last executing test programs: 1m45.800850587s ago: executing program 2 (id=164): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) 1m45.740912682s ago: executing program 2 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x3c}}, 0x40) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r3 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r4 = dup(r3) write$binfmt_elf64(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r10 = dup3(r9, r8, 0x0) (async) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, 0x0}}], 0x0, 0x0, 0x0}) (async) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r12, &(0x7f00000034c0)={0x2020}, 0xcac) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x241a07f23122330d, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) 1m45.645450348s ago: executing program 2 (id=167): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000040)={0x4, 0x6}, 0x6) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x2, 0x2, {0xa, 0x4e20, 0xd7b3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb0ba}}}, 0x3a) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000140008"], 0x48}}, 0x20000034) 1m45.645200261s ago: executing program 2 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000140)={0xd, 0x7, 0x1, {{}, 0xfffff873}}, 0xd) mount(0x0, &(0x7f0000001080)='./sys_link\x00', &(0x7f0000001040)='fusectl\x00', 0x11, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) linkat(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000002c0)='./file1\x00', 0x1000) 1m45.589239481s ago: executing program 2 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 1m45.339408183s ago: executing program 2 (id=180): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 1m45.288638283s ago: executing program 32 (id=180): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 35.69083767s ago: executing program 0 (id=1136): r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0) (async) mlock2(&(0x7f0000027000/0x2000)=nil, 0x2000, 0x1) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) 35.690203891s ago: executing program 0 (id=1137): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00000003c0)=0x27) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x12000}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000380)={0x9000, 0x10000}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x40085500, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)="f404ee61c923a25e5e87a65f2666140f0000000000000010a4000942599bcf855f6b62fb7a7283465760260e8beea43ca5f4c23b2080d0867008bc6ff3989b80c950c33b9d3e6d28fb21d173f3af2acd585f1697c1b50a2c57e714b02f4d66d8413942c33d7b3549977bbc971529c6150950b862cb5809813f795de6711d1432", 0x80, r0}, 0x68) 35.578092294s ago: executing program 0 (id=1139): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) (async) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async) 35.50095476s ago: executing program 0 (id=1140): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) readv(r2, &(0x7f0000000880)=[{&(0x7f0000000680)=""/120, 0x78}], 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) (async) readv(r2, &(0x7f0000000880)=[{&(0x7f0000000680)=""/120, 0x78}], 0x1) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 35.499960692s ago: executing program 0 (id=1141): r0 = socket(0x1d, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r2 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x1, {0xe2, 0x0, 0x0, '\x00', {0x0, 0x62, 0x0, 0x9, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {0x2}, {}, {}, 0x0, 0x0, 0x80001}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)) bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x3638d80024ffc369) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0x400, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./export_dir\x00', 0xc2, 0x0) mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./proc_dir\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./proc_dir/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000001300)='nfsd 127.0.0.1 2000000000 *\n', 0x1c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc_dir/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000b00)='* ./export_dir \\x0x000000 8194 0 0 0\n', 0x25) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0010015, 0x0, 0x4}]}) 35.219355442s ago: executing program 0 (id=1149): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000900)={0x3, 0x200, 0x7fff, 0x2}, 0x10) (async) close_range(r1, r0, 0x2) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x40, 0x101) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_setup(0x6, &(0x7f0000003b80)=0x0) io_submit(r4, 0x2, &(0x7f0000000280)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0xa, r2, 0x0, 0x28, 0x800, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r2, 0x0, 0x0, 0x1, 0x0, 0x3, r2}]) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0010000100001002dbd700000000000fe880000000000000000000000000101fe88000000000000000000000000000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000002c000000000000000000000000000000010000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000100cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000025bd7000000000000000000028bd7000aa0e00004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640fffffffd05000500020000000500010006"], 0x58}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000980)={{r6}, "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"}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x40000) (async) socket$nl_generic(0x10, 0x3, 0x10) 35.184605084s ago: executing program 33 (id=1149): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000900)={0x3, 0x200, 0x7fff, 0x2}, 0x10) (async) close_range(r1, r0, 0x2) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x40, 0x101) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_setup(0x6, &(0x7f0000003b80)=0x0) io_submit(r4, 0x2, &(0x7f0000000280)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0xa, r2, 0x0, 0x28, 0x800, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r2, 0x0, 0x0, 0x1, 0x0, 0x3, r2}]) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0010000100001002dbd700000000000fe880000000000000000000000000101fe88000000000000000000000000000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000002c000000000000000000000000000000010000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000100cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000025bd7000000000000000000028bd7000aa0e00004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640fffffffd05000500020000000500010006"], 0x58}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000980)={{r6}, "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"}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x40000) (async) socket$nl_generic(0x10, 0x3, 0x10) 32.836006908s ago: executing program 5 (id=1151): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0xfffffffffffffecb, &(0x7f00000023c0)=[{&(0x7f0000000000)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r1 = syz_io_uring_complete(0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000080)={{0x8, 0x7, &(0x7f0000000040)=[{0x79, 0x0, 0x5}, {0x2, 0x0, 0x101}, {0x4, 0x0, 0x7ff}, {0xf0, 0x0, 0x9132}, {0x1, 0x0, 0xa}, {0x4, 0x0, 0x8}, {0xf, 0x0, 0x2}]}, 0x6, 0x7, 0x2, 0x1, 0x0, 0x29c, 0x8, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r1, 0xc010644a, &(0x7f00000000c0)={r2}) r3 = socket$inet(0x2, 0x2, 0x1) ioctl$XFS_IOC_FSINUMBERS(r3, 0xc0205867, &(0x7f0000000680)={&(0x7f0000000000)=0x69f500000, 0x2, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000640)}) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) 32.787497234s ago: executing program 5 (id=1198): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x84) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x97ff, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x32}}}}], 0x20}, 0x0) 32.360408287s ago: executing program 5 (id=1204): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000002040)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) (async) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r2, r2, 0x0, 0x9) (async) sendfile(r2, r2, 0x0, 0x9) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) close(r3) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)="98bd80d1b51fac3cd42406000000000000003395f2ad", 0x16}}, 0x4094) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x28401, 0x0) pwrite64(r5, 0x0, 0x0, 0x9968) (async) pwrite64(r5, 0x0, 0x0, 0x9968) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000080)={r7, 0x4}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000080)={r7, 0x4}, &(0x7f00000000c0)=0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000080)={'veth1\x00', {0x2, 0x0, @private}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x27c, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xd}, {0xfff1, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0x248, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x250}, @TCA_RED_STAB={0x104, 0x2, "b7a7e52498a3f72f633292a07a3c84e53a932b709c8c94f91c34cdd9a3ac3ec9cec8c63cf50011d8a21b454f394fe63f066b95f8c5ef5023fd00dfb6968f24e7a823af6b7cd4a6ba6996942fd1ffe7c5abaa0d6d4e84a0693225a26e9995d359656b377fcef81019cff59cd26e98019d98414ac243d7f131f4ec227a9af49eee03d82656d9daf9d42c303cc77bf8cf52566dcc600af84b5db0355ca0b1e4aa5103ad73da9e202d820c6662fe70131283a46bb2e4999b42e5010620b14eae45aaa5e0d3f8bf67566767b342509c21e398dd1f0a00e54c7e01029809292d3bd7d5b34eb5d1a70e7d9e3335806f5332abe07557e6da8eef4f1c40149e5e0eab65a9"}, @TCA_RED_MAX_P={0x8, 0x3, 0x9}, @TCA_RED_MAX_P={0x8, 0x3, 0x1d}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x850}, @TCA_RED_STAB={0x104, 0x2, "c569232b93f8af8e213e2e9eaacaf33a7029b1d7a6ece05c34ef7f8dfcdf8381cdeec4f1432072dfa95ed35596962f56068094ba5311b41d843bf88dcb9b66bde6d9899069657a6c85e7493dbee94c63606c52bfa2647da0b4e819d8eff0220630f4f69da172e9d8043ef714121bf0d8a28b653f405e9a9c30cee1f997f54719e8814840facac3e65b74a6531316bdf74073362e0f1afd4fcebe951dba08ec672ad23013b63d6b8251f87d768b386ee140da8d5fa61fcc928b64f2e60a118087fe09675a8f667ab434acacc7683cacbce943f5d275f47b0bce4ba9eb3f2dc219596e18a392da4f6cfd8a90810418cbbd1e31baff6a3d09dc37ada9afa788e04d"}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0xfffffe01}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x89}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000}, 0x404c840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000200000d0000000000000000020000000100000002000000000000000000000500000000002e"], 0x0, 0x43, 0x0, 0x1}, 0x28) 32.250357697s ago: executing program 5 (id=1205): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) (async) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0xf}, {0xd, 0xfff1}, {0x2, 0xffff}}, [{0x4}, {0x4}, {0x4}]}, 0x6e}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080019"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600655800000c000280080011"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc2) chdir(&(0x7f0000000240)='./file0\x00') inotify_init() (async) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0xe1000d00) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001680)='veno', 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 31.36047319s ago: executing program 5 (id=1218): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000840), 0x1c1103, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x220739d, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xfffffffd}}, './sys/bus/usb/drivers/usbip-host/match_busid/file0\x00'}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x100, 0x24) r4 = openat(r3, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x18c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000000c0)=0x3, 0x4) fcntl$dupfd(r4, 0x0, r3) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)='$\x00', 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x5, 0x0}}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000080)={r8, 0x4}, &(0x7f00000000c0)=0xffffffffffffffb4) write(r3, &(0x7f0000000480)="dbfd2b41d1a9c5296cc1f2a1d95682a5f4c9707a6ee8f634ccc93bb5dad4c9efa2d41eb90aee28583cde15cc85db89159bc865b72179dd86915cf8b8ca8d33a088458792d15fa22a583a35de464726fd15ef55cf91f651011ed08c6b6f30560b885e396a651d9c7ee9c1454034896ff1de9096e066f3b05bb7c091be18d8b83d035dd0d2ad296b16dd7ce3c5ab137bcf9294531a6f67c556ad375ead25992b50f863915694b63e19435f", 0xaa) syz_clone(0x200111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000200)="7983e23862c8407b99e8ef5c713b2f8f1f642536124dd86867e29748", &(0x7f00000002c0)=@tcp=r7, 0x2}, 0x20) 31.298008684s ago: executing program 5 (id=1219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x705, 0x70bd30, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000810) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x34, r3, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x80000001}]}, 0x34}}, 0x4044) 27.549044933s ago: executing program 1 (id=1283): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r3, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x27}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[{0xc, 0x29, 0x3}], 0xc}}], 0x1, 0x4008080) (async) read$eventfd(r2, &(0x7f0000000340), 0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000002940)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="9eae2fbdb03e25018e09880ff9e6f43e3dfeec435d8b5ecf08b35b018db58168de851c726915e1f40008b9f978c750820033f1e25474f14433a9dbbec1e11966c399359a23abbc40b12d337af077fb6da61b4991b5a2500e8190db52457a394e96c0ca9c531d9f8954646c65888293d5b8d2c143cce298da0217668c405e15ad2471abeaf368b7bc13bee82863ae4cd756af249bfaeea124f803ba452bca469bc9a6bd69", 0xa4}, {&(0x7f00000001c0)="4a290133813ae3aab0b00b708d28b05f7931219671d7f097cb410090c5da3dd80c2920c7d0c4da1408396e3210fe8526157d804a0dc5e0f067bd280334f32afe1e4c5a0cda3bef5581", 0x49}, {&(0x7f0000000300)="de0b2f1683d0685f2b00eac7e49dcf0dc5e38d3dc2239a46214de37d44c2a70e8150206cb25bdda0baaffd9f7407acd5c4afd1e2a14b160e7da0046cf66728ac8d13c2278f6b74ea1f18cdba7bfc26d53835b60b741b918c27f972ea67474a22f106050b74e32d4e4b1d1b7b7f9e2fe3ff9521f6fb2df3b14c9aebbc93e0c492a8d507b7bfab48a960d147f6df65", 0x8e}], 0x3, 0x0, 0x0, 0x4844}, {&(0x7f0000000400)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000028c0)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="06f32d0e5995eb1496659b7d3108a19c19cdf34ddee5432130e0b4a46f2d5e28ca308a16d414a9592971f78b6e8e81ff14660c058faecdec99de59c65621e0d6f5b966dfa943a5ef26404dc9eba45ef0d4a9de1a50f8dcf4087ba288ed5d889ee226701541856318522990ecd7ebb288f2cf79610509528448464a624074d46c07cd2b45c9305d5cdc1efc484e2d22be161c043dc261240524ff7dc650f607908e8ede84b5b3381d68ea6aac266e8ff238a2524747e2d8422e0241ee689c2f65dd4ddc30625a038455ab80850463b95dabfdcef8f6c92159e3d4d0dd27adf4617ff3b78b1c20d310fbae135eccbdcc05e5327a39e57410b7615787", 0xfb}, {&(0x7f0000001700)="2ee5177fb7c8ff3adf1b53c240bef4ee4d375a8c6088c13c0b84a608af167163abedc82fc4304a7fdcebe210e9f84ad2ff8c13a7ddd7aecd5620a78ad56af703e806ceff654ef25fd1fdf45ecab88c2524c0a63548bcc396aff8b7c7caafb3effe2776ce94ec998289a25b3efde08154", 0x70}, {&(0x7f0000001780)="057d5d068d307c10383e1527728dacc65c0de7a39386461ea469426b430a5c76e523f72dcf6d23fc4a1d9b9d4e44d8332b26950b6833d54382df9f783b38cb7827eb4d5422c6e24bb5c13ae67352e3a84d2df184c078dc9c19cfcb4e283d2a20c12ea8ae8b02f1428c09956461efb199fa7d720199edec42a2e69a9dfc057deee6714637afa19777007abb214463346f8530ad3c3451057ba90030a141324b4221f81f1215e9538e6fe673b4af08a2", 0xaf}, {&(0x7f0000001840)="d2632d2ca4c904412947680296f584bcbfdfcb270867e77a6340b5e644d14446a7a69709e27a6f0d107592991063dc10528de28b3e7c60237d84ff202bb3d343a252afaa465d5244fcb7548b17f46a1b72d2dca4b9830fe36d0de07cfeb63a1b5271b0e75aee07c4ada3a971a113d3", 0x6f}, {&(0x7f00000018c0)="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", 0x1000}], 0x6, 0x0, 0x0, 0x20000900}], 0x2, 0x40041) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1715, 0x4b7bc}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) close_range(r0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) 26.780286544s ago: executing program 1 (id=1289): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001d00)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x7}], 0x1, 0x102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'/19, @ANYRESDEC=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001fff26bd70000100000000000000", @ANYRES16, @ANYBLOB="1c9788a322842e8533bd128005000c000100000008000a00005d31", @ANYRESOCT=r0, @ANYRES64=0x0], 0x5d}, 0x1, 0x0, 0x0, 0x40000}, 0x84) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000080), 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x420000, 0x0) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000000140)=r7) close_range(r10, r9, 0x0) openat$cgroup_int(r8, 0x0, 0x2, 0x0) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x2) 25.89067765s ago: executing program 1 (id=1298): syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x0) 25.889760338s ago: executing program 1 (id=1300): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(r0, 0x3, &(0x7f00000000c0)={0x4}, &(0x7f0000000180)) timer_create(0x3, &(0x7f0000000100)={0x0, 0x24, 0x0, @thr={&(0x7f00000005c0)="941396b8259252d0377b32ce4db76be45196fa2e3da5687aa6cac8eaaf449b5c4cc1570ef5e790ce2add8fed82e7de6352a6a366ac9fef31985583570f6536ed7702ed596492466927a02b16ed76fb5eac229d3e93ccc9a2370bb58353af27b2777f3fe098133b0bca928445b50220f726582a630e5a30f22d89c4b79c89f63f82863244985e4e63db2cd216e462000ed2da1504a64e", &(0x7f0000000680)="2f0794cca568924ec608dd05cebb6671c33b83e4484309b55010d50c67bd34019e97fc95d1ea7e658f406ce3626bbe919065b6c04fd19431f184b6f3d7b5c2c1216ef7721bc4c412e726dd88bd9f9d87134214ee43cde3609c18cb244ce9ac6e8d6200451ff9c312eea4567713164a42e16adbba3ab8a28c04f2c2ed2386f5e5c0f0188d5c752d13e5bff3e22a81c361d7ff44"}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="110900000000fcdbdf253630810008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004844) r7 = dup(r2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="340000009d178efa0986794edb1837c00d497d1ad59f4ec7882effa3c885bcdb18ff6d968f1c28cba4b52dc4f9bcf8cb9add8a993d4a8bdcefbeb90af743f7b166530acc2329dae5881c8bf4f5dcacdaf5d6c03cec487833a8cb7badd2d1dfeca64027980b25f3b82c85b1fa2045052f762378f08b772bdd05ccd1fa97ed96f1414842cebde9dd97a4015a0f20d431cc9334704e773ae6", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000c000480050003000100000008000200010000000400088008000100ffffffff"], 0x34}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20008041}, 0x4000001) sendmsg$NLBL_CIPSOV4_C_LIST(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r10, @ANYBLOB="200025bd7000fcdbdf2503000000b8000c802c000b8008000900637ced6a080009001322066208000a00248b000008000900419c404908000a006acd00003c000b800800090011a0873302000000fa12000008000a00862e000008000a006026000008000a00af3a000008000900d16481c3a745537c4256b53ebba00a361258080009009381d0640c000b8008000a00750d000014000b8008000900f972c23908000a0098d800002c000b8008000a00f70c000008000900a4d65c4108000900419bb57908000a0089d5000008000a0038be00000800010001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x940}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r11, 0x1, 0x2f, &(0x7f0000002a40)=0xd3a0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x2000}, 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r14, r13}, 0xc) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x200, 0x70bd25, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x8004) 25.648628101s ago: executing program 1 (id=1305): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(&(0x7f0000001040)=@filename='none\x00', &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/filesystems\x00', 0x0, 0x0) read(r2, &(0x7f0000001140)=""/4096, 