 81.449013][ T6844] kvm: pic: non byte write [ 81.490224][ T6844] kvm: pic: non byte write [ 81.631363][ T6885] ntfs3(sr0): Primary boot signature is not NTFS. [ 81.635763][ T6885] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 81.680597][ T6887] syz.0.243 (6887) used obsolete PPPIOCDETACH ioctl [ 82.023236][ T6909] netlink: 'syz.0.250': attribute type 2 has an invalid length. [ 82.078698][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 82.126252][ T6914] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 82.131209][ T6913] input: syz1 as /devices/virtual/input/input6 [ 82.188883][ T6920] loop7: detected capacity change from 0 to 524255232 [ 82.255404][ T6920] overlayfs: failed lookup in lower (newroot/74, name='bus', err=-40): overlapping layers [ 82.368315][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 82.368334][ T40] audit: type=1400 audit(1756523625.741:373): avc: denied { write } for pid=6927 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 82.385450][ T40] audit: type=1400 audit(1756523625.761:374): avc: denied { map } for pid=6924 comm="syz.2.256" path="socket:[12939]" dev="sockfs" ino=12939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.398144][ T40] audit: type=1400 audit(1756523625.761:375): avc: denied { read } for pid=6924 comm="syz.2.256" path="socket:[12939]" dev="sockfs" ino=12939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.558702][ T6953] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 82.563468][ T40] audit: type=1400 audit(1756523625.931:376): avc: denied { add_name } for pid=6949 comm="syz.3.263" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.574958][ T40] audit: type=1400 audit(1756523625.941:377): avc: denied { create } for pid=6949 comm="syz.3.263" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.593177][ T40] audit: type=1400 audit(1756523625.941:378): avc: denied { associate } for pid=6949 comm="syz.3.263" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.608377][ T40] audit: type=1400 audit(1756523625.981:379): avc: denied { read write open } for pid=6949 comm="syz.3.263" path="/74/file0/bus" dev="9p" ino=35913886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.623479][ T72] IPVS: starting estimator thread 0... [ 82.674836][ T40] audit: type=1400 audit(1756523626.051:380): avc: denied { bind } for pid=6961 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.685603][ T40] audit: type=1400 audit(1756523626.051:381): avc: denied { connect } for pid=6961 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.731926][ T6964] IPVS: using max 42 ests per chain, 100800 per kthread [ 82.770687][ T40] audit: type=1400 audit(1756523626.141:382): avc: denied { connect } for pid=6973 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.440067][ T7015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.469212][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 83.498375][ T7019] SELinux: Context system_u:object_r:etc_runtime_t:s0 is not valid (left unmapped). [ 83.666509][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'. [ 83.690278][ T7042] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 83.735686][ T7044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7044 comm=syz.0.292 [ 83.769792][ T7040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.288'. [ 83.782091][ T7047] binder: 7046:7047 ioctl 4018620d 0 returned -22 [ 83.858867][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.865031][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.122080][ T5994] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 84.208173][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88805796ec00: rx timeout, send abort [ 84.212458][ C3] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805796ec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 84.266116][ T7071] loop7: detected capacity change from 0 to 7 [ 84.270726][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.274628][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.279047][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.282173][ T5994] usb 7-1: Using ep0 maxpacket: 8 [ 84.283435][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.287924][ T5994] usb 7-1: config index 0 descriptor too short (expected 24421, got 18) [ 84.288944][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.291579][ T5994] usb 7-1: config 66 has too many interfaces: 107, using maximum allowed: 32 [ 84.295590][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.296194][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.299112][ T5994] usb 7-1: config 66 has an invalid descriptor of length 50, skipping remainder of the config [ 84.303561][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.307207][ T5994] usb 7-1: config 66 has 0 interfaces, different from the descriptor's value: 107 [ 84.312293][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.318799][ T5994] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 84.323943][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.324771][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.333957][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.337521][ T5994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.337649][ T7071] ldm_validate_partition_table(): Disk read failed. [ 84.338053][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.338084][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.340457][ T5994] usb 7-1: Product: syz [ 84.344880][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.348284][ T5994] usb 7-1: Manufacturer: syz [ 84.350983][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.352836][ T5994] usb 7-1: SerialNumber: syz [ 84.359800][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.368508][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.372142][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.375727][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.378975][ T7071] Dev loop7: unable to read RDB block 0 [ 84.383118][ T7071] loop7: unable to read partition table [ 84.386047][ T7071] loop7: partition table beyond EOD, truncated [ 84.388897][ T7071] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 84.425547][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 84.477594][ T7087] overlayfs: failed to resolve './file0': -2 [ 84.483015][ T7087] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.486317][ T7087] overlayfs: missing 'lowerdir' [ 84.507869][ T7085] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4012402100 (32099216800 ns) > initial count (12556981776 ns). Using initial count to start timer. [ 84.525562][ T7090] tmpfs: Unknown parameter 'usrquota0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.525562][ T7090] 0 [ 84.591331][ T5994] usb 7-1: USB disconnect, device number 6 [ 84.715349][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.864085][ T7130] loop7: detected capacity change from 0 to 524255232 [ 84.934564][ T7130] overlayfs: failed lookup in lower (newroot/68, name='bus', err=-40): overlapping layers [ 85.056289][ T7139] netlink: 60 bytes leftover after parsing attributes in process `syz.3.318'. [ 85.154567][ T7144] netlink: 80 bytes leftover after parsing attributes in process `syz.2.320'. [ 85.166657][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 85.200688][ T7149] netlink: 'syz.2.322': attribute type 5 has an invalid length. [ 85.204988][ T7149] netlink: 'syz.2.322': attribute type 7 has an invalid length. [ 85.212712][ T7151] netlink: 60 bytes leftover after parsing attributes in process `syz.3.323'. [ 85.215610][ T7149] : entered promiscuous mode [ 85.217127][ T7151] unsupported nlmsg_type 40 [ 85.252187][ T7153] warning: `syz.2.324' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.256127][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 85.259345][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 85.273366][ T7153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7153 comm=syz.2.324 [ 85.349423][ T7159] loop7: detected capacity change from 0 to 524255232 [ 85.419254][ T7159] overlayfs: failed lookup in lower (newroot/95, name='bus', err=-40): overlapping layers [ 85.457860][ T7163] No buffer was provided with the request [ 85.464157][ T7165] No buffer was provided with the request [ 85.840487][ T7189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.336'. [ 85.842075][ T7190] 9pnet_virtio: no channels available for device syz [ 85.845778][ T7191] 9pnet_virtio: no channels available for device syz [ 85.887764][ T7194] loop7: detected capacity change from 0 to 524255232 [ 85.910246][ T7195] netlink: 'syz.3.339': attribute type 7 has an invalid length. [ 85.913141][ T7195] netlink: 'syz.3.339': attribute type 8 has an invalid length. [ 85.960111][ T7194] overlayfs: failed lookup in lower (newroot/71, name='bus', err=-40): overlapping layers [ 86.054073][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.058692][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.069300][ T7206] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 86.227252][ T7195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.244665][ T7195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.489995][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.494936][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 86.499826][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.504513][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 86.508928][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.514308][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 86.519093][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.526467][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 86.529676][ T7211] sockfs: Unknown parameter 'dscabdCc [ 86.529676][ T7211] 7`3v4|:N' [ 86.620874][ T7218] block nbd1: Attempted send on invalid socket [ 86.623918][ T7218] XFS (nbd1): SB validate failed with error -5. [ 86.651463][ T7228] netlink: 'syz.1.346': attribute type 4 has an invalid length. [ 86.668865][ T7213] netlink: 'syz.3.344': attribute type 11 has an invalid length. [ 86.732229][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.732507][ T5991] Bluetooth: hci4: command 0x1003 tx timeout [ 86.766260][ T7230] tipc: Enabled bearer , priority 0 [ 86.769981][ T7231] syzkaller0: entered promiscuous mode [ 86.772849][ T7231] syzkaller0: entered allmulticast mode [ 86.841207][ T7231] tipc: Resetting bearer [ 86.843208][ T7237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.861570][ T7231] tipc: Resetting bearer [ 86.873384][ T7231] tipc: Disabling bearer [ 86.889449][ T7244] ntfs3: Unknown parameter '(^.Fre' [ 86.975429][ T1475] cfg80211: failed