last executing test programs: 1m20.827973359s ago: executing program 1 (id=5): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1}, {{@in6=@mcast1}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x3}}}, 0xe4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) set_robust_list(0x0, 0x0) epoll_pwait2(r1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) open(0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r6 = eventfd2(0x0, 0x0) r7 = dup2(r6, r5) write$eventfd(r6, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000000)={0x0, r5}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d0f, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r10, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) open$dir(&(0x7f0000000080)='./bus\x00', 0x7e, 0x0) 1m19.968302739s ago: executing program 1 (id=26): r0 = socket(0x15, 0x5, 0x0) (async) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x6) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x6576, 0x9}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x100000000) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6b30, @dev={0xfe, 0x80, '\x00', 0x11}, 0xfffffffe, 0x1}, 0x20) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000000c0)=0x7) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 1m19.968164056s ago: executing program 1 (id=27): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x1890a0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r1, 0xd2a67000) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)={0x578, 0xf0, 0xa0, 0x3a0, 0x0, 0xb, 0x4, 0x1, {0x0, 0x0, 0x2}, {0x0, 0x3}, {0x0, 0x0, 0xffffffff}, {0xb, 0x0, 0x1}, 0x6, 0x100, 0xfffff001, 0x155, 0x1, 0x8, 0x0, 0x0, 0x800, 0x0, 0xff, 0x2, 0x0, 0x0, 0x2}) madvise(&(0x7f000038f000/0x4000)=nil, 0x4000, 0x8) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x6f2f) 1m19.878244202s ago: executing program 1 (id=28): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x3fff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x1, 0x25dfdbfe, {0x2, 0x0, 0x0, r5, 0x10, 0x40, 0x1}, [@NDA_IFINDEX={0x8}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r6) 1m19.877610453s ago: executing program 1 (id=29): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xc4081, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x67) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) ioprio_get$pid(0x1, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) unshare(0x20040500) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) 1m18.997398427s ago: executing program 1 (id=43): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/161, 0xa1}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) (async) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4d, &(0x7f00000001c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @val={@void}, {@llc_tr={0x11, {@llc={0xfe, 0x42, "a3", "85012d23162c413c1d7b1d5749cf6dcb81c847b807bbb777512a8fda0aaecd24f473319e1c1d9496dcb0a9d986bc1f308b578c0198d973f3"}}}}}, 0x0) mremap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="44e30c01", @ANYRES16=r4, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003003f000000"], 0x44}}, 0x0) 1m3.162462183s ago: executing program 32 (id=43): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/161, 0xa1}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) (async) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4d, &(0x7f00000001c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @val={@void}, {@llc_tr={0x11, {@llc={0xfe, 0x42, "a3", "85012d23162c413c1d7b1d5749cf6dcb81c847b807bbb777512a8fda0aaecd24f473319e1c1d9496dcb0a9d986bc1f308b578c0198d973f3"}}}}}, 0x0) mremap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="44e30c01", @ANYRES16=r4, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003003f000000"], 0x44}}, 0x0) 39.998190888s ago: executing program 4 (id=498): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 39.997447043s ago: executing program 4 (id=499): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) r2 = syz_io_uring_setup(0xa46, &(0x7f0000000080)={0x0, 0x98ce, 0x2, 0x1, 0x325, 0x0, r0}, &(0x7f0000000040), &(0x7f00000005c0)) syz_io_uring_setup(0x3c63, &(0x7f0000000240)={0x0, 0x7b46, 0x27, 0x0, 0x0, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000200)) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xf8f}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e14060200345d000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20040000) 39.901981519s ago: executing program 4 (id=500): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) syz_open_procfs(r0, &(0x7f00000003c0)='net/llc/socket\x00') r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="017bf8318600feffffff270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c005100736f757263655f6d61635f69735f6d756c70696361737400b13040d7b12cf8c675b8c3665236f0b619ac751f4090bd9b97ff001b7e8800ac074b1ffed3"], 0x50}}, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_pressure(r5, &(0x7f00000002c0)='cpu.pressure\x00', 0x2, 0x0) getdents(r5, 0x0, 0x0) socket(0x6, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0xaea2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000240), &(0x7f0000000100)=0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000003000000000000000000000d0000000005000000040d000000020000000200004f60c17f35000700000003000000ff00000008000000020000000b0000000e000000040000140600611e2d9577fb008d29b2fe8692ed8ba28cf5222a60fc022d77fd6abf768362f9012f5ccdc0fcda30694f6e5c110423a3ad350d0918bd28fdf25e13"], 0x0, 0x63, 0x0, 0x1, 0x10001, 0x0, @void, @value}, 0x28) 39.774807145s ago: executing program 4 (id=501): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r2}, 0x10) getpriority(0x0, 0x0) (async) getpriority(0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x401, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000) (async) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000) socket$nl_audit(0x10, 0x3, 0x9) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32, @ANYBLOB="100400000000000024001280110001006272696467655f736c617665000000000c0005800500090001"], 0x44}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000180)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x8, r8}, 0x10) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000b00)=0x1000000, 0x4) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000b00)=0x1000000, 0x4) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_GET_API_VERSION(r9, 0xae00, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) 39.77214462s ago: executing program 4 (id=502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000040801010000000000000000010000000900010073797a300000000005000300110000000900010073797a3100000000060002"], 0x50}, 0x1, 0x0, 0x0, 0x74}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f041}) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x2f) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) close_range(r1, r1, 0x0) 39.424113381s ago: executing program 4 (id=503): io_setup(0x20003, &(0x7f0000000040)=0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002007910480000000000610430000000000095000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_getevents(r0, 0x6, 0x0, &(0x7f0000000140), 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000280)="dc", 0x1, 0x9}]) io_destroy(r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r2) r4 = add_key$user(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000340)='\x00\x00', 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r3, r4}, &(0x7f0000000600)=""/259, 0x103, &(0x7f0000000400)={&(0x7f0000000100)={'sha512-generic\x00'}}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000080)={0xc, &(0x7f0000000100)={0x20, 0x0, 0x2, {0x2, 0x1}}, 0x0}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000200)={0x1, 0xe41a}) 39.411291671s ago: executing program 33 (id=503): io_setup(0x20003, &(0x7f0000000040)=0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002007910480000000000610430000000000095000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_getevents(r0, 0x6, 0x0, &(0x7f0000000140), 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000280)="dc", 0x1, 0x9}]) io_destroy(r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r2) r4 = add_key$user(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000340)='\x00\x00', 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r3, r4}, &(0x7f0000000600)=""/259, 0x103, &(0x7f0000000400)={&(0x7f0000000100)={'sha512-generic\x00'}}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000080)={0xc, &(0x7f0000000100)={0x20, 0x0, 0x2, {0x2, 0x1}}, 0x0}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000200)={0x1, 0xe41a}) 6.522554234s ago: executing program 2 (id=749): syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{}, {@any, 0x3}}}, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) unshare(0x20000400) r4 = syz_io_uring_setup(0x3f9f, &(0x7f0000000080)={0x0, 0x1ee6, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00'}) io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x1, 0x0, @pic={0x0, 0xfe, 0x0, 0x4, 0x0, 0x77, 0x8, 0x1, 0x6, 0x0, 0x2, 0xbb, 0x0, 0x40}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x5, 0x69, 0x0, 0x0, 0x8000000, 0xfffffffffffff800, 0x4], 0x0, 0x2c0710}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000780)='%pi6 \x00'}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000180)={0x3, 'vcan0\x00', {0x81}, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x20, 0x8847, 0x6, 0x6, {{0x24, 0x4, 0x3, 0x3b, 0x90, 0x67, 0x0, 0x2, 0x2f, 0x0, @empty, @loopback, {[@noop, @cipso={0x86, 0x72, 0xffffffffffffffff, [{0x1, 0x7, "f1e298b75e"}, {0x2, 0x9, "5319e1c5442512"}, {0x7, 0x9, "32b91215008b92"}, {0x6, 0xd, "681041e64f34e17614262b"}, {0x7, 0xd, "b4b4189131dda2f397bf02"}, {0x7, 0x11, "621ca888b6bf7355eb07ac26ac753a"}, {0x1, 0x9, "19534ea292c0ae"}, {0x6, 0x6, "0a8a6160"}, {0x6, 0xd, "177e620148b3ccd4ea72ad"}, {0x1, 0xc, "108898ea28319bef2e2f"}]}, @lsrr={0x83, 0x7, 0x59, [@empty]}]}}}}}) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[@ANYBLOB="2c0400001000010025bd700000000000e0000002000000000000000000000000000000000000000000000000000000004000000000030003000000a032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000020000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000a00010006000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c0017000800000027bd70002dbd700027bd70002cbd7000ff0000000300000007000000bf0100000400000059000000e7360000ff00000008000000ac000700ac1414aa0000000000000000000000000a0101000000000000000000000000004e2438004e2400083faaa0201d000000", @ANYRES32=r10, @ANYRES32, @ANYBLOB="040000000000000000000000000080f5f30dfc470000000000000000000000000b00000000000000040000000000000001ffffffffffffff06000000000000000300000000000000040000000000000008000000000000000101000000000000030000000000000002010302000000000a0010000100000000000000240017000200000028bd70002bbd70002abd70002cbd70000180000008000000040000004900020073616c736132302d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000df000000f3000800ef0008000103e700aae6417e9c7a765c5aa6e110ac61b871e1b948ac799de96f18c9b76978cb76e16ca770dfe02e2709895ec5579fcfe8857206865a582612faa1c3887cf8b92d9bd38dfb7004a530e8dd964277d082268ca7f9e5ad009b0e86637bf3bd40a1e6fa29f77e1651dc05bc4577471b33778b3c72af60a2d97d4f7598bfb9b168be14131624f9f68bb5ab1eca0813b0d369a5f6a387de5f9ac0c8bc74e46d94c06013669d238dcb3c01a4fd01b1b307404db3678a6aee13c2865ebd85076b01913d71196b40a39dec4a00e1dc55c4886822c2fa2e58c4c696e03cbc00840c123f4b3ad4d5e72a9fa364009c001100fe80000000000000000000000000001800000000200000000000000000000001ac1414380000000000000000000000007f000001000000000000000000000000ff0400000535000002000a00fc020000000000000000000000000001ac1414aa040000000000000000000000ac1e0001000000000000000000000000fc020000000000000000000000000000ff03"], 0x42c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffafa40000000000f9deeefd00f0ffff70c43b41000000000004230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffafa40000000000f9deeefd00f0ffff70c43b41000000000004230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.353102356s ago: executing program 2 (id=750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000100)=0x80000006, 0x4) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000c00)=ANY=[@ANYRES64=r3], 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x20, 0xa, 0x60, {0x60, 0x23, "e3027e799809f602823abdae77e45c65a6f5f033cd6a6ae0be0c962e5408b866fd42d1c778222777d4e6703a5d313466c19d3f8b744ffe524c212abc447c5ac24916a7b98586d9d3b20bb9cdc6b5370da9c9e8cd55f82b83a384c22585f1"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f00000006c0)={0x0, 0xf, 0x184, {0x5, 0xf, 0x184, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x8d, 0x4, 0x8001, 0xf00, 0xfffd, [0x0, 0x0, 0x0, 0xc0c0]}, @generic={0x74, 0x10, 0x8, "ba68c7611aac3773455e2bc6c4c9d36b95f8f49c15b0fc6f188a7fccbc71c30dc90ae93eac0ad566bf7d8343be857e1db1ed7d2fa5f30e7680e8a170129bcc20f4d1470a644d857ec415bc5dfac7f1f788e677bff82266e09736ed924a1dddeb4bb48807cf49ede6dc3367a427d849f21f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xd2, 0x8, 0x2, 0xffff, 0xe}, @wireless={0xb, 0x10, 0x1, 0x8, 0x41, 0x74, 0x1, 0x5, 0xfc}, @ptm_cap={0x3}, @generic={0xd6, 0x10, 0x3, "e51e5a6b3352724b18a6d700e93af8fb5675d42c9227163fd6b9f40eedb87fe637f33ee919a1f172baf9fac37f0198a49984770d59a739393a2307907b515c8bc82eee373ddce688f547f536bddc688dd365a64f14a7fdf1fe93faa77b959d58fc5ff5d9e4d911c5cfa97d5c34f3864eb7f4e93446c2833f44d38ec4a6cad7e49091859456174248d72fcdce23e66eb846359100dc2e58fd71103df0e33e82f6e00dc3af36935b3ebfda0663aa24bcefc0137554e647f62bcf91261e12f24f1e05a1ff1965d0ad87e6fdc0d9f59f4a1a0d8c63"}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x80, 0x1, 0xfe, "ff3a8c8d", "5dca9841"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x6, 0x7f, 0x7, 0x8, 0x8}}}, &(0x7f0000000b40)={0x84, &(0x7f00000004c0)={0x0, 0xc, 0x5d, "6316e51f2a4334228349e6ae1744639be5f08499f2df464fc54e749a56938d30e6403276210953e571974deea71720549c99832f3278fb39f2b70dc03ca925fe97726f5afee6a9fcd4faba25ffd85bdd7b7ca7c76208b6b8dd1ffe45d5"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000600)=ANY=[@ANYBLOB="97b185142ebe7327489b"], &(0x7f0000000880)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0xb, 0x2, "f71a"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000980)={0x40, 0x13, 0x6}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, 'Ui'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xfff9}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x40}}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="28001000ff992d9ed2aa146219a1c5d227eed68315e2916cb1942541693f8b50f4e943c2355715981738df8f25b735aa8c3eb24bef682dcb6ed0ba90436c86aa5eca9c14b140ead0f171f42a1afc915e5519a517cfbbb3d8b4f516be28fce3481f08f7e21da280c1ae2005c070ca6297c7676b76b0ae4c0a1e71583fa895fb6fcf57c544cd70ae3997e300"/152, @ANYRES16=r7, @ANYBLOB="0900000000000000000007000000140001800500020001000000080006001d000000"], 0x28}}, 0x0) syz_emit_ethernet(0x6c, &(0x7f00000001c0)={@link_local, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33c83", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "e3e627", 0x0, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], ';I'}}}}}}}, 0x0) 3.090370022s ago: executing program 2 (id=795): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) 3.085247946s ago: executing program 2 (id=799): bpf$BPF_LINK_CREATE(0x1c, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xcd0a}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9634}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x8008040) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r7, &(0x7f0000000400)={0x27, r5, 0x1, 0x4}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r9, 0xa02, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}}, 0x20044840) (async) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000580)=""/160, &(0x7f0000000640)=0xa0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) ioctl$SIOCAX25GETUID(r10, 0x89e0, &(0x7f00000007c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) (async) write$nci(r10, &(0x7f0000000800)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0xf9, {0x1, 0x3}}, 0x5) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000880)=0xc) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={r11, r10}, 0x10) (async) getsockopt$IP_SET_OP_GET_BYNAME(r10, 0x1, 0x53, &(0x7f0000000940)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000980)=0x28) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x78, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c055}, 0x20008010) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r10) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, r12, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) pwritev2(r8, &(0x7f0000002080)=[{&(0x7f0000000c80)="ec8a59dc43c64e6f5e1375962ac0c82e3bcc80fc0cc28350932090e7fc6e44a6db7e549a96e02e5e884f6b9b16a04ebaf511795410fd497c4be279354fb120b276ae0072d9f7d83884fe61f0ae6c95b5d9b5344a087caf67a5b98de5a55ac85848af97a863f8256d640efa661dd2632b193354fa104f90c7ecec68a864fda443bb7a5bd25a945877a7fdba", 0x8b}, {&(0x7f0000000d40)="829d1dc98c947085d73d27b83f6cc764c0bcf8b74fded05706e535ad77368d027d42b1ce083a58b1ffa89787c52d7c919d3051deeba194b3c98758070c7a7c2da603838a6ba784270413ca44f8468447a26232bb3ea2b0de8a0d722fdc86dd18bab0596d92b9051b645bad26a83fbc8658ec5ffe8f38a2e6b51064c9e10e56e60799f78fa96d3c32e50b63a0e5e30a4984389ddb1c9862b0017e4005d29612cfd45b249dd83fbd2ad3a0eb85884d5e6c09e193e6a10a88de4e70f34fb02d3fc1b331417b666cb5d235a3be4a5b598b9df2d28c182013918bd1ac7739a4f46273b76af8610809e20b87731bd2fee3a0660873778d6573cab4bbf5a676b769b0e534b823c51e97a74060b6567452e5672a21e9c163684fa91e72bb71642be2a386355b93379f518bc3057afb51af0b52b3e4a2490cfd19910fdbff09f0daa32bb264d23537938cae607dd28448e725b2e452ceb88261b1ccc234d6e6a096e3e05363729730f8b872e1bab49335bdd52512afb06bc1bea4a1c4014869b15d4fa29f96a62863930cd1c7c0ac9743e154e6d81bf0713c4852e46ee43485afb85b9447cdda530d6f49950bd8524be2b9ff8b749cba1e9d9967c85007e267474a58cd673c2eb2d6ee6ba85f2c28e651c3e6373a4c9fbc9a57a932044194b733e1851a54cc2e9e0c152cd614dc64cd0720a163a61992e94cfb9fea10690fc3876d1483ef20fd85f0e17571133006d71fac061ad097aa672337f78e7f79e4b5b8640151fcdffb9ef6ad71cb58861774fe49d13c6bde7e0b2bdf024ab0306989f6b7ccddb5dffed69d070e6922d6c8eb72993ea0d0f5204d9009ee2006d725d03e2c726634816f974516d136a4005c8f250c5d48a10f5c2ae70ec81079c6ef620b6c4ad7a255607e73fc1755a06d99d02eded9e13fcfe885140427bf9a4f19b4a4be5e818ddc9f7adde4cd79e982af787ef63da237a9009592af1f271f184a81276996174525f627b0579e832dacb508108707de25539b2d420f90515d6f91f1c75f1acd3fd3442f650794db180fa4359c17ebcf9f8c6a0abaa577ddd7931d699f9d327037013e30c28bb8c9bdb154954bd4cc818dd0b4e426fa6a54c0842455874debc7cd01d926cd8fedcac422372e1012f09f43cf6c13bf0a3efd9d05fd5019f2ac44f4d6d6df1335c20dd1244c3c88d95832e629568c3b11d1c224177d3fa2db4a23d58818e56c27b02e80bd2e992223939d871e43d2ff94c0f0a85f71c0ba07afe37dfda393c9389a8c16f4c1411216befebc459e6d7c8c8d2631a0768aaad20a8c4512051f19a0b2883d6dd3619bca7042d35b9521dc8eb090adbf684f0f61d79006a940308d4a2200e2d4ac803ffc8ea9c7f690b7e654f86285761566656029a675cc7cffc14fe058120a07d4d31c45f2e92f458078b7ec02bf4c9554edf7ac329d79e07779033a83b629df00239f28a70cf11fdcc9295409d19f189be0a4a134bdbb838bd392a3c980e86a75196d8426136dbe737e77c2f10c58d96a0f962c446b726d7928ebe053d901d20471ba56525e86bf22dbb21fd277e1e7d4aa9d5d4753e4ae466eb082e5f22bee9ceba9f61abb80ef3c1c64b630a76572e7fe2475907d82bc3a8070601976c0d4700a8c441bc2fc08ce73cc834abc7f7db7f9def474ddba1b3b748af5b0fcf98be924e973da816560952908c1b95f623d128e0e30a5c343f2da38aec555910a4f8e5b6ca979a062d3273f565a9bc7d136b7ec8ad431fe287504b4fdaa99d01e4644443f4169765d529104e90e7ba72cbeac93319dd3cf88aa22644631d5846fc5134a2b9ae3db9d0e7226992b5a9c00ab0769bab76ecd0319d03367ad81b587a82822e783c78759e9c69a64e4013911da32d4333ac4f9589c237b1352db01b18d7681fb66cbd1d57c281ea0c9b8e7f76a72a1a42b8d549db681ae947cdd84cb7733a9761eea1808c9d541d9054269178176ead770c41c94a6bdcc0a2e7b52df9483f9eec3b95fe9967c44be6efd1e7310ed63b6d038f198db1c0435da556f09bb05915111db9d3347574d464c1ac779392ec46e0d48629a4accbdda3742778dfb603621abb8c30716f26ff89f6eb403ca09960a50277643f69d60d9e27190891248ceaa8890769c95f1914124db3946a9f1164ecb877c7b7d6c31b7714ce87b8e5a760373712e64a986b115d6de95edbed47422bca08c1cce9cbc499a0d2e4981ea04f8637f655ebbff252cca32f7cbed0e884c8df8940458ab157bbcf70b40e6ae4e1a2624f33fd814db6715122796057b6e2d2d0344b14cf62c59247fe2c6f78d12ca4c387f737980ab029d4e7c9c6757d84aaadca69b939d67e4a2862bd38c9ae46ffd8431da0825348efb3ad32c49a31925332e2bcd63bf67241248fef17882a8b9092fbfb0bbb6cf2408513657dd65a2ef9865bf4b7ab508cf2b3f46b61625d7ba88c9c952d66730740adfa7e974fa84abb2283b80419663d011152e8973d495db2613237f126a69e3249ff00d410b27c21f664b92d8097b87f221d5c52fcddb89284deddc11a774f270d0ae268d1c68a7a937b4213fe235766a68e9e47c19411e9b5c0360430df317e561df65016d74d82961a7da636ffccfc59a513e0f324dcab60456e6955c9424f66423caed79dfeceef5ac9d623d5a0c3d9a81eca950a7081109a15324738f57b3c0808dce6047c939193b9843ace7588453d524c58a3e5b12323690612e014be5dc98060661cd1e33f7dccdfd83388769fdeb61a3cb9f80f10504a8f5816031ddf93f69641926d3475dcc76326a4a4c018c1cae8a87dcc1d9b06d8920bc8e0d129456c72d01fd487ea45d7010a2715fef5dbe3b6d6ee847641212d1fc8555d1cd30893f76d68a661317acff9b169f443993a9ac13d25c389ebc9a92e9254fc8a1ba9a0ef4f43be8d28be737a9cf81ab35e85eaa86c33e13606d3ecb13aedad4e41f6bb3ee1224924611a0fafda4e7d68875eaf1adcf18fd69a0fe3ccbf4b021aaffe1fa3025801951327fd452c7130570dfe0b124647d535e1c5a5624135231ead38840c11e7263a99d256fefe1bc2a65e10a0178d259aa489e78f69869d9b28b7b1ec3324dd6cc54a7368e3b76a9be42f11d7eb4557bf3422636b5e2d8eb4e9a9193f1dd11f9cc8335b7509e21da84b0bfc036f776e4720bc6d045f6dd6de89a7e29