last executing test programs: 6.539485659s ago: executing program 1 (id=509): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e12087b2a1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, &(0x7f0000000080)) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f00000009c0)=[{{&(0x7f0000000040)={0x2, 0x5e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000000)={r9, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000000c0)={r9, 0x63, "56d9e810fadd7569d3a546c4fa8e25d77256b4f1515f4b43ce70703f6183c50b048eec0cf8ade299cae78a02782c5a944187bc2d543ccbcccaff97cc515fb6555193c292693df4c441fd9b851c8ac78d34e566e3497e4b0267e4a63000f5fb3088eb7e"}, &(0x7f0000000140)=0x6b) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r0], 0x68}}, 0x0) r10 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r10, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 6.254854937s ago: executing program 1 (id=513): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0xd5b) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 6.253730517s ago: executing program 1 (id=514): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x3, 0x0, 0x8, 0x1, 0x1, 0xffffffffffffffff, 0x8, 0x2}}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(0xffffffffffffffff, 0x900) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) r4 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r4}, &(0x7f0000000600)=""/100, 0x64, &(0x7f0000000180)={&(0x7f0000000400)={'xxhash64-generic\x00'}, &(0x7f00000005c0)="0900a9351a47", 0x6}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000240)={0x3ff, 0x4, 0x10001, 0x10, 0xf, "8380754c42de7dedef1ad466badb19ebe3a9ec", 0x3, 0x3}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000003180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x3, 0x1}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x10, 0x2}}, @l2cap_disconn_req={{0x6, 0xf, 0x4}, {0x3ff, 0x2}}]}}, 0x25) io_setup(0x222, &(0x7f0000000180)=0x0) r8 = eventfd2(0x1, 0x80800) io_submit(r7, 0x11, &(0x7f00000005c0)=[&(0x7f0000000540)={0x0, 0x0, 0x22, 0x1, 0xffff, r6, &(0x7f0000000a00)="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", 0x200, 0x200, 0x0, 0x1, r8}]) read$watch_queue(r3, &(0x7f0000002d40)=""/4104, 0x1008) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000100)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0004010a0000000d0085a168216b46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004d1ddf66ed538f252325000"/120, 0x78, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnetconf={0x24, 0x52, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040081}, 0x4014) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r12, 0x1, 0x5, 0x0, &(0x7f00000008c0)) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000), 0x65) 5.696047708s ago: executing program 1 (id=522): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 5.609794642s ago: executing program 1 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000010c00"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32=r0], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$netlink(0x10, 0x3, 0xf) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) (async) recvmmsg$unix(r5, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1}}], 0x1, 0x12100, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=@gettaction={0x78, 0x32, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x319}]}, 0x78}}, 0x10) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000106, 0x0, 0x5924}]}) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x40, r10, 0x20, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="787d00006a00010027bd7000fddbdb250a000000000000000800010001400000d61546140a00510c745e737ce57b1b8099376b63082c4b7b85d2281f4c"], 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 5.168342547s ago: executing program 3 (id=526): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='pstore\x00', 0x20000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1000420, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001"], 0x38}}, 0x0) 5.079668405s ago: executing program 3 (id=527): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x49, &(0x7f0000000080)=0x474c, 0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x13d) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000800)={0x2f, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x8, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x6, 0x5, 0x0, 0x3c, 0x4, 0x5, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0x81, 0x2, 0x80, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x88, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x6, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0x1, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0x9, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001380)="7bde898718a6c6c9237cb3183110240767593c40c38b46f5aaeb010661a7f3a802772dbeacbb719d97936097c7800c3d28a0234a87eba4fc532c7a3e1d96bc18a74bc61cf414ee3274f2ad278b47c77c0e45053d47029eb9ef0b3ac4a709f6dd73fdf65e6cc009bb98827b4d1716e42b0498dad14ebb339fe30c9128e7661135a70a36cc3a0198de1ee50ac13750797f4ea33fabeecb09d217918384bb28ef8d0367ab68e1ed5e3d832450b228c8c1feb0f8ec2d26694be70a3d212c9a304aa07e798a47ba95b016f13bfb0c94e2f325c1a8fc53ec4e06f0c27f07ed17b85387eb107c2ae94bc026472c78b61bc85fbb101d4c3a6ee4", 0xf6}, {&(0x7f00000000c0)="92309e6d23dd22b738dccfb217c3fe033ba644e321e9f54a1e7ec77550f2e0272b4806d914c9f23c3732ebae91b667771f0d5abb4436b0d81cb607cc7cfa30391ec6bbfdf6b477eeae64afd922c6b7aab5", 0x51}], 0x2}}], 0x1, 0x20048814) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205189a7b3065d1f8dc71c7fde52d2224d279fed544230b9afac3c47f88ccb50bf4c38fbef1b1cfd28fe8b44d43701eb31e642a59f838bd51"], 0x0}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x20008040}, 0x0) 4.679183642s ago: executing program 2 (id=529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf02000000000000400000000000000003030000000000000000000008003a00011d040004000d0003000000008000000000000000000000070000000000000008000000000000000500000000000000020400"], 0x78) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x4, 0x8, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x1, 0x8, 0xfffffff7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0x4, 0x42, @empty, @dev={0xfe, 0x80, '\x00', 0x19}, 0x700, 0x8000, 0x0, 0xed}}) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x1, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'veth1_vlan\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x1000003b, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x92, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x7806, 0x8000, 0x5, 0x8f7, {{0x25, 0x4, 0x0, 0x35, 0x94, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0x2f, [@multicast1, @local, @multicast2, @multicast2, @multicast1, @broadcast, @loopback]}, @lsrr={0x83, 0x7, 0x9c, [@broadcast]}, @end, @noop, @timestamp={0x44, 0x18, 0xa0, 0x0, 0x5, [0x80000001, 0x200, 0x6, 0xf5, 0xd]}, @rr={0x7, 0xb, 0x8d, [@local, @dev={0xac, 0x14, 0x14, 0x24}]}, @cipso={0x86, 0x22, 0x3, [{0x1, 0x5, "ddf318"}, {0x1, 0xb, "2afb7f1429a4dca318"}, {0x0, 0x7, "5d54689e99"}, {0x5, 0x5, "bd4b97"}]}, @generic={0x7, 0x10, "4353f3a02f60acee7b2c84fde209"}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000bc0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x4, 0x1, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7, 0x7, 0x10000, 0x5}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="ebb841fb", @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf251300000004000180880001801400020076657468305f746f5f6272696467650008000100", @ANYRES32=r6, @ANYBLOB="140002006970766c616e31000000000000000000140002007369743000000000000000000000000008000100", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="140002007866726d30000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="140002006272696467655f736c6176655f3100002c000180140002006d6163767461703000000000000000001400020076657468315f746f5f62726964676500180001801400020076657468315f746f5f627269646765006400018008000300000000001400020064766d7270300000000000000000000008000300010000001400020067726574617030000000000000000000080003000300000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="080003000200000008000300020000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e300000000000000000080003000000000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="140002006e65747063693000000000000000000008000100", @ANYRES32=r15, @ANYBLOB], 0x1a4}}, 0x20008090) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r16, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r18}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 3.967797286s ago: executing program 1 (id=530): mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000200)='./file1\x00', &(0x7f0000000180), 0x4, &(0x7f0000000240)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x5}}]}}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@index_on}]}) 3.848416471s ago: executing program 32 (id=530): mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000200)='./file1\x00', &(0x7f0000000180), 0x4, &(0x7f0000000240)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x5}}]}}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@index_on}]}) 3.232983711s ago: executing program 0 (id=532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='cgroup.events\x00', 0x300, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000400000000000000000d000008000300"/26, @ANYRES32=r2, @ANYBLOB="0500300000000000050030000100000008003c000100008008003400ff01000008000600", @ANYRES32=r3, @ANYBLOB="08002b00070000000600280003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4854}, 0x4d0d0) 3.105455964s ago: executing program 2 (id=533): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = dup(r3) sendto$packet(r4, &(0x7f00000003c0)='(', 0xfffffffffffffed1, 0x24004090, 0x0, 0x0) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40000100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000007000010000000000fdffffff07000000", @ANYRES32=r6, @ANYBLOB="1000e6a601800c0004800800061c2f3bd49014015a3e190000000300c3d4de1c99b166b90028f6e60dac504e3bf57947eead6c5e35f01eefa5d2c09ad1fd91e8c7b73c9a6d54a3e7c0fa773ebee5bdcba57aab80dd081643cb288c78b253f319dcd1a368c98373a3682f64c1174f9850458c68efd3a472ab9341239f7f40aafa40dbf7275f7aecc5cf0761f242c3ca0981a3a36ed20f3f3863c3226d73e92a897cfdc4dc"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.88749328s ago: executing program 0 (id=534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000068000100030100000004342c00"/28], 0x1c}}, 0x400c0) r1 = socket$kcm(0x10, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x353, @time={0x95}}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000001c0)}, 0x20) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020, 0x0, 0x0}, 0x2020) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000700150005000000"], 0x14}}, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181010100000001010000000000000e000a000f00000002800600121f", 0x2e}], 0x1}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93337568b26948fc700870ec38edc9761fdc", 0xd8}], 0x1}, 0x0) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x121480, 0x0) write$FUSE_INIT(r10, &(0x7f00000002c0)={0x50, 0x0, r4, {0x7, 0x2b, 0x1, 0x220, 0x1, 0x800, 0x1, 0xffffffac, 0x0, 0x0, 0x4, 0x4}}, 0x50) 2.779681249s ago: executing program 2 (id=535): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000180)) (async, rerun: 32) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffc}, 0x28) (rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) (rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async, rerun: 32) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0802, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x5, 0x0, 0x2, 0x20ce, r0, 0xe, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x9}, 0x50) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r9}, 0x1e) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r8], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x5, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) 2.049908378s ago: executing program 3 (id=536): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x4, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000001180)=""/4081, 0xff1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.786011248s ago: executing program 4 (id=531): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000002280)={0x0, 0x3, 0x4, 0x7, 0x8ec, 0x36}, &(0x7f00000022c0)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000002080)={r2, 0x801, 0x10}, &(0x7f00000020c0)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002100)={r3, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000d40)={0x0, 0x32, 0x3, 0xf02a, 0x9}) (async) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000d40)={0x0, 0x32, 0x3, 0xf02a, 0x9}) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000010c0)={0x0, 0x7, 0xa32}, &(0x7f0000001100)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000010c0)={0x0, 0x7, 0xa32}, &(0x7f0000001100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001140)={r5, @in6={{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, 0x3, 0x1}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001140)={r5, @in6={{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, 0x3, 0x1}, 0x90) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x92480, 0x0) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f00000000c0)={{}, "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"}) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r7, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r8, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000021c0), 0x200100, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000021c0), 0x200100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xfffffffffffffffe]}, 0x0, 0x8) (async) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xfffffffffffffffe]}, 0x0, 0x8) getpgrp(0x0) (async) r9 = getpgrp(0x0) r10 = gettid() rt_tgsigqueueinfo(r9, r10, 0x1f, &(0x7f0000002200)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(r9, r10, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) 1.679681843s ago: executing program 4 (id=537): openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1e1b41, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1e1b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[], &(0x7f0000000280), 0x0) exit(0xffffffff) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) io_uring_setup(0x2fce, &(0x7f0000000140)={0x0, 0xa8b6, 0x0, 0x3, 0x0, 0x0, r3}) (async) r5 = io_uring_setup(0x2fce, &(0x7f0000000140)={0x0, 0xa8b6, 0x0, 0x3, 0x0, 0x0, r3}) r6 = dup3(r4, r5, 0x0) ioctl$SG_SET_RESERVED_SIZE(r6, 0x4004550c, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x4400}, {r3, 0x4004}], 0x2, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={[0x3]}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'rose0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x4, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x4, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "93af8077b5cd01e03d64a831683fdc3fd452829c82ae00"}, 0x3c) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.259775365s ago: executing program 3 (id=538): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0xc048aec8, &(0x7f00000005c0)={0x20000005}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.149145454s ago: executing program 2 (id=539): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) (async) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x110000}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) (async) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) (async) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) 1.148770121s ago: executing program 0 (id=540): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r2) write$binfmt_elf64(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x10, 0x8, 0xa6, 0x9, 0x2, 0x3, 0x7ff, 0x30e, 0x40, 0x3e0, 0x0, 0x7ff, 0x38, 0x1, 0x40, 0xff, 0x1b09}, [{0x7, 0x80000000, 0xa, 0x2, 0x7, 0x4, 0xfffffffffffffff8, 0xff}]}, 0x78) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0x40) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x100, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000180)={0x5, 0x1, 0x2}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)) read$dsp(r6, &(0x7f00000001c0)=""/95, 0x5f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 879.667138ms ago: executing program 0 (id=541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000cb0000000a30000000060a0b0400000000000000000200fffd040004800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x4048041}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xcbff9000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x1, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xb30, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa98, 0x178, 0x178, 0xa98, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1e8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100010001}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1346, 0x7fff, 0x0, '\x00', {0x7ff}}}}, {{@uncond, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x7}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x3}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x3}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0xc8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8, 0x2}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0xffffffff, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb90) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/1:0:0:0\x00', 0xe100, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000f853010000000000000000000000a5976ac6add41ed827c383027571e19d28aa8fb520d33ed0347269a86ed1fb9a1ba34ab27d9224b89286f1793918c06315c7b63cf06f43d3bcad88b28cb3dea61d1c7756cf67f6fd958f42b1c5e7526a82aa83e04ec1338555f4b14f110ea3"], 0x48}}, 0x4000) sendmsg$can_bcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="010000006b010000010000000000000029104418750d8a904efe696a3ac844985a380acce76e234e84d4173162382be02f95456c00fb91a23ab9a2e6ee97f762dd70df421d84c3e1e5c87d37bff500ab03df3fb6150c386e0a80e7b612c8000000000000000000000000e13b7b8c579e9ee4deceb209578b2b433b6269183a6db1b62e0c02e21695e971551a668c4524fdc71cd520a4c6d8ac7ed7e607e8782c2220224034e42499e7ad33ab2c7283e500", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES16=r6, @ANYBLOB="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"], 0x48}}, 0x20000000) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r10, 0xc00464c9, &(0x7f00000001c0)={r11}) 799.755327ms ago: executing program 2 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}], 0x38) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}], 0x38) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 682.935848ms ago: executing program 2 (id=543): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='Iuxx', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, r0, 0x0) r1 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_clone(0x80800, &(0x7f0000000340)="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", 0x1000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)="047375af8e070876896079a29d3c2c767fd2e530673cee1cffb4a828945c30e2c195526db5fcf6bd7a24b51d545cc1f0019dda85387ef02c2fcff747379bca4967fa6d1e25fd5bb25ecbd91008743dfd86aab5ee3cd9db1fc161d15a5f70d9c335f978b84c1309ab63b0e2720c84b0430a28e38a3522085a7f3c30fad13bb97c2d73531492084653d3038e2afe91600b3e1459de02e604e41a7224acaa5ff7d7566a9efd7a018324f2185901ed45872f2e9171b7") ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_clone3(&(0x7f00000013c0)={0x1000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1f}, &(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f0000001340)=[r3], 0x1, {r4}}, 0x58) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6}) lseek(r8, 0xfffffffffffffffb, 0x3) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)) 681.98663ms ago: executing program 0 (id=544): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000008c0)={0xc, {0x2, 0x0, 0x5150, 0x3a}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r3, 0x40, 0x80, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0x2, 0x9, 0x37, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7, 0xffffffff, 0xd}}) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@dellinkprop={0x78, 0x6d, 0x2af4608baa6c4106, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x8, 0x4200}, [@IFLA_IFALIASn={0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffff6d5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_WEIGHT={0x8, 0xf, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x24}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000005"], 0x48) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000340)) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r7, 0x4}, 0x38) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000040)=""/34) 589.777671ms ago: executing program 0 (id=545): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xfb) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="420000000300000000000000000000000000000000000000217f"], 0x42) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r0}, 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2001005) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x80) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x400000f1, 0x0, 0xb}]}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xc) 295.87161ms ago: executing program 4 (id=546): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000140)=""/238, 0xee}], 0x1, 0xffffffff, 0x20000003) io_uring_enter(r0, 0x7f5f, 0x10008313, 0x0, 0x0, 0x0) shutdown(r3, 0x1) 294.039946ms ago: executing program 3 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) 168.306718ms ago: executing program 4 (id=548): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200100, 0x80) (rerun: 32) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080), 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) (async) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 97.635565ms ago: executing program 3 (id=549): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x14}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) close(0x3) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x101, @remote, 0x7}]}, &(0x7f0000000280)=0x10) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x2710, 0x2, 0xc000, 0x2000, &(0x7f0000ef3000/0x2000)=nil}) (async) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000000)={0x4, 0x10000}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000dbc000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x1f, 0x0, 0x0) (async) mremap(&(0x7f0000e53000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000f26000/0x3000)=nil) 97.382599ms ago: executing program 4 (id=550): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e31"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000040) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 0s ago: executing program 4 (id=551): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) kernel console output (not intermixed with test programs): [ 53.148335][ T40] audit: type=1400 audit(1767349619.955:61): avc: denied { siginh } for pid=5908 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:16599' (ED25519) to the list of known hosts. [ 55.370828][ T40] audit: type=1400 audit(1767349622.205:62): avc: denied { name_bind } for pid=5916 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.406895][ T40] audit: type=1400 audit(1767349622.245:63): avc: denied { execute } for pid=5917 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.414660][ T40] audit: type=1400 audit(1767349622.245:64): avc: denied { execute_no_trans } for pid=5917 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.486787][ T40] audit: type=1400 audit(1767349624.325:65): avc: denied { mounton } for pid=5917 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.496526][ T40] audit: type=1400 audit(1767349624.335:66): avc: denied { mount } for pid=5917 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.499082][ T5917] cgroup: Unknown subsys name 'net' [ 57.659220][ T5917] cgroup: Unknown subsys name 'cpuset' [ 57.663991][ T5917] cgroup: Unknown subsys name 'rlimit' [ 57.875351][ T5921] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.548047][ T5917] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.992221][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.992241][ T40] audit: type=1400 audit(1767349628.825:82): avc: denied { execmem } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.214030][ T40] audit: type=1400 audit(1767349629.045:83): avc: denied { create } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.220610][ T40] audit: type=1400 audit(1767349629.045:84): avc: denied { read write } for pid=5930 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.228418][ T40] audit: type=1400 audit(1767349629.045:85): avc: denied { open } for pid=5930 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.242046][ T40] audit: type=1400 audit(1767349629.065:86): avc: denied { ioctl } for pid=5930 comm="syz-executor" path="socket:[7227]" dev="sockfs" ino=7227 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.242769][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.255219][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.258273][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.261150][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.262671][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.263952][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.270363][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.273560][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.274991][ T40] audit: type=1400 audit(1767349629.115:87): avc: denied { read } for pid=5930 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.284631][ T5290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.284833][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.288927][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.293599][ T5937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.293610][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.295009][ T40] audit: type=1400 audit(1767349629.115:88): avc: denied { open } for pid=5930 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.296577][ T5290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.297344][ T5290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.297371][ T5937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.299741][ T40] audit: type=1400 audit(1767349629.125:89): avc: denied { mounton } for pid=5930 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.310678][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.320990][ T5290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.328531][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.328850][ T5290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.454096][ T40] audit: type=1400 audit(1767349629.285:90): avc: denied { module_request } for pid=5930 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.493564][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 62.600559][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.604694][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.608219][ T5930] bridge_slave_0: entered allmulticast mode [ 62.612103][ T5930] bridge_slave_0: entered promiscuous mode [ 62.629383][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.632509][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.636952][ T5930] bridge_slave_1: entered allmulticast mode [ 62.640841][ T5930] bridge_slave_1: entered promiscuous mode [ 62.671470][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.680399][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.763629][ T5930] team0: Port device team_slave_0 added [ 62.780235][ T5930] team0: Port device team_slave_1 added [ 62.798728][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.800955][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.809591][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.813755][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 62.819407][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.822599][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.831934][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.873375][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 62.886983][ T5930] hsr_slave_0: entered promiscuous mode [ 62.889792][ T5930] hsr_slave_1: entered promiscuous mode [ 62.892766][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 63.027134][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.029522][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.031994][ T5934] bridge_slave_0: entered allmulticast mode [ 63.036369][ T5934] bridge_slave_0: entered promiscuous mode [ 63.067523][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.069837][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.072306][ T5934] bridge_slave_1: entered allmulticast mode [ 63.075142][ T5934] bridge_slave_1: entered promiscuous mode [ 63.088735][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.091868][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.094830][ T5938] bridge_slave_0: entered allmulticast mode [ 63.098268][ T5938] bridge_slave_0: entered promiscuous mode [ 63.113543][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.116794][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.119485][ T5939] bridge_slave_0: entered allmulticast mode [ 63.122581][ T5939] bridge_slave_0: entered promiscuous mode [ 63.127134][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.130392][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.133332][ T5938] bridge_slave_1: entered allmulticast mode [ 63.136747][ T5938] bridge_slave_1: entered promiscuous mode [ 63.156701][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.158902][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.161131][ T5939] bridge_slave_1: entered allmulticast mode [ 63.164124][ T5939] bridge_slave_1: entered promiscuous mode [ 63.183816][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.205648][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.211069][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.220925][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.226236][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.254175][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.281480][ T5934] team0: Port device team_slave_0 added [ 63.292632][ T5934] team0: Port device team_slave_1 added [ 63.328224][ T5938] team0: Port device team_slave_0 added [ 63.333087][ T5939] team0: Port device team_slave_0 added [ 63.338566][ T5939] team0: Port device team_slave_1 added [ 63.352838][ T5938] team0: Port device team_slave_1 added [ 63.375149][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.378494][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.389094][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.422160][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.424955][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.437871][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.458255][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.460571][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.469117][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.473592][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.476721][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.487194][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.492781][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.495083][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.504513][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.508696][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.511255][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.520604][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.587974][ T5930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.614702][ T5934] hsr_slave_0: entered promiscuous mode [ 63.617282][ T5934] hsr_slave_1: entered promiscuous mode [ 63.619756][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 63.621650][ T5934] Cannot create hsr debugfs directory [ 63.623560][ T5930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.633414][ T5938] hsr_slave_0: entered promiscuous mode [ 63.636668][ T5938] hsr_slave_1: entered promiscuous mode [ 63.639610][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 63.642021][ T5938] Cannot create hsr debugfs directory [ 63.648025][ T5939] hsr_slave_0: entered promiscuous mode [ 63.650653][ T5939] hsr_slave_1: entered promiscuous mode [ 63.652814][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 63.654767][ T5939] Cannot create hsr debugfs directory [ 63.657885][ T5930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.663763][ T5930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.957998][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.966765][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.972629][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.979075][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.041279][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.061363][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.070304][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.079965][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.096958][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.124911][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.160046][ T5938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.168637][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.171396][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.179581][ T5938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.190046][ T5938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.196052][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.198834][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.204045][ T5938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.281197][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.296084][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.309173][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.309669][ T40] audit: type=1400 audit(1767349631.145:91): avc: denied { sys_module } for pid=5930 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.318671][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.326340][ T64] Bluetooth: hci0: command tx timeout [ 64.328896][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.331157][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.339479][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.341781][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.350842][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.353718][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.361694][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.364137][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.378672][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.395990][ T64] Bluetooth: hci2: command tx timeout [ 64.400413][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.406352][ T5290] Bluetooth: hci1: command tx timeout [ 64.409070][ T64] Bluetooth: hci3: command tx timeout [ 64.420377][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.423427][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.439297][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.442160][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.462989][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.551996][ T5930] veth0_vlan: entered promiscuous mode [ 64.570156][ T5930] veth1_vlan: entered promiscuous mode [ 64.581240][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.610226][ T5930] veth0_macvtap: entered promiscuous mode [ 64.620979][ T5930] veth1_macvtap: entered promiscuous mode [ 64.643056][ T5934] veth0_vlan: entered promiscuous mode [ 64.658173][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.662127][ T5934] veth1_vlan: entered promiscuous mode [ 64.670407][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.676167][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.682555][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.700037][ T3831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.707400][ T3831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.717092][ T3831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.720406][ T3831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.757249][ T5934] veth0_macvtap: entered promiscuous mode [ 64.768499][ T5934] veth1_macvtap: entered promiscuous mode [ 64.801348][ T5938] veth0_vlan: entered promiscuous mode [ 64.805249][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.810734][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.820230][ T5939] veth0_vlan: entered promiscuous mode [ 64.824111][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.827645][ T5938] veth1_vlan: entered promiscuous mode [ 64.846698][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.849964][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.852954][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.871629][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.877007][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.883129][ T5939] veth1_vlan: entered promiscuous mode [ 64.886734][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.889660][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.910546][ T5938] veth0_macvtap: entered promiscuous mode [ 64.926976][ T5930] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.933049][ T5938] veth1_macvtap: entered promiscuous mode [ 64.938402][ T5939] veth0_macvtap: entered promiscuous mode [ 64.949805][ T5939] veth1_macvtap: entered promiscuous mode [ 64.967849][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.989045][ T3831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.992304][ T3831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.993112][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.000247][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.012394][ T88] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.018256][ T88] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.024086][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.033896][ T88] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.037118][ T88] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.069085][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.072244][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.078397][ T3831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.081207][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.082206][ T3831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.084621][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.190288][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.199872][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.204807][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.207657][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.228651][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.231196][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.233827][ T6018] PKCS8: Unsupported PKCS#8 version [ 65.242399][ T6024] geneve2: entered promiscuous mode [ 65.244620][ T6024] geneve2: entered allmulticast mode [ 65.265535][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.268138][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.338895][ T6029] dlm: no locking on control device [ 65.343606][ T6027] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1885136569 (60324370208 ns) > initial count (9117579936 ns). Using initial count to start timer. [ 65.357342][ T6027] tmpfs: Bad value for 'mpol' [ 65.529105][ T6042] input: syz1 as /devices/virtual/input/input5 [ 65.566359][ T6047] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 65.570907][ T6047] bond1 (unregistering): Released all slaves [ 65.606080][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.735697][ T24] usb 7-1: device descriptor read/64, error -71 [ 65.840452][ T6068] netlink: 328 bytes leftover after parsing attributes in process `syz.1.16'. [ 65.985729][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.064760][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 66.125644][ T24] usb 7-1: device descriptor read/64, error -71 [ 66.130298][ T6090] overlay: Unknown parameter 'measure' [ 66.151801][ T6092] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.154001][ T6093] tmpfs: Bad value for 'mpol' [ 66.167830][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 66.245693][ T24] usb usb7-port1: attempt power cycle [ 66.256290][ T6084] Zero length message leads to an empty skb [ 66.398833][ T64] Bluetooth: hci0: command tx timeout [ 66.464165][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 66.485653][ T64] Bluetooth: hci3: command tx timeout [ 66.485791][ T5290] Bluetooth: hci1: command tx timeout [ 66.488059][ T5932] Bluetooth: hci2: command tx timeout [ 66.583539][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 66.589128][ T6126] hsr_slave_0: left promiscuous mode [ 66.592314][ T6126] hsr_slave_1: left promiscuous mode [ 66.605621][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.628275][ T24] usb 7-1: device descriptor read/8, error -71 [ 66.665804][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 66.672027][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 66.865688][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 66.886933][ T24] usb 7-1: device descriptor read/8, error -71 [ 66.996090][ T24] usb usb7-port1: unable to enumerate USB device [ 67.205057][ T6132] faux_driver vkms: [drm] Unknown color mode 49641; guessing buffer size. [ 67.257178][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 67.257195][ T40] audit: type=1400 audit(1767349634.095:184): avc: denied { create } for pid=6133 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.269296][ T40] audit: type=1400 audit(1767349634.095:185): avc: denied { bind } for pid=6133 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.279732][ T40] audit: type=1400 audit(1767349634.095:186): avc: denied { listen } for pid=6133 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.287758][ T40] audit: type=1400 audit(1767349634.095:187): avc: denied { map_read map_write } for pid=6133 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.295858][ T40] audit: type=1400 audit(1767349634.095:188): avc: denied { create } for pid=6133 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.302560][ T40] audit: type=1400 audit(1767349634.095:189): avc: denied { write } for pid=6133 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.309280][ T40] audit: type=1400 audit(1767349634.095:190): avc: denied { nlmsg_write } for pid=6133 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.519339][ T40] audit: type=1400 audit(1767349634.355:191): avc: denied { read write } for pid=6141 comm="syz.0.41" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.528856][ T40] audit: type=1400 audit(1767349634.355:192): avc: denied { open } for pid=6141 comm="syz.0.41" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.535194][ T6140] netlink: 72 bytes leftover after parsing attributes in process `syz.3.40'. [ 67.536830][ T40] audit: type=1400 audit(1767349634.365:193): avc: denied { ioctl } for pid=6141 comm="syz.0.41" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.691043][ T6150] hpfs: hpfs_map_sector(): read error [ 67.784696][ T6158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.45'. [ 67.849552][ T6162] netlink: 48 bytes leftover after parsing attributes in process `syz.3.45'. [ 67.958478][ T6165] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 67.961042][ T6165] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.964848][ T6165] vhci_hcd vhci_hcd.0: Device attached [ 67.976705][ T6166] vhci_hcd: connection closed [ 67.978694][ T3831] vhci_hcd vhci_hcd.1: stop threads [ 67.984196][ T3831] vhci_hcd vhci_hcd.1: release socket [ 67.986974][ T3831] vhci_hcd vhci_hcd.1: disconnect device [ 68.421429][ T6170] netlink: 'syz.2.48': attribute type 8 has an invalid length. [ 68.428165][ T6170] bond0: entered promiscuous mode [ 68.430106][ T6170] bond_slave_0: entered promiscuous mode [ 68.432419][ T6170] bond_slave_1: entered promiscuous mode [ 68.435193][ T6170] gretap0: entered promiscuous mode [ 68.437930][ T6170] bond0: left promiscuous mode [ 68.439459][ T6170] bond_slave_0: left promiscuous mode [ 68.441212][ T6170] bond_slave_1: left promiscuous mode [ 68.444101][ T6170] gretap0: left promiscuous mode [ 68.475740][ T5932] Bluetooth: hci0: command tx timeout [ 68.502305][ T6172] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 68.504732][ T6172] PKCS7: Only support pkcs7_signedData type [ 68.517031][ T6175] openvswitch: netlink: EtherType 50a is less than min 600 [ 68.556096][ T5932] Bluetooth: hci2: command tx timeout [ 68.556117][ T5290] Bluetooth: hci3: command tx timeout [ 68.565640][ T5290] Bluetooth: hci1: command tx timeout [ 68.618527][ T6188] nbd: must specify an index to disconnect [ 68.701078][ T6198] [U] [ 68.702128][ T6198] [U] [ 68.703022][ T6198] [U] [ 68.703957][ T6198] [U] [ 68.704992][ T6198] [U] [ 68.705989][ T6198] [U] [ 68.706915][ T6198] [U] [ 68.707880][ T6198] [U] [ 68.710603][ T6198] [U] [ 68.711542][ T6198] [U] [ 68.712419][ T6198] [U] [ 68.713478][ T6198] [U] [ 68.715429][ T6198] [U] [ 68.716452][ T6198] [U] [ 68.717490][ T6198] [U] [ 68.718560][ T6198] [U] [ 68.728611][ T6196] [U] [ 68.797959][ T6209] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.939189][ T6220] gfs2: gfs2 mount does not exist [ 68.949745][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.953397][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.958059][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.964896][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.999664][ T6224] mmap: syz.2.67 (6224) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.211935][ T6253] netlink: 'syz.3.75': attribute type 10 has an invalid length. [ 69.215858][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.219660][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.239928][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.242484][ T6253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.245844][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.248425][ T6253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.254118][ T6253] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 69.328478][ T6265] netlink: 'syz.0.78': attribute type 4 has an invalid length. [ 69.333576][ T6265] tipc: Enabling not permitted [ 69.337219][ T6265] tipc: Enabling of bearer rejected, failed to enable media [ 69.513004][ T6292] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 70.042069][ T6294] mkiss: ax0: crc mode is auto. [ 70.259407][ T6313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6313 comm=syz.3.91 [ 70.264017][ T6313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6313 comm=syz.3.91 [ 70.269114][ T6313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6313 comm=syz.3.91 [ 70.389598][ T6323] pimreg: entered allmulticast mode [ 70.396731][ T6323] pimreg: left allmulticast mode [ 70.399468][ T6321] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.555948][ T5290] Bluetooth: hci0: command tx timeout [ 70.636291][ T5290] Bluetooth: hci2: command tx timeout [ 70.636319][ T64] Bluetooth: hci3: command tx timeout [ 70.640828][ T5932] Bluetooth: hci1: command tx timeout [ 71.240225][ T6356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=6356 comm=syz.1.106 [ 71.687738][ T6375] cgroup2: Unknown parameter 'memory_loc}levents' [ 71.689922][ T6373] xt_l2tp: v2 doesn't support IP mode [ 71.697475][ T60] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.855873][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 71.859347][ T6389] __nla_validate_parse: 14 callbacks suppressed [ 71.859361][ T6389] netlink: 816 bytes leftover after parsing attributes in process `syz.3.118'. [ 71.860722][ T60] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 71.871538][ T60] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 71.878610][ T60] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 71.885037][ T60] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 71.894664][ T60] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 71.898741][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.902094][ T60] usb 5-1: Product: syz [ 71.904063][ T60] usb 5-1: Manufacturer: syz [ 71.906680][ T60] usb 5-1: SerialNumber: syz [ 71.928644][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 71.934128][ T60] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input7 [ 71.938502][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 71.978387][ T6400] binder: BC_ACQUIRE_RESULT not supported [ 71.981221][ T6399] binder: BC_ACQUIRE_RESULT not supported [ 71.983462][ T6399] binder: 6398:6399 ioctl c0306201 2000000003c0 returned -22 [ 71.985699][ T6400] binder: 6398:6400 ioctl c0306201 2000000003c0 returned -22 [ 71.989463][ T6400] binder: 6398:6400 ioctl c0189377 200000000040 returned -22 [ 71.992804][ T6401] binder: 6398:6401 ioctl c0189377 200000000040 returned -22 [ 72.135766][ T60] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 72.139013][ T60] (id 0x00) [ 72.165335][ T6416] tipc: Started in network mode [ 72.168320][ T6416] tipc: Node identity ac14140f, cluster identity 4711 [ 72.171473][ T6416] tipc: New replicast peer: 255.255.255.255 [ 72.174912][ T6416] tipc: Enabled bearer , priority 10 [ 72.196300][ T60] rc_core: IR keymap rc-imon-pad not found [ 72.199335][ T60] Registered IR keymap rc-empty [ 72.201474][ T60] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 72.209435][ T60] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 72.215162][ T60] imon:send_packet: packet tx failed (-71) [ 72.231966][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 72.245576][ T60] imon 5-1:155.0: remote input dev register failed [ 72.250952][ T60] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 72.277593][ T60] imon 5-1:155.0: unable to initialize intf0, err 0 [ 72.279758][ T60] imon:imon_probe: failed to initialize context! [ 72.282446][ T60] imon 5-1:155.0: unable to register, err -19 [ 72.283194][ T6430] syz.3.129 (6430): attempted to duplicate a private mapping with mremap. This is not supported. [ 72.287729][ T60] usb 5-1: USB disconnect, device number 2 [ 72.337314][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 72.337331][ T40] audit: type=1400 audit(1767349639.175:288): avc: denied { read } for pid=6434 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.348696][ T40] audit: type=1400 audit(1767349639.175:289): avc: denied { write } for pid=6434 comm="syz.3.130" path="socket:[12844]" dev="sockfs" ino=12844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.416035][ C3] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 72.420350][ C3] sr 2:0:0:0: [sr0] tag#13 CDB: opcode=0xde (vendor) de 89 0b b6 4d c9 [ 72.424585][ T40] audit: type=1400 audit(1767349639.255:290): avc: denied { append } for pid=6436 comm="syz.1.131" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.487713][ T6441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.133'. [ 72.511692][ T6443] FAT-fs (nullb0): bogus number of reserved sectors [ 72.514579][ T6443] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 72.515086][ T40] audit: type=1400 audit(1767349639.345:291): avc: denied { read write } for pid=6440 comm="syz.3.133" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.535749][ T40] audit: type=1400 audit(1767349639.345:292): avc: denied { open } for pid=6440 comm="syz.3.133" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.554146][ T40] audit: type=1400 audit(1767349639.355:293): avc: denied { ioctl } for pid=6440 comm="syz.3.133" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.562301][ T40] audit: type=1400 audit(1767349639.365:294): avc: denied { search } for pid=5642 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.569646][ T40] audit: type=1400 audit(1767349639.365:295): avc: denied { search } for pid=5642 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.576397][ T40] audit: type=1400 audit(1767349639.365:296): avc: denied { search } for pid=5642 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.615133][ T40] audit: type=1400 audit(1767349639.445:297): avc: denied { name_connect } for pid=6436 comm="syz.1.131" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 72.742332][ T60] IPVS: starting estimator thread 0... [ 72.755349][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 72.826024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.830128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.835564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 72.846407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.993324][ T6466] Invalid option length (1048180) for dns_resolver key [ 73.016935][ T6457] IPVS: using max 46 ests per chain, 110400 per kthread [ 73.138407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.138758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.195762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.240813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.288222][ T60] tipc: Node number set to 2886997007 [ 73.343158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.445629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.697281][ T5945] IPVS: starting estimator thread 0... [ 73.805577][ T6476] IPVS: using max 45 ests per chain, 108000 per kthread [ 73.939637][ T6490] SELinux: failed to load policy [ 74.048091][ T6502] syz.3.149: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 74.051097][ T6502] netlink: 88 bytes leftover after parsing attributes in process `syz.3.149'. [ 74.327856][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 74.332069][ T6518] netlink: 'syz.0.154': attribute type 20 has an invalid length. [ 74.343555][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.343587][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 74.347517][ T6016] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 74.353849][ T6513] can: request_module (can-proto-4) failed. [ 74.356131][ T6518] netlink: 'syz.0.154': attribute type 20 has an invalid length. [ 74.361021][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.365337][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.372030][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.379565][ T6513] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 74.387998][ T6513] loop7: detected capacity change from 0 to 7 [ 74.391994][ T6520] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.394534][ T6520] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.397355][ T6520] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.400214][ T6520] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.402629][ T6520] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.405299][ T6520] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.416062][ T6520] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.425567][ T6520] ldm_validate_partition_table(): Disk read failed. [ 74.428176][ T6520] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.446267][ T6520] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.448616][ T6518] netlink: 48 bytes leftover after parsing attributes in process `syz.0.154'. [ 74.449438][ T6520] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.462067][ T6520] Dev loop7: unable to read RDB block 0 [ 74.464717][ T6520] loop7: unable to read partition table [ 74.468579][ T6520] loop7: partition table beyond EOD, truncated [ 74.468986][ T6526] ======================================================= [ 74.468986][ T6526] WARNING: The mand mount option has been deprecated and [ 74.468986][ T6526] and is ignored by this kernel. Remove the mand [ 74.468986][ T6526] option from the mount to silence this warning. [ 74.468986][ T6526] ======================================================= [ 74.482850][ T6016] usb 8-1: device descriptor read/64, error -71 [ 74.487180][ T6513] ldm_validate_partition_table(): Disk read failed. [ 74.489487][ T6513] Dev loop7: unable to read RDB block 0 [ 74.491254][ T6513] loop7: unable to read partition table [ 74.493300][ T6513] loop7: partition table beyond EOD, truncated [ 74.496304][ T6513] loop_reread_partitions: partition scan of loop7 (úùƒå¡7x~¾SêjÌ–ã¢P) failed (rc=-5) [ 74.503821][ T5340] ldm_validate_partition_table(): Disk read failed. [ 74.508856][ T5340] Dev loop7: unable to read RDB block 0 [ 74.510723][ T5340] loop7: unable to read partition table [ 74.512709][ T5340] loop7: partition table beyond EOD, truncated [ 74.535842][ T6526] ntfs3: Unknown parameter 'discardfiniband/rdma_cm' [ 74.726242][ T6016] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 74.769891][ T6546] Bluetooth: MGMT ver 1.23 [ 74.822376][ T6550] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 74.875614][ T6016] usb 8-1: device descriptor read/64, error -71 [ 74.915793][ T6557] capability: warning: `syz.1.167' uses 32-bit capabilities (legacy support in use) [ 74.996090][ T6016] usb usb8-port1: attempt power cycle [ 75.345719][ T6016] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 75.366244][ T6016] usb 8-1: device descriptor read/8, error -71 [ 75.625837][ T6016] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 75.646211][ T6016] usb 8-1: device descriptor read/8, error -71 [ 75.756928][ T6016] usb usb8-port1: unable to enumerate USB device [ 75.784600][ T6573] syz.2.171 uses obsolete (PF_INET,SOCK_PACKET) [ 76.225815][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 76.270829][ T6610] overlay: Bad value for 'xino' [ 76.325586][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.328515][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.462489][ T6619] netlink: 'syz.2.182': attribute type 11 has an invalid length. [ 76.501747][ T6623] binder: 6622:6623 ioctl ae01 3fffffffffffe returned -22 [ 76.504880][ T6623] binder: BINDER_SET_CONTEXT_MGR already set [ 76.507405][ T6623] binder: 6622:6623 ioctl 4018620d 200000000180 returned -16 [ 76.536578][ T6625] lo speed is unknown, defaulting to 1000 [ 76.541410][ T6625] lo speed is unknown, defaulting to 1000 [ 76.547197][ T6625] lo speed is unknown, defaulting to 1000 [ 76.586333][ T6626] ªªªªªª: renamed from lo (while UP) [ 