to load regulatory.db [ 87.045245][ T7257] [U] [ 87.046747][ T7257] [U] [ 87.047720][ T7257] [U] [ 87.048884][ T7257] [U] [ 87.050008][ T7257] [U] [ 87.051012][ T7257] [U] [ 87.052089][ T7257] [U] [ 87.053047][ T7257] [U] [ 87.056886][ T7257] [U] [ 87.058250][ T7257] [U] [ 87.059854][ T7257] [U] [ 87.061362][ T7257] [U] [ 87.063382][ T7257] [U] [ 87.064669][ T7257] [U] [ 87.065858][ T7257] [U] [ 87.067023][ T7257] [U] [ 87.253819][ T7256] [U] [ 87.408356][ T7280] trusted_key: syz.3.363 sent an empty control message without MSG_MORE. [ 87.436924][ T7283] loop7: detected capacity change from 0 to 524255232 [ 87.483562][ T7286] [U] [ 87.484768][ T7286] [U] [ 87.485734][ T7286] [U] [ 87.486667][ T7286] [U] [ 87.487882][ T7286] [U] [ 87.489294][ T7286] [U] [ 87.489542][ T7283] overlayfs: failed lookup in lower (newroot/99, name='bus', err=-40): overlapping layers [ 87.490562][ T7286] [U] [ 87.495937][ T7286] [U] [ 87.497340][ T7286] [U] [ 87.498367][ T7286] [U] [ 87.499472][ T7286] [U] [ 87.500691][ T7286] [U] [ 87.501706][ T7286] [U] [ 87.502614][ T7286] [U] [ 87.503540][ T7286] [U] [ 87.504444][ T7286] [U] [ 87.516993][ T7285] [U] [ 87.587540][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 87.587556][ T40] audit: type=1400 audit(1756523630.961:418): avc: denied { read } for pid=7293 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 87.592266][ T7294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7294 comm=syz.3.369 [ 87.611306][ T7295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7295 comm=syz.3.369 [ 87.649586][ T40] audit: type=1400 audit(1756523631.021:419): avc: denied { read } for pid=7303 comm="syz.3.371" dev="sockfs" ino=14324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.657489][ T40] audit: type=1400 audit(1756523631.031:420): avc: denied { rename } for pid=7282 comm="syz.2.365" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 87.981885][ T29] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 87.985101][ T40] audit: type=1400 audit(1756523631.361:421): avc: denied { watch_sb } for pid=7310 comm="syz.1.374" path="/78/file0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.155209][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.161027][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 88.166090][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 88.169154][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.175486][ T29] usb 5-1: config 0 descriptor?? [ 88.179222][ T7309] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.388373][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 88.392103][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 88.400171][ T29] usb 5-1: USB disconnect, device number 6 [ 88.483710][ T7323] netlink: 'syz.2.378': attribute type 1 has an invalid length. [ 88.486769][ T7323] __nla_validate_parse: 9 callbacks suppressed [ 88.486780][ T7323] netlink: 224 bytes leftover after parsing attributes in process `syz.2.378'. [ 88.513564][ T40] audit: type=1400 audit(1756523631.881:422): avc: denied { search } for pid=5684 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.529054][ T40] audit: type=1400 audit(1756523631.891:423): avc: denied { search } for pid=5684 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.537024][ T40] audit: type=1400 audit(1756523631.891:424): avc: denied { search } for pid=5684 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.547597][ T40] audit: type=1400 audit(1756523631.891:425): avc: denied { read } for pid=5684 comm="dhcpcd" name="n105" dev="tmpfs" ino=3792 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.555602][ T40] audit: type=1400 audit(1756523631.901:426): avc: denied { open } for pid=5684 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=3792 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.564687][ T40] audit: type=1400 audit(1756523631.901:427): avc: denied { getattr } for pid=5684 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=3792 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.594588][ T7335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.651326][ T7339] lo speed is unknown, defaulting to 1000 [ 88.658866][ T7339] lo speed is unknown, defaulting to 1000 [ 88.662732][ T7339] lo speed is unknown, defaulting to 1000 [ 88.670462][ T7341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7341 comm=syz.3.383 [ 88.677869][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.383'. [ 88.731897][ T72] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 88.775357][ T7345] team0: No ports can be present during mode change [ 88.801551][ T6478] lo speed is unknown, defaulting to 1000 [ 88.801841][ T7339] infiniband sz1: set active [ 88.806407][ T7339] infiniband sz1: added lo [ 88.842336][ T7339] RDS/IB: sz1: added [ 88.844931][ T7339] smc: adding ib device sz1 with port count 1 [ 88.848190][ T7339] smc: ib device sz1 port 1 has pnetid [ 88.854345][ T6478] lo speed is unknown, defaulting to 1000 [ 88.858665][ T7339] lo speed is unknown, defaulting to 1000 [ 88.872082][ T72] usb 6-1: device descriptor read/64, error -71 [ 88.982987][ T7339] lo speed is unknown, defaulting to 1000 [ 89.111865][ T72] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 89.117110][ T7339] lo speed is unknown, defaulting to 1000 [ 89.210324][ T7339] lo speed is unknown, defaulting to 1000 [ 89.251910][ T72] usb 6-1: device descriptor read/64, error -71 [ 89.372114][ T72] usb usb6-port1: attempt power cycle [ 89.721892][ T72] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 89.742213][ T72] usb 6-1: device descriptor read/8, error -71 [ 89.776021][ T7376] MINIX-fs: blocksize too small for device [ 89.861545][ T7380] netlink: 'syz.0.396': attribute type 4 has an invalid length. [ 89.866822][ T7380] netlink: 152 bytes leftover after parsing attributes in process `syz.0.396'. [ 89.882629][ T7380] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 89.909526][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 89.967575][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 89.982199][ T72] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 90.002852][ T72] usb 6-1: device descriptor read/8, error -71 [ 90.012095][ T1026] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 90.114258][ T72] usb usb6-port1: unable to enumerate USB device [ 90.153358][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 90.178434][ T1026] usb 7-1: config 0 has no interfaces? [ 90.183549][ T1026] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.186689][ T1026] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.189273][ T1026] usb 7-1: Product: syz [ 90.190965][ T1026] usb 7-1: Manufacturer: syz [ 90.195587][ T1026] usb 7-1: config 0 descriptor?? [ 90.402063][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 90.556147][ T29] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 90.559267][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.563439][ T29] usb 8-1: Product: syz [ 90.565127][ T29] usb 8-1: Manufacturer: syz [ 90.566682][ T29] usb 8-1: SerialNumber: syz [ 90.573080][ T29] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 90.605808][ T840] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 90.740024][ T7396] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 90.748116][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.752574][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.554064][ T7415] loop7: detected capacity change from 0 to 524255232 [ 91.701975][ T840] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 91.706072][ T840] ath9k_htc: Failed to initialize the device [ 91.732608][ T840] usb 8-1: ath9k_htc: USB layer deinitialized [ 91.916342][ T7427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52490 sclass=netlink_route_socket pid=7427 comm=syz.0.410 [ 92.314432][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.400'. [ 92.568866][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 92.783425][ T840] usb 7-1: USB disconnect, device number 7 [ 92.808189][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 92.808216][ T40] audit: type=1326 audit(1756523636.181:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.2.412" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc658ebe9 code=0x0 [ 92.907762][ T40] audit: type=1400 audit(1756523636.281:442): avc: denied { mount } for pid=7437 comm="syz.0.414" name="/" dev="configfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 92.916761][ T40] audit: type=1400 audit(1756523636.281:443): avc: denied { search } for pid=7437 comm="syz.0.414" name="/" dev="configfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.924563][ T40] audit: type=1400 audit(1756523636.281:444): avc: denied { search } for pid=7437 comm="syz.0.414" name="/" dev="configfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.932843][ T40] audit: type=1400 audit(1756523636.281:445): avc: denied { read open } for pid=7437 comm="syz.0.414" path="/" dev="configfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.962788][ T40] audit: type=1400 audit(1756523636.341:446): avc: denied { setopt } for pid=7432 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 92.965565][ T7441] loop7: detected capacity change from 0 to 524255232 [ 92.969432][ T40] audit: type=1400 audit(1756523636.341:447): avc: denied { accept } for pid=7432 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.972662][ T103] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 92.983553][ T7442] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 93.348779][ T10] usb 8-1: USB disconnect, device number 4 [ 93.425025][ T7455] tipc: Cannot configure node identity twice [ 93.436484][ T7446] netlink: 'syz.3.416': attribute type 21 has an invalid length. [ 93.439086][ T7446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.416'. [ 93.456462][ T63] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 93.602947][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 93.640358][ T7474] block nbd3: Attempted send on invalid socket [ 93.645510][ T7474] blk_print_req_error: 11 callbacks suppressed [ 93.645527][ T7474] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.651620][ T7474] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 93.658347][ T7476] fuse: Bad value for 'group_id' [ 93.660017][ T7476] fuse: Bad value for 'group_id' [ 93.663252][ T7478] block nbd3: Attempted send on invalid socket [ 93.665304][ T7478] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.670275][ T7478] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 93.713129][ T7485] loop7: detected capacity change from 0 to 524255232 [ 93.756014][ T40] audit: type=1400 audit(1756523637.131:448): avc: denied { write } for