840562d2879e804c002688a031933e67e2611170facdb07e669544306d99c38a07df86931c7690df759164aa6719cc2201c11e8f9395d3c768b66b3ba89570ea8712b6c2f59e5e071448f1f57a07e770b133ccafc4b19bdebd9fda438c8adcd2d3a40b6ff03c9bee8061777eecea13a8de8784ed4aa56a91b26467880b7579822cfdd5923764b433d746477ba3427fc511c70bafa9673e0f917bc7b984d61e066dce8c0b278b133e99385a8abd99d3b70459023d0ec0adfe687de2f8a18b44460b6fedab830cef78db6595389e4ddcba2df580188dd0ab8dccebd09aa02366bb0af8944269e9efc499f23de429e91c7e3d41841a0ad52588dbc42e798e45304d8e973e3f1d8c465f14f2de36f13b70a3ee0e44bee4b9d410ad2e28d4860d2b456e442f30a3f2a97e7be9cdcc9a6b85242dd37e0685217a38d5f7f19687615936861be7f1d7f0624af9d201b73c35b21e750eef779ba60be728d0d7ff080f5eaf9eb230152e680f0bee5f113933e949173f418c53d4024f6deb05b6484c1d74521fb512ea016151692dc904abc19f1f2696ff5a0e30f3fe461cfd950f1d5ddc8eb90603f481344e76b860fd73ef6d35c88c310ca06b94cade5248132f6fdd0487a6177d95832060a7fb0d64b881167636f4db87eb14230a2c44cf16b6e29e2fd6ea53759a69bf507fe093ffd50b7f0318df6e76e7a0864345e9ad456ecffc715c3f5cb4e7c4a8fb9578bc8058de704f31c561f0e988bc043cf77dcb91c16d5a33d53ce510128bf0634c24d8e616772baaf9c3bf2373ca295e6054d51b662bfe76023fcc4b8abad8cbd7f7d2754646218f2dfc005afd9ec1a840d73fe952ba5e3724d8e076161cf20b0eb071089346774111af232be2dee775a133907fd3f67351f7c6d5a9ca64e2c4fe50b01e62193f76133e45a680d429b91f9804ac41318aa6394cc14fac8ffb128f0ef2101704ce8ec185b5c7a61d130c1592a389fdcb3f086d98a0fddd07824a3fc9c600198286e30f2a04c83aeeb1120c6395702efb99a233ca6dbf4fc856e2728b4ab9f86263409ef6031f01a8cee1fba84d84ac298570e66b7a9d72b3c5dc7d43370208a3b476b54299c2a771a664125ab522e423b65aa0b30c73f67835dfa18db66ade9d278828565472e1bd19bc4e1cbf78097d3335a38d06290c628fc2519e38fe0582a93cb88659d721af43b38f067060ba7694b0266b3c1ee643fdd69a1f0d3125c25d4d456896c530ea2da03a3684f816bf8be58540dfc71e8c5d635f6fff2aea581ba12475cd5aca449db7bbefe63780bb4fc692fb301c97e31e238c215040e1f450ffb428c45df6b77623e3660efa1f75b36c41f29ae42fb529016b27ccd67347e37e4afaeb75002c746d50f612131d8ed4a598211506298c57dedb100e560f4d2230a18dd89eb34d0f73df089b6716d5f01c47a1eb8553501f8741f91b3cf1e2f212a2f30ce6313c9217249173a6df0d2a5a8d33d71de20819a271771336395b59ab35289e209701a479afb74398080d7412dc9ef1be32323dfa504ef2caf70c9512a41975a6b04fa7796f960c08fb76dee9986c6e1e7f1c44bb6f105f4fd00aa859111755c5daeb80f55466b0ce9e80f533892b79a950204e79c5121d9b70416985a94563529247ebbdb7348a6556e8ce1de0f1c05715a21075ae8d652c7ea14b7cc292562dba598b5ffacc0aa2fb402b74d8959eda79e9c385d4556ea14097b6c41b651e7dc2162bca34fca69fcde798da441fa3b5d9e2f172bd0015752c5d05e8e4ddc896da53467777e0bc508899f45b7c63dd852dae609e82d119b36ce463b2a2fc6891a2675c341ae582190730ea60aa43f1e9edb386d2e1eb918d2866f0398592fc120b941a250506e74232d3fd8c76a3e8ede9ede31705fa713bfb6c4e1208dfbdf267011439a29dd29ef47d7d7c7e1eb6e85a752c25bda79915abafed942b322f168f26805716253244738765490c1e8a4b3d10cb21820ad18e6cc5081e8ade9e5a676add9d95848a2618a3770c13af6e6fb4210a3c5cf03390e7002586a43ac8e20758569f7c1fee20a3125272e8feb13d71b82f267e07fd3064598d70dc6e5acec5a689fdbb594d8560cc7c3c05fb2c3c0920798a39332790f7e988bd5011796dfa779aac62a33795317c2397e414f95f79f976d298c7219e44d899a88340c0d33ca4d2430490cc39282051a5a53de19747cc68c85ce6bcf660ebaf345a96b8f1156221d6c8f4feaf1bfd0c895b9b98269e6373f635145cf69054039f1a4e429b3af861c21fa1628710eb8895b3f365114386885532bedac381e78f1f6f8a05e724ec8d50b7304d7922d60a7ac7034f111ea9c9f1ce2a5c6c9fcc339a72ab3f214ce28a7ad9c6a2d99ce0d7e5bd7b9cd08da4652deb874f8233aeb61b2688561fbf5c9b79d269f82f07c6e9bdf3125848fe4c14c6afdb6fbf2a4c6c64893ec38b28f1ad838d2fd69bb05a8c179c5518aaef131f4f0fd9f4bec7ca512681684dbe83f4de31bfc4997e79c60669ae11698e100aec493ac7d0b6377cf9e62a3a42b4b80559709fa3691cdf6f4c713d221a39bd0029a7", 0x1000}, {&(0x7f0000001d40)="0dd0dfe56c0ac3baa4ae72969dc502858addf9c5f354fd4c91d406d4dfd7de692b0d20e6f06623317379e4dbead7f265e590", 0x32}, {&(0x7f0000001d80)="02f7d36f4a9a97e3943854cf6c749e2b921b8508789fbba23bb5d7e2f46b473a626174f39babbe6f3c48bd76df130f900dc3155ba639cecff8b66c8e3f9d59a93e5a98280f30f990754b019e46eaf3e0c57a6e03d1a1de08cbbe2643ffb12a343adc70b095eb8258206b7ea3dff45a15f02228e86f7fa42aebe21fe2468f95", 0x7f}, {&(0x7f0000001e00)="89019cf313308d5ebd4261b97917f53ab07f15", 0x13}, {&(0x7f0000001e40)="d39aff0d613ed764d5f0d802e08d303a21f254807e9e4daaa377f371e766aa686929e773c889eee1e5db78b36ce82cd8789cd4ce756ce029e097f1dfe047fde500e7f992d94c1bea683700c4c428fcd0d1ec927d7365b61605ce6b46096fb337830e739aa731b8ca056082ab6defb774b2f891a9bd292c33c0c2cb10141dde9b7460727defbd19436873b3ccd4e1681789f7ab38cda3a0a1d11b538955bc8287633bf8d974eb9c6a2ba5e9b3bf193004e354adfce3", 0xb5}, {&(0x7f0000001f00)="f880f5d32171f21931d7d2118ace7fa6d42a8bb2895af710c6a681a72a8fd099bf3fc3959d233c39886ee4a179e96f21193f34479138707354474ebfaf792a0824c135d6e3266eedf630385923399e3693910a3d247afb9b3c221c33bb1759fded2b0f985f7c0703a319215b47685c40bdfcbf", 0x73}, {&(0x7f0000001f80)="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", 0xfb}], 0x8, 0x8, 0x7, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$EVIOCGREP(r10, 0x80084503, &(0x7f0000002100)=""/74) 2.996389599s ago: executing program 2 (id=800): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) bind$qrtr(r0, &(0x7f0000000100)={0x2a, 0x1}, 0xc) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mmap(&(0x7f00007d6000/0x3000)=nil, 0x3000, 0x2000007, 0x4008031, r1, 0x0) r2 = userfaultfd(0x80001) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0x9, 0x1}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r2) fsopen(&(0x7f00000003c0)='iso9660\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000440)}], 0x1) 2.793194042s ago: executing program 3 (id=802): r0 = syz_open_dev$media(&(0x7f0000000280), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{}, {r1}, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x19, 0x0, &(0x7f0000000540)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r4, 0x0) r5 = dup3(r4, r2, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0xf0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r5) syz_open_dev$media(&(0x7f0000000280), 0x3, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000300)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{}, {r1}, 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet6_int(r3, 0x29, 0x19, 0x0, &(0x7f0000000540)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) shutdown(r4, 0x0) (async) dup3(r4, r2, 0x0) (async) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0xf0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r5) (async) 2.792380504s ago: executing program 2 (id=803): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x1a3c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000080)={0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c10000000001fff00000000000000001e0002000000000000000000"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x7f, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1, 0x1, 0x36, 0x1}}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0xb34, 0x2c, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x6}, {0x2, 0xe}, {0x5cc2c8688e9339, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff9}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @filter_kind_options=@f_route={{0xa}, {0x6ac, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xfa}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_POLICE={0x410, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x3197, 0x4, 0xfffffffd, 0xa16e, 0x80, 0x4, 0x3, 0x34, 0x858, 0x0, 0x35df, 0x9, 0x1, 0x95, 0x95, 0x0, 0x7, 0x1, 0xb, 0x2, 0x200, 0xffff, 0x6, 0x0, 0x0, 0x8, 0x81, 0xd, 0x100, 0x8, 0x8, 0x2, 0x9, 0x5, 0x4, 0x2, 0x4, 0xe, 0x5, 0xfff, 0x1, 0x7, 0x4, 0x8a, 0x2522ece3, 0xd7d, 0x2, 0x1, 0x4ed3, 0x81, 0xfffffffa, 0x401, 0x5, 0x4, 0xd, 0x9, 0x15, 0x1ff, 0x5, 0x8, 0x8, 0x9, 0x7f80000, 0x5, 0xe000, 0x4, 0xfffffff7, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0x143cd682, 0xb, 0x69a44266, 0x8, 0x53a4, 0x8, 0x0, 0x2, 0x1, 0x6, 0xfff, 0x80, 0x3, 0xeb31, 0x1, 0x2, 0x9, 0x2e7ad65e, 0x7, 0x2, 0x10000, 0x2, 0x8, 0x8bb, 0x0, 0x800, 0x2, 0x5, 0x3bb6, 0x83c9, 0x80000001, 0x10, 0x7, 0xfffffffe, 0x0, 0x6f53, 0xd, 0x8, 0x401, 0x0, 0x4, 0x9, 0xff, 0x800, 0x5, 0xfffffff9, 0x8, 0x9, 0x6, 0x6d, 0x9, 0x7fffffff, 0x96, 0x3, 0x9, 0x4, 0x2, 0xb, 0x9, 0xa05, 0xfffffffa, 0x2, 0x1, 0x251, 0x8, 0x5d7e, 0x7, 0x80, 0x2, 0x1, 0x80000000, 0x0, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x2, 0x6, 0x7, 0x8, 0x80000001, 0x5, 0x0, 0x5, 0x6, 0x2, 0xe535, 0x6, 0x3fc00, 0x22, 0x10000, 0x7, 0xfffffffd, 0x7, 0x8001, 0xdd, 0x1, 0x0, 0x4, 0x7, 0xfe96, 0x7, 0xbf, 0x3, 0x6, 0x5, 0x408a, 0x3, 0xd, 0xfffff558, 0x3, 0xfffffaf6, 0x587f, 0x4, 0xfff, 0x81, 0x5, 0x8, 0x6c, 0x4, 0x407, 0x0, 0x5, 0xa35, 0x0, 0xf, 0x0, 0xd3b7, 0xee, 0x6, 0xa, 0x0, 0x8000, 0x6, 0x3, 0x2, 0xfff, 0x8, 0xd38d, 0x2b8e, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x4b07, 0xfffffffa, 0xb, 0x101, 0xc, 0x0, 0xe, 0x9, 0xffff, 0x1, 0xe, 0x7, 0x60b, 0xd92, 0xc, 0xfffffffa, 0x6, 0x9, 0x1, 0xffffffff, 0x7f, 0x4, 0x5, 0x6, 0x6, 0xb, 0x0, 0x0, 0x9, 0x9, 0xf, 0xd09c, 0x29a44e13, 0x8000, 0x7]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xfff1}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0xf}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xbb}, @TCA_ROUTE4_ACT={0x198, 0x6, [@m_csum={0x194, 0x18, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0xfffffffa, 0x10000000, 0xdf90, 0xa0}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x4, 0x5, 0x5, 0x6}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0xc, 0x0, 0x4, 0x9}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x5, 0x8, 0x2}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0xffffffffffffffff, 0x3ff, 0x1}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0xffffffffffffffff, 0xb, 0x4}, 0x17}}]}, {0xbf, 0x6, "42dec1d744cd2b0df2b7c7d47c9e5a6671ad33d2b902b9239b864827c5c35f67a51f42da9d89c5d1fc6ece5ebb70e7bef16994d2e8cf7ec9329d531d73db70f6bcbc5010e0c8193cfd89a69a7a3a391add294e7c1cd8590c630bc3176190d1866551b3bb5331eb5b5e15b43707366a8bec5f0dda395fe51d48f76246b5e4c0da90a813f9058a50ec5ec5ea52916f82537a70bc654bcf94de93175bfcdc9660a34ea5578c9c2c28e81a8e12862b8c0fcec3fd08d34cae160bea62bd"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x208}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffc0}]}, @TCA_ROUTE4_POLICE={0xbc, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x4, 0x6, 0x2800000, {0xfd, 0x0, 0x1ff, 0x1, 0x8, 0x4}, {0x7, 0x0, 0xfffc, 0x1f1, 0x0, 0x8}, 0x7fff, 0xf, 0x50}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0xffffff7c, 0xfff, 0x9, {0x7, 0x0, 0x6, 0x2, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x0, 0x7, 0x5}, 0x1, 0x6, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5e9}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @filter_kind_options=@f_cgroup={{0xb}, {0x408, 0x2, [@TCA_CGROUP_EMATCHES={0x404, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x15c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x3}, {0x7, 0x800, 0x6, 0x0, 0x7, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x2, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc0, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x8}, "f92e0e6c574b224d997018e0ba31a6d48f7b4635b29faf2343b84f46249d8899b2d3aeb92c8b0a4f3e1edf5fd0c3f83c90f745cfd417ae56aaf27d8caea3980d152253c63b2da36fe1e439008cdb1314f4ade5bea00956eb34085abeba2742b4e4af7b9cc181c726b4f811fc17d55eac607bc6f38e2e1d5664aa93be3cc890db5be013512b17a2b18b1347d28e0b7c95cbaef699b63df72bdc597462908a7fbabfedcb05b7cdf0cea1e69745b9b0ab2aee"}}, @TCF_EM_META={0x5c, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="044ad225fa67", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="a01041"]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="627100e916d234a8d9d6"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="a0", @TCF_META_TYPE_VAR="6b7b59fdd8", @TCF_META_TYPE_VAR="7027aa"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="bef3de3e", @TCF_META_TYPE_VAR="02", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x3}, {0x1, 0x1, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x29c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc8, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x3}, "58ac2740551e768d472b9ad8f70ba0cf69db505de8db4c2f171afabc3f58ce36312232899bbc00b2d3e94e47a459dc183c1abfbb6d38b1e96e239cf90b3d7b70d746ed8996b9050d51fba711f60f3cb1c4fe547401cf1b817355a1ddddf15495f3c2d7db7ba97247e59cfa1d181aa8271c2623eba451ae24264023b99b4589ea8cb7a22f3f27dc1e4794c5477b8f0629e5e18d2518158e794990e3be0f98a05716f744c28b546f1d5c79328b5a0a506df58a5e3da693ce0a052f7048"}}, @TCF_EM_META={0x10, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_CONTAINER={0x58, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x9}, "933234ff3bba04168526459bec67f70ec5599779fcb07c45896c4f95d9452a4c468e48064fbf4e6b40c95383583d47d9efdad0f5b66471dc8831eeb82450a8736128f4eb4a743d7f6c7c4f95"}}, @TCF_EM_CONTAINER={0x1c, 0x1, 0x0, 0x0, {{0xbc7, 0x0, 0xb}, "7e65f299195e7d124ac28123838452"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x51b, 0x7, 0x3}, {{0x1}, {0x2, 0x1}}}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x4900, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="d03dc0", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="775189f4bc7878a9", @TCF_META_TYPE_VAR="8eb2"]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="0b4113b53497"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffe, 0x9}, {0xfff, 0x9, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x8}, {0x6, 0x6, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8}, {0x0, 0x83, 0x1}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x6, 0x4, 0xb}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x7}, {0x9, 0x40, 0x2}}}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8000, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="262ff4", @TCF_META_TYPE_VAR="96f1a3a978311eb952", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="73432fd83e264d8c1724"]}]}}, @TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR='zz!', @TCF_META_TYPE_VAR='~', @TCF_META_TYPE_VAR=' \\z']}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='=', @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x883, 0x9, 0x1}, {0x3, 0x5, 0x1}}}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x9}, {0x7, 0x7, 0x0, "9735d6d4ba1aa2"}}}, @TCF_EM_CONTAINER={0x24, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x200}, "a248863bd174d15e813ed99f04df702f2b4786fe0c"}}]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0xb34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x1a3c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000080)={0x0, 0x0}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c10000000001fff00000000000000001e0002000000000000000000"], 0x1c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x7f, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1, 0x1, 0x36, 0x1}}) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0xb34, 0x2c, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x6}, {0x2, 0xe}, {0x5cc2c8688e9339, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff9}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @filter_kind_options=@f_route={{0xa}, {0x6ac, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xfa}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_POLICE={0x410, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x3197, 0x4, 0xfffffffd, 0xa16e, 0x80, 0x4, 0x3, 0x34, 0x858, 0x0, 0x35df, 0x9, 0x1, 0x95, 0x95, 0x0, 0x7, 0x1, 0xb, 0x2, 0x200, 0xffff, 0x6, 0x0, 0x0, 0x8, 0x81, 0xd, 0x100, 0x8, 0x8, 0x2, 0x9, 0x5, 0x4, 0x2, 0x4, 0xe, 0x5, 0xfff, 0x1, 0x7, 0x4, 0x8a, 0x2522ece3, 0xd7d, 0x2, 0x1, 0x4ed3, 0x81, 0xfffffffa, 0x401, 0x5, 0x4, 0xd, 0x9, 0x15, 0x1ff, 0x5, 0x8, 0x8, 0x9, 0x7f80000, 0x5, 0xe000, 0x4, 0xfffffff7, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0x143cd682, 0xb, 0x69a44266, 0x8, 0x53a4, 0x8, 0x0, 0x2, 0x1, 0x6, 0xfff, 0x80, 0x3, 0xeb31, 0x1, 0x2, 0x9, 0x2e7ad65e, 0x7, 0x2, 0x10000, 0x2, 0x8, 0x8bb, 0x0, 0x800, 0x2, 0x5, 0x3bb6, 0x83c9, 0x80000001, 0x10, 0x7, 0xfffffffe, 0x0, 0x6f53, 0xd, 0x8, 0x401, 0x0, 0x4, 0x9, 0xff, 0x800, 0x5, 0xfffffff9, 0x8, 0x9, 0x6, 0x6d, 0x9, 0x7fffffff, 0x96, 0x3, 0x9, 0x4, 0x2, 0xb, 0x9, 0xa05, 0xfffffffa, 0x2, 0x1, 0x251, 0x8, 0x5d7e, 0x7, 0x80, 0x2, 0x1, 0x80000000, 0x0, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x2, 0x6, 0x7, 0x8, 0x80000001, 0x5, 0x0, 0x5, 0x6, 0x2, 0xe535, 0x6, 0x3fc00, 0x22, 0x10000, 0x7, 0xfffffffd, 0x7, 0x8001, 0xdd, 0x1, 0x0, 0x4, 0x7, 0xfe96, 0x7, 0xbf, 0x3, 0x6, 0x5, 0x408a, 0x3, 0xd, 0xfffff558, 0x3, 0xfffffaf6, 0x587f, 0x4, 0xfff, 0x81, 0x5, 0x8, 0x6c, 0x4, 0x407, 0x0, 0x5, 0xa35, 0x0, 0xf, 0x0, 0xd3b7, 0xee, 0x6, 0xa, 0x0, 0x8000, 0x6, 0x3, 0x2, 0xfff, 0x8, 0xd38d, 0x2b8e, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x4b07, 0xfffffffa, 0xb, 0x101, 0xc, 0x0, 0xe, 0x9, 0xffff, 0x1, 0xe, 0x7, 0x60b, 0xd92, 0xc, 0xfffffffa, 0x6, 0x9, 0x1, 0xffffffff, 0x7f, 0x4, 0x5, 0x6, 0x6, 0xb, 0x0, 0x0, 0x9, 0x9, 0xf, 0xd09c, 0x29a44e13, 0x8000, 0x7]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xfff1}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0xf}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xbb}, @TCA_ROUTE4_ACT={0x198, 0x6, [@m_csum={0x194, 0x18, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0xfffffffa, 0x10000000, 0xdf90, 0xa0}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x4, 0x5, 0x5, 0x6}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0xc, 0x0, 0x4, 0x9}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x5, 0x8, 0x2}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0xffffffffffffffff, 0x3ff, 0x1}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0xffffffffffffffff, 0xb, 0x4}, 0x17}}]}, {0xbf, 0x6, "42dec1d744cd2b0df2b7c7d47c9e5a6671ad33d2b902b9239b864827c5c35f67a51f42da9d89c5d1fc6ece5ebb70e7bef16994d2e8cf7ec9329d531d73db70f6bcbc5010e0c8193cfd89a69a7a3a391add294e7c1cd8590c630bc3176190d1866551b3bb5331eb5b5e15b43707366a8bec5f0dda395fe51d48f76246b5e4c0da90a813f9058a50ec5ec5ea52916f82537a70bc654bcf94de93175bfcdc9660a34ea5578c9c2c28e81a8e12862b8c0fcec3fd08d34cae160bea62bd"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x208}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffc0}]}, @TCA_ROUTE4_POLICE={0xbc, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x4, 0x6, 0x2800000, {0xfd, 0x0, 0x1ff, 0x1, 0x8, 0x4}, {0x7, 0x0, 0xfffc, 0x1f1, 0x0, 0x8}, 0x7fff, 0xf, 0x50}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0xffffff7c, 0xfff, 0x9, {0x7, 0x0, 0x6, 0x2, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x0, 0x7, 0x5}, 0x1, 0x6, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5e9}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @filter_kind_options=@f_cgroup={{0xb}, {0x408, 0x2, [@TCA_CGROUP_EMATCHES={0x404, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x15c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x3}, {0x7, 0x800, 0x6, 0x0, 0x7, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x2, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc0, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x8}, "f92e0e6c574b224d997018e0ba31a6d48f7b4635b29faf2343b84f46249d8899b2d3aeb92c8b0a4f3e1edf5fd0c3f83c90f745cfd417ae56aaf27d8caea3980d152253c63b2da36fe1e439008cdb1314f4ade5bea00956eb34085abeba2742b4e4af7b9cc181c726b4f811fc17d55eac607bc6f38e2e1d5664aa93be3cc890db5be013512b17a2b18b1347d28e0b7c95cbaef699b63df72bdc597462908a7fbabfedcb05b7cdf0cea1e69745b9b0ab2aee"}}, @TCF_EM_META={0x5c, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="044ad225fa67", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="a01041"]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="627100e916d234a8d9d6"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="a0", @TCF_META_TYPE_VAR="6b7b59fdd8", @TCF_META_TYPE_VAR="7027aa"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="bef3de3e", @TCF_META_TYPE_VAR="02", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x3}, {0x1, 0x1, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x29c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc8, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x3}, "58ac2740551e768d472b9ad8f70ba0cf69db505de8db4c2f171afabc3f58ce36312232899bbc00b2d3e94e47a459dc183c1abfbb6d38b1e96e239cf90b3d7b70d746ed8996b9050d51fba711f60f3cb1c4fe547401cf1b817355a1ddddf15495f3c2d7db7ba97247e59cfa1d181aa8271c2623eba451ae24264023b99b4589ea8cb7a22f3f27dc1e4794c5477b8f0629e5e18d2518158e794990e3be0f98a05716f744c28b546f1d5c79328b5a0a506df58a5e3da693ce0a052f7048"}}, @TCF_EM_META={0x10, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_CONTAINER={0x58, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x9}, "933234ff3bba04168526459bec67f70ec5599779fcb07c45896c4f95d9452a4c468e48064fbf4e6b40c95383583d47d9efdad0f5b66471dc8831eeb82450a8736128f4eb4a743d7f6c7c4f95"}}, @TCF_EM_CONTAINER={0x1c, 0x1, 0x0, 0x0, {{0xbc7, 0x0, 0xb}, "7e65f299195e7d124ac28123838452"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x51b, 0x7, 0x3}, {{0x1}, {0x2, 0x1}}}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x4900, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="d03dc0", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="775189f4bc7878a9", @TCF_META_TYPE_VAR="8eb2"]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="0b4113b53497"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffe, 0x9}, {0xfff, 0x9, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x8}, {0x6, 0x6, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8}, {0x0, 0x83, 0x1}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x6, 0x4, 0xb}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x7}, {0x9, 0x40, 