76.635803][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 76.635857][ T5932] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.692300][ T10] ªªªªªª speed is unknown, defaulting to 1000 [ 76.692533][ T6625] infiniband sz1: set active [ 76.698241][ T6625] infiniband sz1: added ªªªªªª [ 76.750241][ T6625] RDS/IB: sz1: added [ 76.752464][ T6625] smc: adding ib device sz1 with port count 1 [ 76.755386][ T6625] smc: ib device sz1 port 1 has no pnetid [ 76.760178][ T10] ªªªªªª speed is unknown, defaulting to 1000 [ 76.765055][ T6625] ªªªªªª speed is unknown, defaulting to 1000 [ 76.922442][ T6625] ªªªªªª speed is unknown, defaulting to 1000 [ 76.944136][ T6642] xt_connbytes: Forcing CT accounting to be enabled [ 76.947283][ T6642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.950542][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 76.953368][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 77.132758][ T6625] ªªªªªª speed is unknown, defaulting to 1000 [ 77.267508][ T6625] ªªªªªª speed is unknown, defaulting to 1000 [ 77.283902][ T6668] warning: `syz.3.195' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.381389][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 77.381399][ T40] audit: type=1400 audit(1767349644.215:361): avc: denied { read } for pid=6667 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.415618][ T1025] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.452448][ T40] audit: type=1400 audit(1767349644.285:362): avc: denied { accept } for pid=6671 comm="syz.2.196" lport=35648 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.452822][ T6672] netlink: 'syz.2.196': attribute type 11 has an invalid length. [ 77.528282][ T6675] process 'syz.2.197' launched '/dev/fd/3' with NULL argv: empty string added [ 77.531631][ T40] audit: type=1400 audit(1767349644.365:363): avc: denied { execute_no_trans } for pid=6674 comm="syz.2.197" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.580988][ T40] audit: type=1400 audit(1767349644.415:364): avc: denied { create } for pid=6677 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.589551][ T40] audit: type=1400 audit(1767349644.425:365): avc: denied { write } for pid=6677 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.590025][ T1025] usb 6-1: Using ep0 maxpacket: 8 [ 77.601861][ T1025] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 77.605278][ T1025] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.610680][ T1025] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.614560][ T1025] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.619390][ T1025] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.624860][ T1025] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.629273][ T1025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.658059][ T40] audit: type=1400 audit(1767349644.495:366): avc: denied { read write } for pid=6683 comm="syz.3.200" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.667964][ T40] audit: type=1400 audit(1767349644.505:367): avc: denied { open } for pid=6683 comm="syz.3.200" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.838214][ T1025] usb 6-1: GET_CAPABILITIES returned 0 [ 77.840635][ T1025] usbtmc 6-1:16.0: can't read capabilities [ 77.854492][ T6696] netlink: 'syz.3.204': attribute type 11 has an invalid length. [ 77.858902][ T40] audit: type=1400 audit(1767349644.705:368): avc: denied { remount } for pid=6695 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.910867][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 78.042000][ T6657] usb 6-1: usbtmc_ioctl_clear_out_halt returned -32 [ 78.137671][ T1025] usb 6-1: USB disconnect, device number 2 [ 78.229657][ T40] audit: type=1400 audit(1767349645.065:369): avc: denied { read write } for pid=6716 comm="syz.1.212" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 78.242458][ T40] audit: type=1400 audit(1767349645.085:370): avc: denied { open } for pid=6716 comm="syz.1.212" path="/47/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 78.252930][ T6724] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.213'. [ 78.362037][ T6737] fuse: Bad value for 'fd' [ 78.374146][ T6737] capability: warning: `syz.3.216' uses deprecated v2 capabilities in a way that may be insecure [ 78.492794][ T6745] netlink: 56 bytes leftover after parsing attributes in process `syz.2.217'. [ 78.686525][ T6752] Invalid logical block size (3) [ 78.925883][ T29] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 79.088837][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.093293][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 79.098044][ T29] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 79.102019][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.108660][ T29] usb 6-1: config 0 descriptor?? [ 79.117698][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 79.120761][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 79.132098][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 79.139346][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 79.143636][ T29] usb 6-1: media controller created [ 79.147844][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.170331][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 79.172994][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 79.181981][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input9 [ 79.192365][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 79.195275][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 79.319049][ T6767] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 79.359181][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 79.361749][ T29] dvb-usb: error while querying for an remote control event. [ 79.380262][ T6771] netlink: 112 bytes leftover after parsing attributes in process `syz.2.228'. [ 79.402665][ T6775] netlink: 32 bytes leftover after parsing attributes in process `syz.0.229'. [ 79.431086][ T6752] dvb-usb: bulk message failed: -22 (2/0) [ 79.446991][ T24] usb 6-1: USB disconnect, device number 3 [ 79.460637][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'. [ 79.469261][ T6782] netlink: 'syz.2.232': attribute type 2 has an invalid length. [ 79.478450][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 79.527790][ T1025] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.592638][ T6791] IPv6: sit1: Disabled Multicast RS [ 79.687639][ T1025] usb 8-1: Using ep0 maxpacket: 8 [ 79.693032][ T1025] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 79.696675][ T1025] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.701971][ T1025] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.706478][ T1025] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.710822][ T1025] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.716986][ T1025] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.720977][ T1025] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.821766][ T6815] openvswitch: netlink: IP tunnel dst address not specified [ 79.937265][ T1025] usb 8-1: usb_control_msg returned -32 [ 79.946808][ T1025] usbtmc 8-1:16.0: can't read capabilities [ 80.053273][ T6833] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 80.188175][ T6843] input: syz0 as /devices/virtual/input/input10 [ 80.298574][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 80.365728][ T6856] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.373960][ T6856] loop6: detected capacity change from 0 to 524287999 [ 80.442011][ T6862] netlink: 'syz.0.256': attribute type 5 has an invalid length. [ 80.452296][ T6862] ip6erspan0: entered promiscuous mode [ 80.839591][ T6879] /dev/sr0: Can't open blockdev [ 80.925664][ T6898] SELinux: policydb magic number 0x9d9ca98c does not match expected magic number 0xf97cff8c [ 80.929055][ T6898] SELinux: failed to load policy [ 81.304305][ T6927] vcan1: entered allmulticast mode [ 81.310708][ T6928] vcan2: entered allmulticast mode [ 81.390011][ T6934] usb usb8: usbfs: process 6934 (syz.0.278) did not claim interface 0 before use [ 81.424995][ T6943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.434510][ T6943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.482279][ T6943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.493147][ T6943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.508187][ T6951] netlink: 52 bytes leftover after parsing attributes in process `syz.2.284'. [ 81.526470][ T6953] netlink: 'syz.1.283': attribute type 1 has an invalid length. [ 81.552643][ T6956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.564226][ T6953] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 81.576876][ T6953] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 81.642426][ T6961] : entered promiscuous mode [ 81.654958][ T6962] gretap1: entered promiscuous mode [ 81.692065][ T6964] netlink: 'syz.0.288': attribute type 5 has an invalid length. [ 81.702857][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.707031][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.708669][ T6967] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 81.768723][ T6967] bond1: entered promiscuous mode [ 81.770949][ T6967] bond1: entered allmulticast mode [ 81.773368][ T6967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.799688][ T6974] erspan1: entered allmulticast mode [ 81.803262][ T6974] bond1: (slave erspan1): making interface the new active one [ 81.811958][ T6974] erspan1: entered promiscuous mode [ 81.814812][ T6974] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 82.085766][ T6967] bond1 (unregistering): (slave erspan1): Releasing active interface [ 82.091259][ T6967] erspan1: left promiscuous mode [ 82.100990][ T6967] bond1 (unregistering): Released all slaves [ 82.230995][ T6994] hugetlbfs: Unknown parameter 'nrqinoNeô' [ 82.370998][ T7005] __nla_validate_parse: 4 callbacks suppressed [ 82.371009][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 82.378021][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 82.407393][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 82.407405][ T40] audit: type=1400 audit(1767349649.245:408): avc: denied { ioctl } for pid=7004 comm="syz.1.301" path="socket:[15512]" dev="sockfs" ino=15512 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.463700][ T40] audit: type=1400 audit(1767349649.295:409): avc: denied { bind } for pid=7008 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.463758][ T7011] team0: No ports can be present during mode change [ 82.526051][ T7003] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 82.587908][ T40] audit: type=1400 audit(1767349649.425:410): avc: denied { watch } for pid=7022 comm="syz.0.306" path="/94/bus" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.604857][ T40] audit: type=1400 audit(1767349649.425:411): avc: denied { watch_sb watch_reads } for pid=7022 comm="syz.0.306" path="/94/bus" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.625145][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 82.654625][ T7026] netlink: 112 bytes leftover after parsing attributes in process `syz.2.307'. [ 82.656644][ T7023] 9p: Could not find request transport: virwio [ 82.660267][ T7026] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.708185][ T40] audit: type=1400 audit(1767349649.545:412): avc: denied { append } for pid=7027 comm="syz.2.308" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.710523][ T7028] input: syz0 as /devices/virtual/input/input11 [ 82.731703][ T7030] team0: No ports can be present during mode change [ 82.738162][ T7030] gfs2: error -5 reading superblock [ 82.740693][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 82.747056][ T7032] bond0: entered promiscuous mode [ 82.750195][ T7032] bond_slave_0: entered promiscuous mode [ 82.752380][ T7032] bond_slave_1: entered promiscuous mode [ 82.756346][ T7032] batadv_slave_0: entered promiscuous mode [ 82.758506][ T7032] batadv_slave_0: left promiscuous mode [ 82.760764][ T7032] bond0: left promiscuous mode [ 82.762650][ T7032] bond_slave_0: left promiscuous mode [ 82.764809][ T7032] bond_slave_1: left promiscuous mode [ 82.807335][ T40] audit: type=1400 audit(1767349649.645:413): avc: denied { setattr } for pid=7038 comm="syz.2.312" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 82.818164][ T7037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=7037 comm=syz.0.311 [ 82.920772][ T40] audit: type=1400 audit(1767349649.755:414): avc: denied { mount } for pid=7042 comm="syz.0.314" name="/" dev="configfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 82.930173][ T40] audit: type=1400 audit(1767349649.775:415): avc: denied { search } for pid=7042 comm="syz.0.314" name="/" dev="configfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.939372][ T40] audit: type=1400 audit(1767349649.775:416): avc: denied { search } for pid=7042 comm="syz.0.314" name="/" dev="configfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.947829][ T40] audit: type=1400 audit(1767349649.775:417): avc: denied { search } for pid=7042 comm="syz.0.314" name="/" dev="configfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.074998][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.078658][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.428233][ T7077] netlink: 68 bytes leftover after parsing attributes in process `syz.3.324'. [ 83.486185][ T7078] ip6t_rpfilter: unknown options [ 83.530766][ T7078] netlink: 172 bytes leftover after parsing attributes in process `syz.3.324'. [ 84.003037][ T7085] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.021548][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 84.154442][ T7094] ªªªªªª speed is unknown, defaulting to 1000 [ 84.396964][ T7107] netlink: 57 bytes leftover after parsing attributes in process `syz.3.335'. [ 84.401935][ T7105] team0: entered promiscuous mode [ 84.404746][ T7105] team_slave_0: entered promiscuous mode [ 84.414885][ T7105] team_slave_1: entered promiscuous mode [ 84.472651][ T7055] Set syz1 is full, maxelem 65536 reached [ 84.577626][ T7115] vlan2: entered promiscuous mode [ 84.579558][ T7115] vlan2: entered allmulticast mode [ 84.581306][ T7115] hsr_slave_1: entered allmulticast mode [ 84.695210][ T7118] netlink: 72 bytes leftover after parsing attributes in process `syz.0.337'. [ 85.242680][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.248900][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.450273][ T7157] rtc_cmos 00:05: Alarms can be up to one day in the future [ 86.084464][ T7179] mkiss: ax0: crc mode is auto. [ 86.305584][ T849] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.399784][ T7204] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 