pid=7492 comm="syz.2.431" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 93.794679][ T40] audit: type=1400 audit(1756523637.171:449): avc: denied { bind } for pid=7494 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.803449][ T40] audit: type=1400 audit(1756523637.171:450): avc: denied { listen } for pid=7494 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.855669][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 93.858917][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 93.952474][ T7518] tmpfs: Group quota block hardlimit too large. [ 94.015614][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 94.027462][ T7521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7521 comm=syz.2.436 [ 94.067385][ T7536] loop7: detected capacity change from 0 to 524255232 [ 94.075199][ T7537] 9p: Unknown access argument 3{c8{c8{c8{c8{c8{cΑm?Jn߻0f[XR;: -22 [ 94.181670][ T7546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7546 comm=syz.2.446 [ 94.369487][ T6478] hid-generic 0362:07FF:7FFFFFFF.0002: item fetching failed at offset 0/2 [ 94.378006][ T6478] hid-generic 0362:07FF:7FFFFFFF.0002: probe with driver hid-generic failed with error -22 [ 94.515363][ T7587] netlink: 'syz.0.460': attribute type 4 has an invalid length. [ 94.611647][ T7593] Bluetooth: MGMT ver 1.23 [ 94.647105][ T7598] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 94.792214][ T7609] netlink: 'syz.0.468': attribute type 10 has an invalid length. [ 94.796130][ T7609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.468'. [ 94.803025][ T7609] 8021q: VLANs not supported on ip6_vti0 [ 94.851449][ T7617] binder: 7616:7617 ioctl c0306201 200000000080 returned -14 [ 94.933467][ T7620] tmpfs: Bad value for 'mpol' [ 94.955178][ T7622] comedi comedi2: dt2817: I/O port conflict (0x4f27,5) [ 95.073170][ T7633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7633 comm=syz.3.477 [ 95.078539][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.477'. [ 95.103206][ T7633] vlan2: entered allmulticast mode [ 95.105061][ T7633] bond2: entered allmulticast mode [ 95.138347][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 95.159715][ T7643] pim6reg1: entered promiscuous mode [ 95.163551][ T7643] pim6reg1: entered allmulticast mode [ 95.225113][ T7645] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.229755][ T7645] efs: cannot read volume header [ 95.384759][ T7647] netlink: 'syz.3.482': attribute type 5 has an invalid length. [ 95.387717][ T7647] netlink: 'syz.3.482': attribute type 7 has an invalid length. [ 95.398165][ T7647] : entered promiscuous mode [ 95.462725][ T7653] uprobe: syz.0.485:7653 failed to unregister, leaking uprobe [ 95.553724][ T7661] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 95.564810][ T7661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.577822][ T7662] veth1_vlan: left promiscuous mode [ 95.830626][ T7671] "syz.2.491" (7671) uses obsolete ecb(arc4) skcipher [ 95.912982][ T7689] pim6reg: entered allmulticast mode [ 95.916864][ T7689] bridge0: entered allmulticast mode [ 96.249873][ T7708] No source specified [ 96.411264][ T7711] trusted_key: encrypted_key: master key parameter is missing [ 96.452869][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 96.459188][ T7716] kvm: user requested TSC rate below hardware speed [ 96.459716][ T7718] dummy0: entered promiscuous mode [ 96.465220][ T7716] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 96.472110][ T7718] dummy0: left promiscuous mode [ 96.524123][ T7723] loop7: detected capacity change from 0 to 524255232 [ 96.627527][ T7732] batman_adv: batadv0: Adding interface: gretap1 [ 96.629966][ T7732] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.639838][ T7732] batman_adv: batadv0: Interface activated: gretap1 [ 96.652000][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 96.657362][ T7735] geneve2: entered promiscuous mode [ 96.659058][ T7735] geneve2: entered allmulticast mode [ 96.662044][ T61] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.665106][ T61] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.667935][ T61] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.673488][ T61] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.702218][ T7737] lo speed is unknown, defaulting to 1000 [ 96.711845][ T7737] lo speed is unknown, defaulting to 1000 [ 96.843934][ T7749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.847374][ T7749] batadv_slave_0: entered promiscuous mode [ 96.849312][ T7749] batadv_slave_0: entered allmulticast mode [ 96.949098][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 96.997921][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'. [ 97.355381][ T7783] netlink: 'syz.0.528': attribute type 25 has an invalid length. [ 97.358305][ T7783] netlink: 'syz.0.528': attribute type 7 has an invalid length. [ 97.649781][ T7809] dlm: no locking on control device [ 97.714783][ T7816] syzkaller1: entered promiscuous mode [ 97.717222][ T7816] syzkaller1: entered allmulticast mode [ 98.120437][ T7839] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 98.154866][ T7841] netlink: 'syz.2.545': attribute type 7 has an invalid length. [ 98.157652][ T7841] netlink: 'syz.2.545': attribute type 8 has an invalid length. [ 98.171507][ C3] vcan0: j1939_tp_rxtimer: 0xffff888012d48c00: rx timeout, send abort [ 98.174718][ C3] vcan0: j1939_tp_rxtimer: 0xffff888012d4a800: rx timeout, send abort [ 98.177858][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888012d48c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 98.183805][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888012d4a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 98.210054][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 98.210077][ T40] audit: type=1400 audit(1756523641.581:485): avc: denied { module_request } for pid=7840 comm="syz.2.545" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 98.267077][ T40] audit: type=1400 audit(1756523641.641:486): avc: denied { getopt } for pid=7851 comm="syz.0.547" lport=59599 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 98.329649][ T7860] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.335753][ T7860] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.338923][ T7860] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.342121][ T40] audit: type=1400 audit(1756523641.711:487): avc: denied { execute } for pid=7856 comm="syz.1.548" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.348973][ T7860] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.357634][ T7860] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.361038][ T7860] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.364620][ T7860] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.367836][ T7860] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.369752][ T40] audit: type=1326 audit(1756523641.741:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.3.550" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc1958ebe9 code=0x0 [ 98.371490][ T7860] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.380843][ T40] audit: type=1400 audit(1756523641.751:489): avc: denied { getopt } for pid=7856 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.393956][ T7860] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.491612][ T7873] validate_nla: 1 callbacks suppressed [ 98.491629][ T7873] netlink: 'syz.1.554': attribute type 12 has an invalid length. [ 98.549756][ T7882] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.4294901762) [ 98.550269][ T40] audit: type=1400 audit(1756523641.921:490): avc: denied { write } for pid=7879 comm="syz.2.556" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 98.616097][ T7890] geneve2: entered promiscuous mode [ 98.841873][ T5994] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 98.991867][ T5994] usb 5-1: Using ep0 maxpacket: 8 [ 98.995117][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.997608][ T5994] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 99.000910][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.004926][ T5994] usb 5-1: config 0 descriptor?? [ 99.224102][ T5994] usbhid 5-1:0.0: can't add hid device: -71 [ 99.226946][ T5994] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 99.230987][ T5994] usb 5-1: USB disconnect, device number 7 [ 99.385723][ T7910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.480833][ T7922] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 99.491137][ T7922] CIFS mount error: No usable UNC path provided in device string! [ 99.491137][ T7922] [ 99.495554][ T7922] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 99.709141][ T7938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=515 sclass=netlink_tcpdiag_socket pid=7938 comm=syz.1.568 [ 99.765111][ T7943] loop6: detected capacity change from 0 to 7 [ 99.781884][ T7943] Dev loop6: unable to read RDB block 7 [ 99.784699][ T7943] loop6: unable to read partition table [ 99.787728][ T7943] loop6: partition table beyond EOD, truncated [ 99.791633][ T7943] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 99.961055][ T40] audit: type=1400 audit(1756523643.331:491): avc: denied { associate } for pid=7955 comm="syz.2.576" name="blkio.bfq.avg_queue_size" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.977347][ T40] audit: type=1400 audit(1756523643.341:492): avc: denied { append } for pid=7955 comm="syz.2.576" path="/140/file0/blkio.bfq.avg_queue_size" dev="9p" ino=35913967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.077603][ T40] audit: type=1400 audit(1756523643.451:493): avc: denied { ioctl } for pid=7955 comm="syz.2.576" path="/140/file0/blkio.bfq.avg_queue_size" dev="9p" ino=35913967 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.223772][ T7980] __nla_validate_parse: 6 callbacks suppressed [ 100.223789][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 100.244770][ T7982] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 100.308180][ T40] audit: type=1400 audit(1756523643.681:494): avc: denied { unmount } for pid=5975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 100.324720][ T7984] usb usb4: usbfs: process 7984 (syz.3.585) did not claim interface 0 before use [ 100.330870][ T7993] netlink: 'syz.1.587': attribute type 1 has an invalid length. [ 100.348248][ T7993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7993 comm=syz.1.587 [ 100.352367][ T7993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7993 comm=syz.1.587 [ 100.632082][ T10] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 100.803808][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 100.808156][ T10] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 