0x1000) r3 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x103701) ioctl$MEMWRITE(r3, 0xc0304d18, &(0x7f0000000380)={0x3, 0x47, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[], 0xb8}}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x33) r6 = accept4(r5, 0x0, 0x0, 0x80800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r11, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r10, 0x0}]) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a1000000002ff000000000008000400", @ANYRES32=r8, @ANYBLOB="0600150008000000100016"], 0x3c}}, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000640)=ANY=[@ANYRESHEX=r13], 0x48, 0x40}], 0x1, 0x40800) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r14, 0x29, 0x46, &(0x7f0000000000)=0x599, 0x4) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/24, 0x18}], 0x1}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4048885}, 0x8000) 25.470123816s ago: executing program 1 (id=1307): r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000280)={'veth1\x00', 0x200}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7, 0x20, 0x3ff, 0x9}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x9, 0xd, 0xa, 0xe92e, 0x8, 0x7, 0xc, 0x3, r5}, 0x20) socket(0xa, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000280)={'veth1\x00', 0x200}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) (async) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7, 0x20, 0x3ff, 0x9}, &(0x7f00000001c0)=0x18) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x9, 0xd, 0xa, 0xe92e, 0x8, 0x7, 0xc, 0x3, r5}, 0x20) (async) 16.324967427s ago: executing program 34 (id=1219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x705, 0x70bd30, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000810) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x34, r3, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x80000001}]}, 0x34}}, 0x4044) 10.455184935s ago: executing program 35 (id=1307): r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000280)={'veth1\x00', 0x200}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7, 0x20, 0x3ff, 0x9}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x9, 0xd, 0xa, 0xe92e, 0x8, 0x7, 0xc, 0x3, r5}, 0x20) socket(0xa, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000280)={'veth1\x00', 0x200}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) (async) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7, 0x20, 0x3ff, 0x9}, &(0x7f00000001c0)=0x18) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x9, 0xd, 0xa, 0xe92e, 0x8, 0x7, 0xc, 0x3, r5}, 0x20) (async) 5.053451837s ago: executing program 6 (id=1579): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (async, rerun: 64) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) (async) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x200}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x4040840) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) read$FUSE(r4, &(0x7f0000001280)={0x2020}, 0x2020) (async) write$uinput_user_dev(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c844}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 4.957742885s ago: executing program 6 (id=1580): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/70, 0x46, 0x4) (async) pread64(r0, &(0x7f00000000c0)=""/70, 0x46, 0x4) openat(r0, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (async) r1 = openat(r0, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6f3a8fa0"], 0x0, 0x0, 0x2) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000003a40)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x2, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x100000, 0x1, 0x1, 0xa, 0x9, 0xfffe}, 0x19) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x100000, 0x1, 0x1, 0xa, 0x9, 0xfffe}, 0x19) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r4, 0x8b32, &(0x7f0000000040)) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000280)=""/146, 0x92}], 0x1, 0x5, 0x543c) (async) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000280)=""/146, 0x92}], 0x1, 0x5, 0x543c) r5 = socket$alg(0x26, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x8001, @dev, 0x5}, 0x1c) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, &(0x7f0000000240)={0x24, @short={0x2, 0xffff}}, 0x14) bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000200)=0x100, 0x4) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x30) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r9, 0x0, 0x0) r10 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r10, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) (async) recvmmsg$unix(r10, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 3.039566005s ago: executing program 6 (id=1587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f0000000300)=[{r3, 0x100}], 0x1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010003704fefffff7ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="c30407001b14bf26180012800e00010077697265677561726400000004000280"], 0x38}, 0x1, 0x0, 0x0, 0xa3786d37e20239b}, 0x1000c014) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r8 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffffd}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c4}, 0x80) 2.658907374s ago: executing program 6 (id=1595): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x2b, 0x300, 0x70bd26, 0x25dfdbfb, {0x11}, [@generic="877961bf6cc445a0c59c8401754cba0c4423aed8"]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="000eaaaaaaaaaa1288a83100810051008800ff7c4225a69a40eddb000000"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) r8 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r8, 0xc1007c01, &(0x7f0000000580)={r9}) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r5) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r11, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xc00}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x22040898}, 0x20048810) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020026bd7000fedbde256f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0f0000040000000500d600100000000800260096090000080026007c150000050019010a0000000a000600ffffffffffff0000"], 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x20000000) 2.359738732s ago: executing program 6 (id=1605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000480)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000180)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000280)=0x5}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b01, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000046c000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="420f01c90f40730b0f01cab9f00b0000b8322a0000ba000000000f300fc7afbd4400006567450f30c744240007000000c744240260dd47fdc7442406000000000f011424420f01cac4c1e6510dbb000000b9490a00000f32", 0x58}], 0x1, 0x60, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x28}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r10, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4800) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="07002504", @ANYRES16=r10, @ANYBLOB="100027bd7000ffdbdf255500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000700000011000000"], 0x28}}, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) r11 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_pts(r11, 0x20402) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.528936681s ago: executing program 7 (id=1618): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0xc0505405, &(0x7f00000000c0)={0x3}) (async) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) 1.52077473s ago: executing program 7 (id=1621): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r0, r2, 0x25, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000a00)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x2, 0x0, 0x2}}}}}}}, 0x0) 1.420234006s ago: executing program 7 (id=1622): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x2a800, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0x73, @broadcast, 0x4e23, 0x1, 'wrr\x00', 0x8, 0x2, 0x80}, 0x2c) socketpair(0x21, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xc4, "47867381fe0cc2582ca0e35e523ae2779bef61fb4d33832e4024e7f23fcc4b2634cdf6b97c449efab2b6c1118f56b09c87b6bd47f66b97c82f79d022406f3d756857695a714c0cdb51580c97ec5cccee82240190f1d756801aa4c4827de04ca1a01a9f844047ca225a7711c765e4840fa4ed9f0548b26fb43d15fb7feefae7fe1f542f850bbc959ada30b812911cabb8b8628daea5d3c7be4de2e686d062506991fd995cf20ac708428de990ab0ae43d2b666588af1611846e46c1739368860aa40c9cb2"}, &(0x7f0000000200)=0xcc) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r4, 0x4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x200180, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, &(0x7f00000002c0)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000300)) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000003c0)={0xd392, 0x0, 0xf, 0x0, 0x1, 0x7, 0x0, &(0x7f0000000340)=[{0x9, 0x101, 0x5}, {0xf, 0xfe, 0xb}, {0x10, 0x1ff, 0x6}, {0xe, 0x1ff, 0x80}, {0x9a41bcd25c5c3858, 0x1ff, 0x24e5}, {0xe, 0xfe, 0xe2}, {0x9, 0x1ff, 0x1}]}) uname(&(0x7f0000000400)=""/176) pwrite64(r1, &(0x7f00000004c0)="a3a17ddbeb8dcb971f18df252ea4a019adbd1b1c6a6245ddfa3a3a19e6fb13dc1535a0fc25f13e35432037fdf4a5a28d8162f09e4c0ba55a2f2a9a071218600996840d15f9d836c0beb9279e8b90e2fb211cdc624c3ade9460d7430c6faad8ce2d67a978b274dcc50e54e9799547840b2bc0ab2f9891b1cadaba4cd26e2234b76564932458e720aa317dba1bccb34c68c2fdc0756ec7ee47735909f6b5f90c74bbb7a0d8c51b133fe17449c1cb15d546fbf2bd60e7305663778d545146134b179c46962f23b79defa5e88a20ef32f67aa20cf0", 0xd3, 0x6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000005c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r6, 0xc0106441, &(0x7f0000000600)={0x0, 0x0, 0x101}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000680)={&(0x7f0000000640)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000980)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[{}, {}, {}, {}], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0], 0x4, 0xa, 0x7}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000b80)={&(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[{}, {}], &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x2, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000e40)={&(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40)=[{}, {}, {}, {}, {}], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0], 0x5, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000f00)={0x7, 0x0, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000fc0)={0x500, 0x2, &(0x7f0000000700)=[r7, 0x0], &(0x7f0000000740)=[0x0, 0x9, 0x800], &(0x7f0000000f40)=[r8, r10, r11, r12, 0x0, 0x0], &(0x7f0000000f80)=[0x2]}) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040), 0x40, &(0x7f00000030c0)={[{@xino_on}, {@redirect_dir_off}, {@uuid_on}, {@nfs_export_on}, {@metacopy_off}, {@verity_on}, {@index_on}], [{@appraise_type}, {@fowner_gt={'fowner>', r13}}, {@audit}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '&+'}}, {@smackfsroot={'smackfsroot', 0x3d, '{*'}}]}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000003180), &(0x7f00000031c0)=0xc) uname(&(0x7f0000003200)=""/133) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003440)={0x1, &(0x7f00000032c0)="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", &(0x7f00000033c0)=""/125, 0x4}, 0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000003480)={r4}, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000003500)={&(0x7f00000034c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f00000039c0)={0x101, 0x2, &(0x7f0000003540)=[r9, r14], &(0x7f0000003580)=[0x34cc, 0xc, 0xd, 0x80000000, 0x0, 0x7], &(0x7f0000003940)=[0x0], &(0x7f0000003980)=[0x4, 0x9, 0x6], 0x0, 0x4}) 1.360011423s ago: executing program 7 (id=1624): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pwrite64(r0, &(0x7f0000000000)="d9ed62a2e2c429560d5daf63595991fef2920493da31c7a20d8aa3cf711f3d3a0393b81b087af87509e4d9a6e15676243545077e8f5ced01eff2c591766badb6d2639f694b1a6c1a390b125b852697cdae367ea45e334e7cf8b2e42d4c989ec935bc5bf24e953ad5", 0x68, 0x80000001) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0xb, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x53a, 0x0, 0x0, 0x0, 0x0) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x128e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046, 0x2000000, 0x173}) 964.613392ms ago: executing program 4 (id=1627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x240100) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x114) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d98a02e20ae6c23828462696e643d7374617469633a2c"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2653c, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=[{0x1, 0x4, 0xc, 0x8}], 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r4, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff7ffffffd, 0x122862) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x6a4, 0x0, 0x2}]}) sendfile(r5, r5, 0x0, 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xd, [{@broadcast, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0xfffffffd}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 820.243246ms ago: executing program 4 (id=1628): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xa005, 0x7, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x96fb}) r0 = userfaultfd(0x80001) userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x39}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x10000, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e20, 0x3, @private2, 0x8}}}, 0x90) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="9879ffa09bed9e22a51e36bbf10829f06cd1fbbcb3d3845f9ab5318c0860f2e177f5c64adc199457683f7d56c047b241269ea29cf3c9905936bf2c3fae01cf", 0xfffffdfb, 0x201, 0x0, 0x0) shutdown(r1, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x1) 670.054058ms ago: executing program 4 (id=1629): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x6}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000000)={0x1, @read_tx_power={{0xc2d, 0x3}, {0xc8, 0x26}}}, 0x7) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x40000002}) 669.448264ms ago: executing program 4 (id=1630): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r3, 0x25, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000a00)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x2, 0x0, 0x2}}}}}}}, 0x0) 559.788939ms ago: executing program 4 (id=1631): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x4) write(r0, &(0x7f0000000280)='1', 0x1) pipe(&(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)=@getlink={0xc8, 0x12, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x40, 0x200}, [@IFLA_LINKMODE={0x5}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_MAP={0x24, 0xe, {0x8, 0x3, 0x7, 0x40, 0x3, 0xff}}, @IFLA_PHYS_SWITCH_ID={0x5, 0x24, "a2"}, @IFLA_EXT_MASK={0x8, 0x1d, 0x40}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'geneve0\x00'}]}]}, 0xc8}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000480)=[{0x866, 0x2, 0x8, 0x9}]}) 408.619194ms ago: executing program 4 (id=1632): prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\a\xb0\xfd\xa3\x1c\n\x17\x1b\xfa\x81 \xdd!\xd9\xeb\x1d\nW\xc1\x81p\x92\nH\xb0i\x03\xbdv\xb4<\xb3\x7f/E+\x12\xf9\x1c\xf3\xad\x80\x9dxa\xbf\xa2\t\xee\xdc\xae\x19d\xa9\xb5\x8f\xb1\xfa\xb6)\v\xb8\xa7\xb1\xf0\xb7ysd\xe15\b\xe9\x91\xb6\xec\x8f\x922]\xe3\x0ez\xcd\x04\r\xb0\xe8\xff\xcd\xf8\xb6>\xe2\xa5\x04\xa9\v\x0f\xf2A\xf2\xf5\xf2\xd2\x1a\t\xf9R\xc6\xddO') pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0, r2}, 0xc) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000003340)={0x2020}, 0x2020) 404.341298ms ago: executing program 6 (id=1633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'netdevsim0\x00', 0x0}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9fe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(0x3) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 180.490461ms ago: executing program 3 (id=1637): r0 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x80) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = dup(r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x34}, {r2, 0x510}, {r6, 0x1}, {r7}], 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={[0x2]}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r11, &(0x7f0000003480)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r8], 0x22) 179.97994ms ago: executing program 3 (id=1638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c0000"], 0x6a) r3 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000640)) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="0000007cd05500"/28, @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f00000002c0)='wg2\x00', 0x4) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0xc, 0x7, 0x5, 0x81}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) socket$nl_route(0x10, 0x3, 0x0) mq_timedsend(r3, 0x0, 0x56, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/252, 0xfc, 0x5, &(0x7f0000000280)={0x0, 0x3938700}) r9 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x100) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44008800}, 0x4040004) ioctl$CEC_RECEIVE(r9, 0xc0386106, &(0x7f0000000140)={0x2, 0x80, 0x7, 0x7, 0x4, 0x3, "153fe5d8b5d504d8be3cdeb80c22958d", 0xa1, 0x7f, 0x8, 0x6, 0x7, 0x7}) mq_timedsend(r3, &(0x7f0000000000)="e98f259c7b7f2faa97f8713a20889dcf5ba10c078b214f811f07e0fe576a4aa4c074203bb18825a8182d5b03f129949af57c4612b44b073d51bdf79109d736f85d0e987f4d1fa8eb38df1d2e53d87237ac682b538e1d3cb6fad6d032cb9beacfa57f2df68c1afa211897d183c50e2930bd4e0be4d25f7cc33443dddc563dad", 0x7f, 0x0, &(0x7f00000000c0)={0x77359400}) 179.27936ms ago: executing program 7 (id=1639): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r3, 0x25, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000a00)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x2, 0x0, 0x2}}}}}}}, 0x0) 109.794791ms ago: executing program 7 (id=1640): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, r4, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7c4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x180}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x0, 0x7, 0x0, {0xe, 0x6, 0x0, 0xa, 0x0, 0x0, 0x1, 0x2}, 0x1b00, 0x2, 0x2}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8810}, 0x40a0) r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[@nested_create_vm={0x12d, 0x18, 0x3}], 0x18}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000004000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) r8 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r7, 0x4068aea3, &(0x7f0000005000)={0xa3, 0x0, 0x0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000001200)=@svm={0xe, 0x1, 0x1080, {0x54000}, {"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"}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 60.678828ms ago: executing program 3 (id=1641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2c, r2, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20005005}, 0x24000084) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000010000000000000000000700000a2c000000030a0fdb00000000000000000a00a0050900030073790c30000000000900010073797a31000000001400000011000d0000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1) 703.436µs ago: executing program 3 (id=1642): r0 = socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@mpls_delroute={0x138, 0x19, 0x200, 0x70bd2d, 0x25dfdbff, {0x1c, 0x20, 0x0, 0x5, 0xff, 0x0, 0xfe, 0x7, 0x100}, [@RTA_NEWDST={0x84, 0x13, [{0x2}, {0x9}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1000}, {}, {0x7ff}, {0x3}, {0x200, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x89}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x10}, {0x5}, {0xb, 