86.470394][ T7214] nbd: must specify an index to disconnect [ 86.472142][ T849] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.479425][ T849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.483015][ T849] usb 6-1: Product: syz [ 86.484715][ T849] usb 6-1: Manufacturer: syz [ 86.487028][ T849] usb 6-1: SerialNumber: syz [ 86.502181][ T849] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 86.543806][ T6022] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.560594][ T53] cfg80211: failed to load regulatory.db [ 86.619639][ T7216] sit0: entered promiscuous mode [ 86.636409][ T7216] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 86.766033][ T29] usb 6-1: USB disconnect, device number 4 [ 86.865656][ T849] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 87.044793][ T7230] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 87.049949][ T7230] qnx6: wrong signature (magic) in superblock #1. [ 87.050021][ T849] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.052284][ T7230] qnx6: unable to read the first superblock [ 87.057912][ T849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.062679][ T849] usb 7-1: Product: syz [ 87.075987][ T849] usb 7-1: Manufacturer: syz [ 87.078005][ T849] usb 7-1: SerialNumber: syz [ 87.088256][ T849] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 87.115587][ T60] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 87.435346][ T7250] fuse: Unknown parameter '' [ 87.511158][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 87.511174][ T40] audit: type=1400 audit(1767349654.345:448): avc: denied { listen } for pid=7253 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 87.605668][ T6022] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 87.612657][ T6022] ath9k_htc: Failed to initialize the device [ 87.614798][ T40] audit: type=1400 audit(1767349654.445:449): avc: denied { bind } for pid=7261 comm="syz.1.383" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.622886][ T29] usb 6-1: ath9k_htc: USB layer deinitialized [ 87.626707][ T40] audit: type=1400 audit(1767349654.445:450): avc: denied { name_bind } for pid=7261 comm="syz.1.383" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 87.637570][ T40] audit: type=1400 audit(1767349654.445:451): avc: denied { node_bind } for pid=7261 comm="syz.1.383" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 87.688640][ T7271] __nla_validate_parse: 9 callbacks suppressed [ 87.688743][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 87.695408][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 87.700688][ T7271] netlink: 'syz.0.386': attribute type 7 has an invalid length. [ 87.754105][ T40] audit: type=1400 audit(1767349654.585:452): avc: denied { getopt } for pid=7276 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 87.873574][ T7269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.880600][ T7269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.953776][ T7291] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 87.979799][ T7269] XFS (nbd2): SB validate failed with error -5. [ 87.988053][ T6241] usb 7-1: USB disconnect, device number 7 [ 88.015718][ T7291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.019787][ T7297] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 88.032827][ T7297] bond1: entered allmulticast mode [ 88.058531][ T7291] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 88.168329][ T60] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 88.170764][ T60] ath9k_htc: Failed to initialize the device [ 88.173319][ T6241] usb 7-1: ath9k_htc: USB layer deinitialized [ 88.213190][ T40] audit: type=1400 audit(1767349655.045:453): avc: denied { mount } for pid=7321 comm="syz.0.399" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 88.217017][ T7323] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.223574][ T40] audit: type=1400 audit(1767349655.055:454): avc: denied { mounton } for pid=7321 comm="syz.0.399" path="/129/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 88.231541][ T7323] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.233625][ T40] audit: type=1400 audit(1767349655.055:455): avc: denied { accept } for pid=7322 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.233653][ T40] audit: type=1400 audit(1767349655.055:456): avc: denied { setopt } for pid=7322 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.252625][ T40] audit: type=1400 audit(1767349655.055:457): avc: denied { listen } for pid=7322 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.422949][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 88.486232][ T5932] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.487345][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 88.515565][ T6241] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 88.644228][ T7343] ªªªªªª speed is unknown, defaulting to 1000 [ 88.668499][ T6241] usb 7-1: unable to get BOS descriptor or descriptor too short [ 88.671046][ T6241] usb 7-1: no configurations [ 88.673006][ T6241] usb 7-1: can't read configurations, error -22 [ 88.705606][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.806261][ T6022] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 88.815639][ T6241] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 88.860099][ T29] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 88.864194][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.867782][ T29] usb 5-1: Product: syz [ 88.869573][ T29] usb 5-1: Manufacturer: syz [ 88.871495][ T29] usb 5-1: SerialNumber: syz [ 88.879837][ T29] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 88.905834][ T849] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 88.968092][ T6022] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.975761][ T6022] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 88.979531][ T6022] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.982837][ T6022] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 88.987064][ T6022] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 88.992534][ T6241] usb 7-1: unable to get BOS descriptor or descriptor too short [ 88.995055][ T6022] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.995928][ T6241] usb 7-1: no configurations [ 88.995940][ T6241] usb 7-1: can't read configurations, error -22 [ 88.996124][ T6241] usb usb7-port1: attempt power cycle [ 89.006787][ T6022] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.009641][ T6022] usb 6-1: Product: syz [ 89.012109][ T6022] usb 6-1: Manufacturer: syz [ 89.026840][ T6022] cdc_wdm 6-1:1.0: skipping garbage [ 89.029712][ T6022] cdc_wdm 6-1:1.0: skipping garbage [ 89.041583][ T6022] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 89.043794][ T6022] cdc_wdm 6-1:1.0: Unknown control protocol [ 89.223066][ T53] usb 6-1: USB disconnect, device number 5 [ 89.346192][ T6241] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 89.370126][ T6241] usb 7-1: unable to get BOS descriptor or descriptor too short [ 89.374291][ T6241] usb 7-1: no configurations [ 89.376840][ T6241] usb 7-1: can't read configurations, error -22 [ 89.448473][ T7371] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 89.451665][ T7371] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.455407][ T7371] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 89.459982][ T7371] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 89.515634][ T6241] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 89.524364][ T7377] ªªªªªª©*°;¾eÕܲ: renamed from lo (while UP) [ 89.540888][ T6241] usb 7-1: unable to get BOS descriptor or descriptor too short [ 89.555121][ T6241] usb 7-1: no configurations [ 89.558467][ T6241] usb 7-1: can't read configurations, error -22 [ 89.561266][ T6241] usb usb7-port1: unable to enumerate USB device [ 89.603209][ T7379] rtc_cmos 00:05: Alarms can be up to one day in the future [ 89.613584][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 89.871022][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.876035][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.995692][ T849] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 89.998352][ T849] ath9k_htc: Failed to initialize the device [ 90.029901][ T849] usb 5-1: ath9k_htc: USB layer deinitialized [ 90.040429][ T849] usb 5-1: USB disconnect, device number 3 [ 90.371657][ T7410] usb usb8: usbfs: process 7410 (syz.3.426) did not claim interface 0 before use [ 90.700345][ T7418] macsec1: entered promiscuous mode [ 90.702983][ T7418] macsec1: entered allmulticast mode [ 90.837974][ T7423] Error: Device magic number does not match. [ 90.898544][ T7426] tmpfs: Unknown parameter 'mpo]>' [ 91.036264][ T6241] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 91.049263][ T7430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.434'. [ 91.059671][ T7430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.434'. [ 91.206227][ T6241] usb 6-1: not running at top speed; connect to a high speed hub [ 91.216690][ T6241] usb 6-1: config 4 has an invalid interface number: 201 but max is 0 [ 91.220747][ T6241] usb 6-1: config 4 has an invalid descriptor of length 68, skipping remainder of the config [ 91.225168][ T6241] usb 6-1: config 4 has no interface number 0 [ 91.248728][ T6241] usb 6-1: config 4 interface 201 has no altsetting 0 [ 91.258228][ T6241] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=71.55 [ 91.262621][ T6241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.267859][ T6241] usb 6-1: Product: syz [ 91.269906][ T6241] usb 6-1: Manufacturer: syz [ 91.275134][ T6241] usb 6-1: SerialNumber: syz [ 91.508296][ T6241] usb 6-1: USB disconnect, device number 6 [ 91.582431][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 91.598783][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 92.450627][ T7481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7481 comm=syz.0.448 [ 92.557513][ T7493] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 92.588971][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 92.588988][ T40] audit: type=1400 audit(1767349659.425:488): avc: denied { mount } for pid=7489 comm="syz.0.451" name="/" dev="autofs" ino=19696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 92.590576][ T7496] netlink: 'syz.0.451': attribute type 3 has an invalid length. [ 92.597878][ T7498] netlink: 'syz.2.453': attribute type 1 has an invalid length. [ 92.626315][ T7498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.453'. [ 92.635043][ T7498] bond1: (slave bridge3): making interface the new active one [ 92.638020][ T7498] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 92.642689][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'. [ 92.649677][ T7498] bond1: entered promiscuous mode [ 92.651522][ T7498] bridge3: entered promiscuous mode [ 92.653464][ T7498] bond1: entered allmulticast mode [ 92.655137][ T7498] bridge3: entered allmulticast mode [ 92.660144][ T7498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.435604][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 93.436302][ T5932] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 93.581308][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.593637][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.633908][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.638474][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.641685][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.644891][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.648169][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.650893][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.653689][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.656783][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.659762][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.663052][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.667439][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.670487][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.673663][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.676805][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.680087][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.683298][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.686648][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.690009][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.693027][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.696084][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.699028][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.702646][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.705678][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.708555][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.711313][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.714179][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.717138][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.720116][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.723844][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.726731][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.729560][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.732414][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.735644][ T7519] option changes via remount are deprecated (pid=7517 comm=syz.1.459) [ 93.754354][ T40] audit: type=1400 audit(1767349660.585:489): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 94.151050][ T40] audit: type=1400 audit(1767349660.985:490): avc: denied { ioctl } for pid=7534 comm="syz.1.465" path="/108/file0/file0" dev="fuse" ino=62 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 94.289593][ T40] audit: type=1400 audit(1767349661.125:491): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 94.390094][ T40] audit: type=1400 audit(1767349661.225:492): avc: denied { read } for pid=7542 comm="syz.2.468" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 94.402785][ T40] audit: type=1400 audit(1767349661.235:493): avc: denied { open } for pid=7542 comm="syz.2.468" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 94.413523][ T7545] netlink: 'syz.1.469': attribute type 2 has an invalid length. [ 94.417451][ T7543] __nla_validate_parse: 1 callbacks suppressed [ 94.417464][ T7543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.468'. [ 94.713688][ T7553] netlink: 96 bytes leftover after parsing attributes in process `syz.2.472'. [ 95.243266][ T40] audit: type=1400 audit(1767349662.075:494): avc: denied { create } for pid=7554 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 95.266673][ T7555] bond5: peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 95.274092][ T7555] 8021q: adding VLAN 0 to HW filter on device bond5 [ 95.373354][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 95.444843][ T40] audit: type=1400 audit(1767349662.275:495): avc: denied { add_name } for pid=7567 comm="syz.0.477" name="blkio.throttle.