0x2}}}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8000, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="262ff4", @TCF_META_TYPE_VAR="96f1a3a978311eb952", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="73432fd83e264d8c1724"]}]}}, @TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR='zz!', @TCF_META_TYPE_VAR='~', @TCF_META_TYPE_VAR=' \\z']}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='=', @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x883, 0x9, 0x1}, {0x3, 0x5, 0x1}}}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x9}, {0x7, 0x7, 0x0, "9735d6d4ba1aa2"}}}, @TCF_EM_CONTAINER={0x24, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x200}, "a248863bd174d15e813ed99f04df702f2b4786fe0c"}}]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0xb34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) 2.791937093s ago: executing program 3 (id=804): r0 = socket(0x28, 0x5, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000540)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffff47c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63ca8286, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xfffffffffffffffc, 0x10006, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x0, 0x5, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfeb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000001, 0x73fb, 0x0, 0x0, 0x0, 0x2, 0xb7a8, 0xff, 0x0, 0xfffffffffffffffc]}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x3, 'batadv_slave_0\x00', {0x4}, 0x6}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000440), 0x10) r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x40022020, 0x0, 0x0) 2.729107591s ago: executing program 3 (id=805): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0xfffffffb) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r7 = syz_open_dev$dri(&(0x7f0000000580), 0x20, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f00000002c0), 0x0, 0x2, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000400)={0x1, r9, r8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000100)=[0x0], &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x6, 0x6, 0x1, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000200)={r3, r4, r5, 0x0, 0x5, 0x800, 0x4000000, 0xfffffffc, 0x10, 0xfffffff8, 0x0, 0xfffffffe}) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r10, 0x408c563e, &(0x7f00000001c0)={0x5, 0xd, 0x21, "8324aeae32c1b680fcc75eb0584b92bf579c30b65b3601510cad2674fd11839b6a3ab17da335de4a2cdfb632cb5a2bcae5c00dbf1b557ab8d10fc5bc", 0x37, "b71af48c9030b4d4cdb06d7f1fc4e2def90af3bebaf70e94c83a97a9e1ddc24f633e190951c9dcd7f5f88002fbd8a768ce1049effa4bb5e0fff2e50f", 0x10}) syz_emit_ethernet(0xa2, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000e7006c0600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4c20000907800000402fe11f98951ad7eff2e9879026a27bd9807fe04f98913127224407ce1e28a3616b4bf3400006cc81e2d0648409afaee285e6d42f4a1449000dfb72461db117f96031932f417f838a4fbad018b82f2d62101213b48000080cb3e46de5d41b733e701bbacc96cc50cb272082bb879d20e4c7e2dc38f3b"], 0x0) 2.622118556s ago: executing program 3 (id=806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40046307, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x100000000003}, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 2.62069583s ago: executing program 3 (id=807): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x2a, 0x2, 0x1) recvmsg(r0, &(0x7f0000003240)={&(0x7f0000000f40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000000fc0)=""/120, 0x78}, {&(0x7f0000001040)=""/22, 0x16}, {&(0x7f0000001080)=""/94, 0x5e}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/117, 0x75}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x6, &(0x7f0000003200)=""/13, 0xd}, 0x21) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x1}], 0x1) 2.343659434s ago: executing program 0 (id=813): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000620700000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="8000f2000a0002"], 0x28}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r0}, 0x10) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'team_slave_1\x00', 0x800}) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r7 = syz_io_uring_setup(0x31d9, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/3, 0x3}], 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0xffffffffffbfffff, 0x30dd}) io_uring_enter(r7, 0x5f11, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) 1.659351659s ago: executing program 3 (id=815): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x6c) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0/file0', [{}, {0x20, '\\'}, {}, {0x20, ':'}, {0x20, '\\[]'}], 0xa, "3182b9c5f8ba87caba6371db521b722e53a317d95e31a9ce04a32cca124a8612c7554abe1161524ba420fbde591a4592487734b640bf72973e275ae05033f3613b38a721ef7265bb99a4964cd243aa3edbb39f35105661f988d909bdd951e0efa9e11f9083a02f676315f404b8eb4152306960b0c61aa1b310f72bb11ecd3f7ce48ab35c9b3ce2a49d4323fd47520cc78abddf4d25cad25e467a143111d7c1d43de8f197e8af251847d427d092c16cc9967bec2adf9ba53c4005d4ed0631b8b31b64a0746e7d677b3044e316f0a95694a89b1237308aff071e883b"}, 0xf6) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r6}, 0x68) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='9', 0x1}], 0x1) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x3, @local, 0x8}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) write$qrtrtun(r0, &(0x7f0000000500)="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", 0x1b8) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0xf0, 0x9, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x7, 0x1, 0x2, 0x8d, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x3, 0x4}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x8, 0x2, 0x5, 0x8, 0xc4}, 0x24, &(0x7f0000000280)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0xba, 0xf00, 0x2, [0xc03f, 0xffc0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x3, 0x9, 0x1, 0x8}]}, 0x2, [{0x2, &(0x7f0000000400)=@string={0x2}}, {0x0, 0xfffffffffffffffc}]}) write$qrtrtun(r0, &(0x7f0000000900)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5", 0x239) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.382253524s ago: executing program 0 (id=816): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x72) 1.13588679s ago: executing program 5 (id=817): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x100000000003}, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 1.135009922s ago: executing program 5 (id=818): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x4e24, 0x0, @mcast1}}, {{0xa, 0x4e20, 0x0, @private1, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x12, 0x0, 0xd, "fbdbf978590aa1b88c44306d20"}}) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) write$FUSE_POLL(r5, 0x0, 0x0) (async) dup2(r5, r3) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000c00)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x70bd2b, 0x25dfdbf8, {0xa, 0x10, 0x0, 0x2, 0xfd, 0x0, 0x0, 0x9, 0x1000}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r8, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x2) (async) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./bus\x00') 1.029418764s ago: executing program 5 (id=819): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0xfffffffc, 0x0, {0x9, 0x0, 0x9}}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) syz_open_dev$loop(&(0x7f0000000040), 0x40, 0x185901) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xee01}}, './file0/../file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@mcast2, 0x4e21, 0x4c, 0x4e21, 0x6, 0x2, 0x0, 0xa0, 0x32, 0x0, r1}, {0x4, 0x4, 0xa, 0x32, 0xb21, 0xfff, 0x1, 0x1}, {0x7c2a, 0xfffffffffffffff7, 0x3, 0x9}, 0x5, 0x6e6bba, 0x0, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x6c}, 0x0, @in6=@remote, 0x0, 0x1, 0x0, 0x2, 0x94a04c7, 0x2e0, 0x1000}}, 0xe8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000010001000003be8c5ee17688a2002b08030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 654.880114ms ago: executing program 0 (id=822): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xc, r3}, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, 0x0, &(0x7f0000000200)) 387.596691ms ago: executing program 0 (id=823): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x2a, 0x2, 0x1) recvmsg(r0, &(0x7f0000003240)={&(0x7f0000000f40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000000fc0)=""/120, 0x78}, {&(0x7f0000001040)=""/22, 0x16}, {&(0x7f0000001080)=""/94, 0x5e}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/117, 0x75}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x6, &(0x7f0000003200)=""/13, 0xd}, 0x21) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x1}], 0x1) 380.175698ms ago: executing program 34 (id=823): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x2a, 0x2, 0x1) recvmsg(r0, &(0x7f0000003240)={&(0x7f0000000f40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000000fc0)=""/120, 0x78}, {&(0x7f0000001040)=""/22, 0x16}, {&(0x7f0000001080)=""/94, 0x5e}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/117, 0x75}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x6, &(0x7f0000003200)=""/13, 0xd}, 0x21) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x1}], 0x1) 83.709958ms ago: executing program 5 (id=825): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000580)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 64) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00008c4000/0x1000)=nil, 0x1000}}) (async, rerun: 64) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa10001, 0x1, '\x00', @p_u8=0x0}}) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) r6 = socket$inet(0x2, 0x6000000000000003, 0x6) r7 = dup3(r1, r6, 0x0) setsockopt$inet_int(r7, 0x0, 0xa, 0x0, 0x0) (async) lseek(r0, 0x100, 0x1) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r9 = socket(0x2, 0x2, 0x0) (async) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r10, &(0x7f0000000340), &(0x7f00000001c0)=@tcp=r9}, 0x20) (async) pselect6(0x40, &(0x7f0000000000)={0x0, 0xf2a9, 0x7, 0x10000, 0xff, 0x1, 0x3f80, 0x5}, 0x0, &(0x7f0000000240)={0x1ff, 0x1ff, 0xe, 0xfffffffffffffffb, 0x457, 0x40, 0x3, 0x3}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) 846.613µs ago: executing program 5 (id=826): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x3, 0x4, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010000305000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280050007000000000005000a0000000000050009000000000008000500", @ANYRES32=r1], 0x5c}}, 0x0) 0s ago: executing program 5 (id=827): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x100000000003}, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=6595 comm=syz.0.157 [ 50.471710][ T6595] QAT: failed to copy from user. [ 50.589966][ T6021] usb 7-1: Using ep0 maxpacket: 8 [ 50.593032][ T6021] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 50.596447][ T6021] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 50.599949][ T6021] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 50.604248][ T6021] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.608968][ T6021] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 50.612281][ T6021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.643910][ T6601] xt_socket: unknown flags 0x8 [ 50.833355][ T6021] usb 7-1: GET_CAPABILITIES returned 0 [ 50.835285][ T6021] usbtmc 7-1:16.0: can't read capabilities [ 50.992943][ T5965] Bluetooth: hci3: command 0x040f tx timeout [ 50.993211][ T5955] Bluetooth: hci1: command 0x040f tx timeout [ 51.054844][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.057763][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.060396][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.062730][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.065086][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.068132][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.071162][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.074223][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.077278][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.080350][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.084449][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.087519][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.090578][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.093612][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.096666][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.099673][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 51.105102][ T9] usb 7-1: USB disconnect, device number 2 [ 51.480431][ T6616] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 51.485036][ T6616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.792073][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 51.924510][ T6631] process 'syz.3.167' launched './file0' with NULL argv: empty string added [ 52.017514][ T6651] overlayfs: failed to resolve './file1': -2 [ 52.023818][ T6651] __nla_validate_parse: 70 callbacks suppressed [ 52.023828][ T6651] netlink: 48 bytes leftover after parsing attributes in process `syz.2.172'. [ 52.063885][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.067269][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.079343][ T6649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.082560][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.085581][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.137162][ T6671] serio: Serial port ptm2 [ 52.188018][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 52.193123][ T6677] macsec0: entered promiscuous mode [ 52.228107][ T39] kauditd_printk_skb: 48 callbacks suppressed [ 52.228119][ T39] audit: type=1400 audit(1732853364.574:559): avc: denied { accept } for pid=6678 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 52.256072][ T39] audit: type=1400 audit(1732853364.602:560): avc: denied { read } for pid=6680 comm="syz.3.181" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.262288][ T39] audit: type=1400 audit(1732853364.602:561): avc: denied { open } for pid=6680 comm="syz.3.181" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.339474][ T6021] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 52.441986][ T6684] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 52.445842][ T5955] Bluetooth: hci0: command 0x040f tx timeout [ 52.448468][ T6684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.487887][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.509157][ T6021] usb 5-1: Using ep0 maxpacket: 8 [ 52.511704][ T6021] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 52.513839][ T6021] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 52.516427][ T6021] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 52.518890][ T6021] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 52.522328][ T6021] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.525666][ T6021] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 52.528826][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.646911][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 52.649490][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 52.652374][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 52.654724][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.657836][ T9] usb 7-1: config 0 descriptor?? [ 52.733250][ T39] audit: type=1400 audit(1732853365.055:562): avc: denied { search } for pid=5354 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.746448][ T6021] usb 5-1: usb_control_msg returned -71 [ 52.747934][ T6021] usbtmc 5-1:16.0: can't read capabilities [ 52.751676][ T6021] usb 5-1: USB disconnect, device number 7 [ 52.875531][ T9] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 53.020046][ T39] audit: type=1400 audit(1732853365.328:563): avc: denied { getopt } for pid=6691 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.025633][ T6692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=6692 comm=syz.3.183 [ 53.030406][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 53.146518][ T9] usb 7-1: USB disconnect, device number 3 [ 53.146614][ C2] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 53.150956][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 53.152958][ T9] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected [ 53.274271][ T39] audit: type=1400 audit(1732853365.564:564): avc: denied { setopt } for pid=6702 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.299477][ T39] audit: type=1400 audit(1732853365.583:565): avc: denied { ioctl } for pid=6704 comm="syz.3.187" path="socket:[11779]" dev="sockfs" ino=11779 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 53.311469][ T39] audit: type=1400 audit(1732853365.592:566): avc: denied { create } for pid=6705 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.390862][ T6720] afs: Unknown parameter 'dynH' [ 53.428865][ T6717] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 53.433904][ T6717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.942657][ T39] audit: type=1400 audit(1732853366.196:567): avc: denied { write } for pid=6744 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 54.008959][ T39] audit: type=1400 audit(1732853366.252:568): avc: denied { ioctl } for pid=6744 comm="syz.0.197" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 54.535676][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 54.538202][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 54.543704][ T6766] gtp0: entered promiscuous mode [ 54.545099][ T6766] gtp0: entered allmulticast mode [ 54.551600][ T6766] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.204'. [ 54.700123][ T6770] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 54.703663][ T6770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.779112][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 54.937726][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 54.942524][ T8] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 54.945004][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.947120][ T8] usb 5-1: Product: syz [ 54.948862][ T8] usb 5-1: Manufacturer: syz [ 54.950280][ T8] usb 5-1: SerialNumber: syz [ 54.955421][ T8] r8152-cfgselector 5-1: Unknown version 0x0000 [ 54.957153][ T8] r8152-cfgselector 5-1: config 0 descriptor?? [ 54.980422][ T6777] raw_sendmsg: syz.2.195 forgot to set AF_INET. Fix it! [ 55.154951][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.207'. [ 55.171896][ T6779] syzkaller0: entered promiscuous mode [ 55.173362][ T6779] syzkaller0: entered allmulticast mode [ 55.174762][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.177059][ T6214] syzkaller0: tun_net_xmit 48 [ 55.178184][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.179771][ T6779] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 55.184510][ T6779] syzkaller0: Linktype set failed because interface is up [ 55.199038][ T8] r8152-cfgselector 5-1: Unknown version 0x0000 [ 55.201874][ T8] r8152-cfgselector 5-1: bad CDC descriptors [ 55.209623][ T8] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 55.213465][ T6784] capability: warning: `syz.0.208' uses deprecated v2 capabilities in a way that may be insecure [ 55.308544][ T6788] tmpfs: Bad value for 'mpol' [ 56.190372][ T6809] binder: 6808:6809 ioctl c0306201 0 returned -14 [ 56.203103][ T6795] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.204803][ T6795] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.206410][ T6795] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.208023][ T6795] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.212783][ T6806] tun0: tun_chr_ioctl cmd 1074025675 [ 56.214244][ T6806] tun0: persist disabled [ 56.264588][ T6814] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.332103][ T5965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.336771][ T5965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.343090][ T5965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.349321][ T5965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.351638][ T5965] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.353798][ T5965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.406161][ T6825] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 56.411716][ T6825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.432201][ T6822] chnl_net:caif_netlink_parms(): no params data found [ 56.481094][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.483065][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.483838][ T6829] mmap: syz.0.220 (6829) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.484949][ T6822] bridge_slave_0: entered allmulticast mode [ 56.490082][ T6822] bridge_slave_0: entered promiscuous mode [ 56.507460][ T6214] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.513870][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.515849][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.517794][ T6822] bridge_slave_1: entered allmulticast mode [ 56.520774][ T6822] bridge_slave_1: entered promiscuous mode [ 56.551025][ T6841] validate_nla: 57 callbacks suppressed [ 56.551036][ T6841] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 56.551993][ T6822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.559635][ T6822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.566645][ T6841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.570553][ T6841] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 56.575857][ T6841] syz.0.221 (6841) used greatest stack depth: 20288 bytes left [ 56.593492][ T6214] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.624775][ T6822] team0: Port device team_slave_0 added [ 56.628586][ T6822] team0: Port device team_slave_1 added [ 56.657757][ T6214] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.662605][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.664436][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.672553][ T6822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.676244][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.678172][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.684946][ T6822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.719430][ T6822] hsr_slave_0: entered promiscuous mode [ 56.721621][ T6822] hsr_slave_1: entered promiscuous mode [ 56.723561][ T6822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.725622][ T6822] Cannot create hsr debugfs directory [ 56.755340][ T6214] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.811863][ T6822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.816242][ T6822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.819624][ T6822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.823393][ T6822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.834283][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.836270][ T6822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.838318][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.840173][ T6822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.885464][ T6214] bridge_slave_1: left allmulticast mode [ 56.887422][ T6214] bridge_slave_1: left promiscuous mode [ 56.889997][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.893773][ T6214] bridge_slave_0: left allmulticast mode [ 56.895351][ T6214] bridge_slave_0: left promiscuous mode [ 56.896974][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.059419][ T834] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 57.192483][ T6214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.196992][ T6214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.201253][ T6214] bond0 (unregistering): Released all slaves [ 57.218669][ T834] usb 5-1: Using ep0 maxpacket: 16 [ 57.221254][ T834] usb 5-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 57.222072][ T6822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.223897][ T834] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.230004][ T834] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 57.231627][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.232355][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.246222][ T834] usb 5-1: config 0 descriptor?? [ 57.251004][ T834] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 57.254233][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.289180][ T6214] tipc: Left network mode [ 57.296266][ T6822] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.309748][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.311838][ T6197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.319055][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.321717][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.389801][ T6880] xt_nat: multiple ranges no longer supported [ 57.393352][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 57.397594][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 57.401932][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 57.407557][ T6880] NILFS (nullb0): couldn't find nilfs on the device [ 57.464702][ T6889] syz.3.233: attempt to access beyond end of device [ 57.464702][ T6889] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 57.468045][ T6822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.468625][ T6889] SQUASHFS error: Failed to read block 0x0: -5 [ 57.474833][ T6889] unable to read squashfs_super_block [ 57.529751][ T6214] hsr_slave_0: left promiscuous mode [ 57.533605][ T6214] hsr_slave_1: left promiscuous mode [ 57.539381][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.541379][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.548830][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.550966][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.570725][ T6214] veth1_macvtap: left promiscuous mode [ 57.572473][ T6214] veth0_macvtap: left promiscuous mode [ 57.573949][ T6214] veth1_vlan: left promiscuous mode [ 57.575470][ T6214] veth0_vlan: left promiscuous mode [ 57.581759][ T39] kauditd_printk_skb: 39 callbacks suppressed [ 57.581769][ T39] audit: type=1400 audit(1732853369.627:608): avc: denied { connect } for pid=6882 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.912094][ T57] usb 5-1: USB disconnect, device number 9 [ 58.129354][ T6214] team0 (unregistering): Port device team_slave_1 removed [ 58.189721][ T6214] team0 (unregistering): Port device team_slave_0 removed [ 58.385776][ T5965] Bluetooth: hci3: command 0x040f tx timeout [ 58.388123][ T5965] Bluetooth: hci2: command 0x040f tx timeout [ 58.388179][ T5955] Bluetooth: hci0: command 0x040f tx timeout [ 58.556653][ T5955] Bluetooth: hci1: command tx timeout [ 58.719170][ T6927] 9pnet_virtio: no channels available for device [ 58.745879][ T6822] veth0_vlan: entered promiscuous mode [ 58.751070][ T6822] veth1_vlan: entered promiscuous mode [ 58.763823][ T6822] veth0_macvtap: entered promiscuous mode [ 58.766764][ T6822] veth1_macvtap: entered promiscuous mode [ 58.777041][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.792319][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.795874][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.796907][ T6931] rtc_cmos 00:05: Alarms can be up to one day in the future [ 58.798783][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.798793][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.798801][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.799960][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.813429][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.820772][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.824402][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.828328][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.831790][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.834642][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.839439][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.856096][ T6822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.858527][ T6822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.860786][ T6822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.863516][ T6822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.930010][ T6217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.933161][ T6217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.933308][ T6944] usb usb7: usbfs: process 6944 (syz.0.242) did not claim interface 0 before use [ 58.961666][ T6217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.963675][ T6217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.985807][ T39] audit: type=1400 audit(1732853370.947:609): avc: denied { mount } for pid=6822 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.993743][ T39] audit: type=1400 audit(1732853370.947:610): avc: denied { mounton } for pid=6822 comm="syz-executor" path="/syzkaller.cLmzm0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.070916][ T6954] Illegal XDP return value 4294967274 on prog (id 34) dev N/A, expect packet loss! [ 59.174782][ T6966] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 59.174782][ T6966] The task syz.4.244 (6966) triggered the difference, watch for misbehavior. [ 59.181879][ T39] audit: type=1400 audit(1732853371.135:611): avc: denied { append } for pid=6960 comm="syz.2.245" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 59.299147][ T57] rtc_cmos 00:05: Alarms can be up to one day in the future [ 59.302400][ T57] rtc_cmos 00:05: Alarms can be up to one day in the future [ 59.305445][ T57] rtc_cmos 00:05: Alarms can be up to one day in the future [ 59.308561][ T57] rtc_cmos 00:05: Alarms can be up to one day in the future [ 59.311152][ T57] rtc rtc0: __rtc_set_alarm: err=-22 [ 59.339786][ T39] audit: type=1400 audit(1732853371.277:612): avc: denied { write } for pid=6977 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 59.388555][ T6985] binder: 6984:6985 ioctl c0306201 0 returned -14 [ 59.460010][ T6991] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 59.463204][ T6991] binder: 6989:6991 ioctl c018620c 20000000 returned -1 [ 59.465940][ T6991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.549324][ T39] audit: type=1400 audit(1732853371.474:613): avc: denied { setrlimit } for pid=7007 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 59.672510][ T39] audit: type=1400 audit(1732853371.597:615): avc: denied { create } for pid=7012 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 59.678037][ T39] audit: type=1400 audit(1732853371.597:614): avc: denied { create } for pid=7012 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 59.684277][ T39] audit: type=1400 audit(1732853371.597:616): avc: denied { connect } for pid=7012 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 59.727181][ T39] audit: type=1400 audit(1732853371.644:617): avc: denied { listen } for pid=7012 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 60.052863][ T7039] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 60.055253][ T7039] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 60.073825][ T7043] binder: 7042:7043 ioctl c0306201 0 returned -14 [ 60.359617][ T7071] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 60.362804][ T7071] binder: 7066:7071 ioctl c018620c 20000000 returned -1 [ 60.365556][ T7071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.582495][ T5955] Bluetooth: hci2: command 0x040f tx timeout [ 60.656730][ T7089] block nbd4: Device being setup by another task [ 60.762932][ T5955] Bluetooth: hci1: command tx timeout [ 60.786066][ T7087] block nbd4: shutting down sockets [ 60.838035][ T7107] tmpfs: Group quota block hardlimit too large. [ 60.990536][ T7131] binder: 7128:7131 ioctl 2286 20001100 returned -22 [ 61.023719][ T7133] xt_hashlimit: size too large, truncated to 1048576 [ 61.150842][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 61.391948][ T7160] tipc: Started in network mode [ 61.393321][ T7160] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 61.397773][ T7160] tipc: Enabled bearer , priority 10 [ 61.622355][ T7162] syz.2.291: attempt to access beyond end of device [ 61.622355][ T7162] loop2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 61.626148][ T7162] qnx6: unable to read the first superblock [ 61.627896][ T7162] syz.2.291: attempt to access beyond end of device [ 61.627896][ T7162] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 61.631120][ T7162] qnx6: unable to read the first superblock [ 61.632653][ T7162] qnx6: unable to read the first superblock [ 62.039283][ T7200] netlink: 'syz.2.296': attribute type 32 has an invalid length. [ 62.041371][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 62.043740][ T7200] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 62.155288][ T7221] netlink: 'syz.3.300': attribute type 10 has an invalid length. [ 62.157844][ T7221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.160458][ T7221] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 62.192192][ T7226] Process accounting resumed [ 62.205122][ T7226] overlay: ./file0 is not a directory [ 62.207273][ T7226] overlay: ./file0 is not a directory [ 62.335379][ T7240] netlink: 36 bytes leftover after parsing attributes in process `syz.2.304'. [ 62.337753][ T7240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.304'. [ 62.340169][ T7240] netlink: 36 bytes leftover after parsing attributes in process `syz.2.304'. [ 62.342530][ T7240] netlink: 36 bytes leftover after parsing attributes in process `syz.2.304'. [ 62.452191][ T5993] tipc: Node number set to 4269801491 [ 62.495470][ T7255] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 62.498899][ T7255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.604060][ T7274] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 62.606266][ T7274] trusted_key: syz.3.316 sent an empty control message without MSG_MORE. [ 62.639647][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 62.642344][ T7279] netlink: 'syz.3.317': attribute type 20 has an invalid length. [ 62.822820][ T7287] __nla_validate_parse: 1 callbacks suppressed [ 62.822831][ T7287] netlink: 87 bytes leftover after parsing attributes in process `syz.0.319'. [ 62.952420][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 62.952432][ T39] audit: type=1400 audit(1732853374.687:655): avc: denied { write } for pid=7296 comm="syz.0.323" name="/" dev="9p" ino=35922419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.960513][ T5955] Bluetooth: hci1: command tx timeout [ 62.962556][ T39] audit: type=1400 audit(1732853374.687:656): avc: denied { add_name } for pid=7296 comm="syz.0.323" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.968230][ T39] audit: type=1400 audit(1732853374.687:657): avc: denied { create } for pid=7296 comm="syz.0.323" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.968251][ T39] audit: type=1400 audit(1732853374.687:658): avc: denied { associate } for pid=7296 comm="syz.0.323" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 62.968987][ T7303] netlink: 'syz.3.324': attribute type 10 has an invalid length. [ 62.974045][ T39] audit: type=1400 audit(1732853374.687:659): avc: denied { read } for pid=7296 comm="syz.0.323" name="file0" dev="9p" ino=35922562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.991485][ T39] audit: type=1400 audit(1732853374.687:660): avc: denied { open } for pid=7296 comm="syz.0.323" path="/74/file0/file0" dev="9p" ino=35922562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.995542][ T7303] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.038429][ T39] audit: type=1400 audit(1732853374.762:661): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.047126][ T7303] infiniband syz1: set active [ 63.049433][ T7303] infiniband syz1: added team_slave_0 [ 63.070067][ T7303] RDS/IB: syz1: added [ 63.071453][ T7303] smc: adding ib device syz1 with port count 1 [ 63.073159][ T7303] smc: ib device syz1 port 1 has pnetid [ 63.218943][ T39] audit: type=1400 audit(1732853374.932:662): avc: denied { setattr } for pid=7325 comm="syz.2.331" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 63.282877][ T39] audit: type=1400 audit(1732853374.998:663): avc: denied { read } for pid=7331 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.285253][ T7336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.335'. [ 63.290932][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.335'. [ 63.391926][ T7336] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=770954412 (770954412 ns) > initial count (134138459 ns). Using initial count to start timer. [ 63.471125][ T39] audit: type=1400 audit(1732853375.177:664): avc: denied { bind } for pid=7361 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.556747][ T5955] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 63.563867][ T7381] binder: 7364:7381 ioctl 8010550e 20000180 returned -22 [ 63.678547][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 63.680966][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 63.713674][ T7397] tmpfs: Unknown parameter 'mask' [ 63.863597][ T834] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 64.024128][ T834] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 64.030899][ T834] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.034192][ T834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.036892][ T834] usb 9-1: Product: syz [ 64.038296][ T834] usb 9-1: Manufacturer: syz [ 64.039946][ T834] usb 9-1: SerialNumber: syz [ 64.043971][ T7384] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 64.241408][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 64.261567][ T834] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 64.265464][ T834] usb 9-1: USB disconnect, device number 2 [ 64.510786][ T5834] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 64.659009][ T5834] usb 5-1: device descriptor read/64, error -71 [ 64.707315][ T7425] futex_wake_op: syz.2.362 tries to shift op by -1; fix this program [ 64.722629][ T834] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 64.881913][ T834] usb 9-1: Using ep0 maxpacket: 8 [ 64.884768][ T834] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 64.886952][ T834] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 64.889473][ T834] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 64.892002][ T834] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 8842, setting to 1024 [ 64.895764][ T834] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 64.898399][ T834] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 64.900906][ T834] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 64.903716][ T834] usb 9-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.908555][ T834] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 64.910932][ T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.915599][ T7384] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 64.936686][ T5834] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 65.084163][ T5834] usb 5-1: device descriptor read/64, error -71 [ 65.132133][ T834] usb 9-1: usb_control_msg returned -32 [ 65.133637][ T834] usbtmc 9-1:16.0: can't read capabilities [ 65.168649][ T5955] Bluetooth: hci1: command tx timeout [ 65.212653][ T5834] usb usb5-port1: attempt power cycle [ 65.265526][ T7436] program syz.2.365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.582743][ T5834] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 65.601942][ T7466] binder: BINDER_SET_CONTEXT_MGR already set [ 65.603560][ T7466] binder: 7465:7466 ioctl 4018620d 20000100 returned -16 [ 65.609152][ T7466] binder: 7465:7466 ioctl c0306201 20004a40 returned -22 [ 65.611164][ T7466] netlink: 80 bytes leftover after parsing attributes in process `syz.3.374'. [ 65.615584][ T5834] usb 5-1: device descriptor read/8, error -71 [ 65.869452][ T5834] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 65.891129][ T5834] usb 5-1: device descriptor read/8, error -71 [ 66.018868][ T5834] usb usb5-port1: unable to enumerate USB device [ 66.552520][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 66.797682][ T57] usb 9-1: USB disconnect, device number 3 [ 66.836998][ T7493] nfs: Unknown parameter 'fd' [ 66.843775][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 66.981801][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 67.388121][ T5955] Bluetooth: hci1: command tx timeout [ 67.450712][ T7503] netlink: 'syz.0.384': attribute type 10 has an invalid length. [ 67.458317][ T7503] team0: Failed to send options change via netlink (err -105) [ 67.460306][ T7503] team0: Port device netdevsim0 added [ 67.462316][ T6217] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 67.468237][ T7503] netlink: 'syz.0.384': attribute type 10 has an invalid length. [ 67.474643][ T7503] team0: Failed to send options change via netlink (err -105) [ 67.476688][ T7503] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 67.479334][ T7503] team0: Port device netdevsim0 removed [ 67.482120][ T7503] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 67.510313][ T7505] netlink: 156 bytes leftover after parsing attributes in process `syz.0.385'. [ 67.517843][ T6507] IPVS: starting estimator thread 0... [ 67.583064][ T7507] block device autoloading is deprecated and will be removed. [ 67.586036][ T7505] md: md2 stopped. [ 67.611253][ T7506] IPVS: using max 40 ests per chain, 96000 per kthread [ 67.646562][ T7507] /dev/sg0: Can't lookup blockdev [ 67.713043][ T7526] binder: 7525:7526 ioctl 4018620d 0 returned -22 [ 68.322975][ T6507] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.418490][ T832] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 68.482251][ T6507] usb 7-1: Using ep0 maxpacket: 8 [ 68.484875][ T6507] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 68.487084][ T6507] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.489635][ T6507] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.492184][ T6507] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.494970][ T6507] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.498250][ T6507] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.500624][ T6507] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.589732][ T832] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 68.591862][ T832] usb 5-1: config 0 has no interface number 0 [ 68.593502][ T832] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 68.596228][ T832] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 68.599268][ T832] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 68.602078][ T832] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 68.604824][ T832] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 68.608153][ T832] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 68.610527][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.613875][ T832] usb 5-1: config 0 descriptor?? [ 68.615990][ T7566] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 68.621831][ T832] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 68.719683][ T6507] usb 7-1: usb_control_msg returned -32 [ 68.721383][ T6507] usbtmc 7-1:16.0: can't read capabilities [ 69.177271][ T39] kauditd_printk_skb: 104 callbacks suppressed [ 69.177283][ T39] audit: type=1400 audit(1732853380.544:769): avc: denied { execute_no_trans } for pid=7550 comm="syz.2.395" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CC1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F5202864656C6574656429 