0x0, 0x1}, {}, {0xffffa, 0x0, 0x1}, {0x2}, {0x4}, {0x1, 0x0, 0x1}, {0xffff8, 0x0, 0x1}, {0x5}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1afe}, {0x8}, {0x1}, {0xd00d, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x3}, {0x2}, {0x65}, {0x9, 0x0, 0x1}, {0x570}, {0x800}, {0x2}, {0xffffd, 0x0, 0x1}, {0x3}, {0x9e}, {0x62, 0x0, 0x1}, {0xffff1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x4}, {0xee, 0x0, 0x1}, {0x401}, {0xffeff}, {0x6}, {0x36}, {0x869}, {0x6}, {0x6, 0x0, 0x1}, {0xe, 0x0, 0x1}, {0x401}, {0x1, 0x0, 0x1}, {0xffff7}, {0x1, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x400}, {0x3ff}]}, @RTA_VIA={0x14, 0x12, {0x2c, "c58d8dcd3eac77f2f67a9e98031b"}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 271.522µs ago: executing program 3 (id=1643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x17c, 0x1a, 0x1, 0xfffffffd, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@local, 0xfffc}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x1}, {0x3}, {0x0, 0x7}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x89, 0x1, {{'sha1\x00'}, 0x208, "3cbfd71c56bfe9361d559cf01c6654b099b32c0048344c16247c6463bfd17cae07092b5aa016ff5cecaf65f2a3f2b0bf5e52a5f316c7b7fa43647ee9c90faa33e5"}}]}, 0x17c}}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2fb}}, './file0\x00'}) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) 0s ago: executing program 3 (id=1644): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r0, 0x1) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4d0, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x4bc, 0x1, [@m_skbedit={0x84, 0x1b, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x2, 0x3, 0x3, 0xfff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x1, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0x1, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x2, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x0, 0x5, 0x7, 0x2, 0x8, 0x9, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0x3, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x6, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0x0, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x0, 0x9, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x8d9, 0x86, 0x2, 0x6, 0x0, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3ff, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x10001, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0xbc, 0x7, 0x3ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4d0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) kernel console output (not intermixed with test programs): t tclass=chr_file permissive=1 [ 120.834860][ T7760] netlink: 'syz.1.583': attribute type 10 has an invalid length. [ 120.857949][ T7760] team0: Port device dummy0 added [ 120.895471][ T42] audit: type=1326 audit(1785683219.307:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.1.584" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d8279e019 code=0x0 [ 121.014971][ T42] audit: type=1400 audit(1785683219.427:551): avc: denied { getopt } for pid=7769 comm="syz.4.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.137509][ T42] audit: type=1400 audit(1785683219.547:552): avc: denied { ioctl } for pid=7777 comm="syz.4.587" path="socket:[22034]" dev="sockfs" ino=22034 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.384822][ T42] audit: type=1400 audit(1785683219.797:553): avc: denied { getopt } for pid=7784 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.495816][ T7792] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 121.518490][ T42] audit: type=1400 audit(1785683219.927:554): avc: denied { mount } for pid=7790 comm="syz.3.593" name="/" dev="rpc_pipefs" ino=21328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 121.535486][ T7792] JFS: discard option not supported on device [ 121.538151][ T7792] Mount JFS Failure: -5 [ 121.541254][ T7792] jfs_mount failed w/return code = -5 [ 121.731732][ T42] audit: type=1400 audit(1785683220.147:555): avc: denied { getopt } for pid=7805 comm="syz.4.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.774797][ T7808] cdns2-pci 0000:00:00.0: probe with driver cdns2-pci failed with error -22 [ 121.822534][ T7813] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 121.872625][ T7813] overlayfs: failed to resolve './file2': -2 [ 121.913480][ T7816] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.012870][ T7837] netlink: 'syz.4.608': attribute type 1 has an invalid length. [ 122.015532][ T7837] netlink: 'syz.4.608': attribute type 3 has an invalid length. [ 122.028219][ T42] audit: type=1400 audit(1785683220.437:556): avc: denied { read } for pid=7836 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.085110][ T7845] use of bytesused == 0 is deprecated and will be removed in the future, [ 122.088187][ T7845] use the actual size instead. [ 122.113447][ T7845] netlink: 'syz.1.612': attribute type 4 has an invalid length. [ 122.124654][ T42] audit: type=1400 audit(1785683220.537:557): avc: denied { read } for pid=7850 comm="syz.4.614" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 122.127362][ T7845] netlink: 'syz.1.612': attribute type 4 has an invalid length. [ 122.237010][ T7865] netlink: 'syz.3.619': attribute type 10 has an invalid length. [ 122.418299][ T7884] netlink: 'syz.4.625': attribute type 15 has an invalid length. [ 122.509972][ T7895] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 123.549978][ T7951] binder: 7950:7951 ioctl c0306201 200000000640 returned -22 [ 123.597876][ T7962] pim6reg23: entered allmulticast mode [ 123.646799][ T7962] syzkaller1: entered promiscuous mode [ 123.648777][ T7962] syzkaller1: entered allmulticast mode [ 123.830969][ T7975] nvme_fabrics: no handler found for transport hoop. [ 123.862010][ T7978] ublk_ctrl_add_dev: dev id not match 4294967295 10 [ 123.872559][ T7975] __nla_validate_parse: 19 callbacks suppressed [ 123.872580][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.657'. [ 124.583522][ T8034] netlink: 132 bytes leftover after parsing attributes in process `syz.3.677'. [ 124.603674][ T8034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.680793][ T8043] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 124.704301][ T8043] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.707963][ T8046] netlink: 'syz.1.682': attribute type 1 has an invalid length. [ 124.713089][ T8043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.681'. [ 124.715865][ T8046] netlink: 224 bytes leftover after parsing attributes in process `syz.1.682'. [ 124.949446][ T8061] veth0_to_bridge: entered allmulticast mode [ 125.100600][ T8078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.693'. [ 125.104199][ T8078] netlink: 'syz.1.693': attribute type 10 has an invalid length. [ 125.213567][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 125.213580][ T42] audit: type=1400 audit(1785683223.627:584): avc: denied { mounton } for pid=8073 comm="syz.4.691" path="/119/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 125.296122][ T8079] CUSE: info not properly terminated [ 125.316314][ T8107] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 125.317645][ T8105] netlink: 32 bytes leftover after parsing attributes in process `syz.3.699'. [ 125.320527][ T42] audit: type=1400 audit(1785683223.737:585): avc: denied { read } for pid=5446 comm="dhcpcd" name="n38" dev="tmpfs" ino=4501 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.331990][ T42] audit: type=1400 audit(1785683223.737:586): avc: denied { open } for pid=5446 comm="dhcpcd" path="/run/udev/data/n38" dev="tmpfs" ino=4501 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.336153][ T8107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.341493][ T42] audit: type=1400 audit(1785683223.737:587): avc: denied { getattr } for pid=5446 comm="dhcpcd" path="/run/udev/data/n38" dev="tmpfs" ino=4501 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.351299][ T8107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.700'. [ 125.429027][ T42] audit: type=1400 audit(1785683223.837:588): avc: denied { write } for pid=8110 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.438204][ T42] audit: type=1400 audit(1785683223.837:589): avc: denied { create } for pid=8110 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.448259][ T42] audit: type=1400 audit(1785683223.837:590): avc: denied { write } for pid=8110 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.syzkaller0.link" dev="tmpfs" ino=4508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.456735][ T42] audit: type=1400 audit(1785683223.837:591): avc: denied { append } for pid=8110 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=4508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.489449][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.502853][ T42] audit: type=1400 audit(1785683223.917:592): avc: denied { write } for pid=8118 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.510567][ T42] audit: type=1400 audit(1785683223.917:593): avc: denied { unlink } for pid=8118 comm="rm" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=4508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.648977][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 125.654498][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 125.658097][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.661968][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.665353][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.668569][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.672826][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.675642][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.683719][ T34] usb 5-1: Device is not authorized for usage [ 125.774197][ T8137] pim6reg1: entered promiscuous mode [ 125.778844][ T8137] pim6reg1: entered allmulticast mode [ 126.012403][ T8152] geneve3: entered allmulticast mode [ 126.072382][ T8153] geneve3: entered allmulticast mode [ 126.320470][ T8164] netlink: 100 bytes leftover after parsing attributes in process `syz.1.715'. [ 126.413063][ T8169] netlink: 'syz.1.716': attribute type 1 has an invalid length. [ 126.468327][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.716'. [ 126.477188][ T8169] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.773744][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888034c24c00: rx timeout, send abort [ 127.273947][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888034c27800: rx timeout, send abort [ 127.277062][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888034c24c00: abort rx timeout. Force session deactivation [ 127.308354][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 127.313023][ T8187] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 127.777049][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888034c27800: abort rx timeout. Force session deactivation [ 128.184009][ C2] vxcan1: j1939_tp_rxtimer: 0xffff88803ea6a800: rx timeout, send abort [ 128.274346][ T5897] usb 5-1: USB disconnect, device number 2 [ 128.377040][ T8222] netlink: 'syz.0.733': attribute type 1 has an invalid length. [ 128.390888][ T8222] bond6: entered promiscuous mode [ 128.392818][ T8222] 8021q: adding VLAN 0 to HW filter on device bond6 [ 128.405004][ T8222] 8021q: adding VLAN 0 to HW filter on device bond6 [ 128.407329][ T8222] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 128.410407][ T8222] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 128.417423][ T8222] bond6: (slave ip6gre1): making interface the new active one [ 128.422936][ T8222] ip6gre1: entered promiscuous mode [ 128.426268][ T8222] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 128.684159][ C2] vxcan1: j1939_tp_rxtimer: 0xffff88802e45ac00: rx timeout, send abort [ 128.687427][ C2] vxcan1: j1939_tp_rxtimer: 0xffff88803ea6a800: abort rx timeout. Force session deactivation [ 128.958509][ T8252] binder: 8251:8252 ioctl c018620b 0 returned -14 [ 129.108918][ T8262] kAFS: unable to lookup cell 'syz1' [ 129.186935][ C2] vxcan1: j1939_tp_rxtimer: 0xffff88802e45ac00: abort rx timeout. Force session deactivation [ 129.338590][ T8284] SELinux: security policydb version 18 (MLS) not backwards compatible [ 129.343025][ T8284] SELinux: failed to load policy [ 129.414072][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888027802000: rx timeout, send abort [ 129.418812][ T59] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 129.578813][ T59] usb 8-1: Using ep0 maxpacket: 32 [ 129.584311][ T59] usb 8-1: config 0 has no interfaces? [ 129.588789][ T59] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 129.592210][ T59] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 129.595485][ T59] usb 8-1: Product: syz [ 129.597252][ T59] usb 8-1: Manufacturer: syz [ 129.599619][ T59] usb 8-1: SerialNumber: syz [ 129.605713][ T59] usb 8-1: config 0 descriptor?? [ 129.914156][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888027801000: rx timeout, send abort [ 129.917535][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888027802000: abort rx timeout. Force session deactivation [ 129.964470][ T8319] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 129.967117][ T5843] usb 8-1: USB disconnect, device number 5 [ 130.050869][ T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf1c [ 130.416861][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888027801000: abort rx timeout. Force session deactivation [ 130.794325][ T8354] befs: (loop3): No write support. Marking filesystem read-only [ 130.799479][ T8354] befs: (loop3): unable to read superblock [ 130.816891][ T8324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.922655][ T8356] bond5 (unregistering): Released all slaves [ 130.948397][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 130.948415][ T42] audit: type=1400 audit(1785683229.357:621): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 131.117600][ T8375] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 131.142494][ T42] audit: type=1400 audit(1785683229.557:622): avc: denied { ioctl } for pid=8376 comm="syz.0.765" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae9c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 131.154984][ T42] audit: type=1400 audit(1785683229.567:623): avc: denied { getopt } for pid=8376 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.163191][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805a6b3400: rx timeout, send abort [ 131.219950][ T8382] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 131.239780][ T8382] 8021q: adding VLAN 0 to HW filter on device bond5 [ 131.247206][ T8382] __nla_validate_parse: 1 callbacks suppressed [ 131.247219][ T8382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.767'. [ 131.538412][ T8407] dlm: plock device version mismatch: kernel (1.2.0), user (2.4.512) [ 131.624238][ T8416] netlink: 'syz.3.776': attribute type 1 has an invalid length. [ 131.639651][ T8416] 8021q: adding VLAN 0 to HW filter on device bond5 [ 131.648389][ T8416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.776'. [ 131.660416][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805a6b2000: rx timeout, send abort [ 131.663318][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805a6b3400: abort rx timeout. Force session deactivation [ 131.697394][ T42] audit: type=1400 audit(1785683230.107:624): avc: denied { read } for pid=8422 comm="syz.0.778" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 131.714184][ T42] audit: type=1400 audit(1785683230.107:625): avc: denied { open } for pid=8422 comm="syz.0.778" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 131.931353][ T8440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.783'. [ 131.956356][ T42] audit: type=1400 audit(1785683230.367:626): avc: denied { write } for pid=8438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.021407][ T8451] overlayfs: failed lookup in lower (newroot/129, name='file0', err=-40): overlapping layers [ 132.033622][ T42] audit: type=1400 audit(1785683230.447:627): avc: denied { write } for pid=8448 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.088056][ T8457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8457 comm=syz.4.786 [ 132.145510][ T42] audit: type=1400 audit(1785683230.557:628): avc: denied { write } for pid=8456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.163297][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805a6b2000: abort rx timeout. Force session deactivation [ 132.223569][ T42] audit: type=1400 audit(1785683230.637:629): avc: denied { write } for pid=8465 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.401760][ T8470] geneve1: entered allmulticast mode [ 132.507917][ T8476] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 132.510506][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888034a49c00: rx timeout, send abort [ 132.604680][ T8483] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 132.629553][ T8486] trusted_key: encrypted_key: keyword 'u' not recognized [ 132.631035][ T8483] 8021q: adding VLAN 0 to HW filter on device bond7 [ 132.641084][ T8483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.795'. [ 132.823683][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.826191][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.010610][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880386d4400: rx timeout, send abort [ 133.014312][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888034a49c00: abort rx timeout. Force session deactivation [ 133.119940][ T8507] netlink: 'syz.4.804': attribute type 1 has an invalid length. [ 133.167484][ T8507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 133.173152][ T8507] bond4: (slave bond5): making interface the new active one [ 133.176781][ T8507] bond4: (slave bond5): Enslaving as an active interface with an up link [ 133.184591][ T42] audit: type=1400 audit(1785683231.597:630): avc: denied { read } for pid=8506 comm="syz.4.804" name="trace_marker" dev="tracefs" ino=2600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 133.223973][ T8512] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 133.255575][ T8512] 8021q: adding VLAN 0 to HW filter on device bond6 [ 133.262831][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.805'. [ 133.378102][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 133.446543][ T8521] bond0: (slave syz_tun): Releasing backup interface [ 133.513965][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880386d4400: abort rx timeout. Force session deactivation [ 133.523314][ T8534] netlink: 'syz.1.814': attribute type 1 has an invalid length. [ 133.539529][ T8534] 8021q: adding VLAN 0 to HW filter on device bond6 [ 133.545381][ T8534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.814'. [ 133.557269][ T8538] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 133.561086][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 133.615062][ T8546] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 133.625952][ T8543] netlink: 596 bytes leftover after parsing attributes in process `syz.0.817'. [ 133.849167][ T8561] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 133.868152][ T8561] 8021q: adding VLAN 0 to HW filter on device bond7 [ 133.879662][ T8561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.825'. [ 134.269362][ T8592] orangefs_devreq_open: device cannot be opened in blocking mode [ 134.365760][ T8604] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 134.398941][ T8604] 8021q: adding VLAN 0 to HW filter on device