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.454626][ T40] audit: type=1400 audit(1767349662.275:496): avc: denied { create } for pid=7567 comm="syz.0.477" name="blkio.throttle.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.465414][ T40] audit: type=1400 audit(1767349662.275:497): avc: denied { associate } for pid=7567 comm="syz.0.477" name="blkio.throttle.io_service_bytes_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 96.207459][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 96.230789][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 96.266746][ T7590] kernel profiling enabled (shift: 6) [ 96.294725][ T7592] ªªªªªª: renamed from vlan0 (while UP) [ 96.426706][ T7599] overlay: ./file0 is not a directory [ 96.439140][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'. [ 96.442724][ T7599] netlink: 5 bytes leftover after parsing attributes in process `syz.2.486'. [ 96.469151][ T7599] bond2: entered promiscuous mode [ 96.930730][ T7613] can0: slcan on ttyS3. [ 96.988344][ T7615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.990922][ T7615] IPv6: NLM_F_CREATE should be set when creating new route [ 96.993444][ T7615] IPv6: NLM_F_CREATE should be set when creating new route [ 96.996166][ T7615] IPv6: NLM_F_CREATE should be set when creating new route [ 97.012852][ T7615] netlink: 132 bytes leftover after parsing attributes in process `syz.0.478'. [ 97.138735][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 97.929406][ T7628] kvm: vcpu 0: requested 106496 ns lapic timer period limited to 200000 ns [ 98.573840][ T7613] can0 (unregistered): slcan off ttyS3. [ 98.628220][ T7638] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 98.659969][ T7638] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 99.030601][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 99.731454][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 99.731471][ T40] audit: type=1400 audit(1767349666.565:501): avc: denied { mount } for pid=7658 comm="syz.0.497" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.746613][ T40] audit: type=1400 audit(1767349666.575:502): avc: denied { unmount } for pid=7658 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.877662][ T7662] xfrm0: entered promiscuous mode [ 99.880080][ T7662] xfrm0: entered allmulticast mode [ 101.239950][ T7673] block nbd1: not configured, cannot reconfigure [ 101.314026][ T7677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7677 comm=syz.2.503 [ 101.381491][ T7684] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 101.384225][ T7684] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 101.528378][ T7684] vhci_hcd vhci_hcd.0: Device attached [ 101.550064][ T7685] vhci_hcd: connection closed [ 101.550967][ T62] vhci_hcd vhci_hcd.2: stop threads [ 101.554824][ T62] vhci_hcd vhci_hcd.2: release socket [ 101.557731][ T62] vhci_hcd vhci_hcd.2: disconnect device [ 101.638144][ T7693] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 101.959715][ T7703] netlink: 172 bytes leftover after parsing attributes in process `syz.1.508'. [ 102.014067][ T40] audit: type=1400 audit(1767349668.845:503): avc: denied { bind } for pid=7697 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.022042][ T40] audit: type=1400 audit(1767349668.845:504): avc: denied { name_bind } for pid=7697 comm="syz.0.507" src=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 102.041368][ T40] audit: type=1400 audit(1767349668.845:505): avc: denied { node_bind } for pid=7697 comm="syz.0.507" src=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 102.069486][ T7707] binder: 7706:7707 unknown command 1 [ 102.071471][ T7707] binder: 7706:7707 ioctl c0306201 200000000300 returned -22 [ 102.147269][ T7705] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 102.152974][ T40] audit: type=1400 audit(1767349668.985:506): avc: denied { bind } for pid=7710 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.178099][ T7705] netlink: 'syz.1.509': attribute type 4 has an invalid length. [ 102.180936][ T7705] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.509'. [ 102.190662][ T7711] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 102.193155][ T7711] netlink: 'syz.1.509': attribute type 4 has an invalid length. [ 102.196714][ T7711] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.509'. [ 102.252722][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 102.281228][ T40] audit: type=1400 audit(1767349669.115:507): avc: denied { mount } for pid=7716 comm="syz.2.512" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 102.341582][ T7717] Failed to get privilege flags for destination (handle=0x2:0x30000) [ 102.645439][ T7732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.517'. [ 102.649910][ T7732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.517'. [ 102.721557][ T7735] netlink: 80 bytes leftover after parsing attributes in process `syz.0.518'. [ 102.884813][ T40] audit: type=1400 audit(1767349669.715:508): avc: denied { bind } for pid=7741 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.895245][ T40] audit: type=1400 audit(1767349669.725:509): avc: denied { write } for pid=7741 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.198496][ T7751] ªªªªªª speed is unknown, defaulting to 1000 [ 103.439973][ T7756] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 103.477833][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.481571][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.711204][ T7742] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 103.714930][ T7742] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 103.792565][ T7763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7763 comm=syz.0.528 [ 104.738182][ T40] audit: type=1400 audit(1767349671.575:510): avc: denied { execute } for pid=7773 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 104.746213][ T40] audit: type=1400 audit(1767349671.585:511): avc: denied { execute_no_trans } for pid=7773 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 104.839950][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.856392][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.867649][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.918654][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.922049][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.957315][ T7774] ªªªªªª speed is unknown, defaulting to 1000 [ 105.166178][ T7774] chnl_net:caif_netlink_parms(): no params data found [ 105.274849][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.277360][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.279830][ T7774] bridge_slave_0: entered allmulticast mode [ 105.282704][ T7774] bridge_slave_0: entered promiscuous mode [ 105.288107][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.290435][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.293353][ T7774] bridge_slave_1: entered allmulticast mode [ 105.296324][ T7774] bridge_slave_1: entered promiscuous mode [ 105.313769][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.318376][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.336411][ T7774] team0: Port device team_slave_0 added [ 105.339890][ T7774] team0: Port device team_slave_1 added [ 105.363249][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.366065][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.374147][ T7774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.382216][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.393111][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.407251][ T7774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.503515][ T7774] hsr_slave_0: entered promiscuous mode [ 105.514646][ T7774] hsr_slave_1: entered promiscuous mode [ 105.522211][ T7774] debugfs: 'hsr0' already exists in 'hsr' [ 105.524521][ T7774] Cannot create hsr debugfs directory [ 105.698872][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 105.759649][ T7790] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 105.776735][ T7790] lo: entered promiscuous mode [ 105.781343][ T7790] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.794218][ T7791] netlink: 'syz.0.534': attribute type 21 has an invalid length. [ 105.960741][ T7774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.969316][ T7774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.977584][ T7774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.985661][ T7774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.021642][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.024170][ T7774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.026787][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.029197][ T7774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.095005][ T7774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.114776][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.122087][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.166535][ T7774] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.190182][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.194030][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.199861][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.202720][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.368617][ T7774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.524473][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.531121][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.575545][ T7774] veth0_vlan: entered promiscuous mode [ 106.582300][ T7774] veth1_vlan: entered promiscuous mode [ 106.601003][ T7774] veth0_macvtap: entered promiscuous mode [ 106.606641][ T7774] veth1_macvtap: entered promiscuous mode [ 106.615374][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.625279][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.633758][ T1146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.639170][ T1146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.642533][ T1146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.648008][ T1146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.693741][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.699802][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.725253][ T7784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.729040][ T7784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.738572][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.742102][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.757103][ T7815] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 106.760816][ T40] audit: type=1400 audit(1767349673.595:512): avc: denied { mounton } for pid=7774 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 106.773189][ T40] audit: type=1400 audit(1767349673.605:513): avc: denied { mounton } for pid=7774 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 106.838820][ T40] audit: type=1400 audit(1767349673.675:514): avc: denied { create } for pid=7817 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 106.955857][ T5932] Bluetooth: hci2: command tx timeout [ 107.300987][ T7829] netlink: 'syz.3.538': attribute type 7 has an invalid length. [ 107.303517][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 107.544869][ T40] audit: type=1326 audit(1767349674.375:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.0.540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c92d8f7c9 code=0x7ffc0000 [ 107.571800][ T40] audit: type=1326 audit(1767349674.395:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.0.540" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5c92d8f7c9 code=0x7ffc0000 [ 107.593335][ T40] audit: type=1326 audit(1767349674.395:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.0.540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c92d8f7c9 code=0x7ffc0000 [ 107.611671][ T40] audit: type=1326 audit(1767349674.395:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.0.540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c92d8f7c9 code=0x7ffc0000 [ 107.631750][ T7837] evm: overlay not supported [ 107.634330][ T40] audit: type=1400 audit(1767349674.465:519): avc: denied { create } for pid=7830 comm="syz.2.539" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.664391][ T7838] cgroup: release_agent respecified [ 108.026838][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 108.035724][ T7852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.365991][ T7857] veth0: entered promiscuous mode [ 108.399106][ T7860] netlink: 9 bytes leftover after parsing attributes in process `syz.4.548'. [ 108.402830][ T7860] 0·: renamed from hsr0 (while UP) [ 108.421958][ T7860] 0·: entered allmulticast mode [ 108.424169][ T7860] hsr_slave_0: entered allmulticast mode [ 108.428178][ T7860] hsr_slave_1: entered allmulticast mode [ 108.431485][ T7860] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 108.580101][ T7869] netlink: 'syz.4.551': attribute type 1 has an invalid length. [ 108.811301][ T1160] ================================================================== [ 108.813688][ T1160] BUG: KASAN: slab-out-of-bounds in nf_hook_entry_head+0x2fe/0x310 [ 108.815997][ T1160] Read of size 8 at addr ffff888054150108 by task kworker/u32:8/1160 [ 108.819808][ T1160] [ 108.820890][ T1160] CPU: 1 UID: 0 PID: 1160 Comm: kworker/u32:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.820906][ T1160] Tainted: [L]=SOFTLOCKUP [ 108.820910][ T1160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.820922][ T1160] Workqueue: netns cleanup_net [ 108.820938][ T1160] Call Trace: [ 108.820943][ T1160] [ 108.820947][ T1160] dump_stack_lvl+0x116/0x1f0 [ 108.820962][ T1160] print_report+0xcd/0x630 [ 108.820987][ T1160] ? __virt_addr_valid+0x81/0x610 [ 108.820997][ T1160] ? __phys_addr+0xe8/0x180 [ 108.821006][ T1160] ? nf_hook_entry_head+0x2fe/0x310 [ 108.821017][ T1160] kasan_report+0xe0/0x110 [ 108.821030][ T1160] ? nf_hook_entry_head+0x2fe/0x310 [ 108.821042][ T1160] nf_hook_entry_head+0x2fe/0x310 [ 108.821053][ T1160] __nf_unregister_net_hook+0x7e/0x660 [ 108.821065][ T1160] nf_unregister_net_hook+0xd5/0x110 [ 108.821076][ T1160] __nft_unregister_flowtable_net_hooks+0xfc/0x3f0 [ 108.821090][ T1160] ? find_held_lock+0x2b/0x80 [ 108.821106][ T1160] __nft_release_hook+0x26e/0x350 [ 108.821118][ T1160] nf_tables_pre_exit_net+0xc5/0x120 [ 108.821131][ T1160] ? __pfx_nf_tables_pre_exit_net+0x10/0x10 [ 108.821144][ T1160] ops_undo_list+0x187/0xab0 [ 108.821156][ T1160] ? __pfx_ops_undo_list+0x10/0x10 [ 108.821168][ T1160] ? cleanup_net+0x347/0x830 [ 108.821180][ T1160] ? idr_destroy+0x62/0x2e0 [ 108.821190][ T1160] cleanup_net+0x41b/0x830 [ 108.821202][ T1160] ? __pfx_cleanup_net+0x10/0x10 [ 108.821213][ T1160] ? rcu_is_watching+0x12/0xc0 [ 108.821224][ T1160] process_one_work+0x9ba/0x1b20 [ 108.821239][ T1160] ? __pfx_cleanup_net+0x10/0x10 [ 108.821251][ T1160] ? __pfx_process_one_work+0x10/0x10 [ 108.821266][ T1160] ? assign_work+0x1a0/0x250 [ 108.821278][ T1160] worker_thread+0x6c8/0xf10 [ 108.821293][ T1160] ? __pfx_worker_thread+0x10/0x10 [ 108.821305][ T1160] kthread+0x3c5/0x780 [ 108.821317][ T1160] ? __pfx_kthread+0x10/0x10 [ 108.821328][ T1160] ? rcu_is_watching+0x12/0xc0 [ 108.821337][ T1160] ? __pfx_kthread+0x10/0x10 [ 108.821349][ T1160] ret_from_fork+0x983/0xb10 [ 108.821360][ T1160] ? __pfx_ret_from_fork+0x10/0x10 [ 108.821372][ T1160] ? __switch_to+0x7af/0x10d0 [ 108.821385][ T1160] ? __pfx_kthread+0x10/0x10 [ 108.821397][ T1160] ret_from_fork_asm+0x1a/0x30 [ 108.821415][ T1160] [ 108.821418][ T1160] [ 108.890626][ T1160] Allocated by task 33: [ 108.891832][ T1160] kasan_save_stack+0x33/0x60 [ 108.893217][ T1160] kasan_save_track+0x14/0x30 [ 108.894562][ T1160] __kasan_slab_alloc+0x89/0x90 [ 108.895964][ T1160] kmem_cache_alloc_node_noprof+0x298/0x800 [ 108.897715][ T1160] __alloc_skb+0x156/0x410 [ 108.899050][ T1160] synproxy_send_client_synack_ipv6+0x1af/0x7e0 [ 108.900806][ T1160] nft_synproxy_do_eval+0x93b/0xd80 [ 108.902288][ T1160] nft_do_chain+0x2e9/0x1920 [ 108.903810][ T1160] nft_do_chain_inet+0x18a/0x340 [ 108.905283][ T1160] nf_hook_slow+0xbe/0x200 [ 108.906553][ T1160] nf_hook.constprop.0+0x424/0x750 [ 108.908082][ T1160] ip6_input+0xe0/0x2f0 [ 108.909268][ T1160] ipv6_rcv+0x264/0x650 [ 108.910460][ T1160] __netif_receive_skb_one_core+0x12d/0x1e0 [ 108.912161][ T1160] __netif_receive_skb+0x1d/0x160 [ 108.913810][ T1160] process_backlog+0x4a2/0x1650 [ 108.915231][ T1160] __napi_poll.constprop.0+0xb3/0x540 [ 108.916789][ T1160] net_rx_action+0x9f9/0xfa0 [ 108.918114][ T1160] handle_softirqs+0x219/0x950 [ 108.919488][ T1160] run_ksoftirqd+0x3a/0x60 [ 108.920763][ T1160] smpboot_thread_fn+0x3f7/0xae0 [ 108.922173][ T1160] kthread+0x3c5/0x780 [ 108.923456][ T1160] ret_from_fork+0x983/0xb10 [ 108.924776][ T1160] ret_from_fork_asm+0x1a/0x30 [ 108.926144][ T1160] [ 108.926872][ T1160] Freed by task 33: [ 108.927985][ T1160] kasan_save_stack+0x33/0x60 [ 108.929330][ T1160] kasan_save_track+0x14/0x30 [ 108.930674][ T1160] kasan_save_free_info+0x3b/0x60 [ 108.932105][ T1160] __kasan_slab_free+0x5f/0x80 [ 108.933640][ T1160] kmem_cache_free+0x2d8/0x770 [ 108.934999][ T1160] kfree_skbmem+0x1a4/0x1f0 [ 108.936302][ T1160] consume_skb+0xcc/0x100 [ 108.937567][ T1160] nft_synproxy_do_eval+0x943/0xd80 [ 108.939097][ T1160] nft_do_chain+0x2e9/0x1920 [ 108.940427][ T1160] nft_do_chain_inet+0x18a/0x340 [ 108.941820][ T1160] nf_hook_slow+0xbe/0x200 [ 108.943131][ T1160] nf_hook.constprop.0+0x424/0x750 [ 108.945002][ T1160] ip6_input+0xe0/0x2f0 [ 108.946585][ T1160] ipv6_rcv+0x264/0x650 [ 108.948286][ T1160] __netif_receive_skb_one_core+0x12d/0x1e0 [ 108.950498][ T1160] __netif_receive_skb+0x1d/0x160 [ 108.952426][ T1160] process_backlog+0x4a2/0x1650 [ 108.954151][ T1160] __napi_poll.constprop.0+0xb3/0x540 [ 108.956095][ T1160] net_rx_action+0x9f9/0xfa0 [ 108.957423][ T1160] handle_softirqs+0x219/0x950 [ 108.959245][ T1160] run_ksoftirqd+0x3a/0x60 [ 108.960529][ T1160] smpboot_thread_fn+0x3f7/0xae0 [ 108.961883][ T1160] kthread+0x3c5/0x780 [ 108.963130][ T1160] ret_from_fork+0x983/0xb10 [ 108.964423][ T1160] ret_from_fork_asm+0x1a/0x30 [ 108.965707][ T1160] [ 108.966388][ T1160] The buggy address belongs to the object at ffff888054150000 [ 108.966388][ T1160] which belongs to the cache skbuff_head_cache of size 240 [ 108.971298][ T1160] The buggy address is located 24 bytes to the right of [ 108.971298][ T1160] allocated 240-byte region [ffff888054150000, ffff8880541500f0) [ 108.976373][ T1160] [ 108.977282][ T1160] The buggy address belongs to the physical page: [ 108.979733][ T1160] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54150 [ 108.983011][ T1160] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.986196][ T1160] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 108.988979][ T1160] page_type: f5(slab) [ 108.990476][ T1160] raw: 00fff00000000040 ffff8881016de8c0 ffffea0000f35480 dead000000000002 [ 108.993656][ T1160] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 108.997065][ T1160] head: 00fff00000000040 ffff8881016de8c0 ffffea0000f35480 dead000000000002 [ 109.000372][ T1160] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 109.003639][ T1160] head: 00fff00000000001 ffffea0001505401 00000000ffffffff 00000000ffffffff [ 109.006956][ T1160] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 109.010205][ T1160] page dumped because: kasan: bad access detected [ 109.012608][ T1160] page_owner tracks the page as allocated [ 109.014677][ T1160] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15, tgid 15 (ksoftirqd/0), ts 94517735489, free_ts 94494086931 [ 109.021557][ T1160] post_alloc_hook+0x1af/0x220 [ 109.023608][ T1160] get_page_from_freelist+0xd0b/0x31a0 [ 109.025511][ T1160] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 109.027481][ T1160] alloc_pages_mpol+0x1fb/0x550 [ 109.029108][ T1160] new_slab+0x2c3/0x430 [ 109.030471][ T1160] ___slab_alloc+0xe18/0x1c90 [ 109.032053][ T1160] __slab_alloc.constprop.0+0x63/0x110 [ 109.033835][ T1160] kmem_cache_alloc_noprof+0x44d/0x770 [ 109.035784][ T1160] skb_clone+0x190/0x3f0 [ 109.037408][ T1160] packet_rcv+0x610/0x17a0 [ 109.038863][ T1160] deliver_skb+0x1ae/0x260 [ 109.040329][ T1160] dev_queue_xmit_nit+0x5ea/0xac0 [ 109.041926][ T1160] dev_hard_start_xmit+0x56b/0x6e0 [ 109.043790][ T1160] __dev_queue_xmit+0x6d7/0x46b0 [ 109.045326][ T1160] ip_finish_output2+0xc38/0x21a0 [ 109.047204][ T1160] __ip_finish_output.part.0+0x1b4/0x350 [ 109.049345][ T1160] page last free pid 7548 tgid 7546 stack trace: [ 109.051343][ T1160] __free_frozen_pages+0x7df/0x1170 [ 109.053080][ T1160] __put_partials+0x130/0x170 [ 109.054623][ T1160] qlist_free_all+0x4c/0xf0 [ 109.056303][ T1160] kasan_quarantine_reduce+0x195/0x1e0 [ 109.058607][ T1160] __kasan_slab_alloc+0x69/0x90 [ 109.060495][ T1160] kmem_cache_alloc_noprof+0x25e/0x770 [ 109.062745][ T1160] getname_flags.part.0+0x4c/0x550 [ 109.064700][ T1160] getname_flags+0x93/0xf0 [ 109.066517][ T1160] do_sys_openat2+0xb9/0x290 [ 109.068403][ T1160] __x64_sys_openat+0x174/0x210 [ 109.070316][ T1160] do_syscall_64+0xcd/0xf80 [ 109.072173][ T1160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.074564][ T1160] [ 109.075658][ T1160] Memory state around the buggy address: [ 109.077929][ T1160] ffff888054150000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.081242][ T1160] ffff888054150080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 109.084510][ T1160] >ffff888054150100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 109.087535][ T1160] ^ [ 109.088946][ T1160] ffff888054150180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.091578][ T1160] ffff888054150200: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 109.094186][ T1160] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.116878][ T5932] Bluetooth: hci2: command tx timeout [ 109.201486][ T1160] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.203901][ T1160] CPU: 1 UID: 0 PID: 1160 Comm: kworker/u32:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.207371][ T1160] Tainted: [L]=SOFTLOCKUP [ 109.208781][ T1160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.212929][ T1160] Workqueue: netns cleanup_net [ 109.214533][ T1160] Call Trace: [ 109.215692][ T1160] [ 109.216854][ T1160] dump_stack_lvl+0x3d/0x1f0 [ 109.218617][ T1160] vpanic+0x640/0x6f0 [ 109.220255][ T1160] panic+0xca/0xd0 [ 109.221675][ T1160] ? __pfx_panic+0x10/0x10 [ 109.223425][ T1160] ? nf_hook_entry_head+0x2fe/0x310 [ 109.225515][ T1160] ? preempt_schedule_common+0x44/0xc0 [ 109.227499][ T1160] ? preempt_schedule_thunk+0x16/0x30 [ 109.229252][ T1160] ? check_panic_on_warn+0x1f/0xb0 [ 109.231047][ T1160] check_panic_on_warn+0xab/0xb0 [ 109.233038][ T1160] end_report+0x107/0x160 [ 109.234795][ T1160] kasan_report+0xee/0x110 [ 109.236550][ T1160] ? nf_hook_entry_head+0x2fe/0x310 [ 109.238279][ T1160] nf_hook_entry_head+0x2fe/0x310 [ 109.239951][ T1160] __nf_unregister_net_hook+0x7e/0x660 [ 109.241721][ T1160] nf_unregister_net_hook+0xd5/0x110 [ 109.243464][ T1160] __nft_unregister_flowtable_net_hooks+0xfc/0x3f0 [ 109.245690][ T1160] ? find_held_lock+0x2b/0x80 [ 109.247512][ T1160] __nft_release_hook+0x26e/0x350 [ 109.249384][ T1160] nf_tables_pre_exit_net+0xc5/0x120 [ 109.251179][ T1160] ? __pfx_nf_tables_pre_exit_net+0x10/0x10 [ 109.253091][ T1160] ops_undo_list+0x187/0xab0 [ 109.254614][ T1160] ? __pfx_ops_undo_list+0x10/0x10 [ 109.256434][ T1160] ? cleanup_net+0x347/0x830 [ 109.258053][ T1160] ? idr_destroy+0x62/0x2e0 [ 109.259817][ T1160] cleanup_net+0x41b/0x830 [ 109.261643][ T1160] ? __pfx_cleanup_net+0x10/0x10 [ 109.263602][ T1160] ? rcu_is_watching+0x12/0xc0 [ 109.265291][ T1160] process_one_work+0x9ba/0x1b20 [ 109.267297][ T1160] ? __pfx_cleanup_net+0x10/0x10 [ 109.269289][ T1160] ? __pfx_process_one_work+0x10/0x10 [ 109.271049][ T1160] ? assign_work+0x1a0/0x250 [ 109.272546][ T1160] worker_thread+0x6c8/0xf10 [ 109.274110][ T1160] ? __pfx_worker_thread+0x10/0x10 [ 109.275810][ T1160] kthread+0x3c5/0x780 [ 109.277196][ T1160] ? __pfx_kthread+0x10/0x10 [ 109.278905][ T1160] ? rcu_is_watching+0x12/0xc0 [ 109.280487][ T1160] ? __pfx_kthread+0x10/0x10 [ 109.281989][ T1160] ret_from_fork+0x983/0xb10 [ 109.283520][ T1160] ? __pfx_ret_from_fork+0x10/0x10 [ 109.285183][ T1160] ? __switch_to+0x7af/0x10d0 [ 109.286652][ T1160] ? __pfx_kthread+0x10/0x10 [ 109.288216][ T1160] ret_from_fork_asm+0x1a/0x30 [ 109.289816][ T1160] [ 109.291597][ T1160] Kernel Offset: disabled [ 109.293004][ T1160] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:27:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000022000 RBX=0000000000000000 RCX=0000000000020000 RDX=0000000000022007 RSI=0000000000000001 RDI=ffffffff8e3c96a0 RBP=0000000000000003 RSP=ffffc90000126858 R8 =0000000000000000 R9 =0000000000000007 R10=0000000000000002 R11=ffff88801dac54b0 R12=ffff88801dac4980 R13=ffffffff8e3c96a0 R14=ffff88801dac5528 R15=0000000000000000 RIP=ffffffff8199cc35 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa5074ddf98 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa506615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa50661505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa506615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa50661506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5066150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5066151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5067ba4a8 00007fa5067ba4a0 00007fa5067ba498 00007fa5067ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa50731d100 00007fa5067ba460 00007fa5067ba478 00007fa5067ba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5067ba4b8 00007fa5067ba4b0 00007fa5067ba4a8 00007fa5067ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000158 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85325ff5 RDI=ffffffff9aeedc00 RBP=ffffffff9aeedbc0 RSP=ffffc9000644f2f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3134353038386552 R12=0000000000000000 R13=0000000000000072 R14=ffffffff9aeedbc0 R15=ffffffff85325f90 RIP=ffffffff8532601f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000d000 CR3=0000000032993000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe553dd8e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05e15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05e1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05e15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05e1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05e150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05e151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000088 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000088 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000097833 RBX=0000000000000002 RCX=ffffffff8b7816d9 RDX=0000000000000000 RSI=ffffffff8dacdf79 RDI=ffffffff8bf2b400 RBP=ffffed1003bda930 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=ffff88801ded54b0 R12=0000000000000002 R13=ffff88801ded4980 R14=ffffffff9088b6d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa5074bcf98 CR3=00000000259cb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003000000 Opmask01=0000000003000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce3c6f450 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c92e15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c92e1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c92e15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c92e1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c92e150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c92e151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000047c 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010d10 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000047c 0000000000000000 0000000000000000 0000000000010d10 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88803787de00 RCX=ffffffff894805d7 RDX=ffff88801e6ea4c0 RSI=0000000000000000 RDI=0000000000000003 RBP=dffffc0000000000 RSP=ffffc900006cec58 R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000000 R11=ffff88801e6eaff0 R12=ffff888038004000 R13=ffff88803b09ebc0 R14=ffff88803b09ea40 R15=ffff88803787de82 RIP=ffffffff81bee1b1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5d06b8bf98 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05e15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05e1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05e15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05e1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05e150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05e151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05fba4a8 00007f5d05fba4a0 00007f5d05fba498 00007f5d05fba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d06b1d100 00007f5d05fba460 00007f5d05fba478 00007f5d05fba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d05fba4b8 00007f5d05fba4b0 00007f5d05fba4a8 00007f5d05fba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000088 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000