dev="hugetlbfs" ino=16286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 69.201302][ T39] audit: type=1400 audit(1732853380.563:770): avc: denied { write } for pid=7550 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.999266][ T7604] bridge0: port 3(vlan3) entered disabled state [ 70.001084][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.003173][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.007875][ T7604] bridge0: entered allmulticast mode [ 70.020049][ T39] audit: type=1400 audit(1732853381.335:771): avc: denied { ioctl } for pid=7597 comm="syz.3.400" path="socket:[17631]" dev="sockfs" ino=17631 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.577536][ T39] audit: type=1400 audit(1732853381.862:772): avc: denied { nlmsg_write } for pid=7609 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.579142][ T7610] ======================================================= [ 70.579142][ T7610] WARNING: The mand mount option has been deprecated and [ 70.579142][ T7610] and is ignored by this kernel. Remove the mand [ 70.579142][ T7610] option from the mount to silence this warning. [ 70.579142][ T7610] ======================================================= [ 70.854311][ T7619] netlink: 'syz.3.402': attribute type 10 has an invalid length. [ 70.858781][ T7619] team0: Device hsr_slave_0 failed to register rx_handler [ 70.930153][ T7625] fuse: Bad value for 'rootmode' [ 70.966887][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.405'. [ 70.969590][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.405'. [ 70.999048][ T39] audit: type=1400 audit(1732853382.257:773): avc: denied { ioctl } for pid=7632 comm="syz.3.406" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 71.224830][ T6507] usb 7-1: USB disconnect, device number 4 [ 71.257390][ T5834] usb 5-1: USB disconnect, device number 14 [ 71.261194][ T5834] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 71.300434][ T7651] xt_hashlimit: size too large, truncated to 1048576 [ 71.302232][ T39] audit: type=1400 audit(1732853382.549:774): avc: denied { create } for pid=7644 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.408852][ T6217] nci: nci_ntf_packet: unsupported ntf opcode 0xf06 [ 72.264162][ T7709] ceph: Path missing in source [ 72.273906][ T39] audit: type=1400 audit(1732853383.453:775): avc: denied { bind } for pid=7708 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.307812][ T39] audit: type=1400 audit(1732853383.490:776): avc: denied { write } for pid=7722 comm="syz.3.421" name="unix" dev="proc" ino=4026533059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 72.320636][ T39] audit: type=1400 audit(1732853383.509:777): avc: denied { connect } for pid=7713 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.324999][ T7727] netlink: 'syz.2.422': attribute type 10 has an invalid length. [ 72.363105][ T7727] macvlan0: entered promiscuous mode [ 72.364658][ T7727] macvlan0: entered allmulticast mode [ 72.365983][ T39] audit: type=1400 audit(1732853383.547:778): avc: denied { watch_mount } for pid=7728 comm="syz.0.423" path="/84" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.368435][ T7727] veth1_vlan: entered allmulticast mode [ 72.374400][ T7727] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 72.459552][ T7735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.745914][ T7745] netlink: 44 bytes leftover after parsing attributes in process `syz.0.427'. [ 72.748250][ T7745] netlink: 33 bytes leftover after parsing attributes in process `syz.0.427'. [ 72.750584][ T7745] netlink: 33 bytes leftover after parsing attributes in process `syz.0.427'. [ 72.906016][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.908093][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.757263][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 73.760024][ T7761] netlink: 'syz.4.432': attribute type 3 has an invalid length. [ 73.791065][ T7764] xt_hashlimit: size too large, truncated to 1048576 [ 73.805214][ T7759] infiniband syz2: set down [ 73.806510][ T7759] infiniband syz2: added ipvlan1 [ 73.831432][ T7759] RDS/IB: syz2: added [ 73.832579][ T7759] smc: adding ib device syz2 with port count 1 [ 73.834181][ T7759] smc: ib device syz2 port 1 has pnetid [ 74.004759][ T7781] netlink: 2 bytes leftover after parsing attributes in process `syz.4.436'. [ 74.007111][ T7781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.418697][ T7796] smc: net device wg0 applied user defined pnetid SYZ0 [ 74.422085][ T7796] netlink: 'syz.0.441': attribute type 39 has an invalid length. [ 74.435300][ T7796] smc: removing net device wg0 with user defined pnetid SYZ0 [ 74.637354][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 74.730000][ T7806] netlink: 'syz.0.445': attribute type 11 has an invalid length. [ 74.732141][ T7806] netlink: 224 bytes leftover after parsing attributes in process `syz.0.445'. [ 74.751456][ T7803] syzkaller0: entered promiscuous mode [ 74.752973][ T7803] syzkaller0: entered allmulticast mode [ 74.858754][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 74.858764][ T39] audit: type=1400 audit(1732853385.899:782): avc: denied { write } for pid=7807 comm="syz.0.446" path="socket:[17262]" dev="sockfs" ino=17262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.187803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.790057][ T7809] netem: incorrect gi model size [ 75.791657][ T7809] netem: change failed [ 75.794873][ T7815] netlink: 44 bytes leftover after parsing attributes in process `syz.4.447'. [ 75.966948][ T39] audit: type=1400 audit(1732853386.934:783): avc: denied { create } for pid=7828 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.968917][ T7829] netlink: 'syz.4.452': attribute type 5 has an invalid length. [ 75.972879][ T39] audit: type=1400 audit(1732853386.934:784): avc: denied { bind } for pid=7828 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.984800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.018439][ T39] audit: type=1400 audit(1732853386.991:785): avc: denied { map } for pid=7826 comm="syz.0.451" path="pipe:[18002]" dev="pipefs" ino=18002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 76.023256][ T7834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.026476][ T39] audit: type=1400 audit(1732853386.991:786): avc: denied { create } for pid=7832 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.026507][ T7834] IPv6: NLM_F_CREATE should be set when creating new route [ 76.034230][ T7834] IPv6: NLM_F_CREATE should be set when creating new route [ 76.277587][ T7853] loop5: detected capacity change from 0 to 9 [ 76.284736][ T7853] Buffer I/O error on dev loop5, logical block 1, async page read [ 76.288859][ T7853] Dev loop5: unable to read RDB block 8 [ 76.291077][ T7853] loop5: unable to read partition table [ 76.293831][ T7853] loop5: partition table beyond EOD, truncated [ 76.296395][ T7853] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 76.296395][ T7853] ) failed (rc=-5) [ 76.302262][ T7853] Buffer I/O error on dev loop5, logical block 1, async page read [ 76.306309][ T7853] Buffer I/O error on dev loop5, logical block 1, async page read [ 76.539225][ T5834] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 76.628021][ T39] audit: type=1400 audit(1732853387.555:787): avc: denied { bind } for pid=7864 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.632938][ T39] audit: type=1400 audit(1732853387.555:788): avc: denied { node_bind } for pid=7864 comm="syz.3.463" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 76.717868][ T5834] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 76.720822][ T5834] usb 7-1: config 0 has no interfaces? [ 76.723801][ T5834] usb 7-1: config 0 has no interfaces? [ 76.725994][ T5834] usb 7-1: config 0 has no interfaces? [ 76.734415][ T5834] usb 7-1: config 0 has no interfaces? [ 76.739411][ T5834] usb 7-1: config 0 has no interfaces? [ 76.749382][ T5834] usb 7-1: config 0 has no interfaces? [ 76.752464][ T5834] usb 7-1: config 0 has no interfaces? [ 76.756973][ T5834] usb 7-1: config 0 has no interfaces? [ 76.760018][ T5834] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 76.762495][ T5834] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 76.764612][ T5834] usb 7-1: Product: syz [ 76.765664][ T5834] usb 7-1: Manufacturer: syz [ 76.766834][ T5834] usb 7-1: SerialNumber: syz [ 76.769315][ T5834] usb 7-1: config 0 descriptor?? [ 76.963240][ T39] audit: type=1400 audit(1732853387.875:789): avc: denied { getopt } for pid=7879 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.997283][ T39] audit: type=1400 audit(1732853387.894:790): avc: denied { setopt } for pid=7883 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 76.997490][ T7852] program syz.2.459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.002198][ T5955] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 77.038185][ T39] audit: type=1400 audit(1732853387.950:791): avc: denied { setopt } for pid=7888 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.152107][ T35] usb 7-1: USB disconnect, device number 5 [ 77.955338][ T7920] overlayfs: missing 'lowerdir' [ 77.991445][ T7923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=274 sclass=netlink_route_socket pid=7923 comm=syz.0.480 [ 78.058139][ T7930] mac80211_hwsim hwsim3 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 78.120967][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 78.182919][ T7939] overlayfs: upper fs does not support tmpfile. [ 78.299523][ T7951] ALSA: mixer_oss: invalid index 100000 [ 78.348618][ T56] cfg80211: failed to load regulatory.db [ 78.715967][ T56] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 78.861518][ T7967] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7967 comm=syz.2.490 [ 78.886059][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 78.888839][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 78.891796][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 78.894400][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.897109][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.900405][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.902803][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.040052][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.491'. [ 79.119623][ T56] usb 5-1: GET_CAPABILITIES returned 0 [ 79.121202][ T56] usbtmc 5-1:16.0: can't read capabilities [ 79.186743][ T832] usb 5-1: USB disconnect, device number 15 [ 79.204661][ T7979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.236765][ T7979] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 79.258947][ T7979] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 79.301841][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 79.428288][ T7999] program syz.4.499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.433614][ T7999] netlink: 'syz.4.499': attribute type 10 has an invalid length. [ 79.435669][ T7999] team0: Device batadv0 is up. Set it down before adding it as a team port [ 80.079613][ T5965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.082215][ T5965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.085483][ T5965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.088425][ T5965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.090566][ T5965] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.092623][ T5965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.244068][ T8010] chnl_net:caif_netlink_parms(): no params data found [ 80.296307][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.298201][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.300390][ T8010] bridge_slave_0: entered allmulticast mode [ 80.302593][ T8010] bridge_slave_0: entered promiscuous mode [ 80.305044][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.306894][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.308760][ T8010] bridge_slave_1: entered allmulticast mode [ 80.311254][ T8010] bridge_slave_1: entered promiscuous mode [ 80.334414][ T8010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.337941][ T8010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.361940][ T8010] team0: Port device team_slave_0 added [ 80.363951][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 80.363960][ T39] audit: type=1400 audit(1732853391.063:801): avc: denied { setopt } for pid=8022 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.365134][ T8010] team0: Port device team_slave_1 added [ 80.380037][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.508'. [ 80.395757][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.398345][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.404903][ T8010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.414633][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.415741][ T39] audit: type=1400 audit(1732853391.120:802): avc: denied { ioctl } for pid=8020 comm="syz.0.506" path="socket:[19866]" dev="sockfs" ino=19866 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.416466][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.416482][ T8010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.423028][ T39] audit: type=1400 audit(1732853391.120:803): avc: denied { write } for pid=8020 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.450173][ T8010] hsr_slave_0: entered promiscuous mode [ 80.452128][ T8010] hsr_slave_1: entered promiscuous mode [ 80.528469][ T8010] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.531747][ T8010] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.534840][ T8010] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.537857][ T8010] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.567632][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.579501][ T8010] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.583446][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.585352][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.589999][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.591936][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.670288][ T8010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.765394][ T8010] veth0_vlan: entered promiscuous mode [ 80.769468][ T8010] veth1_vlan: entered promiscuous mode [ 80.780857][ T8010] veth0_macvtap: entered promiscuous mode [ 80.783657][ T8010] veth1_macvtap: entered promiscuous mode [ 80.789082][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.792204][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.794725][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.797433][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.800063][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.802724][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.805246][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.807905][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.811170][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.815448][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.818117][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.820610][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.824077][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.826595][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.829268][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.832061][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.834749][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.837919][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.841900][ T8010] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.844738][ T8010] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.847003][ T8010] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.849266][ T8010] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.872494][ T6230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.875311][ T6230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.885296][ T6208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.888013][ T6208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.037328][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 81.040422][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 81.042845][ T8053] netlink: 'syz.3.511': attribute type 12 has an invalid length. [ 81.098357][ T39] audit: type=1400 audit(1732853391.769:804): avc: denied { read write } for pid=8056 comm="syz.3.513" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.104940][ T39] audit: type=1400 audit(1732853391.769:805): avc: denied { open } for pid=8056 comm="syz.3.513" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.138345][ T8062] SET target dimension over the limit! [ 81.164107][ T8065] siw: device registration error -23 [ 81.193692][ T832] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 81.356379][ T832] usb 10-1: No LPM exit latency info found, disabling LPM. [ 81.359202][ T832] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.361739][ T39] audit: type=1400 audit(1732853392.004:806): avc: denied { map } for pid=8075 comm="syz.2.520" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.361983][ T832] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 81.373125][ T832] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 81.376306][ T832] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 81.650773][ T6507] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 81.821122][ T6507] usb 7-1: Using ep0 maxpacket: 32 [ 81.824055][ T6507] usb 7-1: unable to get BOS descriptor or descriptor too short [ 81.826939][ T6507] usb 7-1: config 255 has an invalid interface number: 81 but max is 0 [ 81.829095][ T6507] usb 7-1: config 255 has no interface number 0 [ 81.830727][ T6507] usb 7-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 81.833916][ T6507] usb 7-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 150, changing to 7 [ 81.837154][ T6507] usb 7-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid maxpacket 8859, setting to 1024 [ 81.840084][ T6507] usb 7-1: config 255 interface 81 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.843578][ T6507] usb 7-1: config 255 interface 81 has no altsetting 0 [ 81.848709][ T6507] usb 7-1: string descriptor 0 read error: -22 [ 81.850327][ T6507] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 81.852661][ T6507] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.858689][ T6507] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:255.81/input/input10 [ 82.082149][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.086960][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.093086][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 82.140268][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 82.142788][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.526'. [ 82.151698][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 82.267577][ T5965] Bluetooth: hci1: command tx timeout [ 82.363839][ T834] usb 7-1: USB disconnect, device number 6 [ 82.418722][ T39] audit: type=1400 audit(1732853393.010:807): avc: denied { ioctl } for pid=8112 comm="syz.3.528" path="socket:[19027]" dev="sockfs" ino=19027 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.425378][ T8113] @: renamed from vlan0 (while UP) [ 82.430986][ T39] audit: type=1400 audit(1732853393.019:808): avc: denied { map } for pid=8112 comm="syz.3.528" path="/proc/532/net/vlan/vlan0" dev="proc" ino=4026533706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 82.561375][ T8115] loop2: detected capacity change from 0 to 7 [ 82.565339][ T8115] Dev loop2: unable to read RDB block 7 [ 82.567281][ T8115] loop2: AHDI p1 p2 [ 82.568677][ T8115] loop2: partition table partially beyond EOD, truncated [ 82.572102][ T8115] loop2: p1 size 150995200 extends beyond EOD, truncated [ 82.685101][ T39] audit: type=1400 audit(1732853393.245:809): avc: denied { name_bind } for pid=8122 comm="syz.0.532" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 82.739064][ T39] audit: type=1400 audit(1732853393.302:810): avc: denied { create } for pid=8122 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 82.927429][ T8128] hugetlbfs: syz.2.534 (8128): Using mlock ulimits for SHM_HUGETLB is obsolete [ 82.956912][ T8133] openvswitch: netlink: Missing key (keys=40, expected=80) [ 83.276863][ T8158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.437447][ T6507] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 83.596995][ T6507] usb 5-1: Using ep0 maxpacket: 8 [ 83.600101][ T6507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.603933][ T6507] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.607076][ T6507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.611445][ T6507] usb 5-1: config 0 descriptor?? [ 83.827989][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.831005][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.833433][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.841634][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.844085][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.846341][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.848944][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.851182][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.853685][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.855979][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.861421][ T6507] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 83.870996][ T6012] usb 5-1: USB disconnect, device number 16 [ 83.901189][ T6012] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 83.932927][ T8171] __nla_validate_parse: 4 callbacks suppressed [ 