bond6 [ 134.910139][ T8637] syzkaller0: entered promiscuous mode [ 134.911986][ T8637] syzkaller0: entered allmulticast mode [ 135.019244][ T8643] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 135.036311][ T8643] 8021q: adding VLAN 0 to HW filter on device bond7 [ 135.069672][ T8638] CUSE: info not properly terminated [ 135.220821][ T8661] gadgetfs: bound to dummy_udc driver [ 135.343372][ T8682] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 135.347045][ T8682] cramfs: wrong magic [ 135.443175][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055c14c00: rx timeout, send abort [ 135.478816][ T5897] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 135.482457][ C2] gadgetfs: connected [ 135.486632][ T5897] gadgetfs: disconnected [ 135.639350][ C2] gadgetfs: connected [ 135.641946][ T5897] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 135.644780][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.653644][ T5897] usb 5-1: Device is not authorized for usage [ 135.810395][ T8694] hpfs: hpfs_map_sector(): read error [ 135.899568][ T8699] 8021q: adding VLAN 0 to HW filter on device bond8 [ 135.914002][ T8699] bond8: (slave geneve3): making interface the new active one [ 135.919698][ T8692] CUSE: info not properly terminated [ 135.921563][ T8699] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 135.943276][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055c14400: rx timeout, send abort [ 135.946662][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055c14c00: abort rx timeout. Force session deactivation [ 135.986631][ T8702] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿð0wá2AZøZ´”àIÆ [ 136.042571][ T8711] geneve4: entered promiscuous mode [ 136.044894][ T8711] geneve4: entered allmulticast mode [ 136.050374][ T8684] gadgetfs: suspended from state 3 [ 136.058049][ T8684] gadgetfs: disconnected [ 136.063615][ T5843] usb 5-1: USB disconnect, device number 3 [ 136.134951][ T8718] xt_hashlimit: overflow, rate too high: 1 [ 136.195344][ T8725] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 136.200449][ T8727] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8727 comm=syz.4.869 [ 136.204738][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 136.204749][ T42] audit: type=1400 audit(1785683234.617:642): avc: denied { listen } for pid=8724 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.254651][ T8729] validate_nla: 2 callbacks suppressed [ 136.254665][ T8729] netlink: 'syz.4.871': attribute type 1 has an invalid length. [ 136.280575][ T8729] 8021q: adding VLAN 0 to HW filter on device bond9 [ 136.290241][ T8729] __nla_validate_parse: 8 callbacks suppressed [ 136.290259][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.871'. [ 136.307392][ T42] audit: type=1400 audit(1785683234.717:643): avc: denied { firmware_load } for pid=8724 comm="syz.1.870" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 136.385972][ T42] audit: type=1400 audit(1785683234.797:644): avc: denied { write } for pid=8734 comm="syz.3.873" name="configs" dev="configfs" ino=17488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.397641][ T42] audit: type=1400 audit(1785683234.797:645): avc: denied { write } for pid=8734 comm="syz.3.873" name="strings" dev="configfs" ino=29087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.398388][ T8735] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 136.406905][ T42] audit: type=1400 audit(1785683234.797:646): avc: denied { write } for pid=8734 comm="syz.3.873" name="header" dev="configfs" ino=25189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.415397][ T8735] udc usbip-vudc.0: failed to start g1: -19 [ 136.417290][ T42] audit: type=1400 audit(1785683234.797:647): avc: denied { write } for pid=8734 comm="syz.3.873" name="hs" dev="configfs" ino=25197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.426672][ T42] audit: type=1400 audit(1785683234.797:648): avc: denied { create } for pid=8734 comm="syz.3.873" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 136.433376][ T42] audit: type=1400 audit(1785683234.797:649): avc: denied { write } for pid=8734 comm="syz.3.873" name="hs" dev="configfs" ino=25197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.440205][ T8735] UDC core: g1: couldn't find an available UDC or it's busy [ 136.442919][ T42] audit: type=1400 audit(1785683234.817:650): avc: denied { write } for pid=8734 comm="syz.3.873" name="c.1" dev="configfs" ino=29086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.446594][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055c14400: abort rx timeout. Force session deactivation [ 136.450513][ T42] audit: type=1400 audit(1785683234.817:651): avc: denied { write } for pid=8734 comm="syz.3.873" name="c.1" dev="configfs" ino=29086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.455378][ T8725] syz.1.870 (8725) used greatest stack depth: 19120 bytes left [ 136.560756][ T8744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.585404][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054ebc800: rx timeout, send abort [ 136.603540][ T8748] netlink: 'syz.3.877': attribute type 10 has an invalid length. [ 136.818947][ T5745] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.943256][ T1136] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 136.948395][ T1136] ata1.00: configured for UDMA/100 [ 136.979156][ T5745] usb 5-1: Using ep0 maxpacket: 32 [ 136.982634][ T5745] usb 5-1: config 139 has an invalid interface number: 49 but max is 0 [ 136.985489][ T5745] usb 5-1: config 139 has no interface number 0 [ 136.987763][ T5745] usb 5-1: config 139 interface 49 has no altsetting 0 [ 136.992868][ T5745] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 136.995864][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.998531][ T5745] usb 5-1: Product: syz [ 137.001128][ T5745] usb 5-1: Manufacturer: syz [ 137.003124][ T5745] usb 5-1: SerialNumber: syz [ 137.011226][ T5745] usb 5-1: Device is not authorized for usage [ 137.085484][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054ebf000: rx timeout, send abort [ 137.089005][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054ebc800: abort rx timeout. Force session deactivation [ 137.171918][ T8761] netlink: 'syz.4.882': attribute type 1 has an invalid length. [ 137.194620][ T8761] 8021q: adding VLAN 0 to HW filter on device bond11 [ 137.198947][ T8761] bond10: (slave bond11): making interface the new active one [ 137.201677][ T8761] bond10: (slave bond11): Enslaving as an active interface with an up link [ 137.211757][ T8761] bond10: (slave gretap2): Enslaving as a backup interface with an up link [ 137.378264][ T8775] netlink: 'syz.1.886': attribute type 10 has an invalid length. [ 137.562924][ T8776] CUSE: info not properly terminated [ 137.588266][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054ebf000: abort rx timeout. Force session deactivation [ 137.642789][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 137.884332][ T8786] netlink: 260 bytes leftover after parsing attributes in process `syz.3.890'. [ 137.944235][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803481b400: rx timeout, send abort [ 138.444293][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803481a400: rx timeout, send abort [ 138.447760][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803481b400: abort rx timeout. Force session deactivation [ 138.451364][ T8800] tipc: Can't bind to reserved service type 2 [ 138.656937][ T8823] EXT4-fs (nbd4): unable to read superblock [ 138.661448][ T8824] EXT4-fs (nbd4): unable to read superblock [ 138.722535][ T8829] UDC core: g1: couldn't find an available UDC or it's busy [ 138.830221][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 138.835137][ T8838] netlink: 'syz.3.905': attribute type 10 has an invalid length. [ 138.889755][ T8842] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 138.926212][ T8830] CUSE: info not properly terminated [ 138.937359][ T8847] netlink: 'syz.4.907': attribute type 1 has an invalid length. [ 138.954776][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803481a400: abort rx timeout. Force session deactivation [ 138.977451][ T8847] 8021q: adding VLAN 0 to HW filter on device bond12 [ 138.986226][ T8847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.907'. [ 139.593191][ T5893] usb 5-1: USB disconnect, device number 4 [ 139.795634][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 139.822550][ T8867] overlay: filesystem on ./bus not supported [ 140.078824][ T5893] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 140.123406][ T8877] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 140.191427][ T8877] 8021q: adding VLAN 0 to HW filter on device bond8 [ 140.208552][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.916'. [ 140.737152][ T8891] CUSE: info not properly terminated [ 141.198336][ T8911] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 9 out of range (51000000..2150000000) [ 141.310568][ T8916] netlink: 'syz.1.926': attribute type 1 has an invalid length. [ 141.356037][ T8916] 8021q: adding VLAN 0 to HW filter on device bond9 [ 141.409122][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 141.409140][ T42] audit: type=1400 audit(1785683239.817:667): avc: denied { mmap_zero } for pid=8918 comm="syz.3.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 141.443496][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'. [ 141.466729][ T8927] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 141.499284][ T42] audit: type=1400 audit(1785683239.907:668): avc: denied { create } for pid=8925 comm="syz.3.928" name="#17" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.511484][ T42] audit: type=1400 audit(1785683239.927:669): avc: denied { link } for pid=8925 comm="syz.3.928" name="#17" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.528966][ T42] audit: type=1400 audit(1785683239.927:670): avc: denied { rename } for pid=8925 comm="syz.3.928" name="#18" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.636044][ T8940] netlink: 'syz.3.933': attribute type 10 has an invalid length. [ 141.666895][ T8937] kvm: pic: level sensitive irq not supported [ 142.117717][ T42] audit: type=1400 audit(1785683240.527:671): avc: denied { read } for pid=8955 comm="syz.4.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.366911][ T8975] netlink: 'syz.3.943': attribute type 10 has an invalid length. [ 142.436955][ T42] audit: type=1400 audit(1785683240.847:672): avc: denied { write } for pid=8971 comm="syz.1.941" name="functions" dev="configfs" ino=17487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.476959][ T42] audit: type=1400 audit(1785683240.887:673): avc: denied { mounton } for pid=8971 comm="syz.1.941" path="/234/config" dev="configfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.586857][ T8983] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 142.591791][ T8983] overlayfs: missing 'lowerdir' [ 142.603523][ T8983] syzkaller0: entered promiscuous mode [ 142.607019][ T8983] syzkaller0: entered allmulticast mode [ 142.697662][ T8985] binder: BINDER_SET_CONTEXT_MGR already set [ 142.708695][ T8985] binder: 8984:8985 ioctl 4018620d 200000000100 returned -16 [ 142.799982][ T42] audit: type=1400 audit(1785683241.217:674): avc: denied { bind } for pid=8987 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.814034][ T42] audit: type=1400 audit(1785683241.217:675): avc: denied { name_bind } for pid=8987 comm="syz.4.946" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 142.828654][ T42] audit: type=1400 audit(1785683241.217:676): avc: denied { node_bind } for pid=8987 comm="syz.4.946" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 143.141576][ T9024] tmpfs: Bad value for 'mpol' [ 143.156312][ T9007] pci_bus 0000:01: busn_res: [bus 01] is released [ 143.175218][ T9027] fuse: Bad value for 'user_id' [ 143.176847][ T9027] fuse: Bad value for 'user_id' [ 143.182729][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'. [ 143.228831][ T9017] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 143.240620][ T9017] pci 0000:00:04.0: PCI bridge to [bus 01] [ 143.243331][ T9017] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 143.246705][ T9017] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 143.253346][ T9017] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 143.257861][ T9017] pci 0000:00:04.0: enabling Extended Tags [ 143.313612][ T9017] pci 0000:00:04.0: Adding to iommu group 4 [ 143.335058][ T9017] pci 0000:00:04.0: PCI bridge to [bus 01] [ 143.343229][ T9017] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 143.347997][ T9017] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 143.354058][ T9017] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 143.356758][ T9017] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned [ 143.360240][ T9017] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 143.362921][ T9017] pci 0000:00:04.0: PCI bridge to [bus 01] [ 143.365993][ T9017] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 143.377568][ T9017] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 143.382398][ T9017] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 143.442076][ T9017] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 143.459343][ T9017] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 143.602334][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 143.605129][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 144.436655][ T9085] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 144.441191][ T9085] 9pnet_fd: p9_fd_create_unix (9085): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 144.503699][ T9090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9090 comm=syz.1.982 [ 144.614788][ T9096] netlink: 'syz.0.977': attribute type 10 has an invalid length. [ 144.693958][ T9099] ima: policy update failed [ 144.694133][ T9106] openvswitch: netlink: Actions may not be safe on all matching packets [ 144.704605][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.987'. [ 144.799927][ T9099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.838746][ T5752] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 144.841727][ T9117] netlink: 36 bytes leftover after parsing attributes in process `syz.3.991'. [ 144.847122][ T9117] netlink: 'syz.3.991': attribute type 10 has an invalid length. [ 145.001467][ T5752] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12361, setting to 8 [ 145.006048][ T5752] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 145.010254][ T5752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.024539][ T5752] usb 6-1: config 0 descriptor?? [ 145.027494][ T9094] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.237376][ T5752] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 145.288810][ T5843] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 145.332916][ T9132] binder: 9131:9132 ioctl c0306201 200000000080 returned -14 [ 145.338525][ T9132] binder: 9131:9132 ioctl c0306201 2000000003c0 returned -14 [ 145.396471][ T9138] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 145.404350][ T9138] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.418857][ T5843] usb 8-1: device descriptor read/64, error -71 [ 145.455367][ T5752] usb 6-1: USB disconnect, device number 3 [ 145.462270][ T9142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9142 comm=syz.4.999 [ 145.549671][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 145.552592][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 145.555505][ T9144] netlink: 'syz.4.1000': attribute type 11 has an invalid length. [ 145.558075][ T9144] netlink: 'syz.4.1000': attribute type 7 has an invalid length. [ 145.608323][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1001'. [ 145.614270][ T9149] netlink: 'syz.4.1001': attribute type 10 has an invalid length. [ 145.658750][ T5843] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 145.791098][ T5843] usb 8-1: device descriptor read/64, error -71 [ 145.909598][ T5843] usb usb8-port1: attempt power cycle [ 146.095744][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888034674c00: rx timeout, send abort [ 146.249933][ T5843] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 146.271535][ T5843] usb 8-1: device descriptor read/8, error -71 [ 146.392279][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 146.395927][ T9207] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 146.508719][ T5843] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 146.532949][ T5843] usb 8-1: device descriptor read/8, error -71 [ 146.599672][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888034674c00: abort rx timeout. Force session deactivation [ 146.617103][ T9229] netlink: 'syz.0.1023': attribute type 4 has an invalid length. [ 146.623246][ T9229] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1023'. [ 146.636606][ T9229] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 146.641981][ T5843] usb usb8-port1: unable to enumerate USB device [ 146.674030][ T9232] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1024'. [ 146.713812][ T9235] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1025'. [ 146.793540][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888047a6d400: rx timeout, send abort [ 146.824357][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 146.824376][ T42] audit: type=1400 audit(1785683245.237:696): avc: denied { map } for pid=9240 comm="syz.0.1027" path="socket:[30494]" dev="sockfs" ino=30494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.825077][ T9241] sctp: [Deprecated]: syz.0.1027 (pid 9241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.825077][ T9241] Use struct sctp_sack_info instead [ 146.845530][ T9241] x_tables: duplicate underflow at hook 2 [ 146.876391][ T42] audit: type=1400 audit(1785683245.287:697): avc: denied { set_context_mgr } for pid=9242 comm="syz.0.