100.817766][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.826088][ T10] usb 8-1: config 0 descriptor?? [ 100.831149][ T7984] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.864752][ T8015] fuse: Unknown parameter '@"' [ 101.098400][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.102496][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.120905][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 101.123031][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 101.124752][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 101.139260][ T10] usb 8-1: USB disconnect, device number 5 [ 101.175214][ T63] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 101.176115][ T8033] ======================================================= [ 101.176115][ T8033] WARNING: The mand mount option has been deprecated and [ 101.176115][ T8033] and is ignored by this kernel. Remove the mand [ 101.176115][ T8033] option from the mount to silence this warning. [ 101.176115][ T8033] ======================================================= [ 101.256324][ T8042] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 101.256956][ T8044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.601'. [ 101.259387][ T8042] random: crng reseeded on system resumption [ 101.293109][ T8042] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 101.328706][ T8053] ubi0: attaching mtd0 [ 101.330869][ T8053] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042) [ 101.373724][ T8063] netlink: 'syz.2.606': attribute type 4 has an invalid length. [ 101.494430][ T8081] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 101.496844][ T8080] hugetlbfs: syz.1.611 (8080): Using mlock ulimits for SHM_HUGETLB is obsolete [ 101.498662][ T8081] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 101.507785][ T8081] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 101.510766][ T8081] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 101.563359][ T8087] gfs2: not a GFS2 filesystem [ 101.630745][ T8098] netlink: 'syz.2.620': attribute type 7 has an invalid length. [ 101.636465][ T8102] netlink: 80 bytes leftover after parsing attributes in process `syz.0.619'. [ 101.673643][ T8111] : renamed from lo [ 101.682301][ T8113] fuse: Bad value for 'rootmode' [ 101.718490][ T8120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=8120 comm=syz.1.624 [ 101.737951][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 101.742869][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 101.746876][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 101.751457][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 101.755930][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 101.780678][ T8127] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 101.795786][ T8127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.812973][ T63] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 101.813790][ T8127] bond1: (slave ip6gretap2): making interface the new active one [ 101.820431][ T8127] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 101.982180][ T1475] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 102.036398][ T8136] netlink: 40 bytes leftover after parsing attributes in process `syz.2.629'. [ 102.141912][ T1475] usb 8-1: Using ep0 maxpacket: 16 [ 102.145710][ T1475] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 102.148519][ T1475] usb 8-1: config 0 has no interface number 0 [ 102.152743][ T1475] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 102.156179][ T1475] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.159279][ T1475] usb 8-1: Product: syz [ 102.161101][ T1475] usb 8-1: Manufacturer: syz [ 102.164204][ T1475] usb 8-1: SerialNumber: syz [ 102.169121][ T1475] usb 8-1: config 0 descriptor?? [ 102.180757][ T1475] hub 8-1:0.132: bad descriptor, ignoring hub [ 102.183598][ T1475] hub 8-1:0.132: probe with driver hub failed with error -5 [ 102.191319][ T1475] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.132/input/input9 [ 102.402789][ T8122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.407465][ T8122] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.412908][ T8122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.569013][ T8150] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 102.572167][ T8150] UDF-fs: Scanning with blocksize 2048 failed [ 102.575397][ T8150] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 102.578123][ T8150] UDF-fs: Scanning with blocksize 4096 failed [ 102.781292][ T8182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3352 sclass=netlink_route_socket pid=8182 comm=syz.1.639 [ 102.791479][ T8182] netlink: 'syz.1.639': attribute type 4 has an invalid length. [ 102.796520][ T8182] netlink: 'syz.1.639': attribute type 4 has an invalid length. [ 102.854145][ T8180] sp0: Synchronizing with TNC [ 102.880960][ T8191] IPv6: NLM_F_REPLACE set, but no existing node found! [ 102.939611][ T8196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.555331][ T8238] overlayfs: failed to resolve './file1/file0': -2 [ 103.642526][ T8242] ALSA: seq fatal error: cannot create timer (-22) [ 103.658875][ T8244] can0: slcan on ttyS3. [ 103.723019][ T8244] can0 (unregistered): slcan off ttyS3. [ 103.763423][ T8259] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 103.786445][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 103.786461][ T40] audit: type=1400 audit(1756523647.161:500): avc: denied { read } for pid=8258 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.827028][ T8264] overlayfs: failed to resolve './file1/file0': -2 [ 103.867382][ T8270] qrtr: Invalid version 0 [ 104.252094][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 104.388036][ T40] audit: type=1400 audit(1756523647.761:501): avc: denied { mounton } for pid=8293 comm="syz.3.659" path="/152/bus" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 104.388159][ T8295] 9pnet_rdma: rdma_create_trans (8295): problem binding to privport: 13 [ 104.719617][ T8299] tipc: Started in network mode [ 104.721885][ T8299] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 104.732626][ T8299] tipc: Enabled bearer , priority 10 [ 104.799283][ T40] audit: type=1400 audit(1756523648.171:502): avc: denied { open } for pid=8306 comm="syz.2.663" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=23589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.839654][ T8313] overlayfs: failed to resolve './file1/file0': -2 [ 104.853771][ T8310] 9pnet_fd: p9_fd_create_tcp (8310): problem connecting socket to 127.0.0.1 [ 104.857414][ T40] audit: type=1400 audit(1756523648.231:503): avc: denied { mount } for pid=8314 comm="syz.3.666" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 104.888772][ T40] audit: type=1400 audit(1756523648.261:504): avc: denied { unmount } for pid=5983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 104.947909][ T8321] netlink: 'syz.2.667': attribute type 12 has an invalid length. [ 104.957698][ T8321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.057968][ T40] audit: type=1400 audit(1756523648.431:505): avc: denied { write } for pid=8335 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.067807][ T40] audit: type=1400 audit(1756523648.431:506): avc: denied { validate_trans } for pid=8335 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.194459][ T40] audit: type=1400 audit(1756523648.571:507): avc: denied { mount } for pid=8351 comm="syz.3.679" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 105.262387][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 105.341971][ T8368] __nla_validate_parse: 3 callbacks suppressed [ 105.341995][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 105.349165][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'. [ 105.355389][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.683'. [ 105.428446][ T40] audit: type=1400 audit(1756523648.801:508): avc: denied { getopt } for pid=8371 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 105.479176][ T72] IPVS: starting estimator thread 0... [ 105.481107][ T8377] tipc: Started in network mode [ 105.486492][ T8377] tipc: Node identity ac1414aa, cluster identity 4711 [ 105.490527][ T8377] tipc: Enabled bearer , priority 10 [ 105.558643][ T8385] syzkaller0: entered promiscuous mode [ 105.560696][ T8385] syzkaller0: entered allmulticast mode [ 105.572244][ T8378] IPVS: using max 42 ests per chain, 100800 per kthread [ 105.672527][ T8391] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 105.732165][ T8396] tmpfs: Cannot disable swap on remount [ 105.746618][ T40] audit: type=1400 audit(1756523649.121:509): avc: denied { append } for pid=8397 comm="syz.1.692" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.847500][ T8396] syz.3.691 (8396) used greatest stack depth: 17928 bytes left [ 105.862977][ T72] tipc: Node number set to 4269801488 [ 105.875652][ T8403] fuse: Unknown parameter 'ᗄԼgroup_id' [ 105.881941][ T8405] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 105.884732][ T8405] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 105.888237][ T8405] comedi comedi3: 8255: I/O port conflict (0x10000004,4) [ 105.894112][ T8405] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 105.898171][ T8405] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffbf1,4) [ 105.903441][ T8405] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 105.907929][ T8405] overlayfs: maximum fs stacking depth exceeded [ 105.948718][ T8410] overlayfs: maximum fs stacking depth exceeded [ 105.985626][ T5994] usb 8-1: USB disconnect, device number 6 [ 106.052943][ T8426] netlink: 'syz.3.703': attribute type 21 has an invalid length. [ 106.055491][ T8426] netlink: 128 bytes leftover after parsing attributes in process `syz.3.703'. [ 106.058838][ T8426] netlink: 'syz.3.703': attribute type 6 has an invalid length. [ 106.061582][ T8426] netlink: 3 bytes leftover after parsing attributes in process `syz.3.703'. [ 106.246380][ T8442] netlink: 14 bytes leftover after parsing attributes in process `syz.3.711'. [ 106.284327][ T8442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.291024][ T8442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.297711][ T8442] bond0 (unregistering): Released all slaves [ 106.319864][ T8444] Process accounting resumed [ 106.322019][ T8449] netlink: 'syz.1.709': attribute type 4 has an invalid length. [ 106.515104][ T8472] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 106.517975][ T8472] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 106.520931][ T8472] netlink: 160 bytes leftover after parsing attributes in process `syz.1.719'. [ 106.531893][ T8472] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 106.536207][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 106.602810][ T5994] tipc: Node number set to 2886997162 [ 106.905071][ T8489] fuse: Bad value for 'fd' [ 107.432196][ T8514] netlink: 'syz.2.731': attribute type 3 has an invalid length. [ 107.435356][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 107.788575][ T8519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.733'. [ 108.077437][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 108.392038][ T8557] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 108.394211][ T8557] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 108.416531][ T8557] vhci_hcd vhci_hcd.0: Device attached [ 108.423519][ T8558] vhci_hcd: connection closed [ 108.424366][ T103] vhci_hcd: stop threads [ 108.428874][ T103] vhci_hcd: release socket [ 108.431065][ T103] vhci_hcd: disconnect device [ 108.545166][ T8580] overlayfs: failed to resolve './file1/file0': -2 [ 108.574767][ T8581] comedi comedi0: no devices specified [ 108.681481][ T8592] afs: Unknown parameter 's' [ 108.771383][ T8602] overlayfs: failed to resolve './file1/file0': -2 [ 108.809851][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 108.809866][ T40] audit: type=1400 audit(1756523652.181:558): avc: denied { map } for pid=8606 comm="syz.0.759" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.820411][ T40] audit: type=1400 audit(1756523652.181:559): avc: denied { execute } for pid=8606 comm="syz.0.759" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.023161][ T40] audit: type=1400 audit(1756523652.401:560): avc: denied { mounton } for pid=8619 comm="syz.0.763" path="/203/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 109.094370][ T8637] overlayfs: failed to resolve './file1/file0': -2 [ 109.371253][ T8653] could not allocate digest TFM handle cryptd(blake2b-160) [ 109.524466][ T8671] netlink: 'syz.3.778': attribute type 4 has an invalid length. [ 109.599392][ T40] audit: type=1400 audit(1756523652.971:561): avc: denied { bind } for pid=8670 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.606334][ T40] audit: type=1400 audit(1756523652.971:562): avc: denied { name_bind } for pid=8670 comm="syz.3.778" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 109.613959][ T40] audit: type=1400 audit(1756523652.971:563): avc: denied { node_bind } for pid=8670 comm="syz.3.778" saddr=10.1.1.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 109.680171][ T8674] overlayfs: failed to resolve './file1/file0': -2 [ 109.715208][ T8676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.780289][ T8676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.835181][ T8680] nfs: Unknown parameter 'overlay' [ 109.838663][ T40] audit: type=1400 audit(1756523653.211:564): avc: denied { create } for pid=8679 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.852764][ T40] audit: type=1400 audit(1756523653.211:565): avc: denied { setopt } for pid=8679 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.860426][ T40] audit: type=1400 audit(1756523653.211:566): avc: denied { write } for pid=8679 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.958674][ T40] audit: type=1400 audit(1756523653.331:567): avc: denied { create } for pid=8688 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 110.031305][ T8694] efs: device does not support 512 byte blocks [ 110.038126][ T8694] device does not support 512 byte blocks [ 110.038126][ T8694] [ 110.063352][ T8699] overlayfs: failed to resolve './file1/file0': -2 [ 110.237262][ T8718] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 110.333326][ T8725] overlayfs: overlapping lowerdir path [ 110.374679][ T8727] netlink: 'syz.2.799': attribute type 2 has an invalid length. [ 110.377746][ T8727] __nla_validate_parse: 10 callbacks suppressed [ 110.377763][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 110.637330][ T103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.777675][ T103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.860632][ T103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.884025][ T5991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.889123][ T5991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.893647][ T5991] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.899952][ T5991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.904709][ T5991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.938445][ T103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.973152][ T8748] lo speed is unknown, defaulting to 1000 [ 110.977575][ T8748] lo speed is unknown, defaulting to 1000 [ 111.079283][ T8757] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 111.090710][ T103] bridge_slave_1: left allmulticast mode [ 111.095236][ T8759] netlink: 108 bytes leftover after parsing attributes in process `syz.3.810'. [ 111.095638][ T103] bridge_slave_1: left promiscuous mode [ 111.102355][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.113732][ T103] bridge_slave_0: left allmulticast mode [ 111.115760][ T103] bridge_slave_0: left promiscuous mode [ 111.117744][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.131023][ T103] batman_adv: batadv0: Interface deactivated: gretap1 [ 111.162518][ T1475] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 111.230038][ T103] bond1 (unregistering): (slave ip6gretap2): Releasing active interface [ 111.314850][ T103] batman_adv: batadv0: Removing interface: gretap1 [ 111.317048][ T1475] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 111.321140][ T1475] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.324405][ T1475] usb 7-1: Product: syz [ 111.325884][ T1475] usb 7-1: Manufacturer: syz [ 111.327498][ T1475] usb 7-1: SerialNumber: syz [ 111.336113][ T1475] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 111.358944][ T34] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 111.384024][ T103] bridge0 (unregistering): left allmulticast mode [ 111.567489][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.572025][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.746545][ T103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.756483][ T103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.764350][ T103] bond0 (unregistering): (slave veth0_virt_wifi): Releasing backup interface [ 111.771195][ T103] bond0 (unregistering): Released all slaves [ 111.877143][ T103] bond1 (unregistering): Released all slaves [ 111.884669][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'. [ 111.887766][ T8757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.810'. [ 111.891335][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'. [ 111.895801][ T8757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.810'. [ 111.911495][ T8770] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 111.933703][ T8775] overlayfs: overlapping lowerdir path [ 111.972950][ T103] tipc: Left network mode [ 112.041610][ T8748] chnl_net:caif_netlink_parms(): no params data found [ 112.137198][ T8793] tmpfs: Unknown parameter 'ghabdlimit' [ 112.153750][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.157016][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.160603][ T8748] bridge_slave_0: entered allmulticast mode [ 112.164332][ T8748] bridge_slave_0: entered promiscuous mode [ 112.212296][ T10] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 112.227659][ T8796] netlink: 36 bytes leftover after parsing attributes in process `syz.0.819'. [ 112.228975][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.233914][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.237769][ T8748] bridge_slave_1: entered allmulticast mode [ 112.240764][ T8748] bridge_slave_1: entered promiscuous mode [ 112.296995][ T8748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.307631][ T8748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.326648][ T8797] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 112.326648][ T8797] The task syz.0.819 (8797) triggered the difference, watch for misbehavior. [ 112.336752][ T5994] usb 7-1: USB disconnect, device number 9 [ 112.380992][ T8748] team0: Port device team_slave_0 added [ 112.385480][ T8748] team0: Port device team_slave_1 added [ 112.396036][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 112.400485][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 112.406635][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 919, setting to 64 [ 112.411955][ T34] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 112.413527][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.414912][ T34] ath9k_htc: Failed to initialize the device [ 112.418085][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.423356][ T10] usb 8-1: Product: Ǹᵽ쭮ᰋ䮊胚ᑾꭓ∠춽姗퉞养⤕槨瞣鈝ꔌᇳ枡漶㋂ⓥ삩Кꩯ㑙햱귏茚ࢭ㒋袂遫✕Ž鼁ꖧ㨱鐏ᘶ⨂䔙䷉ㄶ⒉ሶ␉ᆿ妛跃殸碌뚥螓齷㣍㧏襁脑 [ 112.424784][ T5994] usb 7-1: ath9k_htc: USB layer deinitialized [ 112.430461][ T10] usb 8-1: Manufacturer: ȁ앵ੑ߸扺㌹밣㈜䅑얺娹⢷圡砪䧙窴疒텪鴹ŧျ꬙펙뜫릜돲檋㒒䍢伌詓閂᝿ᒯ阎맔끺葢椟羔멋뷮᠏ [ 112.430484][ T10] usb 8-1: SerialNumber: 瑶騞쟊־睺阫븹総ᚶ縚ผ랅氨ꄧ똽䒈鼻噍漵䐬嬯쉴㗝襗䞍뇬擹밚奌篍롁䑁찱峃Ꮫﻜ艶峸▅맮鎰⽨ꞎꗱᣋ牶쒧පӹ京葄쟓ꮨ囐훇즧ํ⻞꾹턝↦辰㸆盡ⶾ鋙驺訳끣組ﱢ꫊崄뜈褅뿮䏇ﮊ寍 [ 112.454107][ T8780] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 112.466444][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.469577][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.482810][ T8748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.489848][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.493449][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.502254][ T8748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.607849][ T103] hsr_slave_0: left promiscuous mode [ 112.610378][ T103] hsr_slave_1: left promiscuous mode [ 112.613890][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.616334][ T103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.643387][ T103] veth1_macvtap: left promiscuous mode [ 112.646083][ T103] veth0_macvtap: left promiscuous mode [ 112.649405][ T103] veth1_vlan: left promiscuous mode [ 112.651465][ T103] veth0_vlan: left promiscuous mode [ 112.699742][ T10] cdc_ncm 8-1:1.0: bind() failure [ 112.706113][ T10] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 112.708704][ T10] cdc_ncm 8-1:1.1: bind() failure [ 112.716400][ T10] usb 8-1: USB disconnect, device number 7 [ 112.746987][ T103] pim6reg (unregistering): left allmulticast mode [ 112.975933][ T5991] Bluetooth: hci0: command tx timeout [ 112.976878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.029359][ T8823] overlayfs: overlapping lowerdir path [ 113.128543][ T8829] netlink: 204 bytes leftover after parsing attributes in process `syz.2.826'. [ 113.133716][ T8829] tmpfs: Unknown parameter 'hug<' [ 