83.932943][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'. [ 84.032048][ T8183] overlay: Unknown parameter 'appraise' [ 84.039830][ T8185] overlayfs: failed to resolve './bus': -2 [ 84.042233][ T8184] delete_channel: no stack [ 84.082215][ T8190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.124482][ T832] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.127313][ T832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.131820][ T832] usb 10-1: can't set config #1, error -71 [ 84.133979][ T832] usb 10-1: USB disconnect, device number 2 [ 84.175416][ T8205] netlink: 'syz.5.554': attribute type 10 has an invalid length. [ 84.177642][ T8205] bridge0: port 3(team0) entered blocking state [ 84.179396][ T8205] bridge0: port 3(team0) entered disabled state [ 84.181203][ T8205] team0: entered allmulticast mode [ 84.182934][ T8205] team_slave_0: entered allmulticast mode [ 84.184462][ T8205] team_slave_1: entered allmulticast mode [ 84.186642][ T8205] team0: entered promiscuous mode [ 84.187980][ T8205] team_slave_0: entered promiscuous mode [ 84.189544][ T8205] team_slave_1: entered promiscuous mode [ 84.191330][ T8205] bridge0: port 3(team0) entered blocking state [ 84.193097][ T8205] bridge0: port 3(team0) entered forwarding state [ 84.195837][ T8206] team_slave_1: left promiscuous mode [ 84.197366][ T8206] team_slave_1: left allmulticast mode [ 84.207031][ T8206] team0: Port device team_slave_1 removed [ 84.264657][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.556'. [ 84.298162][ T8216] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 84.469098][ T5965] Bluetooth: hci1: command tx timeout [ 84.639233][ T56] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 84.690921][ T8234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.563'. [ 84.716887][ T8236] /dev/sg0: Can't lookup blockdev [ 84.749884][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.751958][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.753991][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.756004][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.758230][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.760210][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.762223][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.764251][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.766276][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.768316][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.770358][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.772379][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.774353][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.776330][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.778912][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.780928][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.782948][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.784930][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.787593][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.789667][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.791620][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.793721][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.795807][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.797772][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4c00 returned -22 [ 84.800128][ T8239] binder: 8238:8239 ioctl 4020ae46 7f1e2d9b4900 returned -22 [ 84.802142][ T8239] binder: 8238:8239 ioctl 8138ae83 7f1e2d9b4ac0 returned -22 [ 84.810603][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.813445][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.816095][ T56] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.819456][ T56] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.822173][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.825956][ T56] usb 7-1: config 0 descriptor?? [ 84.947079][ T8251] netlink: 'syz.0.568': attribute type 2 has an invalid length. [ 84.951096][ T8251] batadv0: entered promiscuous mode [ 84.952990][ T8251] batadv0: left promiscuous mode [ 85.141567][ T8261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.260358][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.262555][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.264551][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.266515][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.268792][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.272395][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.274358][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.276281][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.278327][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.280261][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.282187][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.284230][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.286168][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.288205][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.290142][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.292689][ T56] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 85.300963][ T56] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 85.379646][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.573'. [ 85.498820][ T8273] netlink: 16 bytes leftover after parsing attributes in process `syz.5.575'. [ 85.505776][ T8273] 9pnet_fd: Insufficient options for proto=fd [ 85.510903][ T5965] Bluetooth: min 0 < 6 [ 85.547900][ T834] usb 7-1: USB disconnect, device number 7 [ 85.559811][ T8278] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 85.605115][ T8280] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.578'. [ 85.609459][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.578'. [ 85.611749][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.5.578'. [ 85.773479][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.581'. [ 85.778489][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 85.778499][ T39] audit: type=1400 audit(1732853396.169:821): avc: denied { ioctl } for pid=8290 comm="syz.5.581" path="socket:[20154]" dev="sockfs" ino=20154 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.871518][ T8305] netlink: 72 bytes leftover after parsing attributes in process `syz.5.585'. [ 85.928781][ T39] audit: type=1326 audit(1732853396.310:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.5.587" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab8b180809 code=0x0 [ 86.493045][ T8333] lo speed is unknown, defaulting to 1000 [ 86.494758][ T8333] lo speed is unknown, defaulting to 1000 [ 86.496974][ T8333] lo speed is unknown, defaulting to 1000 [ 86.501459][ T8333] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.507609][ T8333] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 86.522198][ T8333] lo speed is unknown, defaulting to 1000 [ 86.524595][ T8333] lo speed is unknown, defaulting to 1000 [ 86.526582][ T8333] lo speed is unknown, defaulting to 1000 [ 86.528564][ T8333] lo speed is unknown, defaulting to 1000 [ 86.530450][ T8333] lo speed is unknown, defaulting to 1000 [ 86.631624][ T8346] GUP no longer grows the stack in syz.2.595 (8346): 20004000-20008000 (20002000) [ 86.634346][ T8346] CPU: 1 UID: 0 PID: 8346 Comm: syz.2.595 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 86.636994][ T8346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.639770][ T8346] Call Trace: [ 86.640654][ T8346] [ 86.641438][ T8346] dump_stack_lvl+0x16c/0x1f0 [ 86.642695][ T8346] gup_vma_lookup+0x1d2/0x220 [ 86.643933][ T8346] __get_user_pages+0x236/0x3b50 [ 86.645230][ T8346] ? find_held_lock+0x2d/0x110 [ 86.646494][ T8346] ? mtree_load+0x30a/0xa40 [ 86.647701][ T8346] ? __pfx_lock_release+0x10/0x10 [ 86.649021][ T8346] ? __pfx___get_user_pages+0x10/0x10 [ 86.650425][ T8346] get_user_pages_remote+0x25e/0xb30 [ 86.651810][ T8346] ? __pfx_get_user_pages_remote+0x10/0x10 [ 86.653327][ T8346] __access_remote_vm+0x235/0x7b0 [ 86.654678][ T8346] ? __pfx___access_remote_vm+0x10/0x10 [ 86.656140][ T8346] ? _copy_to_user+0xbb/0xd0 [ 86.657380][ T8346] proc_pid_cmdline_read+0x4f5/0x900 [ 86.658784][ T8346] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 86.660351][ T8346] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 86.661896][ T8346] vfs_readv+0x6bf/0x890 [ 86.663027][ T8346] ? __pfx___lock_acquire+0x10/0x10 [ 86.664572][ T8346] ? __pfx_vfs_readv+0x10/0x10 [ 86.665881][ T8346] ? __fget_files+0x1fc/0x3a0 [ 86.667634][ T8346] ? __pfx_lock_release+0x10/0x10 [ 86.669025][ T8346] ? __fget_files+0x206/0x3a0 [ 86.670291][ T8346] ? do_preadv+0x1b1/0x270 [ 86.671488][ T8346] do_preadv+0x1b1/0x270 [ 86.672613][ T8346] ? __pfx_do_preadv+0x10/0x10 [ 86.673975][ T8346] do_syscall_64+0xcd/0x250 [ 86.675158][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.676771][ T8346] RIP: 0033:0x7f8d41780809 [ 86.677958][ T8346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.682939][ T8346] RSP: 002b:00007f8d42523058 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 86.685127][ T8346] RAX: ffffffffffffffda RBX: 00007f8d41945fa0 RCX: 00007f8d41780809 [ 86.687187][ T8346] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 86.689260][ T8346] RBP: 00007f8d417f393e R08: 0000000000000000 R09: 0000000000000000 [ 86.691355][ T8346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.693427][ T8346] R13: 0000000000000000 R14: 00007f8d41945fa0 R15: 00007ffc24c98af8 [ 86.695511][ T8346] [ 86.696397][ T5965] Bluetooth: hci1: command tx timeout [ 86.765170][ T8356] netem: change failed [ 86.767053][ T8355] netem: change failed [ 88.894536][ T5965] Bluetooth: hci1: command tx timeout [ 91.108129][ T5965] Bluetooth: hci1: command tx timeout [ 100.905052][ T39] audit: type=1400 audit(1732853410.376:823): avc: denied { write } for pid=8366 comm="syz.2.601" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.910974][ T39] audit: type=1400 audit(1732853410.376:824): avc: denied { read } for pid=5357 comm="acpid" name="event7" dev="devtmpfs" ino=2883 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 100.912376][ T8371] netlink: 'syz.0.599': attribute type 25 has an invalid length. [ 100.916801][ T39] audit: type=1400 audit(1732853410.376:825): avc: denied { open } for pid=5357 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=2883 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 100.919346][ T8371] netlink: 'syz.0.599': attribute type 8 has an invalid length. [ 100.925288][ T39] audit: type=1400 audit(1732853410.376:826): avc: denied { ioctl } for pid=5357 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=2883 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 101.020366][ T8376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9744 sclass=netlink_route_socket pid=8376 comm=syz.2.601 [ 101.100989][ T8379] __nla_validate_parse: 1 callbacks suppressed [ 101.101000][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.604'. [ 101.105395][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.604'. [ 101.160002][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'. [ 101.162339][ T8387] netlink: 'syz.0.606': attribute type 3 has an invalid length. [ 101.164402][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'. [ 101.166631][ T8387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.606'. [ 101.225825][ T8391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.380266][ T5993] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 101.518681][ T5993] usb 10-1: device descriptor read/64, error -71 [ 101.774222][ T5993] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 101.820748][ T8396] overlayfs: failed to resolve './file1': -2 [ 101.821029][ T8395] overlayfs: failed to resolve './file1': -2 [ 101.826674][ T39] audit: type=1400 audit(1732853411.240:827): avc: denied { mount } for pid=8394 comm="syz.3.610" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 101.833610][ T8395] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.610'. [ 101.849970][ T39] audit: type=1400 audit(1732853411.268:828): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 101.912889][ T5993] usb 10-1: device descriptor read/64, error -71 [ 102.037396][ T5993] usb usb10-port1: attempt power cycle [ 102.041528][ T8410] Bluetooth: MGMT ver 1.23 [ 102.050851][ T8414] FAULT_INJECTION: forcing a failure. [ 102.050851][ T8414] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 102.054673][ T8414] CPU: 1 UID: 0 PID: 8414 Comm: syz.3.615 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 102.057306][ T8414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.060051][ T8414] Call Trace: [ 102.060920][ T8414] [ 102.061688][ T8414] dump_stack_lvl+0x16c/0x1f0 [ 102.062959][ T8414] should_fail_ex+0x497/0x5b0 [ 102.064216][ T8414] ? fs_reclaim_acquire+0xae/0x150 [ 102.065537][ T8414] should_fail_alloc_page+0xe7/0x130 [ 102.066898][ T8414] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 102.068471][ T8414] ? register_lock_class+0xb1/0x1240 [ 102.069835][ T8414] __alloc_pages_noprof+0x190/0x25a0 [ 102.071200][ T8414] ? __lock_acquire+0x15a9/0x3c40 [ 102.072520][ T8414] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 102.074009][ T8414] ? __pfx___lock_acquire+0x10/0x10 [ 102.075357][ T8414] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 102.076826][ T8414] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.078405][ T8414] ? policy_nodemask+0xea/0x4e0 [ 102.079678][ T8414] alloc_pages_mpol_noprof+0x2c9/0x610 [ 102.081097][ T8414] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 102.082643][ T8414] ? down_write+0x14e/0x200 [ 102.083838][ T8414] ? rcu_is_watching+0x12/0xc0 [ 102.085095][ T8414] binder_alloc_new_buf+0x1763/0x2bc0 [ 102.086484][ T8414] binder_transaction+0x1442/0x9c90 [ 102.087843][ T8414] ? __pfx_mark_lock+0x10/0x10 [ 102.089092][ T8414] ? hlock_class+0x4e/0x130 [ 102.090388][ T8414] ? __pfx_binder_transaction+0x10/0x10 [ 102.091870][ T8414] ? __pfx___lock_acquire+0x10/0x10 [ 102.093238][ T8414] ? mark_lock+0xb5/0xc60 [ 102.094405][ T8414] ? find_held_lock+0x2d/0x110 [ 102.095675][ T8414] ? __might_fault+0x13b/0x190 [ 102.096936][ T8414] ? __pfx_lock_release+0x10/0x10 [ 102.098255][ T8414] ? trace_lock_acquire+0x146/0x1e0 [ 102.099633][ T8414] ? __pfx_lock_release+0x10/0x10 [ 102.100944][ T8414] ? lock_acquire+0x2f/0xb0 [ 102.102119][ T8414] ? __might_fault+0xe3/0x190 [ 102.103343][ T8414] ? __might_fault+0xe3/0x190 [ 102.104614][ T8414] binder_thread_write+0xab4/0x4c70 [ 102.105981][ T8414] ? __pfx___lock_acquire+0x10/0x10 [ 102.107333][ T8414] ? __pfx_binder_thread_write+0x10/0x10 [ 102.108780][ T8414] ? find_held_lock+0x2d/0x110 [ 102.110035][ T8414] ? binder_debug+0xdf/0x1b0 [ 102.111250][ T8414] ? __pfx_binder_debug+0x10/0x10 [ 102.112570][ T8414] ? lock_acquire+0x2f/0xb0 [ 102.113771][ T8414] ? __might_fault+0xe3/0x190 [ 102.115000][ T8414] binder_ioctl+0x2669/0x6fd0 [ 102.116236][ T8414] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.117766][ T8414] ? __pfx_binder_ioctl+0x10/0x10 [ 102.119081][ T8414] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.120405][ T8414] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 102.122088][ T8414] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 102.123783][ T8414] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 102.125555][ T8414] ? __pfx_lock_release+0x10/0x10 [ 102.126874][ T8414] ? selinux_file_ioctl+0x180/0x270 [ 102.128233][ T8414] ? selinux_file_ioctl+0xb4/0x270 [ 102.129572][ T8414] ? __pfx_binder_ioctl+0x10/0x10 [ 102.130879][ T8414] __x64_sys_ioctl+0x190/0x200 [ 102.132147][ T8414] do_syscall_64+0xcd/0x250 [ 102.133332][ T8414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.134870][ T8414] RIP: 0033:0x7fa111d80809 [ 102.136040][ T8414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.141011][ T8414] RSP: 002b:00007fa112b49058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.143167][ T8414] RAX: ffffffffffffffda RBX: 00007fa111f45fa0 RCX: 00007fa111d80809 [ 102.145217][ T8414] RDX: 00000000200001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 102.147265][ T8414] RBP: 00007fa112b490a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.149319][ T8414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.151381][ T8414] R13: 0000000000000000 R14: 00007fa111f45fa0 R15: 00007ffd025027d8 [ 102.153434][ T8414] [ 102.154313][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.157119][ T8414] binder_alloc: 8413: failed to allocate page [ 102.179862][ T8419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.256036][ T8425] netlink: 'syz.3.620': attribute type 17 has an invalid length. [ 102.258125][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 102.261278][ T8426] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 102.261960][ T8425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 102.326347][ T8428] netlink: 'syz.3.621': attribute type 4 has an invalid length. [ 102.362598][ T8430] batadv0: entered promiscuous mode [ 102.364395][ T8430] batadv0: left promiscuous mode [ 102.434466][ T5993] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 102.458422][ T5993] usb 10-1: device descriptor read/8, error -71 [ 102.733672][ T5993] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 102.756794][ T5993] usb 10-1: device descriptor read/8, error -71 [ 102.836138][ T8450] FAULT_INJECTION: forcing a failure. [ 102.836138][ T8450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 102.839776][ T8450] CPU: 3 UID: 0 PID: 8450 Comm: syz.2.627 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 102.842458][ T8450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.845334][ T8450] Call Trace: [ 102.846216][ T8450] [ 102.846989][ T8450] dump_stack_lvl+0x16c/0x1f0 [ 102.848245][ T8450] should_fail_ex+0x497/0x5b0 [ 102.849468][ T8450] ? fs_reclaim_acquire+0xae/0x150 [ 102.850786][ T8450] should_fail_alloc_page+0xe7/0x130 [ 102.852155][ T8450] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 102.853777][ T8450] __alloc_pages_noprof+0x190/0x25a0 [ 102.855245][ T8450] ? __bpf_trace_mmap_lock_acquire_returned+0x134/0x180 [ 102.857032][ T8450] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 102.858836][ T8450] ? trace_lock_acquire+0x146/0x1e0 [ 102.860214][ T8450] ? lock_acquire+0x2f/0xb0 [ 102.861344][ T8450] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 102.862807][ T8450] ? rcu_is_watching+0x12/0xc0 [ 102.864000][ T8450] ? __mmap_lock_do_trace_acquire_returned.part.0+0x107/0x2d0 [ 102.865867][ T8450] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.867401][ T8450] ? policy_nodemask+0xea/0x4e0 [ 102.868662][ T8450] alloc_pages_mpol_noprof+0x2c9/0x610 [ 102.870065][ T8450] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 102.872068][ T8450] ? down_write+0x14e/0x200 [ 102.873381][ T8450] binder_alloc_new_buf+0x1763/0x2bc0 [ 102.874790][ T8450] binder_transaction+0x1442/0x9c90 [ 102.876164][ T8450] ? __pfx_mark_lock+0x10/0x10 [ 102.877418][ T8450] ? hlock_class+0x4e/0x130 [ 102.878546][ T8450] ? __pfx_binder_transaction+0x10/0x10 [ 102.879987][ T8450] ? __pfx___lock_acquire+0x10/0x10 [ 102.881302][ T8450] ? mark_lock+0xb5/0xc60 [ 102.882433][ T8450] ? find_held_lock+0x2d/0x110 [ 102.883675][ T8450] ? __might_fault+0x13b/0x190 [ 102.885192][ T8450] ? __pfx_lock_release+0x10/0x10 [ 102.887049][ T8450] ? trace_lock_acquire+0x146/0x1e0 [ 102.888991][ T8450] ? __pfx_lock_release+0x10/0x10 [ 102.890808][ T8450] ? lock_acquire+0x2f/0xb0 [ 102.892457][ T8450] ? __might_fault+0xe3/0x190 [ 102.894173][ T8450] ? __might_fault+0xe3/0x190 [ 102.895914][ T8450] binder_thread_write+0xab4/0x4c70 [ 102.897818][ T8450] ? __pfx___lock_acquire+0x10/0x10 [ 102.899722][ T8450] ? __pfx_binder_thread_write+0x10/0x10 [ 102.901791][ T8450] ? find_held_lock+0x2d/0x110 [ 102.903546][ T8450] ? binder_debug+0xdf/0x1b0 [ 102.905406][ T8450] ? __pfx_binder_debug+0x10/0x10 [ 102.907227][ T8450] ? lock_acquire+0x2f/0xb0 [ 102.908866][ T8450] ? __might_fault+0xe3/0x190 [ 102.910580][ T8450] binder_ioctl+0x2669/0x6fd0 [ 102.912324][ T8450] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.914523][ T8450] ? __pfx_binder_ioctl+0x10/0x10 [ 102.916392][ T8450] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.918253][ T8450] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 102.920559][ T8450] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 102.922862][ T8450] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 102.925430][ T8450] ? __pfx_lock_release+0x10/0x10 [ 102.927264][ T8450] ? selinux_file_ioctl+0x180/0x270 [ 102.929143][ T8450] ? selinux_file_ioctl+0xb4/0x270 [ 102.931081][ T8450] ? __pfx_binder_ioctl+0x10/0x10 [ 102.932901][ T8450] __x64_sys_ioctl+0x190/0x200 [ 102.934719][ T8450] do_syscall_64+0xcd/0x250 [ 102.936351][ T8450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.938417][ T8450] RIP: 0033:0x7f8d41780809 [ 102.939985][ T8450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.945636][ T8450] RSP: 002b:00007f8d42523058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.947673][ T8450] RAX: ffffffffffffffda RBX: 00007f8d41945fa0 RCX: 00007f8d41780809 [ 102.949594][ T8450] RDX: 00000000200001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 102.951524][ T8450] RBP: 00007f8d425230a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.953490][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.955526][ T8450] R13: 0000000000000000 R14: 00007f8d41945fa0 R15: 00007ffc24c98af8 [ 102.957482][ T8450] [ 102.958853][ T5993] usb usb10-port1: unable to enumerate USB device [ 102.959123][ T8450] binder_alloc: 8449: failed to allocate page [ 102.981893][ T8452] binder: 8451:8452 unknown command 0 [ 