last executing test programs: 3.663232536s ago: executing program 1 (id=920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x2, 0x5, 0x540, 0x298, 0x388, 0xffffffff, 0x298, 0xf0, 0x470, 0x470, 0xffffffff, 0x470, 0x470, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [0x0, 0xffffff00], [], 'dvmrp0\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x16, @ipv6=@private0, @ipv4=@local, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ipv6={@dev, @empty, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@remote, [], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, @ipv6=@empty, @icmp_id=0x67, @port=0x4e21}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x11, @ipv6=@mcast1, @ipv6=@local, @port=0x4e21, @gre_key=0xb}}}, {{@ipv6={@mcast2, @private2, [0x0, 0x0, 0xffff00], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0xc4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r5}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x3a85ef35342a412e) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x583e, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x103f, 0x4, 0xfffffffffffff801, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x99a9], 0x1, 0x1000d6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.563545989s ago: executing program 1 (id=921): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x103201) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) close_range(r1, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000000080)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18,\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x9f\xda8\xc8\xc6\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf8\xb9S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88X\xfe\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]') 3.563320983s ago: executing program 1 (id=922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000440)=0x43) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) 3.492473959s ago: executing program 1 (id=923): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r5, 0xffffffffffffffff, 0x2) socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030020"], 0xfdef) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="02"], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="02"], 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 3.383256354s ago: executing program 1 (id=924): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x68, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000801) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='vxfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x68, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000801) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='vxfs\x00', 0x0, 0x0) (async) 3.123064944s ago: executing program 1 (id=930): socketpair(0x2a, 0x80001, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040)=0xb0, 0x4) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)="9669b23b4834a718faab771475a66470d1f00c9c6c6d7a1399f75abed2e929173181b7bdc313e4e023179048b3fbce5ce63f08caa23109b954c0b902868476bb8c8755d773807bd902648211e155e6ffc4311473c0773b09e4979cbaa625e9fb47fa582873da60cd20d8cdb4b1e93801b2d1af625336b21d196497a563e855aa0009659a2a5a87a79d875aea31ae517a4a13e15fde712112a16def96090b20263d9c2794ccaee5bd2aa5489148c51d83d06cc107d8ed1108aed61523ff487b84ce4cfe9de29b09") r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x5, 0x111282) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000001c0)={0xffffff53, 0x10, [0x80, 0xd, 0x800, 0xe]}) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x68000) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000240)={0x6, 0x10, 0x3ff, 0x79c, "1b3766dbad078995224d7aac082f124e4d4736663b1a36fca568049e02e5a69c"}) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000280)="82f66e58a7b8be6483d92124bdd6f08cd2cd55fb759507052faaba5ab05d3c7d27ab9d2e2d6fb12ccbd4458482640361a8db9be83c868043127c5239fc30c33d0dcfd94e31d2702103129ae110bc905df25f2edf34807c46195aeb3efefce172a36002c4a3824dd131c2bb43646596330688c503dcd02dd7bc6020bd3af1") getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000340)=0x28) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000380)=[@code={0x1, 0x69, {"470f7918652e0f797a0066470fee7600c4817cc24cbc0c5b66baf80cb8b6f7d883ef66bafc0c66ed0fc75b00c48269b8f548b800800000000000000f23c80f21f835080050000f23f8c4c279596d0266450fc7350b000000"}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x63, {"66ba610066b8510066eff3410f07f245dc48c6b95c090000b8e8870000ba000000000f3066bad10466ed64266426660f3a0a950178000092450f35b9800000c00f3235002000000f30420fc76a0d450fa500"}}, @uexit={0x0, 0x18, 