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 146.929904][ T9244] binder: 9242:9244 ioctl 40045532 200000000000 returned -22 [ 147.003993][ T9250] netlink: 'syz.1.1030': attribute type 1 has an invalid length. [ 147.019499][ T9250] 8021q: adding VLAN 0 to HW filter on device bond10 [ 147.065075][ T9255] xt_cgroup: xt_cgroup: no path or classid specified [ 147.122957][ T9256] syzkaller1: entered promiscuous mode [ 147.125400][ T9256] syzkaller1: entered allmulticast mode [ 147.130792][ T9256] netlink: 'syz.0.1029': attribute type 1 has an invalid length. [ 147.264902][ T42] audit: type=1400 audit(1785683245.677:698): avc: denied { read write } for pid=9260 comm="syz.1.1033" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 147.270190][ T9261] syz.1.1033: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset= [ 147.275744][ T42] audit: type=1400 audit(1785683245.677:699): avc: denied { open } for pid=9260 comm="syz.1.1033" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 147.275942][ T9261] / [ 147.282411][ T42] audit: type=1400 audit(1785683245.677:700): avc: denied { getopt } for pid=9260 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.292172][ T9261] ,mems_allowed=0-1 [ 147.296315][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888047a6d400: abort rx timeout. Force session deactivation [ 147.306490][ T9261] [ 147.307448][ T9261] CPU: 2 UID: 0 PID: 9261 Comm: syz.1.1033 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.307467][ T9261] Tainted: [L]=SOFTLOCKUP [ 147.307471][ T9261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.307478][ T9261] Call Trace: [ 147.307484][ T9261] [ 147.307489][ T9261] dump_stack_lvl+0x100/0x190 [ 147.307562][ T9261] warn_alloc.cold+0x94/0xa8 [ 147.307587][ T9261] ? __pfx_warn_alloc+0x10/0x10 [ 147.307616][ T9261] ? do_syscall_64+0x115/0x870 [ 147.307632][ T9261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.307647][ T9261] ? __lock_acquire+0x49f/0x1a40 [ 147.307676][ T9261] ? find_held_lock+0x2b/0x80 [ 147.307685][ T9261] ? avc_has_extended_perms+0x33a/0x1080 [ 147.307720][ T9261] ? avc_has_extended_perms+0x33a/0x1080 [ 147.307733][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.307751][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.307767][ T9261] __vmalloc_node_range_noprof+0x136c/0x1630 [ 147.307787][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.307803][ T9261] ? trace_contention_end+0x126/0x160 [ 147.307817][ T9261] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 147.307835][ T9261] ? dvb_demux_do_ioctl+0x929/0x1200 [ 147.307856][ T9261] ? find_held_lock+0x2b/0x80 [ 147.307866][ T9261] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.307881][ T9261] ? __pfx___mutex_lock+0x10/0x10 [ 147.307896][ T9261] ? tomoyo_path_number_perm+0x188/0x580 [ 147.307913][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.307929][ T9261] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 147.307946][ T9261] __vmalloc_node_noprof+0xad/0xf0 [ 147.307961][ T9261] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 147.307977][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.307994][ T9261] dvb_demux_do_ioctl+0x9e0/0x1200 [ 147.308012][ T9261] ? do_vfs_ioctl+0x226/0x13e0 [ 147.308030][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.308046][ T9261] dvb_usercopy+0x167/0x340 [ 147.308061][ T9261] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 147.308077][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.308093][ T9261] ? __pfx_dvb_usercopy+0x10/0x10 [ 147.308113][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.308128][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.308144][ T9261] ? selinux_file_ioctl+0x13b/0x290 [ 147.308160][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.308175][ T9261] ? selinux_file_ioctl+0xb6/0x290 [ 147.308192][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.308208][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.308223][ T9261] dvb_demux_ioctl+0x29/0x40 [ 147.308238][ T9261] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 147.308254][ T9261] __x64_sys_ioctl+0x18e/0x210 [ 147.308285][ T9261] do_syscall_64+0x115/0x870 [ 147.308298][ T9261] ? clear_bhb_loop+0x40/0x90 [ 147.308311][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.308322][ T9261] RIP: 0033:0x7f1d8279e019 [ 147.308333][ T9261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.308347][ T9261] RSP: 002b:00007f1d8367e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.308359][ T9261] RAX: ffffffffffffffda RBX: 00007f1d82a25fa0 RCX: 00007f1d8279e019 [ 147.308366][ T9261] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000004 [ 147.308373][ T9261] RBP: 00007f1d8283500c R08: 0000000000000000 R09: 0000000000000000 [ 147.308379][ T9261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.308385][ T9261] R13: 00007f1d82a26038 R14: 00007f1d82a25fa0 R15: 00007fffa2108498 [ 147.308396][ T9261] ? __UNIQUE_ID_modinfo_723+0x638bc057/0xffffffffffec9f0d [ 147.308415][ T9261] [ 147.430677][ T9261] Mem-Info: [ 147.432069][ T9261] active_anon:6844 inactive_anon:6409 isolated_anon:0 [ 147.432069][ T9261] active_file:2313 inactive_file:5447 isolated_file:0 [ 147.432069][ T9261] unevictable:1768 dirty:35 writeback:0 [ 147.432069][ T9261] slab_reclaimable:8011 slab_unreclaimable:71378 [ 147.432069][ T9261] mapped:22655 shmem:5188 pagetables:6122 [ 147.432069][ T9261] sec_pagetables:301 bounce:0 [ 147.432069][ T9261] kernel_misc_reclaimable:0 [ 147.432069][ T9261] free:483733 free_pcp:22578 free_cma:0 [ 147.452361][ T9261] Node 0 active_anon:27244kB inactive_anon:25636kB active_file:9252kB inactive_file:13900kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:90124kB dirty:100kB writeback:0kB shmem:17216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15360kB pagetables:7172kB sec_pagetables:1204kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.463589][ T9261] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:7888kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:496kB dirty:40kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:17316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.473963][ T9261] Node 0 DMA free:15116kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:172kB local_pcp:0kB free_cma:0kB [ 147.484627][ T9261] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 147.487061][ T9261] Node 0 DMA32 free:344392kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27244kB inactive_anon:25636kB active_file:9876kB inactive_file:14272kB unevictable:3536kB writepending:100kB zspages:1200kB present:2080628kB managed:1255184kB mlocked:0kB bounce:0kB free_pcp:48488kB local_pcp:11668kB free_cma:0kB [ 147.500321][ T9261] lowmem_reserve[]: 0 0 0 0 0 [ 147.502305][ T9261] Node 1 Normal free:1575424kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:7888kB unevictable:3536kB writepending:40kB zspages:768kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:40604kB local_pcp:4532kB free_cma:0kB [ 147.514073][ T9261] lowmem_reserve[]: 0 0 0 0 0 [ 147.515827][ T9261] Node 0 DMA: 5*4kB (U) 8*8kB (U) 7*16kB (U) 9*32kB (U) 9*64kB (U) 6*128kB (U) 6*256kB (U) 5*512kB (U) 5*1024kB (U) 2*2048kB (U) 0*4096kB = 15140kB [ 147.521509][ T9261] Node 0 DMA32: 1159*4kB (UE) 811*8kB (UME) 618*16kB (UE) 628*32kB (UE) 374*64kB (UME) 269*128kB (UME) 193*256kB (UME) 161*512kB (UM) 106*1024kB (UM) 0*2048kB 0*4096kB = 339860kB [ 147.528320][ T9261] Node 1 Normal: 438*4kB (UM) 411*8kB (UM) 415*16kB (UM) 405*32kB (UM) 399*64kB (UM) 376*128kB (UM) 364*256kB (UM) 339*512kB (UM) 288*1024kB (UM) 13*2048kB (U) 217*4096kB (UM) = 1575424kB [ 147.535420][ T9261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.539234][ T9261] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 147.543042][ T9261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.547010][ T9261] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.550931][ T9261] 15082 total pagecache pages [ 147.553825][ T9261] 74 pages in swap cache [ 147.555592][ T9261] Free swap = 122320kB [ 147.557366][ T9261] Total swap = 124996kB [ 147.559292][ T9261] 1048443 pages RAM [ 147.561369][ T9261] 0 pages HighMem/MovableOnly [ 147.563330][ T9261] 285336 pages reserved [ 147.565068][ T9261] 0 pages cma reserved [ 147.590256][ T9263] tipc: New replicast peer: 127.0.0.1 [ 147.593067][ T9263] tipc: Enabled bearer , priority 10 [ 147.600499][ T9263] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0005 [ 147.606879][ T42] audit: type=1400 audit(1785683246.017:701): avc: denied { write } for pid=9262 comm="syz.4.1034" name="spaces" dev="configfs" ino=18731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.619376][ T9265] scsi_strcpy_devinfo: vendor string 'vendo€â*r' is too long [ 147.620760][ T42] audit: type=1400 audit(1785683246.017:702): avc: denied { write } for pid=9262 comm="syz.4.1034" name="nodes" dev="configfs" ino=31379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.628691][ T9265] scsi_strcpy_devinfo: model string 'moí劌r•™—˜r³ádel' is too long [ 147.639441][ T9267] scsi_strcpy_devinfo: vendor string 'vendo€â*r' is too long [ 147.640937][ T42] audit: type=1400 audit(1785683246.047:703): avc: denied { mounton } for pid=9264 comm="syz.1.1035" path="/255/myproc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 147.642123][ T9267] scsi_strcpy_devinfo: model string 'moí劌r•™—˜r³ádel' is too long [ 147.679997][ T9270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1036'. [ 147.683435][ T9270] netlink: 'syz.1.1036': attribute type 10 has an invalid length. [ 147.867176][ T42] audit: type=1400 audit(1785683246.277:704): avc: denied { kexec_image_load } for pid=9279 comm="syz.1.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 148.137812][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888054eb4c00: rx timeout, send abort [ 148.318179][ T9302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1047'. [ 148.322480][ T9302] netlink: 'syz.1.1047': attribute type 10 has an invalid length. [ 148.341558][ T9304] FAULT_INJECTION: forcing a failure. [ 148.341558][ T9304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.345781][ T9304] CPU: 3 UID: 0 PID: 9304 Comm: syz.3.1048 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.345800][ T9304] Tainted: [L]=SOFTLOCKUP [ 148.345804][ T9304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.345811][ T9304] Call Trace: [ 148.345820][ T9304] [ 148.345824][ T9304] dump_stack_lvl+0x100/0x190 [ 148.345900][ T9304] should_fail_ex.cold+0x5/0xa [ 148.345927][ T9304] _copy_from_user+0x2e/0xd0 [ 148.345967][ T9304] __sys_bpf+0x2f5/0x4e80 [ 148.345999][ T9304] ? __pfx___sys_bpf+0x10/0x10 [ 148.346010][ T9304] ? find_held_lock+0x2b/0x80 [ 148.346029][ T9304] ? get_pid_task+0xfc/0x250 [ 148.346044][ T9304] ? get_pid_task+0xfc/0x250 [ 148.346057][ T9304] ? find_held_lock+0x2b/0x80 [ 148.346069][ T9304] ? rcu_read_lock_any_held+0x6a/0xa0 [ 148.346085][ T9304] ? find_held_lock+0x2b/0x80 [ 148.346094][ T9304] ? ksys_write+0x190/0x250 [ 148.346125][ T9304] ? ksys_write+0x190/0x250 [ 148.346151][ T9304] ? fput+0x79/0x100 [ 148.346166][ T9304] ? __x64_sys_bpf+0xce/0x140 [ 148.346177][ T9304] __x64_sys_bpf+0xce/0x140 [ 148.346187][ T9304] ? do_syscall_64+0x90/0x870 [ 148.346205][ T9304] do_syscall_64+0x115/0x870 [ 148.346217][ T9304] ? clear_bhb_loop+0x40/0x90 [ 148.346231][ T9304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.346243][ T9304] RIP: 0033:0x7fcee659e019 [ 148.346274][ T9304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.346285][ T9304] RSP: 002b:00007fcee74c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.346301][ T9304] RAX: ffffffffffffffda RBX: 00007fcee6825fa0 RCX: 00007fcee659e019 [ 148.346308][ T9304] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 148.346314][ T9304] RBP: 00007fcee74c9090 R08: 0000000000000000 R09: 0000000000000000 [ 148.346320][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.346328][ T9304] R13: 00007fcee6826038 R14: 00007fcee6825fa0 R15: 00007ffcb58eabd8 [ 148.346343][ T9304] [ 148.613005][ T5745] tipc: Node number set to 1092406410 [ 148.638354][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888054eb4800: rx timeout, send abort [ 148.650063][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888054eb4c00: abort rx timeout. Force session deactivation [ 148.700448][ T9324] macvtap0: entered allmulticast mode [ 148.702835][ T9324] veth0_macvtap: entered allmulticast mode [ 148.808420][ C2] vxcan1: j1939_tp_rxtimer: 0xffff8880556aa800: rx timeout, send abort [ 148.842809][ T9335] loop6: detected capacity change from 0 to 8 [ 148.870000][ T42] audit: type=1800 audit(1785683247.287:705): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1042" name="/" dev="fuse" ino=1 res=0 errno=0 [ 149.070215][ T9360] tmpfs: Bad value for 'mpol' [ 149.140993][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888054eb4800: abort rx timeout. Force session deactivation [ 149.308467][ T9375] webusb: landingPage URL too long [ 149.311278][ C2] vxcan1: j1939_tp_rxtimer: 0xffff8880556aa800: abort rx timeout. Force session deactivation [ 149.331126][ T9375] program syz.1.1071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.358923][ T5897] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 149.453864][ T9375] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 149.489302][ T5897] usb 5-1: device descriptor read/64, error -71 [ 149.500705][ T9333] xhci_hcd 0000:00:01.0: xHCI Host Controller [ 149.514654][ T9333] xhci_hcd 0000:00:01.0: new USB bus registered, assigned bus number 37 [ 149.559356][ T9333] xhci_hcd 0000:00:01.0: Host halt failed, -110 [ 149.561339][ T9333] xhci_hcd 0000:00:01.0: can't setup: -110 [ 149.563159][ T9333] xhci_hcd 0000:00:01.0: USB bus 37 deregistered [ 149.575725][ T9375] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 149.611296][ T9333] xhci_hcd 0000:00:01.0: init 0000:00:01.0 fail, -110 [ 149.617523][ T9333] xhci_hcd 0000:00:01.0: probe with driver xhci_hcd failed with error -110 [ 149.738778][ T5897] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 149.859788][ T9403] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1076'. [ 149.863434][ T9403] netlink: 'syz.4.1076': attribute type 10 has an invalid length. [ 149.888689][ T5897] usb 5-1: device descriptor read/64, error -71 [ 149.999348][ T5897] usb usb5-port1: attempt power cycle [ 150.061112][ T5893] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 150.368881][ T5897] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 150.389615][ T5897] usb 5-1: device descriptor read/8, error -71 [ 150.638832][ T5897] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 150.659334][ T5897] usb 5-1: device descriptor read/8, error -71 [ 150.773103][ T5897] usb usb5-port1: unable to enumerate USB device [ 151.549758][ T59] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 154.695550][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 154.695566][ T42] audit: type=1400 audit(1785683253.107:723): avc: denied { write } for pid=9438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.740571][ T42] audit: type=1400 audit(1785683253.157:724): avc: denied { write } for pid=9441 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.119087][ T42] audit: type=1400 audit(1785683257.527:725): avc: denied { write } for pid=9444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.169844][ T42] audit: type=1400 audit(1785683257.587:726): avc: denied { write } for pid=9447 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.646108][ T42] audit: type=1400 audit(1785683261.057:727): avc: denied { write } for pid=9450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.702186][ T42] audit: type=1400 audit(1785683261.117:728): avc: denied { write } for pid=9453 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.606431][ T9466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1084'. [ 163.645209][ T9469] kvm: kvm [9467]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000019) = 0x1 [ 163.658465][ T9476] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1088'. [ 163.661988][ T9476] netlink: 'syz.0.1088': attribute type 10 has an invalid length. [ 163.675987][ T42] audit: type=1400 audit(1785683262.087:729): avc: denied { mounton } for pid=9477 comm="syz.4.1089" path="/syzcgroup/unified/syz4" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 163.729238][ T9485] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1091'. [ 163.800744][ T9497] netlink: 'syz.1.1093': attribute type 1 has an invalid length. [ 163.817521][ T9497] 8021q: adding VLAN 0 to HW filter on device bond11 [ 163.856576][ T9500] netlink: 'syz.3.1094': attribute type 21 has an invalid length. [ 163.862336][ T9500] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1094'. [ 163.875904][ T9505] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1095'. [ 163.893549][ T42] audit: type=1400 audit(1785683262.307:730): avc: denied { read } for pid=9508 comm="syz.3.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.054223][ T9532] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 164.063700][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 164.100643][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1105'. [ 164.101305][ T42] audit: type=1400 audit(1785683262.517:731): avc: denied { getopt } for pid=9539 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.379023][ T9579] cgroup: release_agent respecified [ 164.381334][ T9579] cgroup: release_agent respecified [ 164.383648][ T9579] cgroup: release_agent respecified [ 164.386113][ T9579] cgroup: release_agent respecified [ 164.394639][ T9579] cgroup: release_agent respecified [ 164.397442][ T9579] cgroup: release_agent respecified [ 164.401623][ T9579] cgroup: release_agent respecified [ 164.404154][ T9579] cgroup: release_agent respecified [ 164.404277][ T42] audit: type=1400 audit(1785683262.817:732): avc: denied { write } for pid=9572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.407117][ T9579] cgroup: release_agent respecified [ 164.417031][ T9579] cgroup: release_agent respecified [ 164.425097][ T9579] cgroup: release_agent respecified [ 164.427016][ T9579] cgroup: release_agent respecified [ 164.429546][ T9579] cgroup: release_agent respecified [ 164.431977][ T9579] cgroup: release_agent respecified [ 164.456363][ T42] audit: type=1400 audit(1785683262.867:733): avc: denied { write } for pid=9588 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.497981][ T42] audit: type=1400 audit(1785683262.907:734): avc: denied { remount } for pid=9589 comm="syz.0.1117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.512631][ T5446] veth0_vlan: left promiscuous mode [ 164.526573][ T5752] veth0_vlan: entered promiscuous mode [ 164.614469][ T9600] 9p: Bad value for 'rfdno' [ 164.620002][ T42] audit: type=1400 audit(1785683263.037:735): avc: denied { read } for pid=9592 comm="syz.3.