113.383889][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 113.488177][ T103] team0 (unregistering): Port device team_slave_1 removed [ 113.532334][ T29] usb 7-1: device descriptor read/64, error -71 [ 113.590462][ T103] team0 (unregistering): Port device team_slave_0 removed [ 113.775251][ T29] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 113.912034][ T29] usb 7-1: device descriptor read/64, error -71 [ 114.032209][ T29] usb usb7-port1: attempt power cycle [ 114.346329][ T8748] hsr_slave_0: entered promiscuous mode [ 114.350780][ T8748] hsr_slave_1: entered promiscuous mode [ 114.355681][ T8748] debugfs: 'hsr0' already exists in 'hsr' [ 114.358241][ T8748] Cannot create hsr debugfs directory [ 114.371942][ T29] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 114.396583][ T29] usb 7-1: device descriptor read/8, error -71 [ 114.632067][ T29] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 114.663614][ T29] usb 7-1: device descriptor read/8, error -71 [ 114.688460][ T8748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.699154][ T8748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.706444][ T8748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.713522][ T8748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.716442][ T8848] overlayfs: overlapping lowerdir path [ 114.770005][ T8748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.781984][ T29] usb usb7-port1: unable to enumerate USB device [ 114.786260][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.795056][ T8572] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.799437][ T8572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.815721][ T8574] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.818173][ T8574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.828311][ T8869] overlayfs: failed to clone upperpath [ 114.835203][ T103] IPVS: stop unused estimator thread 0... [ 114.896360][ T8875] netlink: 'syz.3.834': attribute type 11 has an invalid length. [ 114.931304][ T8875] batman_adv: batadv0: Adding interface: dummy0 [ 114.933583][ T8875] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.943423][ T8875] batman_adv: batadv0: Interface activated: dummy0 [ 114.955031][ T8875] batadv0: mtu less than device minimum [ 114.957687][ T8875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.962566][ T8875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.967452][ T8875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.972128][ T8875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.977295][ T8875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.982185][ T8875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.987237][ T8875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.992114][ T8875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.996211][ T8875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.020115][ T8748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.053583][ T5991] Bluetooth: hci0: command tx timeout [ 115.113673][ T8890] netlink: 40 bytes leftover after parsing attributes in process `syz.3.835'. [ 115.172205][ T8748] veth0_vlan: entered promiscuous mode [ 115.178026][ T8748] veth1_vlan: entered promiscuous mode [ 115.197078][ T8748] veth0_macvtap: entered promiscuous mode [ 115.201316][ T8748] veth1_macvtap: entered promiscuous mode [ 115.212020][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.220758][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.233563][ T6218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.237263][ T6218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.240179][ T6218] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.247074][ T6218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.292620][ T8572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.296222][ T8572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.312614][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.316406][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.327920][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 115.327935][ T40] audit: type=1400 audit(1756523658.701:582): avc: denied { mounton } for pid=8748 comm="syz-executor" path="/syzkaller.PdRUsR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 115.407228][ T8894] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio0-cursor) [ 115.653759][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.841'. [ 115.676859][ T8912] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 115.725360][ T8917] tap0: tun_chr_ioctl cmd 1074025672 [ 115.727333][ T8917] tap0: ignored: set checksum enabled [ 115.784153][ T8925] netlink: 'syz.0.848': attribute type 11 has an invalid length. [ 115.902265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.903665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.908198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.911296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.914280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.917252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.071928][ T1026] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 116.206805][ T8940] overlayfs: workdir and upperdir must be separate subtrees [ 116.206907][ T8939] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 116.243786][ T1026] usb 9-1: config index 0 descriptor too short (expected 4132, got 36) [ 116.246391][ T1026] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.250165][ T1026] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.256413][ T1026] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 116.259512][ T1026] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.263234][ T8939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.850'. [ 116.263781][ T1026] usb 9-1: config 0 descriptor?? [ 116.271223][ T1026] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 116.420591][ T40] audit: type=1400 audit(1756523659.791:583): avc: denied { lock } for pid=8946 comm="syz.2.852" path="/dev/cec0" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.451710][ T8950] overlayfs: failed to resolve './file1': -2 [ 116.475964][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.480034][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.493334][ T1475] usb 9-1: USB disconnect, device number 2 [ 116.509505][ T8952] netlink: 'syz.2.854': attribute type 13 has an invalid length. [ 116.804271][ T8967] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 116.808123][ T8967] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.839948][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 116.843326][ T8969] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8969 comm=syz.0.860 [ 116.848053][ T8969] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8969 comm=syz.0.860 [ 116.855746][ T40] audit: type=1400 audit(1756523660.231:584): avc: denied { audit_write } for pid=8968 comm="syz.0.860" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.901333][ T8980] SELinux: syz.3.862 (8980) set checkreqprot to 1. This is no longer supported. [ 116.918918][ T40] audit: type=1400 audit(1756523660.291:585): avc: denied { write } for pid=8979 comm="syz.3.862" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.131934][ T5991] Bluetooth: hci0: command tx timeout [ 117.137304][ T40] audit: type=1400 audit(1756523660.511:586): avc: denied { mount } for pid=9008 comm="syz.0.869" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 117.137901][ T9009] overlay: filesystem on ./bus is read-only [ 117.148252][ T40] audit: type=1400 audit(1756523660.511:587): avc: denied { mounton } for pid=9008 comm="syz.0.869" path="/bus" dev="sysfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 117.207340][ T9013] bridge_slave_0: left allmulticast mode [ 117.209554][ T9013] bridge_slave_0: left promiscuous mode [ 117.212863][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.870'. [ 117.213457][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.228068][ T9013] bridge_slave_1: left allmulticast mode [ 117.231388][ T9013] bridge_slave_1: left promiscuous mode [ 117.235300][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.246877][ T9013] bond0: (slave bond_slave_0): Releasing backup interface [ 117.253678][ T9013] bond0: (slave bond_slave_1): Releasing backup interface [ 117.264413][ T9013] team0: Port device team_slave_0 removed [ 117.266999][ T40] audit: type=1400 audit(1756523660.641:588): avc: denied { ioctl } for pid=9010 comm="syz.3.870" path="socket:[25081]" dev="sockfs" ino=25081 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.280278][ T9013] team0: Port device team_slave_1 removed [ 117.283855][ T9013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.287071][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.289636][ T9013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.305985][ T10] lo speed is unknown, defaulting to 1000 [ 117.315556][ T9015] vxcan1: entered promiscuous mode [ 117.320341][ T9015] team0: Port device vxcan1 added [ 117.362075][ T9018] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 117.394145][ T9018] bond1: (slave bridge1): making interface the new active one [ 117.397668][ T9018] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 117.452076][ T40] audit: type=1400 audit(1756523660.821:589): avc: denied { load_policy } for pid=9020 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 117.457085][ T9022] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 117.466623][ T9022] SELinux: failed to load policy [ 117.469304][ T5991] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 117.515057][ T9026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9026 comm=syz.2.875 [ 117.519514][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'. [ 117.551931][ T9026] vlan2: entered allmulticast mode [ 117.553884][ T9026] bond4: entered allmulticast mode [ 118.031146][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 118.036195][ T9040] netlink: 'syz.3.878': attribute type 13 has an invalid length. [ 118.039618][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 118.052993][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 118.053001][ T103] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.057770][ T9040] netlink: 'syz.3.878': attribute type 13 has an invalid length. [ 118.057794][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 118.066690][ T103] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.071298][ T103] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.074783][ T8572] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.115638][ T40] audit: type=1400 audit(1756523661.491:590): avc: denied { bind } for pid=9041 comm="syz.3.