0x8000000000000001}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x39, {"66430fec5cac00c4e18defc33ef40f080f01c3460f011f420f01c53667460f2207420f01c20f01c2"}}, @code={0x1, 0x56, {"c462353e2e66b875000f00d02e0f01c366b83b010f00d8c44261de303e250000000026660f5d7726f3420f35660fc7760066baf80cb8ccb7c38def66bafc0cb8af000000ef"}}], 0x1a3}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f00000005c0)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000580)=0x4}) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000600)="584d22a728cc18b47ee767db80da84332a43f6cf57fd14d633c4084fac7718847a27cf905a2809d9a572d503cb2a982d78a22421c86d2b97a3feb7e720143cdf5c558f4109e8c61df01c2f") r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x48) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f00000006c0)=0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000740)=""/191, &(0x7f0000000800)=0xbf) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x1, 0xd, 0x14, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x7800, 0xfffffff9, 0xa}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x76, 0x76, 0x3, [@datasec={0xc, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x80000000, 0x80000001}], "429b"}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {0x7, 0x4}, {0x3, 0x5}, {0xe, 0x5}]}, @struct={0x5, 0x3, 0x0, 0x4, 0x1, 0x8000000, [{0x5, 0x4}, {0xe, 0x1, 0x10000}, {0xa, 0x4, 0x5}]}]}, {0x0, [0x71]}}, &(0x7f0000000a80)=""/152, 0x93, 0x98, 0x1, 0x4, 0x10000, @value}, 0x28) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_ext={0x1c, 0xe, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x1, 0x7, 0x5, 0x4, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x2, 0x2, 0x7, 0xb, 0xc, 0x10}]}, &(0x7f0000000c80)='syzkaller\x00', 0x7, 0x2d, &(0x7f0000000cc0)=""/45, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0x3, 0x400, 0x5}, 0x10, 0x1298f, 0xffffffffffffffff, 0x0, &(0x7f0000000d80)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2, @void, @value}, 0x94) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x14, 0x6, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100}, [@ldst={0x0, 0x0, 0x3, 0x4, 0x1, 0x100, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000880)='syzkaller\x00', 0xffffffff, 0xb, &(0x7f00000008c0)=""/11, 0x41000, 0x8, '\x00', r7, @fallback=0x21, r8, 0x8, &(0x7f0000000b80)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000bc0)={0x4, 0x5, 0xd14, 0xffff824d}, 0x10, 0xffffffffffffffff, r9, 0xa, &(0x7f0000001040)=[r10, 0x1, r11, r12], &(0x7f0000001080)=[{0x5, 0x4, 0xb, 0x4}, {0x2, 0x2, 0x1, 0x8}, {0x5, 0x2, 0x0, 0x8}, {0x4, 0x2, 0x9, 0x5}, {0x5, 0x1, 0x4, 0x2}, {0x1, 0x5, 0x4, 0x9}, {0x2, 0x4, 0x5, 0x8}, {0x3, 0x4, 0x2, 0x2}, {0x1, 0x3, 0xf, 0x6}, {0x4, 0x3, 0xb, 0x6}], 0x10, 0x100, @void, @value}, 0x94) r13 = accept4$alg(r1, 0x0, 0x0, 0x80800) r14 = dup3(r4, r13, 0x0) ioctl$UI_DEV_CREATE(r14, 0x5501) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000001200)=0x60, 0x2) 422.868408ms ago: executing program 2 (id=978): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x44, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0x30, 0xe, 0x0, 0x1, [@nested={0x2c, 0x151, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64}, @typed={0x8, 0xde, 0x0, 0x0, @pid}, @generic="d5938376f408f47c06aa365b797aafe2660b18ee"]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0xc, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @const={0xffff}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x3c}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @union={0x7, 0x1, 0x0, 0x5, 0x1, 0x7, [{0x2, 0x3, 0x5}]}]}, {0x0, [0x5f, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000340)=""/167, 0x70, 0xa7, 0x1, 0xeadf7ab4, 0x10000, @value}, 0x28) (async) unshare(0x22020400) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) r10 = eventfd(0xff7ffff7) (async) r11 = eventfd(0x2) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000280)={r10, 0x2, 0x2, r11}) r12 = eventfd(0x4) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000100)={r12, 0xd, 0x2, r12}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x9654, 0xcb, 0x4, 0x2, 0x5, 0x3, 0xc5, 0x8, 0x6, 0x100, 0x0, 0x8, 0xb, 0x4, 0x0, 0xfffffffffffff33e], 0xdddd0000, 0x6100}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00000007000000000000000004000048030000", @ANYRES32=r6, @ANYBLOB="f9ffffff00030000000000000000000040000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0400000003000000050000000300"/28], 0x50) 334.923394ms ago: executing program 0 (id=982): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xfff, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6", 0xfffffffffffffc51, 0x2000c801, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8310fc1bf01e2fad, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) 