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.636161][ T9612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1121'. [ 164.671885][ T42] audit: type=1400 audit(1785683263.087:736): avc: denied { write } for pid=9608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.250669][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 165.254441][ T9647] fuse: Bad value for 'fd' [ 165.268981][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1130'. [ 165.385046][ T9649] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 165.398340][ T9646] ntfs3(sr0): Primary boot signature is not NTFS. [ 165.409230][ T9646] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 166.137457][ T9676] FAT-fs (nbd0): unable to read boot sector [ 166.146854][ T9678] FAT-fs (nbd0): unable to read boot sector [ 166.204531][ T9683] 9pnet_virtio: no channels available for device syz [ 166.292615][ T8532] bond0: (slave syz_tun): Releasing backup interface [ 166.483889][ T9705] 9pnet_virtio: no channels available for device syz [ 166.514419][ T9704] kvm: emulating exchange as write [ 166.672365][ T5757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.677236][ T5757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.684818][ T5757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.694842][ T5757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.697738][ T5757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.928408][ T9722] bridge3: entered promiscuous mode [ 166.932280][ T9722] bridge3: entered allmulticast mode [ 167.196632][ T9712] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.207587][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.210883][ T9712] bridge_slave_0: entered allmulticast mode [ 167.214872][ T9712] bridge_slave_0: entered promiscuous mode [ 167.219500][ T9712] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.221958][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.224376][ T9712] bridge_slave_1: entered allmulticast mode [ 167.227358][ T9712] bridge_slave_1: entered promiscuous mode [ 167.261371][ T9712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.266182][ T9712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.283457][ T9712] team0: Port device team_slave_0 added [ 167.286811][ T9764] overlayfs: failed to clone lowerpath [ 167.289945][ T9712] team0: Port device team_slave_1 added [ 167.303792][ T9764] team0: No ports can be present during mode change [ 167.330828][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.333339][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.342149][ T9712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.346283][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.348564][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.357972][ T9712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.382163][ T9712] hsr_slave_0: entered promiscuous mode [ 167.384673][ T9712] hsr_slave_1: entered promiscuous mode [ 167.389230][ T9712] debugfs: 'hsr0' already exists in 'hsr' [ 167.391016][ T9712] Cannot create hsr debugfs directory [ 167.441887][ C0] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 167.445154][ C0] sr 2:0:0:0: [sr0] tag#15 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 167.449370][ T9771] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 167.481444][ T9771] 8021q: adding VLAN 0 to HW filter on device bond12 [ 167.647868][ T9712] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.665642][ T9712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.668394][ T9712] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.672808][ T9712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.676043][ T9712] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.683531][ T9712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.686272][ T9712] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.690855][ T9712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.745956][ T9712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.757543][ T9805] xt_NFQUEUE: number of total queues is 0 [ 167.773961][ T9712] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.774844][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 167.774858][ T42] audit: type=1400 audit(1785683266.187:752): avc: denied { map } for pid=9804 comm="syz.1.1171" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 167.783209][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.789324][ T42] audit: type=1400 audit(1785683266.187:753): avc: denied { write execute } for pid=9804 comm="syz.1.1171" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 167.790803][ T8678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.798357][ T42] audit: type=1800 audit(1785683266.207:754): pid=9742 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1155" name="/" dev="fuse" ino=1 res=0 errno=0 [ 167.817927][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.820499][ T8678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.842597][ T42] audit: type=1400 audit(1785683266.257:755): avc: denied { write } for pid=9817 comm="syz.4.1175" path="socket:[34269]" dev="sockfs" ino=34269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 167.851999][ T9805] syzkaller1: entered promiscuous mode [ 167.853908][ T9805] syzkaller1: entered allmulticast mode [ 168.045562][ T9836] netlink: 'syz.4.1179': attribute type 4 has an invalid length. [ 168.066852][ T9836] netlink: 'syz.4.1179': attribute type 4 has an invalid length. [ 168.136476][ T9846] netlink: 'syz.4.1184': attribute type 1 has an invalid length. [ 168.153661][ T9846] 8021q: adding VLAN 0 to HW filter on device bond13 [ 168.186181][ T42] audit: type=1400 audit(1785683266.597:756): avc: denied { bind } for pid=9845 comm="syz.4.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 168.228526][ T9712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.269512][ T42] audit: type=1400 audit(1785683266.677:757): avc: denied { write } for pid=9856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.313702][ T9872] netlink: 'syz.4.1187': attribute type 1 has an invalid length. [ 168.333643][ T9872] 8021q: adding VLAN 0 to HW filter on device bond14 [ 168.347428][ T42] audit: type=1400 audit(1785683266.757:758): avc: denied { write } for pid=9874 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.370197][ T42] audit: type=1400 audit(1785683266.787:759): avc: denied { name_bind } for pid=9880 comm="syz.3.1189" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 168.380782][ T42] audit: type=1400 audit(1785683266.797:760): avc: denied { accept } for pid=9880 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 168.419974][ T42] audit: type=1400 audit(1785683266.827:761): avc: denied { write } for pid=9886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.424583][ T9712] veth0_vlan: entered promiscuous mode [ 168.436991][ T9712] veth1_vlan: entered promiscuous mode [ 168.473351][ T9712] veth0_macvtap: entered promiscuous mode [ 168.480810][ T9712] veth1_macvtap: entered promiscuous mode [ 168.502578][ T9712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.514481][ T9712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.628996][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.632418][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.635126][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.638352][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.671911][ T9910] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 168.716011][ T9910] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.720400][ T8678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.724909][ T8678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.735266][ T9910] bond7: (slave geneve3): making interface the new active one [ 168.738915][ T9910] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 168.739554][ T5746] Bluetooth: hci0: command tx timeout [ 168.777628][ T8678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.784967][ T8678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.894274][ T9920] e1000e 0000:00:02.0 eth1: removed PHC [ 168.953815][ T9927] netlink: 'syz.5.1198': attribute type 1 has an invalid length. [ 169.071393][ T9941] db_root: cannot open:  [ 169.077013][ T9920] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 169.204395][ T9947] ±ÿ: renamed from lo (while UP) [ 169.233000][ T9947] __nla_validate_parse: 8 callbacks suppressed [ 169.233023][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 169.242347][ T9947] Invalid argument reading file caps for ./file0 [ 169.444476][ T9963] openvswitch: netlink: Actions may not be safe on all matching packets [ 169.448742][ T9963] openvswitch: netlink: Actions may not be safe on all matching packets [ 169.653917][ T9985] cgroup: fork rejected by pids controller in /syz3 [ 169.811453][T10059] netlink: 'syz.4.1211': attribute type 7 has an invalid length. [ 169.856510][T10065] netlink: 'syz.3.1212': attribute type 1 has an invalid length. [ 169.870199][T10065] 8021q: adding VLAN 0 to HW filter on device bond8 [ 170.142360][ T5752] IPVS: starting estimator thread 0... [ 170.177454][T10091] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.1217:10091 [ 170.241189][T10084] IPVS: using max 41 ests per chain, 98400 per kthread [ 170.249853][T10097] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 170.265921][T10097] 8021q: adding VLAN 0 to HW filter on device bond15 [ 170.644031][T10125] netlink: 'syz.3.1223': attribute type 11 has an invalid length. [ 170.773540][T10136] netlink: 'syz.3.1225': attribute type 1 has an invalid length. [ 170.819122][ T5746] Bluetooth: hci0: command tx timeout [ 170.826271][T10136] 8021q: adding VLAN 0 to HW filter on device bond9 [ 171.049203][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1231'. [ 171.325934][T10165] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1234'. [ 171.329926][T10165] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1234'. [ 171.350877][T10178] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 171.381053][T10178] 8021q: adding VLAN 0 to HW filter on device bond13 [ 171.406030][T10181] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 171.418255][T10181] 8021q: adding VLAN 0 to HW filter on device bond10 [ 171.526853][T10188] usb usb1: usbfs: process 10188 (syz.1.1241) did not claim interface 10 before use [ 171.577875][T10197] fuse: Bad value for 'fd' [ 171.581088][T10197] fuse: Bad value for 'fd' [ 171.617665][T10194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10194 comm=syz.1.1244 [ 171.649758][T10203] overlayfs: failed to resolve './cgroup': -2 [ 171.830081][T10210] vlan2: entered promiscuous mode [ 171.832345][T10210] hsr0: entered promiscuous mode [ 171.835270][T10210] vlan2: entered allmulticast mode [ 171.837502][T10210] hsr0: entered allmulticast mode [ 171.840559][T10210] hsr_slave_0: entered allmulticast mode [ 171.891587][T10214] netlink: 'syz.3.1250': attribute type 1 has an invalid length. [ 171.926732][T10214] 8021q: adding VLAN 0 to HW filter on device bond11 [ 172.076770][T10228] overlay: ./file0 is not a directory [ 172.085014][T10230] fuse: Bad value for 'fd' [ 172.088543][T10230] fuse: Bad value for 'fd' [ 172.132132][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1256'. [ 172.136058][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1256'. [ 172.184266][T10237] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 172.552235][T10246] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1260'. [ 172.737677][T10250] 8021q: adding VLAN 0 to HW filter on device bond12 [ 172.898779][ T5746] Bluetooth: hci0: command tx timeout [ 173.586527][T10285] openvswitch: netlink: Message has 8 unknown bytes. [ 173.643374][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 173.643392][ T42] audit: type=1800 audit(1785683272.057:800): pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1264" name="/" dev="fuse" ino=1 res=0 errno=0 [ 173.683480][T10288] sg_read: process 722 (syz.4.1272) changed security contexts after opening file descriptor, this is not allowed. [ 173.696608][ T8678] Bluetooth: (null): Invalid header checksum [ 173.706504][T10287] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 173.803793][ T221] Bluetooth: (null): Invalid header checksum [ 173.921750][ T8675] Bluetooth: (null): Invalid header checksum [ 174.030188][ T8678] Bluetooth: (null): Invalid header checksum [ 174.061093][ T42] audit: type=1400 audit(1785683272.477:801): avc: denied { mount } for pid=10321 comm="syz.1.1281" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 174.153125][ T8675] Bluetooth: (null): Invalid header checksum [ 174.166595][ T42] audit: type=1400 audit(1785683272.577:802): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 174.197994][T10328] validate_nla: 1 callbacks suppressed [ 174.198010][T10328] netlink: 'syz.3.1282': attribute type 10 has an invalid length. [ 174.221091][T10328] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 174.248945][ T13] bond0: (slave veth0_to_bond): interface is now down [ 174.252340][ T13] bond0: now running without any active interface! [ 174.261365][ T1171] Bluetooth: (null): Invalid header checksum [ 174.379282][ T1171] Bluetooth: (null): Invalid header checksum [ 174.448964][ T847] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 174.611021][ T847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 174.615549][ T847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 174.619789][ T847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 174.626680][ T847] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 174.630848][ T847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.634273][ T847] usb 6-1: Product: syz [ 174.636193][ T847] usb 6-1: Manufacturer: syz [ 174.638261][ T847] usb 6-1: SerialNumber: syz [ 174.646161][ T847] usb 6-1: config 0 descriptor?? [ 174.871549][ T847] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 174.903925][ T847] usb 6-1: USB disconnect, device number 4 [ 174.906568][ T42] audit: type=1400 audit(1785683273.317:803): avc: denied { write } for pid=10349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.976920][ T42] audit: type=1400 audit(1785683273.387:804): avc: denied { write } for pid=10357 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.988542][ T5746] Bluetooth: hci0: command tx timeout [ 175.001812][T10359] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1289'. [ 175.410306][ T42] audit: type=1400 audit(1785683273.827:805): avc: denied { create } for pid=10366 comm="syz.3.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 175.417015][ T42] audit: type=1400 audit(1785683273.827:806): avc: denied { bind } for pid=10366 comm="syz.3.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 175.423194][ T42] audit: type=1400 audit(1785683273.837:807): avc: denied { setopt } for pid=10366 comm="syz.3.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 175.430281][ T42] audit: type=1400 audit(1785683273.837:808): avc: denied { accept } for pid=10366 comm="syz.3.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 175.436437][ T42] audit: type=1400 audit(1785683273.837:809): avc: denied { write } for pid=10366 comm="syz.3.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 175.554357][T10376] program syz.4.1293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.886060][T10399] fuse: Bad value for 'fd' [ 175.940960][T10407] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 176.081935][T10413] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1305'. [ 176.447721][T10431] fuse: Bad value for 'fd' [ 176.483836][T10437] netlink: 'syz.3.1311': attribute type 1 has an invalid length. [ 176.485265][T10432] binder: 10423:10432 ioctl c0046686 200000000400 returned -22 [ 176.508063][T10437] 8021q: adding VLAN 0 to HW filter on device bond13 [ 176.833684][T10459] fuse: Bad value for 'fd' [ 176.877578][T10461] netlink: 'syz.3.1320': attribute type 1 has an invalid length. [ 176.908494][T10461] 8021q: adding VLAN 0 to HW filter on device bond14 [ 177.437633][T10479] Process accounting resumed [ 177.764893][T10492] netlink: 'syz.3.1328': attribute type 1 has an invalid length. [ 177.813680][T10492] 8021q: adding VLAN 0 to HW filter on device bond15 [ 178.393037][T10518] pim6reg: entered allmulticast mode [ 178.409478][T10500] pim6reg: left allmulticast mode [ 178.649732][T10529] netlink: 'syz.3.1341': attribute type 2 has an invalid length. [ 178.718898][ T42] kauditd_printk_skb: 47 callbacks suppressed [ 178.718917][ T42] audit: type=1400 audit(1785683277.137:857): avc: denied { getopt } for pid=10528 comm="syz.3.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.967927][ T42] audit: type=1400 audit(1785683278.377:858): avc: denied { bind } for pid=10587 comm="syz.4.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 179.982493][T10590] fuse: fd is not a fuse device [ 179.984728][ T42] audit: type=1400 audit(1785683278.387:859): avc: denied { read } for pid=10587 comm="syz.4.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 180.240972][T10598] fuse: fd is not a fuse device [ 180.280616][T10600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10600 comm=syz.3.1363 [ 180.671140][T10615] netlink: 'syz.3.1369': attribute type 1 has an invalid length. [ 180.683729][T10615] bond16: entered promiscuous mode [ 180.687903][T10615] 8021q: adding VLAN 0 to HW filter on device bond16 [ 180.710303][T10615] 8021q: adding VLAN 0 to HW filter on device bond16 [ 180.712628][T10615] bond16: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 180.715875][T10615] bond16: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 180.721846][T10615] bond16: (slave ip6gre1): making interface the new active one [ 180.724258][T10615] ip6gre1: entered promiscuous mode [ 180.726752][T10615] bond16: (slave ip6gre1): Enslaving as an active interface with an up link [ 180.756975][T10621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1370'. [ 181.162580][T10643] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 181.205580][T10646] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 181.219943][T10646] 8021q: adding VLAN 0 to HW filter on device bond17 [ 181.758737][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1380'. [ 181.864699][T10653] binder: 10652:10653 ioctl 400c620e 200000000180 returned -22 [ 181.917392][T10660] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1382'. [ 182.445208][T10673] efs: device does not support 512 byte blocks [ 182.447983][T10673] device does not support 512 byte blocks [ 182.447983][T10673] [ 183.857640][T10694] netlink: 'syz.4.1393': attribute type 1 has an invalid length. [ 183.892377][T10694] 8021q: adding VLAN 0 to HW filter on device bond16 [ 184.007810][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 184.013308][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1395'. [ 184.017191][T10700] netlink: 'syz.4.1395': attribute type 12 has an invalid length. [ 184.025101][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 184.030785][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1395'. [ 184.034647][T10700] netlink: 'syz.4.1395': attribute type 12 has an invalid length. [ 184.296513][T10705] fuse: fd is not a fuse device [ 184.341842][T10708] overlayfs: failed to resolve './file0/file1': -2 [ 184.357654][ T42] audit: type=1400 audit(1785683282.767:860): avc: denied { write } for pid=10710 comm="syz.4.1398" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 184.367086][ T42] audit: type=1400 audit(1785683282.777:861): avc: denied { write } for pid=10710 comm="syz.4.1398" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 184.381338][ T42] audit: type=1400 audit(1785683282.777:862): avc: denied { open } for pid=10710 comm="syz.4.1398" path="/285/trace/events/mac80211/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 184.423056][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'. [ 184.443550][T10713] vcan1: entered allmulticast mode [ 184.496980][T10711] [ 185.017546][T10725] netlink: 'syz.3.1402': attribute type 1 has an invalid length. [ 185.035230][T10725] 8021q: adding VLAN 0 to HW filter on device bond18 [ 185.091786][ T42] audit: type=1400 audit(1785683283.507:863): avc: denied { watch_mount } for pid=10727 comm="syz.3.1403" path="/428" dev="tmpfs" ino=2330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 185.261470][T10740] xt_socket: unknown flags 0x48 [ 185.411729][T10746] netlink: 'syz.3.1410': attribute type 2 has an invalid length. [ 185.487080][T10746] : entered promiscuous mode [ 185.504757][T10753] netlink: 'syz.4.1411': attribute type 1 has an invalid length. [ 185.507543][ T5757] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.515743][ T5757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.521872][T10753] 8021q: adding VLAN 0 to HW filter on device bond17 [ 185.522993][ T5757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.533874][ T5757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.539786][ T5757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.972292][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1417'. [ 185.993374][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.023587][T10798] vlan3: entered promiscuous mode [ 186.025262][T10798] ip6gretap0: entered promiscuous mode [ 186.123272][T10803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.147823][T10747] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.156102][T10747] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.162542][T10747] bridge_slave_0: entered allmulticast mode [ 186.164044][T10807] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 186.168373][T10747] bridge_slave_0: entered promiscuous mode [ 186.193466][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.241387][T10807] 8021q: adding VLAN 0 to HW filter on device bond18 [ 186.249820][T10747] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.253018][T10747] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.256196][T10747] bridge_slave_1: entered allmulticast mode [ 186.262053][T10747] bridge_slave_1: entered promiscuous mode [ 