102.983430][ T8452] binder: 8451:8452 ioctl c0306201 200001c0 returned -22 [ 103.206923][ T8468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.791041][ T39] audit: type=1400 audit(1732853413.089:829): avc: denied { mounton } for pid=8476 comm="syz.0.637" path="/164/file0/file0" dev="9p" ino=35922562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.793217][ T8477] overlay: ./file0 is not a directory [ 103.965979][ T8488] FAULT_INJECTION: forcing a failure. [ 103.965979][ T8488] name failslab, interval 1, probability 0, space 0, times 1 [ 103.969344][ T8488] CPU: 0 UID: 0 PID: 8488 Comm: syz.0.638 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 103.971918][ T8488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.974617][ T8488] Call Trace: [ 103.975477][ T8488] [ 103.976233][ T8488] dump_stack_lvl+0x16c/0x1f0 [ 103.977456][ T8488] should_fail_ex+0x497/0x5b0 [ 103.978658][ T8488] ? fs_reclaim_acquire+0xae/0x150 [ 103.979958][ T8488] should_failslab+0xc2/0x120 [ 103.981144][ T8488] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 103.982505][ T8488] ? ptlock_alloc+0x1f/0x70 [ 103.983691][ T8488] ptlock_alloc+0x1f/0x70 [ 103.984792][ T8488] pte_alloc_one+0x74/0x390 [ 103.985956][ T8488] __pte_alloc+0x6e/0x3b0 [ 103.987036][ T8488] ? __pfx___pte_alloc+0x10/0x10 [ 103.988290][ T8488] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.989772][ T8488] ? policy_nodemask+0xea/0x4e0 [ 103.991030][ T8488] ? walk_to_pmd+0x1a5/0x2a0 [ 103.992276][ T8488] __get_locked_pte+0xa1/0xc0 [ 103.993509][ T8488] vm_insert_page+0x42e/0x6d0 [ 103.994777][ T8488] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 103.996347][ T8488] ? __pfx_vm_insert_page+0x10/0x10 [ 103.997697][ T8488] ? rcu_is_watching+0x12/0xc0 [ 103.998950][ T8488] binder_alloc_new_buf+0x17a0/0x2bc0 [ 104.000360][ T8488] binder_transaction+0x1442/0x9c90 [ 104.001713][ T8488] ? __pfx_mark_lock+0x10/0x10 [ 104.002965][ T8488] ? hlock_class+0x4e/0x130 [ 104.004288][ T8488] ? __pfx_binder_transaction+0x10/0x10 [ 104.005758][ T8488] ? __pfx___lock_acquire+0x10/0x10 [ 104.007127][ T8488] ? mark_lock+0xb5/0xc60 [ 104.008286][ T8488] ? find_held_lock+0x2d/0x110 [ 104.009559][ T8488] ? __might_fault+0x13b/0x190 [ 104.010829][ T8488] ? __pfx_lock_release+0x10/0x10 [ 104.012163][ T8488] ? trace_lock_acquire+0x146/0x1e0 [ 104.013546][ T8488] ? __pfx_lock_release+0x10/0x10 [ 104.014889][ T8488] ? lock_acquire+0x2f/0xb0 [ 104.016037][ T8488] ? __might_fault+0xe3/0x190 [ 104.017209][ T8488] ? __might_fault+0xe3/0x190 [ 104.018419][ T8488] binder_thread_write+0xab4/0x4c70 [ 104.019774][ T8488] ? __pfx___lock_acquire+0x10/0x10 [ 104.021113][ T8488] ? __pfx_binder_thread_write+0x10/0x10 [ 104.022492][ T8488] ? find_held_lock+0x2d/0x110 [ 104.023731][ T8488] ? binder_debug+0xdf/0x1b0 [ 104.024951][ T8488] ? __pfx_binder_debug+0x10/0x10 [ 104.026270][ T8488] ? lock_acquire+0x2f/0xb0 [ 104.027485][ T8488] ? __might_fault+0xe3/0x190 [ 104.028737][ T8488] binder_ioctl+0x2669/0x6fd0 [ 104.029981][ T8488] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.031522][ T8488] ? __pfx_binder_ioctl+0x10/0x10 [ 104.033044][ T8488] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.034468][ T8488] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 104.036138][ T8488] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 104.037950][ T8488] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.039808][ T8488] ? __pfx_lock_release+0x10/0x10 [ 104.041182][ T8488] ? selinux_file_ioctl+0x180/0x270 [ 104.042569][ T8488] ? selinux_file_ioctl+0xb4/0x270 [ 104.043930][ T8488] ? __pfx_binder_ioctl+0x10/0x10 [ 104.045181][ T8488] __x64_sys_ioctl+0x190/0x200 [ 104.046372][ T8488] do_syscall_64+0xcd/0x250 [ 104.047564][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.049045][ T8488] RIP: 0033:0x7f1e2cb80809 [ 104.050154][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.054946][ T8488] RSP: 002b:00007f1e2d9b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.056964][ T8488] RAX: ffffffffffffffda RBX: 00007f1e2cd45fa0 RCX: 00007f1e2cb80809 [ 104.058930][ T8488] RDX: 00000000200001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 104.060873][ T8488] RBP: 00007f1e2d9b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.062803][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.064733][ T8488] R13: 0000000000000000 R14: 00007f1e2cd45fa0 R15: 00007fff2902b608 [ 104.066645][ T8488] [ 104.068062][ T8488] binder_alloc: 8484: binder_install_single_page failed to insert page at offset 0 with -12 [ 104.098834][ T39] audit: type=1400 audit(1732853413.381:830): avc: denied { write } for pid=8492 comm="syz.2.643" name="sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.104139][ T8491] vivid-007: ================= START STATUS ================= [ 104.108395][ T8494] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 104.108823][ T8491] vivid-007: Generate PTS: [ 104.115017][ T8494] CIFS mount error: No usable UNC path provided in device string! [ 104.115017][ T8494] [ 104.115206][ T8494] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 104.117815][ T8491] true [ 104.122226][ T8491] vivid-007: Generate SCR: true [ 104.124804][ T8491] tpg source WxH: 640x360 (Y'CbCr) [ 104.126213][ T8491] tpg field: 1 [ 104.127123][ T8491] tpg crop: 640x360@0x0 [ 104.130761][ T8491] tpg compose: 640x360@0x0 [ 104.131952][ T8491] tpg colorspace: 8 [ 104.132927][ T8491] tpg transfer function: 0/0 [ 104.134170][ T8491] tpg Y'CbCr encoding: 0/0 [ 104.135246][ T8491] tpg quantization: 0/0 [ 104.136261][ T8491] tpg RGB range: 0/2 [ 104.137228][ T8491] vivid-007: ================== END STATUS ================== [ 104.179982][ T8498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.182704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.219790][ T8502] binder: BINDER_SET_CONTEXT_MGR already set [ 104.221369][ T8502] binder: 8495:8502 ioctl 4018620d 20000040 returned -16 [ 104.244980][ T39] audit: type=1400 audit(1732853413.503:831): avc: denied { map } for pid=8503 comm="syz.0.646" path="socket:[23644]" dev="sockfs" ino=23644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.251660][ T39] audit: type=1400 audit(1732853413.512:832): avc: denied { read } for pid=8503 comm="syz.0.646" path="socket:[23644]" dev="sockfs" ino=23644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.346762][ T5965] Bluetooth: hci3: Unable to find connection for big 0x01 [ 104.414689][ T8519] FAULT_INJECTION: forcing a failure. [ 104.414689][ T8519] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.418409][ T8519] CPU: 0 UID: 0 PID: 8519 Comm: syz.0.651 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 104.420895][ T8519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.423430][ T8519] Call Trace: [ 104.424259][ T8519] [ 104.424978][ T8519] dump_stack_lvl+0x16c/0x1f0 [ 104.426206][ T8519] should_fail_ex+0x497/0x5b0 [ 104.427701][ T8519] _copy_from_user+0x2e/0xd0 [ 104.428860][ T8519] binder_alloc_copy_user_to_buffer+0x295/0x430 [ 104.430435][ T8519] binder_transaction+0x18e5/0x9c90 [ 104.431753][ T8519] ? hlock_class+0x4e/0x130 [ 104.432917][ T8519] ? __pfx_binder_transaction+0x10/0x10 [ 104.434324][ T8519] ? __pfx___lock_acquire+0x10/0x10 [ 104.435814][ T8519] ? mark_lock+0xb5/0xc60 [ 104.436912][ T8519] ? find_held_lock+0x2d/0x110 [ 104.438137][ T8519] ? __might_fault+0x13b/0x190 [ 104.439312][ T8519] ? __pfx_lock_release+0x10/0x10 [ 104.440573][ T8519] ? trace_lock_acquire+0x146/0x1e0 [ 104.441886][ T8519] ? __pfx_lock_release+0x10/0x10 [ 104.443201][ T8519] ? lock_acquire+0x2f/0xb0 [ 104.444358][ T8519] ? __might_fault+0xe3/0x190 [ 104.445557][ T8519] ? __might_fault+0xe3/0x190 [ 104.446765][ T8519] binder_thread_write+0xab4/0x4c70 [ 104.448110][ T8519] ? __pfx___lock_acquire+0x10/0x10 [ 104.449426][ T8519] ? __pfx_binder_thread_write+0x10/0x10 [ 104.449976][ T8521] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 104.450864][ T8519] ? find_held_lock+0x2d/0x110 [ 104.450883][ T8519] ? binder_debug+0xdf/0x1b0 [ 104.456370][ T8519] ? __pfx_binder_debug+0x10/0x10 [ 104.457861][ T8519] ? lock_acquire+0x2f/0xb0 [ 104.458993][ T8519] ? __might_fault+0xe3/0x190 [ 104.460233][ T8519] binder_ioctl+0x2669/0x6fd0 [ 104.461469][ T8519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.462982][ T8519] ? __pfx_binder_ioctl+0x10/0x10 [ 104.464299][ T8519] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.465608][ T8519] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 104.467284][ T8519] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 104.468976][ T8519] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.470729][ T8519] ? __pfx_lock_release+0x10/0x10 [ 104.471979][ T8519] ? selinux_file_ioctl+0x180/0x270 [ 104.473311][ T8519] ? selinux_file_ioctl+0xb4/0x270 [ 104.474650][ T8519] ? __pfx_binder_ioctl+0x10/0x10 [ 104.475969][ T8519] __x64_sys_ioctl+0x190/0x200 [ 104.477212][ T8519] do_syscall_64+0xcd/0x250 [ 104.478361][ T8519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.480004][ T8519] RIP: 0033:0x7f1e2cb80809 [ 104.481286][ T8519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.486004][ T8519] RSP: 002b:00007f1e2d9b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.488047][ T8519] RAX: ffffffffffffffda RBX: 00007f1e2cd45fa0 RCX: 00007f1e2cb80809 [ 104.489936][ T8519] RDX: 00000000200001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 104.491914][ T8519] RBP: 00007f1e2d9b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.494371][ T8519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.496947][ T8519] R13: 0000000000000000 R14: 00007f1e2cd45fa0 R15: 00007fff2902b608 [ 104.499478][ T8519] [ 104.518519][ T8524] netlink: 104 bytes leftover after parsing attributes in process `syz.5.652'. [ 104.618476][ T8517] delete_channel: no stack [ 104.824691][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 105.498102][ T8554] FAULT_INJECTION: forcing a failure. [ 105.498102][ T8554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.502554][ T8554] CPU: 2 UID: 0 PID: 8554 Comm: syz.0.662 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 105.505978][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.509600][ T8554] Call Trace: [ 105.510740][ T8554] [ 105.511700][ T8554] dump_stack_lvl+0x16c/0x1f0 [ 105.512858][ T8554] should_fail_ex+0x497/0x5b0 [ 105.514087][ T8554] _copy_from_user+0x2e/0xd0 [ 105.515311][ T8554] binder_get_object+0xdd/0x240 [ 105.516529][ T8554] binder_transaction+0x1c3e/0x9c90 [ 105.517837][ T8554] ? hlock_class+0x4e/0x130 [ 105.518972][ T8554] ? __pfx_binder_transaction+0x10/0x10 [ 105.520420][ T8554] ? __pfx___lock_acquire+0x10/0x10 [ 105.521714][ T8554] ? mark_lock+0xb5/0xc60 [ 105.522762][ T8554] ? find_held_lock+0x2d/0x110 [ 105.523939][ T8554] ? __might_fault+0x13b/0x190 [ 105.525120][ T8554] ? __pfx_lock_release+0x10/0x10 [ 105.526587][ T8554] ? trace_lock_acquire+0x146/0x1e0 [ 105.527945][ T8554] ? __pfx_lock_release+0x10/0x10 [ 105.529176][ T8554] ? lock_acquire+0x2f/0xb0 [ 105.530347][ T8554] ? __might_fault+0xe3/0x190 [ 105.531522][ T8554] ? __might_fault+0xe3/0x190 [ 105.532700][ T8554] binder_thread_write+0xab4/0x4c70 [ 105.534052][ T8554] ? __pfx___lock_acquire+0x10/0x10 [ 105.535511][ T8554] ? __pfx_binder_thread_write+0x10/0x10 [ 105.536956][ T8554] ? find_held_lock+0x2d/0x110 [ 105.538214][ T8554] ? binder_debug+0xdf/0x1b0 [ 105.539468][ T8554] ? __pfx_binder_debug+0x10/0x10 [ 105.540745][ T8554] ? lock_acquire+0x2f/0xb0 [ 105.541901][ T8554] ? __might_fault+0xe3/0x190 [ 105.543057][ T8554] binder_ioctl+0x2669/0x6fd0 [ 105.544242][ T8554] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.545781][ T8554] ? __pfx_binder_ioctl+0x10/0x10 [ 105.547094][ T8554] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 105.548366][ T8554] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 105.549988][ T8554] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 105.551611][ T8554] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 105.553376][ T8554] ? __pfx_lock_release+0x10/0x10 [ 105.554672][ T8554] ? selinux_file_ioctl+0x180/0x270 [ 105.555969][ T8554] ? selinux_file_ioctl+0xb4/0x270 [ 105.557267][ T8554] ? __pfx_binder_ioctl+0x10/0x10 [ 105.558574][ T8554] __x64_sys_ioctl+0x190/0x200 [ 105.559800][ T8554] do_syscall_64+0xcd/0x250 [ 105.560959][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.562450][ T8554] RIP: 0033:0x7f1e2cb80809 [ 105.563551][ T8554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.568319][ T8554] RSP: 002b:00007f1e2d9b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.570575][ T8554] RAX: ffffffffffffffda RBX: 00007f1e2cd45fa0 RCX: 00007f1e2cb80809 [ 105.572542][ T8554] RDX: 00000000200001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 105.574526][ T8554] RBP: 00007f1e2d9b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.576456][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.578391][ T8554] R13: 0000000000000000 R14: 00007f1e2cd45fa0 R15: 00007fff2902b608 [ 105.580387][ T8554] [ 105.811038][ T8561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.177713][ T6021] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 106.300741][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 106.300753][ T39] audit: type=1400 audit(1732853671.440:841): avc: denied { map } for pid=8568 comm="syz.5.667" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 106.355211][ T6021] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.357561][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.359689][ T6021] usb 7-1: Product: syz [ 106.360775][ T6021] usb 7-1: Manufacturer: syz [ 106.361959][ T6021] usb 7-1: SerialNumber: syz [ 106.366971][ T6021] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 106.386733][ T6012] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 106.478353][ T8586] FAULT_INJECTION: forcing a failure. [ 106.478353][ T8586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.481670][ T8586] CPU: 3 UID: 0 PID: 8586 Comm: syz.5.672 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 106.484264][ T8586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.486996][ T8586] Call Trace: [ 106.487864][ T8586] [ 106.488652][ T8586] dump_stack_lvl+0x16c/0x1f0 [ 106.489883][ T8586] should_fail_ex+0x497/0x5b0 [ 106.491122][ T8586] _copy_to_user+0x32/0xd0 [ 106.492277][ T8586] binder_ioctl+0x2621/0x6fd0 [ 106.493453][ T8586] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.494925][ T8586] ? __pfx_binder_ioctl+0x10/0x10 [ 106.496198][ T8586] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.497441][ T8586] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 106.499015][ T8586] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 106.500970][ T8586] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 106.502703][ T8586] ? __pfx_lock_release+0x10/0x10 [ 106.504342][ T8586] ? selinux_file_ioctl+0x180/0x270 [ 106.505651][ T8586] ? selinux_file_ioctl+0xb4/0x270 [ 106.506935][ T8586] ? __pfx_binder_ioctl+0x10/0x10 [ 106.508318][ T8586] __x64_sys_ioctl+0x190/0x200 [ 106.509731][ T8586] do_syscall_64+0xcd/0x250 [ 106.510999][ T8586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.512534][ T8586] RIP: 0033:0x7fab8b180809 [ 106.513713][ T8586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.519553][ T8586] RSP: 002b:00007fab8c01b058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.521640][ T8586] RAX: ffffffffffffffda RBX: 00007fab8b345fa0 RCX: 00007fab8b180809 [ 106.523658][ T8586] RDX: 00000000200001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 106.525933][ T8586] RBP: 00007fab8c01b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 106.528307][ T8586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.530651][ T8586] R13: 0000000000000000 R14: 00007fab8b345fa0 R15: 00007ffe83f7e398 [ 106.532994][ T8586] [ 106.534083][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 106.535461][ T8586] binder: 8585:8586 ioctl c0306201 200001c0 returned -14 [ 106.616075][ T39] audit: type=1400 audit(1732853671.730:842): avc: denied { connect } for pid=8594 comm="syz.5.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.620948][ T39] audit: type=1400 audit(1732853671.730:843): avc: denied { shutdown } for pid=8594 comm="syz.5.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.955223][ T8608] __nla_validate_parse: 6 callbacks suppressed [ 106.955235][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.679'. [ 106.999945][ T8] usb 7-1: USB disconnect, device number 8 [ 107.670809][ T8614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.739398][ T6012] usb 7-1: Service connection timeout for: 256 [ 107.740993][ T6012] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 107.744652][ T6012] ath9k_htc: Failed to initialize the device [ 107.746555][ T8] usb 7-1: ath9k_htc: USB layer deinitialized [ 107.829505][ T8624] FAULT_INJECTION: forcing a failure. [ 107.829505][ T8624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.833343][ T8624] CPU: 1 UID: 0 PID: 8624 Comm: syz.5.683 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 107.835855][ T8624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.838516][ T8624] Call Trace: [ 107.839370][ T8624] [ 107.840110][ T8624] dump_stack_lvl+0x16c/0x1f0 [ 107.841347][ T8624] should_fail_ex+0x497/0x5b0 [ 107.842555][ T8624] _copy_to_user+0x32/0xd0 [ 107.843671][ T8624] simple_read_from_buffer+0xd0/0x160 [ 107.845016][ T8624] proc_fail_nth_read+0x198/0x270 [ 107.846268][ T8624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.847656][ T8624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.849032][ T8624] vfs_read+0x1df/0xbe0 [ 107.850052][ T8624] ? __fget_files+0x1fc/0x3a0 [ 107.851224][ T8624] ? __pfx___mutex_lock+0x10/0x10 [ 107.852484][ T8624] ? __pfx_vfs_read+0x10/0x10 [ 107.853676][ T8624] ? __fget_files+0x206/0x3a0 [ 107.854865][ T8624] ksys_read+0x12b/0x250 [ 107.855931][ T8624] ? __pfx_ksys_read+0x10/0x10 [ 107.857215][ T8624] do_syscall_64+0xcd/0x250 [ 107.858379][ T8624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.859860][ T8624] RIP: 0033:0x7fab8b17f21c [ 107.861039][ T8624] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 107.865725][ T8624] RSP: 002b:00007fab8c01b050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.867796][ T8624] RAX: ffffffffffffffda RBX: 00007fab8b345fa0 RCX: 00007fab8b17f21c [ 107.869712][ T8624] RDX: 000000000000000f RSI: 00007fab8c01b0b0 RDI: 0000000000000006 [ 107.871915][ T8624] RBP: 00007fab8c01b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.873873][ T8624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.875806][ T8624] R13: 0000000000000000 R14: 00007fab8b345fa0 R15: 00007ffe83f7e398 [ 107.877761][ T8624] [ 107.878571][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.956964][ T8628] netdevsim netdevsim3: Direct firmware load for Õ- failed with error -2 [ 107.959322][ T8628] netdevsim netdevsim3: Falling back to sysfs fallback for: Õ- [ 108.048774][ T39] audit: type=1400 audit(1732853673.068:844): avc: denied { mount } for pid=8587 comm="syz.0.673" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 108.062055][ T8639] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 108.103338][ T39] audit: type=1400 audit(1732853673.124:845): avc: denied { remount } for pid=8587 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 108.311530][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 108.313869][ T8648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'. [ 108.316385][ T8648] netlink: 'syz.0.691': attribute type 7 has an invalid length. [ 108.358611][ T8650] binder: BC_ACQUIRE_RESULT not supported [ 108.360127][ T8650] binder: 8649:8650 ioctl c0306201 200002c0 returned -22 [ 108.365459][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 108.379705][ T8640] mmap: syz.5.689 (8640): VmData 37859328 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 108.425416][ T8656] netlink: 'syz.5.694': attribute type 27 has an invalid length. [ 108.429008][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.694'. [ 108.589756][ T8667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.602238][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 108.864621][ T39] audit: type=1400 audit(1732853673.835:846): avc: denied { write } for pid=8674 comm="syz.3.700" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 108.864657][ T8675] random: crng reseeded on system resumption [ 109.018198][ T8675] Restarting kernel threads ... [ 109.019119][ T39] audit: type=1400 audit(1732853673.975:847): avc: denied { ioctl } for pid=8674 comm="syz.3.700" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.021708][ T8675] done. [ 109.167040][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.701'. [ 109.169584][ T8682] netlink: 'syz.5.702': attribute type 1 has an invalid length. [ 109.172029][ T8682] netlink: 'syz.5.702': attribute type 2 has an invalid length. [ 109.174131][ T8682] netlink: 16074 bytes leftover after parsing attributes in process `syz.5.702'. [ 109.195503][ T8682] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.216748][ T8682] netlink: 'syz.5.702': attribute type 1 has an invalid length. [ 109.218857][ T8682] netlink: 'syz.5.702': attribute type 2 has an invalid length. [ 109.220925][ T8682] netlink: 3434 bytes leftover after parsing attributes in process `syz.5.702'. [ 109.518030][ T8698] lo speed is unknown, defaulting to 1000 [ 109.729881][ T8715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.288367][ T39] audit: type=1400 audit(1732853675.163:848): avc: denied { write } for pid=8725 comm="syz.5.714" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 110.424091][ T39] audit: type=1400 audit(1732853675.294:849): avc: denied { connect } for pid=8733 comm="syz.5.