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.332007][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 118.356305][ T5991] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 118.434132][ T40] audit: type=1400 audit(1756523661.811:591): avc: denied { module_load } for pid=9041 comm="syz.3.879" path="/226/bus" dev="tmpfs" ino=1253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 118.459387][ T9054] netlink: 'syz.2.884': attribute type 10 has an invalid length. [ 118.467141][ T9054] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.470895][ T9054] bond0: (slave team0): Enslaving as an active interface with an up link [ 118.514297][ T9063] batman_adv: batadv0: Adding interface: dummy0 [ 118.516977][ T9063] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.526795][ T9063] batman_adv: batadv0: Interface activated: dummy0 [ 118.529775][ T9065] No control pipe specified [ 118.631554][ T9082] overlay: Unknown parameter 'subj_user' [ 118.640753][ T9082] vlan1: entered promiscuous mode [ 118.643111][ T9082] vlan1: entered allmulticast mode [ 118.644935][ T9082] hsr_slave_1: entered allmulticast mode [ 118.683212][ T9087] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 118.700246][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 118.774098][ T9097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.779330][ T9097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 118.850529][ T9097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.854565][ T9097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 118.938051][ T9097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.943356][ T9097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 119.011213][ T9111] batman_adv: batadv0: Interface deactivated: dummy0 [ 119.013925][ T9111] batman_adv: batadv0: Removing interface: dummy0 [ 119.026782][ T9113] sp0: Synchronizing with TNC [ 119.074696][ T9097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.076775][ T9116] Bluetooth: hci4: Frame reassembly failed (-84) [ 119.078247][ T9097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 119.081697][ T103] Bluetooth: hci4: Frame reassembly failed (-84) [ 119.088422][ T63] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 119.192190][ T8573] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 119.195771][ T8573] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 119.207444][ T8573] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 119.210237][ T8573] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 119.211939][ T63] Bluetooth: hci0: command tx timeout [ 119.218429][ T9120] vlan2: entered allmulticast mode [ 119.220793][ T9120] bond0: entered allmulticast mode [ 119.225218][ T9120] bond_slave_0: entered allmulticast mode [ 119.228132][ T9120] bond_slave_1: entered allmulticast mode [ 119.236178][ T8574] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 119.238931][ T8574] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 119.252478][ T103] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 119.255583][ T103] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 119.536820][ T9146] ip6gretap2: entered promiscuous mode [ 119.539354][ T9146] ip6gretap2: entered allmulticast mode [ 119.678894][ T9156] xt_socket: unknown flags 0x20 [ 119.778408][ T9162] netlink: 'syz.2.921': attribute type 1 has an invalid length. [ 119.781447][ T9162] netlink: 'syz.2.921': attribute type 3 has an invalid length. [ 119.785005][ T9162] NCSI netlink: No device for ifindex 0 [ 120.044212][ T9181] overlayfs: failed to clone upperpath [ 120.073391][ T5994] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 120.139353][ T9186] binder: 9185:9186 ioctl c0306201 200000000640 returned -22 [ 120.241895][ T5994] usb 7-1: Using ep0 maxpacket: 8 [ 120.246201][ T5994] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 120.250895][ T5994] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.256185][ T5994] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.260495][ T9196] overlayfs: failed to clone upperpath [ 120.260578][ T5994] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.267306][ T5994] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.274165][ T5994] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.278648][ T5994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.306151][ T9200] overlayfs: missing 'lowerdir' [ 120.341472][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 120.341486][ T40] audit: type=1400 audit(1756523663.711:594): avc: denied { bind } for pid=9201 comm="syz.0.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 120.450284][ T9212] [U]  [ 120.486508][ T40] audit: type=1400 audit(1756523663.861:595): avc: denied { accept } for pid=9215 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 120.497548][ T5994] usb 7-1: usb_control_msg returned -32 [ 120.499699][ T5994] usbtmc 7-1:16.0: can't read capabilities [ 120.506094][ T9219] net_ratelimit: 11 callbacks suppressed [ 120.506107][ T9219] openvswitch: netlink: IP tunnel TTL not specified. [ 120.538289][ T9224] netlink: 'syz.0.943': attribute type 39 has an invalid length. [ 120.592730][ T9225] netlink: 'syz.0.943': attribute type 1 has an invalid length. [ 120.598635][ T9225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9225 comm=syz.0.943 [ 120.682192][ T9230] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 120.716363][ T9233] usb usb8: usbfs: process 9233 (syz.4.946) did not claim interface 0 before use [ 120.721678][ T9233] __nla_validate_parse: 8 callbacks suppressed [ 120.721687][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.946'. [ 121.132044][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 121.132075][ T5991] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 121.210088][ T9244] usbtmc 7-1:16.0: CHECK_CLEAR_STATUS returned 2f [ 121.213947][ T40] audit: type=1400 audit(1756523664.591:596): avc: denied { read } for pid=9168 comm="syz.2.923" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 121.221938][ T40] audit: type=1400 audit(1756523664.591:597): avc: denied { open } for pid=9168 comm="syz.2.923" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 121.247035][ T40] audit: type=1400 audit(1756523664.621:598): avc: denied { map } for pid=9246 comm="syz.3.949" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.255431][ T40] audit: type=1400 audit(1756523664.621:599): avc: denied { execute } for pid=9246 comm="syz.3.949" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.365732][ T40] audit: type=1400 audit(1756523664.741:600): avc: denied { mounton } for pid=9250 comm="syz.3.950" path="/233/file0/file0" dev="afs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 121.384428][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 121.430654][ T9253] netlink: 2 bytes leftover after parsing attributes in process `syz.3.951'. [ 121.431114][ T9254] netlink: 2 bytes leftover after parsing attributes in process `syz.3.951'. [ 121.514860][ T5994] usb 7-1: USB disconnect, device number 14 [ 121.535932][ T40] audit: type=1400 audit(1756523664.911:601): avc: denied { ioctl } for pid=9263 comm="syz.3.954" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 121.541135][ T9264] sp0: Synchronizing with TNC [ 121.658622][ T9274] qrtr: Invalid version 0 [ 121.671330][ T9274] 9pnet_fd: Insufficient options for proto=fd [ 121.709119][ T40] audit: type=1400 audit(1756523665.081:602): avc: denied { mounton } for pid=9283 comm="syz.3.957" path="/240/file0" dev="tmpfs" ino=1329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 121.809475][ T9287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.958'. [ 122.002556][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.962'. [ 122.007179][ T9299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.074197][ T9299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.118305][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 122.122842][ T9308] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 122.364224][ T9314] syz.4.967 (9314): drop_caches: 2 [ 122.395992][ T9351] ip6tnl2: entered promiscuous mode [ 122.398253][ T9351] ip6tnl2: entered allmulticast mode [ 122.452946][ T40] audit: type=1400 audit(1756523665.831:603): avc: denied { append } for pid=9356 comm="syz.4.972" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.469305][ T9357] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.593481][ T9361] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.973'. [ 122.597566][ T9361] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 123.134436][ T5991] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 123.138281][ T5991] Bluetooth: hci2: Injecting HCI hardware error event [ 123.144974][ T5991] Bluetooth: hci2: hardware error 0x00 [ 123.386663][ T9379] input: syz1 as /devices/virtual/input/input11 [ 123.431712][ T9381] validate_nla: 1 callbacks suppressed [ 123.433887][ T9381] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 123.506477][ T9390] overlayfs: missing 'lowerdir' [ 123.549538][ T9393] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 123.671644][ T9401] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:0 [ 123.809364][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 123.913296][ T9408] ------------[ cut here ]------------ [ 123.916134][ T9408] WARNING: CPU: 3 PID: 9408 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 123.920703][ T9408] Modules linked in: [ 123.923149][ T9408] CPU: 3 UID: 0 PID: 9408 Comm: syz.3.988 Not tainted syzkaller #0 PREEMPT(full) [ 123.929567][ T9408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.933916][ T9408] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 123.936009][ T9408] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f fd 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d ee af 7e 0e 00 75 0b c6 05 e5 af 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 123.942645][ T9408] RSP: 0018:ffffc90005f8f7f0 EFLAGS: 00010246 [ 123.944714][ T9408] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.947439][ T9408] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000040d40 [ 123.950015][ T9408] RBP: 0000000000000020 R08: 0000000000000005 R09: 0000000000000009 [ 123.953348][ T9408] R10: 0000000000000020 R11: 0000000000000000 R12: 0000000000040d40 [ 123.956107][ T9408] R13: 1ffff92000bf1f13 R14: ffffffff9ae7ca24 R15: 0000000000000020 [ 123.958764][ T9408] FS: 00007fbc177d56c0(0000) GS:ffff8880d69b8000(0000) knlGS:0000000000000000 [ 123.961651][ T9408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.964346][ T9408] CR2: 00007fbc177d2f70 CR3: 0000000028bf2000 CR4: 0000000000352ef0 [ 123.967202][ T9408] DR0: 0000000000000001 DR1: 00000000eeee0000 DR2: 