186.323028][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.357625][T10747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.365670][T10747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.400186][T10747] team0: Port device team_slave_0 added [ 186.406961][T10747] team0: Port device team_slave_1 added [ 186.430920][T10747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.433508][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.442510][T10747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.470640][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.484326][T10747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.486785][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.494918][T10747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.519228][T10747] hsr_slave_0: entered promiscuous mode [ 186.521476][T10747] hsr_slave_1: entered promiscuous mode [ 186.523488][T10747] debugfs: 'hsr0' already exists in 'hsr' [ 186.525298][T10747] Cannot create hsr debugfs directory [ 186.571995][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'. [ 186.580620][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'. [ 186.584544][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'. [ 186.771598][ T13] bridge_slave_1: left allmulticast mode [ 186.780396][ T13] bridge_slave_1: left promiscuous mode [ 186.791319][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.793536][ T42] audit: type=1400 audit(1785683285.207:864): avc: denied { write } for pid=10832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.807172][ T13] bridge_slave_0: left allmulticast mode [ 186.810039][ T13] bridge_slave_0: left promiscuous mode [ 186.815565][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.856237][ T42] audit: type=1400 audit(1785683285.267:865): avc: denied { write } for pid=10839 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.993632][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.998162][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.003198][ T13] bond0 (unregistering): Released all slaves [ 187.012458][ T5446] 8021q: adding VLAN 0 to HW filter on device eth1 [ 187.015007][T10847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1432'. [ 187.065123][ T42] audit: type=1400 audit(1785683285.477:866): avc: denied { write } for pid=10849 comm="syz.4.1433" name="/" dev="9p" ino=82837657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.090680][ T42] audit: type=1400 audit(1785683285.487:867): avc: denied { append } for pid=10849 comm="syz.4.1433" path="/304/file0/blkio.throttle.io_service_bytes" dev="9p" ino=82837717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 187.099590][ T42] audit: type=1400 audit(1785683285.497:868): avc: denied { map } for pid=10849 comm="syz.4.1433" path="/304/file0/blkio.throttle.io_service_bytes" dev="9p" ino=82837717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 187.118885][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 187.211114][T10747] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 187.215519][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.215895][ T42] audit: type=1400 audit(1785683285.627:869): avc: denied { write } for pid=10854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.218407][T10747] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 187.236225][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.239596][T10747] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 187.246239][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.254412][T10747] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 187.276897][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.323290][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 187.349448][T10747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.367092][T10747] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.373237][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.375596][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.384402][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.386740][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.440997][ T13] hsr_slave_0: left promiscuous mode [ 187.443438][ T13] hsr_slave_1: left promiscuous mode [ 187.446182][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.449825][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.454919][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.457556][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.471966][ T13] veth1_macvtap: left promiscuous mode [ 187.475358][ T13] veth0_macvtap: left promiscuous mode [ 187.477873][ T13] veth1_vlan: left promiscuous mode [ 187.480731][ T13] veth0_vlan: left promiscuous mode [ 187.612048][ T13] team0 (unregistering): Port device team_slave_1 removed [ 187.618800][ T5746] Bluetooth: hci4: command tx timeout [ 187.623723][ T13] team0 (unregistering): Port device team_slave_0 removed [ 187.696147][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 187.931911][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 188.034364][T10912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1441'. [ 188.037433][T10912] Unknown options in mask b7f2 [ 188.054732][T10747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.098378][T10920] rpc_pipefs: Unknown parameter '' [ 188.274354][T10747] veth0_vlan: entered promiscuous mode [ 188.286209][T10747] veth1_vlan: entered promiscuous mode [ 188.311850][T10747] veth0_macvtap: entered promiscuous mode [ 188.316990][T10747] veth1_macvtap: entered promiscuous mode [ 188.327695][T10747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.332959][T10747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.343044][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.346859][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.418415][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.425258][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.485013][ T221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.488397][ T221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.569610][ T5828] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.573261][ T5828] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.606090][T10937] tmpfs: Cannot change global quota limit on remount [ 189.258176][T10972] binder: 10971:10972 ioctl c0306201 200000000040 returned -11 [ 189.364829][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 189.364853][ T42] audit: type=1400 audit(1785683287.777:885): avc: denied { write } for pid=10975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.414667][ T42] audit: type=1400 audit(1785683287.827:886): avc: denied { write } for pid=10978 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.519207][ T5745] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 189.525719][ T42] audit: type=1400 audit(1785683287.937:887): avc: denied { write } for pid=10982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.576652][ T42] audit: type=1400 audit(1785683287.987:888): avc: denied { write } for pid=10985 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.669443][ T5745] usb 9-1: Using ep0 maxpacket: 32 [ 189.673630][ T5745] usb 9-1: config 0 has no interfaces? [ 189.675871][ T5745] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 189.680361][ T5745] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.685627][ T5745] usb 9-1: config 0 descriptor?? [ 189.699648][ T5746] Bluetooth: hci4: command tx timeout [ 189.797600][T10995] fuse: Bad value for 'fd' [ 189.897379][ T5745] usb 9-1: USB disconnect, device number 2 [ 190.014365][ T42] audit: type=1400 audit(1785683288.417:889): avc: denied { write } for pid=11005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.071141][ T42] audit: type=1400 audit(1785683288.487:890): avc: denied { write } for pid=11009 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.102768][T11012] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1461'. [ 190.170657][ T42] audit: type=1400 audit(1785683288.587:891): avc: denied { write } for pid=11013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.220495][ T42] audit: type=1400 audit(1785683288.637:892): avc: denied { write } for pid=11016 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.317880][ T42] audit: type=1400 audit(1785683288.727:893): avc: denied { write } for pid=11020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.368819][ T847] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 190.375533][ T42] audit: type=1400 audit(1785683288.787:894): avc: denied { write } for pid=11025 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.520321][ T847] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.523915][ T847] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.528125][ T847] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.532295][ T847] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.538485][ T847] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.543782][ T847] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.547171][ T847] usb 11-1: Product: syz [ 190.549015][ T847] usb 11-1: Manufacturer: syz [ 190.556963][T11036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=11036 comm=syz.3.1465 [ 190.561409][ T847] cdc_wdm 11-1:1.0: skipping garbage [ 190.561504][ T847] cdc_wdm 11-1:1.0: skipping garbage [ 190.563492][ T847] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 190.568787][ T847] cdc_wdm 11-1:1.0: Unknown control protocol [ 190.637472][T11044] fuse: Bad value for 'fd' [ 190.672948][T11042] Process accounting resumed [ 190.768959][ T59] usb 11-1: USB disconnect, device number 2 [ 190.913830][T11063] overlayfs: missing 'lowerdir' [ 191.033590][T11070] fuse: Bad value for 'fd' [ 191.064411][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 191.192838][T11082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1480'. [ 191.202439][T11082] netlink: 11396 bytes leftover after parsing attributes in process `syz.3.1480'. [ 191.224388][ T5745] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 191.331378][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 191.355724][T11086] 8021q: adding VLAN 0 to HW filter on device bond19 [ 191.374360][ T5757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.386058][ T5757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.390988][ T5745] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.394083][ T5757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.396289][ T5745] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.409170][ T5745] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.424082][ T5745] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.427784][ T5757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.431343][ T5745] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.434441][ T5745] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.437168][ T5745] usb 11-1: Product: syz [ 191.438570][ T5745] usb 11-1: Manufacturer: syz [ 191.439210][ T5757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.455308][ T5745] cdc_wdm 11-1:1.0: skipping garbage [ 191.457101][ T5745] cdc_wdm 11-1:1.0: skipping garbage [ 191.460160][T10397] bond0: (slave syz_tun): Releasing backup interface [ 191.473777][ T5745] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 191.475756][ T5745] cdc_wdm 11-1:1.0: Unknown control protocol [ 191.628380][ T5828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.751305][ T5828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.776884][T11133] ip6gretap1: entered promiscuous mode [ 191.779010][ T5757] Bluetooth: hci4: command tx timeout [ 191.780834][T11133] ip6gretap1: entered allmulticast mode [ 191.870313][ T5828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.963567][T11093] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.968538][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.972971][T11093] bridge_slave_0: entered allmulticast mode [ 191.976873][T11093] bridge_slave_0: entered promiscuous mode [ 192.003354][ T5828] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 192.029408][ T5828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.035753][T11093] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.038270][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.042717][T11093] bridge_slave_1: entered allmulticast mode [ 192.045533][T11093] bridge_slave_1: entered promiscuous mode [ 192.090247][T11093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.099189][T11093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.115172][T11093] team0: Port device team_slave_0 added [ 192.118499][T11093] team0: Port device team_slave_1 added [ 192.132457][T11093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.134688][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.145066][T11093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.149809][T11093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.152028][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.159973][T11093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.211961][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.218223][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.228548][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 192.229213][ T34] usb 11-1: USB disconnect, device number 3 [ 192.231764][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 192.235672][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 192.253031][T11093] hsr_slave_0: entered promiscuous mode [ 192.255870][T11093] hsr_slave_1: entered promiscuous mode [ 192.260805][T11093] debugfs: 'hsr0' already exists in 'hsr' [ 192.262639][T11093] Cannot create hsr debugfs directory [ 192.282137][ T5828] bridge_slave_1: left allmulticast mode [ 192.284451][ T5828] bridge_slave_1: left promiscuous mode [ 192.286763][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.293555][ T5828] bridge_slave_0: left allmulticast mode [ 192.295610][ T5828] bridge_slave_0: left promiscuous mode [ 192.297526][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.435979][ T5828] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 192.469206][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.473721][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.477757][ T5828] bond0 (unregistering): Released all slaves [ 192.483154][ T5828] bond1 (unregistering): Released all slaves [ 192.491126][ T5828] bond2 (unregistering): Released all slaves [ 192.498937][ T5828] bond3 (unregistering): Released all slaves [ 192.506231][ T5828] bond4 (unregistering): Released all slaves [ 192.513529][ T5828] bond5 (unregistering): Released all slaves [ 192.522418][ T5828] bond6 (unregistering): Released all slaves [ 192.536359][ T5828] bond7 (unregistering): Released all slaves [ 192.543575][ T5828] bond8 (unregistering): Released all slaves [ 192.554538][ T5828] bond9 (unregistering): Released all slaves [ 192.561752][ T5828] bond10 (unregistering): Released all slaves [ 192.569210][ T5828] bond11 (unregistering): Released all slaves [ 192.584493][ T5828] bond12 (unregistering): Released all slaves [ 192.597182][ T5828] bond13 (unregistering): Released all slaves [ 192.612854][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 192.833158][ T5828] IPVS: stopping master sync thread 8375 ... [ 192.929105][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 193.045105][T11183] dummy0: entered allmulticast mode [ 193.052266][ T5446] 8021q: adding VLAN 0 to HW filter on device eth10 [ 193.095357][T11093] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 193.116109][T11093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.120129][T11093] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 193.129499][T11093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.151522][T11093] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 193.169259][T11093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.172751][T11093] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 193.183900][T11093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.246529][T11215] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1510'. [ 193.283917][T11215] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1510'. [ 193.290059][T11215] netlink: 'syz.6.1510': attribute type 6 has an invalid length. [ 193.294033][T11215] netlink: 'syz.6.1510': attribute type 5 has an invalid length. [ 193.297296][T11215] netlink: 'syz.6.1510': attribute type 4 has an invalid length. [ 193.331891][ T5446] 8021q: adding VLAN 0 to HW filter on device eth11 [ 193.359615][T11093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.371113][ T5828] hsr_slave_0: left promiscuous mode [ 193.378491][ T5828] hsr_slave_1: left promiscuous mode [ 193.380943][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.383272][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.398484][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.401597][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.429920][ T5828] veth1_macvtap: left promiscuous mode [ 193.431777][ T5828] veth0_macvtap: left allmulticast mode [ 193.433831][ T5828] veth0_macvtap: left promiscuous mode [ 193.435648][ T5828] veth1_vlan: left promiscuous mode [ 193.440309][ T5828] veth0_vlan: left promiscuous mode [ 193.548807][ T5757] Bluetooth: hci0: command tx timeout [ 193.633098][T11256] netlink: 'syz.3.1522': attribute type 1 has an invalid length. [ 193.699186][ T10] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 193.738447][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 193.755524][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 193.859212][ T5757] Bluetooth: hci4: command tx timeout [ 193.877594][ T5828] team0 (unregistering): Port device dummy0 removed [ 193.959560][T11093] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.962959][T11271] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved [ 193.968180][T10783] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.970774][T10783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.000725][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1527'. [ 194.007691][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.010240][ T8663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.020376][T11273] ifb1: entered promiscuous mode [ 194.027515][T11273] macvlan0: entered allmulticast mode [ 194.029990][T11273] ifb1: entered allmulticast mode [ 194.067170][T11093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.084370][T11287] overlay: Bad value for 'workdir' [ 194.198248][ T5446] 8021q: adding VLAN 0 to HW filter on device eth12 [ 194.233961][T11293] netlink: 'syz.4.1528': attribute type 4 has an invalid length. [ 194.271743][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273849][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.383909][ T5828] IPVS: stop unused estimator thread 0... [ 194.403912][T11093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.453368][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 194.453383][ T42] audit: type=1400 audit(1785683292.867:912): avc: denied { write } for pid=11311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.495949][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1531'. [ 194.500964][T11318] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1531'. [ 194.518577][ T42] audit: type=1400 audit(1785683292.927:913): avc: denied { write } for pid=11320 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.567965][T11093] veth0_vlan: entered promiscuous mode [ 194.574263][T11093] veth1_vlan: entered promiscuous mode [ 194.593258][T11093] veth0_macvtap: entered promiscuous mode [ 194.597294][T11093] veth1_macvtap: entered promiscuous mode [ 