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.432425][ T39] audit: type=1400 audit(1732853675.294:850): avc: denied { setopt } for pid=8733 comm="syz.5.716" laddr=172.20.20.170 lport=2 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.478154][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.718'. [ 110.603161][ T8750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.687892][ T8767] netlink: 'syz.2.728': attribute type 29 has an invalid length. [ 110.691814][ T8767] netlink: 'syz.2.728': attribute type 29 has an invalid length. [ 110.694539][ T8767] unsupported nla_type 40 [ 111.499999][ T8794] dns_resolver: Unsupported server list version (0) [ 111.579794][ T8798] netlink: 'syz.0.738': attribute type 3 has an invalid length. [ 111.682567][ T8805] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 111.733270][ T8807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.916557][ T8819] program syz.2.745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.840750][ T5965] Bluetooth: hci2: unexpected event 0x3b length: 7 < 10 [ 112.858960][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 112.858978][ T39] audit: type=1400 audit(1732853677.567:857): avc: denied { ioctl } for pid=8832 comm="syz.2.749" path="socket:[23335]" dev="sockfs" ino=23335 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.859746][ T8833] __nla_validate_parse: 5 callbacks suppressed [ 112.859756][ T8833] netlink: 156 bytes leftover after parsing attributes in process `syz.2.749'. [ 113.254901][ T6012] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 113.352247][ T8854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.415260][ T6012] usb 7-1: device descriptor read/64, error -71 [ 113.682487][ T6012] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 113.821645][ T6012] usb 7-1: device descriptor read/64, error -71 [ 113.885673][ T5965] Bluetooth: hci4: command 0x1003 tx timeout [ 113.885738][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 113.927071][ T39] audit: type=1400 audit(1732853678.568:858): avc: denied { open } for pid=8860 comm="syz.3.757" path="/dev/ptyqb" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 113.941573][ T6012] usb usb7-port1: attempt power cycle [ 113.995309][ T8875] binder: BINDER_SET_CONTEXT_MGR already set [ 113.996773][ T8875] binder: 8873:8875 ioctl 4018620d 20000040 returned -16 [ 114.055866][ T8879] binder: 8878:8879 unknown command 1 [ 114.058148][ T8879] binder: 8878:8879 ioctl c0306201 200001c0 returned -22 [ 114.095984][ T39] audit: type=1400 audit(1732853678.727:859): avc: denied { read } for pid=8880 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.313374][ T6012] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 114.349361][ T6012] usb 7-1: device descriptor read/8, error -71 [ 114.394143][ T8907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.601955][ T6012] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 114.624570][ T6012] usb 7-1: device descriptor read/8, error -71 [ 114.742386][ T6012] usb usb7-port1: unable to enumerate USB device [ 114.961159][ T8917] 9pnet_fd: Insufficient options for proto=fd [ 114.966224][ T8917] tmpfs: Unknown parameter 'usrquota_ynode_har`ÿŒgit' [ 115.128259][ T8923] binder: 8922:8923 unknown command 1 [ 115.129737][ T8923] binder: 8922:8923 ioctl c0306201 200001c0 returned -22 [ 115.153432][ T8926] xt_hashlimit: size too large, truncated to 1048576 [ 115.512455][ T5955] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 115.515822][ T5955] Bluetooth: hci1: Injecting HCI hardware error event [ 115.520910][ T5965] Bluetooth: hci1: hardware error 0x00 [ 115.529410][ T8940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.966572][ T8953] pimreg: entered allmulticast mode [ 116.008843][ T8959] binder: 8958:8959 unknown command 1 [ 116.010333][ T8959] binder: 8958:8959 ioctl c0306201 200001c0 returned -22 [ 116.139237][ T8972] binder_alloc: 8970: binder_alloc_buf, no vma [ 116.235342][ T8982] binder: 8981:8982 unknown command 0 [ 116.237319][ T8982] binder: 8981:8982 ioctl c0306201 200001c0 returned -22 [ 116.296837][ T8994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.318022][ T9000] vlan0: entered promiscuous mode [ 116.445414][ T9010] netlink: 16 bytes leftover after parsing attributes in process `syz.5.801'. [ 116.450861][ T9011] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 116.453759][ T9010] binder: 9008:9010 unknown command 0 [ 116.455146][ T9010] binder: 9008:9010 ioctl c0306201 20000340 returned -22 [ 116.571450][ T39] audit: type=1400 audit(1732853681.047:860): avc: denied { shutdown } for pid=9014 comm="syz.3.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.576602][ T39] audit: type=1400 audit(1732853681.047:861): avc: denied { read } for pid=9014 comm="syz.3.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.742151][ T9030] binder: 9029:9030 unknown command 0 [ 116.743639][ T9030] binder: 9029:9030 ioctl c0306201 200001c0 returned -22 [ 116.872591][ T9035] tipc: Started in network mode [ 116.874271][ T9035] tipc: Node identity ac1414aa, cluster identity 4711 [ 116.877386][ T9035] tipc: Enabled bearer , priority 10 [ 116.883289][ T9035] fuse: Bad value for 'fd' [ 116.915385][ T39] audit: type=1400 audit(1732853681.365:862): avc: denied { ioctl } for pid=9037 comm="syz.0.809" path="socket:[25182]" dev="sockfs" ino=25182 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.944305][ T9043] binder: 9042:9043 ioctl 4008af03 20000000 returned -22 [ 117.005460][ T39] audit: type=1400 audit(1732853681.449:863): avc: denied { bind } for pid=9046 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.010833][ T39] audit: type=1400 audit(1732853681.458:864): avc: denied { connect } for pid=9046 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.012950][ T9047] binder: 9046:9047 ioctl c018620c 20000040 returned -22 [ 117.305494][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.814'. [ 117.310712][ T9052] geneve2: entered promiscuous mode [ 117.687742][ T9056] random: crng reseeded on system resumption [ 117.734391][ T5965] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 117.742706][ T39] audit: type=1400 audit(1732853682.132:865): avc: denied { checkpoint_restore } for pid=9055 comm="syz.3.815" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.950191][ T56] tipc: Node number set to 2886997162 [ 117.982097][ T9058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.224560][ T9064] binder: 9063:9064 unknown command 0 [ 118.226300][ T9064] binder: 9063:9064 ioctl c0306201 200001c0 returned -22 [ 118.504071][ T5965] Bluetooth: hci3: command 0x040f tx timeout [ 119.035270][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.115504][ T5965] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.120336][ T5965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.123235][ T5965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.130093][ T5965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.132355][ T5965] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 119.136119][ T5965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.137790][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.198866][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.219525][ T9081] lo speed is unknown, defaulting to 1000 [ 119.266303][ T45] bond0: (slave netdevsim0): Releasing backup interface [ 119.269907][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.277046][ T9081] chnl_net:caif_netlink_parms(): no params data found [ 119.331759][ T9081] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.333636][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.335556][ T9081] bridge_slave_0: entered allmulticast mode [ 119.341204][ T9081] bridge_slave_0: entered promiscuous mode [ 119.344262][ T9081] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.346172][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.347922][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.826'. [ 119.348039][ T9081] bridge_slave_1: entered allmulticast mode [ 119.352577][ T9081] bridge_slave_1: entered promiscuous mode [ 119.374704][ T9081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.378308][ T9081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.398670][ T9097] binder: 9096:9097 unknown command 0 [ 119.400113][ T9097] binder: 9096:9097 ioctl c0306201 200001c0 returned -22 [ 119.402348][ T57] ================================================================== [ 119.404439][ T57] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x14c/0x1c0 [ 119.406817][ T57] Read of size 8 at addr ffff8880233c5008 by task kworker/1:1/57 [ 119.409363][ T57] [ 119.410488][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/1:1 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 119.413314][ T57] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.416084][ T57] Workqueue: events binder_deferred_func [ 119.417535][ T57] Call Trace: [ 119.418406][ T57] [ 119.419192][ T57] dump_stack_lvl+0x116/0x1f0 [ 119.420433][ T57] print_report+0xc3/0x620 [ 119.421600][ T57] ? __virt_addr_valid+0x5e/0x590 [ 119.422929][ T57] ? __phys_addr+0xc6/0x150 [ 119.424135][ T57] kasan_report+0xd9/0x110 [ 119.425301][ T57] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 119.426955][ T57] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 119.428623][ T57] __list_del_entry_valid_or_report+0x14c/0x1c0 [ 119.430235][ T57] binder_release_work+0x9b/0x490 [ 119.431475][ T57] binder_deferred_func+0xe6e/0x12e0 [ 119.432849][ T57] process_one_work+0x9c5/0x1ba0 [ 119.434153][ T57] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 119.435613][ T57] ? __pfx_process_one_work+0x10/0x10 [ 119.437008][ T57] ? rcu_is_watching+0x12/0xc0 [ 119.438270][ T57] ? assign_work+0x1a0/0x250 [ 119.439525][ T57] worker_thread+0x6c8/0xf00 [ 119.440737][ T57] ? __kthread_parkme+0x148/0x220 [ 119.442059][ T57] ? __pfx_worker_thread+0x10/0x10 [ 119.443401][ T57] kthread+0x2c1/0x3a0 [ 119.444474][ T57] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.445832][ T57] ? __pfx_kthread+0x10/0x10 [ 119.447058][ T57] ret_from_fork+0x45/0x80 [ 119.448235][ T57] ? __pfx_kthread+0x10/0x10 [ 119.449456][ T57] ret_from_fork_asm+0x1a/0x30 [ 119.450718][ T57] [ 119.451538][ T57] [ 119.452172][ T57] Allocated by task 9097: [ 119.453294][ T57] kasan_save_stack+0x33/0x60 [ 119.454536][ T57] kasan_save_track+0x14/0x30 [ 119.455770][ T57] __kasan_kmalloc+0xaa/0xb0 [ 119.456983][ T57] binder_thread_write+0xe18/0x4c70 [ 119.458340][ T57] binder_ioctl+0x2669/0x6fd0 [ 119.459583][ T57] __x64_sys_ioctl+0x190/0x200 [ 119.460837][ T57] do_syscall_64+0xcd/0x250 [ 119.462034][ T57] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.463578][ T57] [ 119.464240][ T57] Freed by task 57: [ 119.465240][ T57] kasan_save_stack+0x33/0x60 [ 119.466467][ T57] kasan_save_track+0x14/0x30 [ 119.467720][ T57] kasan_save_free_info+0x3b/0x60 [ 119.469037][ T57] __kasan_slab_free+0x51/0x70 [ 119.470294][ T57] kfree+0x14f/0x4b0 [ 119.471330][ T57] binder_deferred_func+0xdd7/0x12e0 [ 119.472709][ T57] process_one_work+0x9c5/0x1ba0 [ 119.474030][ T57] worker_thread+0x6c8/0xf00 [ 119.475255][ T57] kthread+0x2c1/0x3a0 [ 119.476323][ T57] ret_from_fork+0x45/0x80 [ 119.477492][ T57] ret_from_fork_asm+0x1a/0x30 [ 119.478745][ T57] [ 119.479382][ T57] The buggy address belongs to the object at ffff8880233c5000 [ 119.479382][ T57] which belongs to the cache kmalloc-64 of size 64 [ 119.482905][ T57] The buggy address is located 8 bytes inside of [ 119.482905][ T57] freed 64-byte region [ffff8880233c5000, ffff8880233c5040) [ 119.486355][ T57] [ 119.486991][ T57] The buggy address belongs to the physical page: [ 119.488680][ T57] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x233c5 [ 119.490923][ T57] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 119.492758][ T57] page_type: f5(slab) [ 119.493808][ T57] raw: 00fff00000000000 ffff88801b0428c0 ffffea00008f6b80 dead000000000002 [ 119.496025][ T57] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 119.498226][ T57] page dumped because: kasan: bad access detected [ 119.499885][ T57] page_owner tracks the page as allocated [ 119.501351][ T57] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5952, tgid 5952 (syz-executor), ts 36989321714, free_ts 36983675065 [ 119.506235][ T57] post_alloc_hook+0x2d1/0x350 [ 119.507518][ T57] get_page_from_freelist+0xfce/0x2f80 [ 119.508929][ T57] __alloc_pages_noprof+0x223/0x25a0 [ 119.510308][ T57] alloc_pages_mpol_noprof+0x2c9/0x610 [ 119.511730][ T57] new_slab+0x2c9/0x410 [ 119.512836][ T57] ___slab_alloc+0xdac/0x1870 [ 119.514073][ T57] __slab_alloc.constprop.0+0x56/0xb0 [ 119.515470][ T57] __kmalloc_noprof+0x2ec/0x510 [ 119.516742][ T57] kobject_get_path+0xd9/0x2b0 [ 119.518014][ T57] kobject_uevent_env+0x289/0x1860 [ 119.519316][ T57] __kobject_del+0x168/0x1f0 [ 119.520505][ T57] kobject_put+0x327/0x5a0 [ 119.521610][ T57] net_rx_queue_update_kobjects+0x478/0x5f0 [ 119.523094][ T57] netif_set_real_num_rx_queues+0x169/0x210 [ 119.524636][ T57] veth_init_queues+0x151/0x190 [ 119.525894][ T57] veth_newlink+0x48c/0xa30 [ 119.527095][ T57] page last free pid 5952 tgid 5952 stack trace: [ 119.528729][ T57] free_unref_page+0x661/0x1080 [ 119.530006][ T57] qlist_free_all+0x4e/0x120 [ 119.531213][ T57] kasan_quarantine_reduce+0x195/0x1e0 [ 119.532622][ T57] __kasan_slab_alloc+0x69/0x90 [ 119.533910][ T57] __kmalloc_cache_noprof+0x243/0x410 [ 119.535305][ T57] kset_create_and_add+0x4d/0x190 [ 119.536607][ T57] netdev_register_kobject+0x1cd/0x3f0 [ 119.538020][ T57] register_netdevice+0x1473/0x1e90 [ 119.539378][ T57] veth_newlink+0x2a7/0xa30 [ 119.540561][ T57] rtnl_newlink+0xb88/0x1c50 [ 119.541768][ T57] rtnetlink_rcv_msg+0x95b/0xea0 [ 119.543054][ T57] netlink_rcv_skb+0x16b/0x440 [ 119.544298][ T57] netlink_unicast+0x53c/0x7f0 [ 119.545544][ T57] netlink_sendmsg+0x8b8/0xd70 [ 119.546780][ T57] __sys_sendto+0x488/0x4f0 [ 119.547976][ T57] __x64_sys_sendto+0xe0/0x1c0 [ 119.549223][ T57] [ 119.549852][ T57] Memory state around the buggy address: [ 119.551304][ T57] ffff8880233c4f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 119.553343][ T57] ffff8880233c4f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 119.555403][ T57] >ffff8880233c5000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 119.557438][ T57] ^ [ 119.558554][ T57] ffff8880233c5080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 119.560614][ T57] ffff8880233c5100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 119.562662][ T57] ================================================================== [ 119.564815][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.566878][ T57] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 119.568740][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/1:1 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 119.571335][ T57] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.574183][ T57] Workqueue: events binder_deferred_func [ 119.575677][ T57] Call Trace: [ 119.576632][ T57] [ 119.577404][ T57] dump_stack_lvl+0x3d/0x1f0 [ 119.578611][ T57] panic+0x71d/0x800 [ 119.579649][ T57] ? __pfx_panic+0x10/0x10 [ 119.580810][ T57] ? check_panic_on_warn+0x1f/0xb0 [ 119.582148][ T57] check_panic_on_warn+0xab/0xb0 [ 119.583448][ T57] end_report+0x117/0x180 [ 119.584575][ T57] kasan_report+0xe9/0x110 [ 119.585742][ T57] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 119.587417][ T57] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 119.589061][ T57] __list_del_entry_valid_or_report+0x14c/0x1c0 [ 119.590702][ T57] binder_release_work+0x9b/0x490 [ 119.592024][ T57] binder_deferred_func+0xe6e/0x12e0 [ 119.593394][ T57] process_one_work+0x9c5/0x1ba0 [ 119.594704][ T57] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 119.596163][ T57] ? __pfx_process_one_work+0x10/0x10 [ 119.597552][ T57] ? rcu_is_watching+0x12/0xc0 [ 119.598799][ T57] ? assign_work+0x1a0/0x250 [ 119.600015][ T57] worker_thread+0x6c8/0xf00 [ 119.601220][ T57] ? __kthread_parkme+0x148/0x220 [ 119.602531][ T57] ? __pfx_worker_thread+0x10/0x10 [ 119.603869][ T57] kthread+0x2c1/0x3a0 [ 119.604932][ T57] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.606287][ T57] ? __pfx_kthread+0x10/0x10 [ 119.607498][ T57] ret_from_fork+0x45/0x80 [ 119.608659][ T57] ? __pfx_kthread+0x10/0x10 [ 119.609865][ T57] ret_from_fork_asm+0x1a/0x30 [ 119.611113][ T57] [ 119.612414][ T57] Kernel Offset: disabled [ 119.613536][ T57] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:10:32 Registers: info registers vcpu 0 CPU#0 RAX=0000000000163a6d RBX=0000000000000000 RCX=ffffffff8b2fcc79 RDX=0000000000000000 RSI=ffffffff8b6ce000 RDI=ffffffff8bd1e5c0 RBP=fffffbfff1bd2f00 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97800 R14=ffffffff9060a4d0 R15=0000000000000000 RIP=ffffffff8b2fe05f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd0ff34ff8 CR3=000000004ab3a000 CR4=00352ef0 DR0=0000000000000002 DR1=0000000000000000 DR2=0000000000000003 DR3=0000000000000001 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000fc000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd02502b60 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa111df47e8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa111df47f5 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa111df47ef ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa111df4803 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa111df4889 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa111df4967 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000ce8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000ce8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85114695 RDI=ffffffff9ab41ba0 RBP=ffffffff9ab41b60 RSP=ffffc90000a9f618 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002e R14=ffffffff85114630 R15=0000000000000000 RIP=ffffffff851146bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c25607b CR3=000000004353a000 CR4=00352ef0 DR0=0000000000000002 DR1=0000000000000000 DR2=0000000000000003 DR3=0000000000000001 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b1f47e8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b1f47f5 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b1f47ef ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b1f4803 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b1f4889 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b1f4967 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b310488 00007fab8b310480 00007fab8b310478 00007fab8b310450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8be7d100 00007fab8b310440 00007fab8b310458 00007fab8b3104a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b310498 00007fab8b310490 00007fab8b310488 00007fab8b310480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001642f1 RBX=0000000000000002 RCX=ffffffff8b2fcc79 RDX=0000000000000000 RSI=ffffffff8b6ce000 RDI=ffffffff8bd1e5c0 RBP=ffffed1003ad2000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d690000 R14=ffffffff9060a4d0 R15=0000000000000000 RIP=ffffffff8b2fe05f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555595103808 CR3=000000004464c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000200 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe83f7e720 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b1f47e8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b1f47f5 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b1f47ef ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b1f4803 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b1f4889 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab8b1f4967 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffc9000578fa90 RDX=0000000000000000 RSI=ffffffff8b6ce300 RDI=ffff888022494cc8 RBP=ffff888022494880 RSP=ffffc9000578fad8 R8 =0000000000000000 R9 =fffffbfff20c149a R10=ffffffff9060a4d7 R11=0000000000000003 R12=ffff888022494880 R13=ffffc9000578fc00 R14=ffffffffffffffff R15=ffffc9000578fb28 RIP=ffffffff81752826 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fab8be756c0 CR3=000000004464c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000004 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000810880 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 794cc7e25d73fba9 be5d407d36bcdc74 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6dbc02fa485e2627 33d653a13fe727c6 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d8dff6464ba17c5 2bda273051e7d61e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3211d39371ff6781 77aa7ff094e6f205 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000840 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8600000038934c00 0000497110a62daa ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92a08a7453298600 00004972873c4796 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e8d198000000496f 0000496fecf4d28f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e60000006737aad2 4971f6d2496f6593 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8bcdd642a1e8522d 39a3e117f3afabcb ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 06d5bd34d8ee0dc5 2af0660cbb1bae77 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000302d7874 2f7365756575712f 366874652f74656e 2f306d6973766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555300636475 0000000000000021 0000000000000032 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46af7f21e0 00007f46af7f21e0 0000000000002861 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2433273f397b27 697a787c69303b7e 69305f474f5b647c 69303a2433273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020