0000000033331002 [ 123.970396][ T9408] DR3: 0000000000000002 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 123.973963][ T9408] Call Trace: [ 123.975080][ T9408] [ 123.976032][ T9408] ? do_syscall_64+0xcd/0x4c0 [ 123.977676][ T9408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.979927][ T9408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.983815][ T9408] ? kasan_quarantine_put+0x10a/0x240 [ 123.985649][ T9408] ? lockdep_hardirqs_on+0x7c/0x110 [ 123.987436][ T9408] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.989341][ T9408] ? policy_nodemask+0xea/0x4e0 [ 123.990944][ T9408] alloc_pages_mpol+0x1fb/0x550 [ 123.992850][ T9408] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 123.995172][ T9408] ? v9fs_fid_get_acl+0x7a/0x120 [ 123.997142][ T9408] ___kmalloc_large_node+0xed/0x160 [ 123.998934][ T9408] ? v9fs_fid_get_acl+0x7a/0x120 [ 124.000585][ T9408] __kmalloc_large_node_noprof+0x1c/0x70 [ 124.002439][ T9408] __kmalloc_noprof.cold+0xc/0x61 [ 124.004808][ T9408] ? __pfx_iget5_locked+0x10/0x10 [ 124.006480][ T9408] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 124.008571][ T9408] v9fs_fid_get_acl+0x7a/0x120 [ 124.010248][ T9408] v9fs_get_acl+0xee/0x530 [ 124.011942][ T9408] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 124.014089][ T9408] v9fs_mount+0x4fd/0xa90 [ 124.015746][ T9408] ? __pfx_v9fs_mount+0x10/0x10 [ 124.017345][ T9408] ? cap_capable+0xb3/0x250 [ 124.018826][ T9408] ? __pfx_v9fs_mount+0x10/0x10 [ 124.020600][ T9408] legacy_get_tree+0x109/0x220 [ 124.022481][ T9408] vfs_get_tree+0x8b/0x340 [ 124.024658][ T9408] path_mount+0x1513/0x2000 [ 124.026453][ T9408] ? __pfx_path_mount+0x10/0x10 [ 124.028168][ T9408] ? kmem_cache_free+0x2d1/0x4d0 [ 124.029791][ T9408] ? putname+0x154/0x1a0 [ 124.031124][ T9408] ? putname+0x154/0x1a0 [ 124.032569][ T9408] ? __x64_sys_mount+0x28d/0x310 [ 124.034356][ T9408] __x64_sys_mount+0x28d/0x310 [ 124.036084][ T9408] ? __pfx___x64_sys_mount+0x10/0x10 [ 124.037725][ T9408] ? fd_install+0x244/0x750 [ 124.039253][ T9408] do_syscall_64+0xcd/0x4c0 [ 124.040753][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.042845][ T9408] RIP: 0033:0x7fbc1958ebe9 [ 124.044680][ T9408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.051132][ T9408] RSP: 002b:00007fbc177d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.053811][ T9408] RAX: ffffffffffffffda RBX: 00007fbc197c6090 RCX: 00007fbc1958ebe9 [ 124.056707][ T9408] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 124.059382][ T9408] RBP: 00007fbc19611e19 R08: 0000200000000580 R09: 0000000000000000 [ 124.062084][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.065161][ T9408] R13: 00007fbc197c6128 R14: 00007fbc197c6090 R15: 00007ffff57b0038 [ 124.068229][ T9408] [ 124.069451][ T9408] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.071852][ T9408] CPU: 3 UID: 0 PID: 9408 Comm: syz.3.988 Not tainted syzkaller #0 PREEMPT(full) [ 124.074763][ T9408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.078564][ T9408] Call Trace: [ 124.079748][ T9408] [ 124.080782][ T9408] dump_stack_lvl+0x3d/0x1f0 [ 124.082362][ T9408] vpanic+0x6e8/0x7a0 [ 124.083900][ T9408] ? __pfx_vpanic+0x10/0x10 [ 124.085666][ T9408] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 124.087806][ T9408] panic+0xca/0xd0 [ 124.089093][ T9408] ? __pfx_panic+0x10/0x10 [ 124.090654][ T9408] check_panic_on_warn+0xab/0xb0 [ 124.092276][ T9408] __warn+0xf6/0x3c0 [ 124.093550][ T9408] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 124.095536][ T9408] report_bug+0x3c3/0x580 [ 124.096910][ T9408] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 124.098948][ T9408] handle_bug+0x184/0x210 [ 124.100426][ T9408] exc_invalid_op+0x17/0x50 [ 124.102160][ T9408] asm_exc_invalid_op+0x1a/0x20 [ 124.104108][ T9408] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 124.106731][ T9408] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f fd 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d ee af 7e 0e 00 75 0b c6 05 e5 af 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 124.112813][ T9408] RSP: 0018:ffffc90005f8f7f0 EFLAGS: 00010246 [ 124.114742][ T9408] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.117226][ T9408] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000040d40 [ 124.119778][ T9408] RBP: 0000000000000020 R08: 0000000000000005 R09: 0000000000000009 [ 124.123026][ T9408] R10: 0000000000000020 R11: 0000000000000000 R12: 0000000000040d40 [ 124.125965][ T9408] R13: 1ffff92000bf1f13 R14: ffffffff9ae7ca24 R15: 0000000000000020 [ 124.128929][ T9408] ? do_syscall_64+0xcd/0x4c0 [ 124.130955][ T9408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.133532][ T9408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 124.136247][ T9408] ? kasan_quarantine_put+0x10a/0x240 [ 124.138856][ T9408] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.141082][ T9408] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.143133][ T9408] ? policy_nodemask+0xea/0x4e0 [ 124.144910][ T9408] alloc_pages_mpol+0x1fb/0x550 [ 124.146807][ T9408] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 124.148923][ T9408] ? v9fs_fid_get_acl+0x7a/0x120 [ 124.151031][ T9408] ___kmalloc_large_node+0xed/0x160 [ 124.153210][ T9408] ? v9fs_fid_get_acl+0x7a/0x120 [ 124.155349][ T9408] __kmalloc_large_node_noprof+0x1c/0x70 [ 124.157744][ T9408] __kmalloc_noprof.cold+0xc/0x61 [ 124.159883][ T9408] ? __pfx_iget5_locked+0x10/0x10 [ 124.162098][ T9408] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 124.164872][ T9408] v9fs_fid_get_acl+0x7a/0x120 [ 124.167187][ T9408] v9fs_get_acl+0xee/0x530 [ 124.169149][ T9408] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 124.171333][ T9408] v9fs_mount+0x4fd/0xa90 [ 124.173127][ T9408] ? __pfx_v9fs_mount+0x10/0x10 [ 124.175315][ T9408] ? cap_capable+0xb3/0x250 [ 124.177345][ T9408] ? __pfx_v9fs_mount+0x10/0x10 [ 124.179099][ T9408] legacy_get_tree+0x109/0x220 [ 124.180761][ T9408] vfs_get_tree+0x8b/0x340 [ 124.182207][ T9408] path_mount+0x1513/0x2000 [ 124.183669][ T9408] ? __pfx_path_mount+0x10/0x10 [ 124.185213][ T9408] ? kmem_cache_free+0x2d1/0x4d0 [ 124.186756][ T9408] ? putname+0x154/0x1a0 [ 124.188115][ T9408] ? putname+0x154/0x1a0 [ 124.189660][ T9408] ? __x64_sys_mount+0x28d/0x310 [ 124.191928][ T9408] __x64_sys_mount+0x28d/0x310 [ 124.194250][ T9408] ? __pfx___x64_sys_mount+0x10/0x10 [ 124.196163][ T9408] ? fd_install+0x244/0x750 [ 124.198042][ T9408] do_syscall_64+0xcd/0x4c0 [ 124.199629][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.201898][ T9408] RIP: 0033:0x7fbc1958ebe9 [ 124.203526][ T9408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.210868][ T9408] RSP: 002b:00007fbc177d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.215256][ T9408] RAX: ffffffffffffffda RBX: 00007fbc197c6090 RCX: 00007fbc1958ebe9 [ 124.218901][ T9408] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 124.222346][ T9408] RBP: 00007fbc19611e19 R08: 0000200000000580 R09: 0000000000000000 [ 124.226006][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.229479][ T9408] R13: 00007fbc197c6128 R14: 00007fbc197c6090 R15: 00007ffff57b0038 [ 124.233256][ T9408] [ 124.235989][ T9408] Kernel Offset: disabled [ 124.237968][ T9408] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:14:27 Registers: info registers vcpu 0 CPU#0 RAX=000000000010befd RBX=0000000000000000 RCX=ffffffff8b93fc29 RDX=0000000000000000 RSI=ffffffff8de50a38 RDI=ffffffff8c162980 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab5290 R15=0000000000000000 RIP=ffffffff8b93e78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000063c0 CR3=00000000373f4000 CR4=00352ef0 DR0=0000000000000001 DR1=00000000eeee0000 DR2=0000000033331002 DR3=0000000000000002 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000004c6b504b6e RBX=ffff88806a523a00 RCX=00000000000006e0 RDX=000000000000004c RSI=ffff88806a523a00 RDI=00000000001cc7b0 RBP=00000000001cc7b0 RSP=ffffc900006a0ec8 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000019 R15=ffff88806a527c80 RIP=ffffffff81683db5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbbc748a6c0 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbc177f5f98 CR3=00000000373f4000 CR4=00352ef0 DR0=0080000000000006 DR1=0000000000000800 DR2=0000000000000401 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040002 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec11582c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec11582c6 00007ffec11582cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbc6612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbc6612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbc6612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbc6612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbc6612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbc6612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbc67974a8 00007fbbc67974a0 00007fbbc6797498 00007fbbc6797470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d4552555341454d 5f434c00454e4f48 50454c45545f434c 0053534552444441 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f434c00454d414e 5f434c0052455041 505f434c00534547 415353454d5f434c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000c347d RBX=0000000000000002 RCX=ffffffff8b93fc29 RDX=0000000000000000 RSI=ffffffff8de50a38 RDI=ffffffff8c162980 RBP=ffffed1003bd2910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801de94880 R14=ffffffff90ab5290 R15=0000000000000000 RIP=ffffffff8b93e78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002100 CR3=0000000035681000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643ab5 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc90005f8f160 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006b R14=ffffffff9b112060 R15=ffffffff85643a50 RIP=ffffffff85643adf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbc177d56c0 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbc177d2f70 CR3=0000000028bf2000 CR4=00352ef0 DR0=0000000000000001 DR1=00000000eeee0000 DR2=0000000033331002 DR3=0000000000000002 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff142de1d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff142de356 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff142de356 00007fff142de35c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc997612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc997612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc997612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc997612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc997612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc997612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000