194.609753][T11093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.620589][T11093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.643773][T10879] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.649238][T10879] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.670657][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.710380][T10783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.725485][T11334] dvmrp0: entered allmulticast mode [ 194.726907][T10783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.775379][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.778237][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.800068][ T5828] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.831239][ T42] audit: type=1400 audit(1785683293.247:914): avc: denied { unmount } for pid=10747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 194.864984][T11345] CIFS: VFS: UNC: missing share name [ 194.870602][T11345] CIFS: VFS: Malformed UNC in devname [ 195.046163][T11361] netlink: 'syz.6.1542': attribute type 1 has an invalid length. [ 195.092833][T11355] bridge_slave_1: left allmulticast mode [ 195.094767][T11355] bridge_slave_1: left promiscuous mode [ 195.096735][T11355] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.101269][T11355] bridge_slave_0: left allmulticast mode [ 195.103108][T11355] bridge_slave_0: left promiscuous mode [ 195.104976][T11355] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.141631][T11361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.166358][T11368] bond2: (slave geneve2): making interface the new active one [ 195.170139][T11368] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 195.201478][T11372] tipc: Enabling of bearer rejected, already enabled [ 195.327466][ T42] audit: type=1400 audit(1785683293.737:915): avc: denied { setattr } for pid=11383 comm="syz.6.1548" name="/" dev="9p" ino=82837657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.361362][ T42] audit: type=1400 audit(1785683293.777:916): avc: denied { ioctl } for pid=11386 comm="syz.3.1549" path="socket:[44046]" dev="sockfs" ino=44046 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 195.504384][T11399] kAFS: Can only specify source 'none' with -o dyn [ 195.547609][T11401] SELinux: security policydb version 18 (MLS) not backwards compatible [ 195.550756][T11401] SELinux: failed to load policy [ 195.556485][ T42] audit: type=1400 audit(1785683293.967:917): avc: denied { read write } for pid=11402 comm="syz.6.1550" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 195.565359][ T42] audit: type=1400 audit(1785683293.967:918): avc: denied { open } for pid=11402 comm="syz.6.1550" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 195.575771][ T42] audit: type=1400 audit(1785683293.977:919): avc: denied { ioctl } for pid=11402 comm="syz.6.1550" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 195.621641][T11411] netlink: 'syz.7.1555': attribute type 1 has an invalid length. [ 195.625883][ T5757] Bluetooth: hci0: command tx timeout [ 195.686755][T11415] fuse: Bad value for 'fd' [ 195.718450][ T42] audit: type=1400 audit(1785683294.127:920): avc: denied { read } for pid=11417 comm="syz.6.1558" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 195.731072][ T42] audit: type=1400 audit(1785683294.137:921): avc: denied { ioctl } for pid=11417 comm="syz.6.1558" path="/33/trace/events/dwc3/dwc3_ctrl_req/inject" dev="tracefs" ino=19680823 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 195.761773][T11421] syzkaller0: entered promiscuous mode [ 195.763557][T11421] syzkaller0: entered allmulticast mode [ 195.919282][T11434] tipc: Started in network mode [ 195.921460][T11434] tipc: Node identity ac14142f, cluster identity 4711 [ 195.924565][T11434] tipc: New replicast peer: 127.0.0.1 [ 195.927071][T11434] tipc: Enabled bearer , priority 10 [ 195.931708][T11434] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0008 [ 196.017288][T11441] fuse: Bad value for 'fd' [ 196.092183][T11446] __nla_validate_parse: 7 callbacks suppressed [ 196.092196][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1567'. [ 196.405463][T11460] trusted_key: encrypted_key: insufficient parameters specified [ 196.444291][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [ 196.639340][T11475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.955598][T11494] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 197.718851][ T5757] Bluetooth: hci0: command tx timeout [ 198.626779][ T5897] tipc: Node number set to 2886997039 [ 198.815919][T11515] fuse: Unknown parameter 'default_É_‰Ù0›XŸ¥‘_9' [ 199.049427][T11544] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 199.052382][T11544] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1594'. [ 199.129557][T11547] IPVS: Scheduler module ip_vs_sip not found [ 199.194726][T11555] netlink: 'syz.7.1599': attribute type 1 has an invalid length. [ 199.225308][T11557] tmpfs: Unknown parameter 'hà*g¤ÿ³û}„™¥' [ 199.339577][ T41] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 199.488725][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 199.491943][ T41] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 199.494760][ T41] usb 9-1: config 179 has no interface number 0 [ 199.496836][ T41] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 199.500190][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 199.500203][ T42] audit: type=1400 audit(1785683297.907:934): avc: denied { write } for pid=11583 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.501170][ T41] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 199.513511][ T41] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.517855][ T41] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 199.521899][ T41] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 199.526448][ T41] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 199.529596][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.534120][T11551] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 199.637796][T11591] netlink: 'syz.3.1610': attribute type 1 has an invalid length. [ 199.648838][ T5843] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 199.653069][T11591] 8021q: adding VLAN 0 to HW filter on device bond21 [ 199.779431][ T5757] Bluetooth: hci0: command tx timeout [ 199.786449][ T41] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input11 [ 199.807634][ T42] audit: type=1400 audit(1785683298.217:935): avc: denied { read } for pid=5131 comm="acpid" name="js0" dev="devtmpfs" ino=2973 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.818237][ T5843] usb 11-1: Using ep0 maxpacket: 8 [ 199.820373][ T42] audit: type=1400 audit(1785683298.227:936): avc: denied { open } for pid=5131 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2973 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.831148][ T42] audit: type=1400 audit(1785683298.227:937): avc: denied { ioctl } for pid=5131 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2973 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.842406][ T5843] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 199.846276][ T5843] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.855552][ T5843] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.860253][ T5843] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.864550][ T5843] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.870536][ T5843] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 199.874353][ T5843] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.082890][ T5843] usb 11-1: usb_control_msg returned -32 [ 200.084967][ T5843] usbtmc 11-1:16.0: can't read capabilities [ 200.170940][ T42] audit: type=1400 audit(1785683298.587:938): avc: denied { write } for pid=11613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.279764][ T42] audit: type=1400 audit(1785683298.687:939): avc: denied { write } for pid=11630 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.295929][T11634] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20003 [ 200.304075][ T42] audit: type=1400 audit(1785683298.717:940): avc: denied { create } for pid=11633 comm="syz.7.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.394669][ T42] audit: type=1400 audit(1785683298.807:941): avc: denied { write } for pid=11645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.416886][ T5863] usb 9-1: USB disconnect, device number 4 [ 200.417016][ C2] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 200.422545][ C2] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 200.434768][ T42] audit: type=1400 audit(1785683298.847:942): avc: denied { write } for pid=11650 comm="rm" name="hook-state" dev="tmpfs" ino=1046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.440350][T11651] usbtmc 11-1:16.0: INDICATOR_PULSE returned 0 [ 200.486099][T11651] kvm: MWAIT instruction emulated as NOP! [ 200.493931][T11656] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1625'. [ 200.642598][ T34] usb 11-1: USB disconnect, device number 4 [ 200.735671][T11662] netlink: 'syz.4.1627': attribute type 13 has an invalid length. [ 200.743167][T11662] gretap0: refused to change device tx_queue_len [ 200.745304][T11662] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 200.781130][T11662] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.124376][T11675] 8021q: VLANs not supported on ip6tnl0 [ 201.422270][ T42] audit: type=1400 audit(1785683299.837:943): avc: denied { read } for pid=11684 comm="syz.3.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.457770][T11693] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 201.461398][T11693] CIFS mount error: No usable UNC path provided in device string! [ 201.461398][T11693] [ 201.465428][T11693] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 201.735605][T11717] BUG: unable to handle page fault for address: fffffffffffffc10 [ 201.738179][T11717] #PF: supervisor read access in kernel mode [ 201.740152][T11717] #PF: error_code(0x0000) - not-present page [ 201.743984][T11717] PGD e997067 P4D e997067 PUD e999067 PMD 0 [ 201.745870][T11717] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 201.747676][T11717] CPU: 0 UID: 0 PID: 11717 Comm: syz.3.1644 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.751109][T11717] Tainted: [L]=SOFTLOCKUP [ 201.752503][T11717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.756096][T11717] RIP: 0010:strnlen+0x4b/0x80 [ 201.757643][T11717] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 201.764096][T11717] RSP: 0018:ffffc900058371c0 EFLAGS: 00010246 [ 201.766014][T11717] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 201.768557][T11717] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 201.771182][T11717] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 201.773702][T11717] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 201.776251][T11717] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 201.778829][T11717] FS: 00007fcee74c96c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 201.781708][T11717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.783830][T11717] CR2: fffffffffffffc10 CR3: 0000000040aca000 CR4: 0000000000352ef0 [ 201.786390][T11717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 201.789064][T11717] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 201.791735][T11717] Call Trace: [ 201.792836][T11717] [ 201.793811][T11717] ? look_up_lock_class+0x64/0x120 [ 201.795497][T11717] trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0 [ 201.797686][T11717] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 201.800024][T11717] ? __pfx___might_resched+0x10/0x10 [ 201.801886][T11717] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 201.803698][T11717] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 201.805706][T11717] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 201.807626][T11717] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 201.809698][T11717] ? __pfx_down_write+0x10/0x10 [ 201.811289][T11717] tcf_block_get_ext+0x7ed/0x1950 [ 201.812943][T11717] ingress_init+0x259/0x780 [ 201.814409][T11717] ? __pfx_ingress_init+0x10/0x10 [ 201.816193][T11717] qdisc_create+0x47b/0x1060 [ 201.817716][T11717] tc_modify_qdisc+0x1350/0x2120 [ 201.819224][T11717] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 201.820831][T11717] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 201.822487][T11717] rtnetlink_rcv_msg+0x3c9/0xe90 [ 201.824065][T11717] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.825775][T11717] ? ref_tracker_free+0x37e/0x6c0 [ 201.827407][T11717] netlink_rcv_skb+0x159/0x420 [ 201.828834][T11717] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.830691][T11717] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.832333][T11717] ? netlink_deliver_tap+0x1ae/0xcc0 [ 201.833947][T11717] netlink_unicast+0x585/0x850 [ 201.835782][T11717] ? __pfx_netlink_unicast+0x10/0x10 [ 201.837920][T11717] netlink_sendmsg+0x8b0/0xda0 [ 201.839722][T11717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.841785][T11717] ? selinux_socket_sendmsg+0x198/0x2f0 [ 201.843725][T11717] ____sys_sendmsg+0xa4d/0xbe0 [ 201.845617][T11717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.847399][T11717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.849054][T11717] ___sys_sendmsg+0x190/0x1e0 [ 201.850522][T11717] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.852120][T11717] ? __lock_acquire+0x49f/0x1a40 [ 201.853693][T11717] __sys_sendmsg+0x160/0x210 [ 201.855155][T11717] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.856778][T11717] do_syscall_64+0x115/0x870 [ 201.858230][T11717] ? clear_bhb_loop+0x40/0x90 [ 201.859735][T11717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.861582][T11717] RIP: 0033:0x7fcee659e019 [ 201.863204][T11717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.869596][T11717] RSP: 002b:00007fcee74c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.872308][T11717] RAX: ffffffffffffffda RBX: 00007fcee6825fa0 RCX: 00007fcee659e019 [ 201.874800][T11717] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 201.877182][T11717] RBP: 00007fcee663500c R08: 0000000000000000 R09: 0000000000000000 [ 201.879654][T11717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.882180][T11717] R13: 00007fcee6826038 R14: 00007fcee6825fa0 R15: 00007ffcb58eabd8 [ 201.884676][T11717] [ 201.885733][T11717] Modules linked in: [ 201.887069][T11717] CR2: fffffffffffffc10 [ 201.888344][T11717] ---[ end trace 0000000000000000 ]--- [ 201.889979][T11717] RIP: 0010:strnlen+0x4b/0x80 [ 201.891428][T11717] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 201.897352][T11717] RSP: 0018:ffffc900058371c0 EFLAGS: 00010246 [ 201.899257][T11717] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 201.901856][T11717] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 201.904885][T11717] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 201.907325][T11717] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 201.909718][T11717] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 201.912094][T11717] FS: 00007fcee74c96c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 201.914890][T11717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.916918][T11717] CR2: fffffffffffffc10 CR3: 0000000040aca000 CR4: 0000000000352ef0 [ 201.919359][T11717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 201.921769][T11717] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 201.924397][T11717] Kernel panic - not syncing: Fatal exception [ 201.927087][T11717] Kernel Offset: disabled [ 201.928423][T11717] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:08:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a39335 RDI=ffffffff9ba0bb40 RBP=ffffffff9ba0bb00 RSP=ffffc90005836a20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9b6fe1eb R15=ffffffff85a392d0 RIP=ffffffff85a3935f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fcee74c96c0 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffc10 CR3=0000000040aca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000001800 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb58eb0c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb58eb0c6 00007ffcb58eb0cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcee66355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcee663562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcee6635793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcee6635621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcee67f25f8 00007fcee67f25c8 00007fcee67f2600 00007fcee67f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000bfbbc RBX=ffff88801ee92540 RCX=ffffffff8bbbd2d5 RDX=0000000000000001 RSI=ffffffff8c402600 RDI=ffffffff81df2bd7 RBP=ffffed1003dd24a8 RSP=ffffc90000177e00 R8 =0000000000000000 R9 =ffffed100d4a678d R10=ffff88806a533c6b R11=ffffffff81d6005c R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8bbbb89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d83d2 CR3=000000002a91c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f5c3f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f5c3f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557e382028 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffef08 0580030210000100 00000806040106ca 1004000008000780 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c69662f2e01ff ffffffffffffffef 0801b0030bf60800 01a0030100000008 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002080606011ea4 0801980205018004 1881c4cdec080001 080006010fb00030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102800402acf608 0001000002080606 011ea40801980205 0180041881c4cdec ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080001080006010f b00030656c69662f 2e01ffffffffffff ffffef0801b0030b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f6080001a0030100 0000080601980330 0800019003020800 0188030208000180 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0304808010000d80 0401000000080606 016c920008000de0 030010000dd00300 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81fdc7c2 RDX=ffff8880221b2540 RSI=ffffffff81fdc79c RDI=ffff8880221b2540 RBP=ffff88806a443500 RSP=ffffc900007ef208 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffea000086f900 R12=0000000000000003 R13=ffffed100d4886a1 R14=0000000000000001 R15=ffff88806a63c880 RIP=ffffffff81fdc79e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb9b59eb660 CR3=0000000054b12000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feca895d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feca7df2600 00007feca7df25e0 00007feca7df25e8 00007feca7df2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feca7df25f8 00007feca7df25c8 00007feca7df2600 00007feca7df25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0061616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00d8100011e57ed0 RBX=0000000000000000 RCX=0000000000000480 RDX=00d8100000000000 RSI=0000000000018000 RDI=0000000000000480 RBP=0000000000000003 RSP=ffffc9000552f950 R8 =0000000000419000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bbb63a0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007fb9b65bd6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d60d8000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000045778000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02e315d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcce07caf6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcce07caf6 00007ffcce07cafc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02e24355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02e243562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02e2435793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02e2435621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000