334.617078ms ago: executing program 0 (id=983): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp0\x00', 0x1}) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xac1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000014}, 0x80c0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000300)=0x8, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x4, 0x9, 0xfac, 0x0, 0x52, 0x1}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8000, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x400) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r0, r0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) write$nci(r2, &(0x7f0000000700)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x80, 0x1}, 0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000740)={0x59f8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) close_range(r0, r2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) fchmod(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FIONCLEX(r4, 0x5450) write$nci(r0, &(0x7f0000000880)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2, {0x1, 0x1, "fe"}}, 0x6) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000008c0)={0x40e, 0xfffffff8, 0x1, 0x5, 0x3}, 0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={0x0, 0x6}, &(0x7f0000000940)=0x8) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000980), 0x10000, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000009c0)={0x2, {0x2, 0x9, 0x1, 0x8, 0x1, 0x3}}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x420202, 0x0) fgetxattr(r6, &(0x7f0000000a40)=@known='trusted.syz\x00', &(0x7f0000000a80)=""/221, 0xdd) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000b80)) write$snapshot(r2, &(0x7f0000000bc0)="7e101824380317169840df41a323ee7152271474585db1d6e9e52452353669a81de1b74ea04ba135b0e9049c8ccf5b24c62325f50176102fadd8e13f10ce8df171a13f84175ead8c1c2be8c04c4a0f4beda794161dcecfd8a23317ef3466f67fe3b8278170a3911333e3e3d2380f0925a48cf8a835d0e43d277fa6", 0x7b) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x11, r4, 0x6511c000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000c40)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 280.628445ms ago: executing program 2 (id=985): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) ioctl$SG_BLKTRACESTOP(r0, 0x1275, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000100)={{r1}, "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"}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000001100)={0x7d, 0x4, 0xa82, 0x6, "cba20a2a3a154564c3262899475fd95cc27de9cb107fc9f72d9188f39aba4f55060714bdc3baab8e1806dd0dd855edfa45d7620a20f48d679b50ef06537976cf205c5db2f488fae68b2bb82276d27683453726fdb004776891d98283ef324a85fd828bb1fc"}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000001180)) mkdir(&(0x7f00000011c0)='./file0\x00', 0x110) statx(r0, &(0x7f0000001200)='./file0\x00', 0x100, 0x20, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(r0, &(0x7f0000001340)='./file0\x00', 0x20380, 0x6) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000001380)) r6 = add_key(&(0x7f00000013c0)='id_resolver\x00', &(0x7f0000001400)={'syz', 0x2}, &(0x7f0000001440)="9d7e4d75f4f624121f896046de9a82a9604f46afa283b2718b5e98b7cf5e023c92d7c297d8833b83e647ad7ad5c4a6e21c861f75a5fbfe81ffc7e33c981ba4dae32d400dd7dc057ea8", 0x49, 0xffffffffffffffff) r7 = add_key$user(&(0x7f00000014c0), &(0x7f0000001500)={'syz', 0x2}, &(0x7f0000001540)="8c337535bc660b84db968f1d2e64a464799543dc471478454aea927aa46677fb1811da6fe8de239d3c63b148342599ccda12de643e182eea5e9b9527121330a4479ab796d9941c4f2e3d8c8c21fd4381abebe7c194492a2b888113a4cc88b334162676f6eb4974eae155e136084a733a5370633c270403aa1e1a85133f22e8409a70a98cc8f557e6a5af08baeffc6f37447045d98124c3e1c3cc65a09b19e05cc242667cea04988d894e878ed4a25ea2997b9b3fa4c0", 0xb6, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000001600)={0x0, r6, r7}, &(0x7f0000001640)=""/209, 0xd1, 0x0) execve(&(0x7f0000001740)='./file0/file0\x00', &(0x7f0000001800)={[&(0x7f0000001780)='{@{,\x13#\x00', &(0x7f00000017c0)='syz']}, &(0x7f0000001880)={[&(0x7f0000001840)='id_resolver\x00']}) write$cgroup_int(r0, &(0x7f00000018c0)=0x1, 0x12) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000001940)={0x0, 0x9, 0x9, '\x00', &(0x7f0000001900)=0x17}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000001980)={'netdevsim0\x00', {0x2, 0x0, @multicast1}}) keyctl$reject(0x13, r7, 0xfffffffffffffff9, 0x8, r6) mknodat$loop(r0, &(0x7f00000019c0)='./file0\x00', 0x200, 0x1) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000001a00)=0x2) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000001a40)=0x1000) mkdir(&(0x7f0000001a80)='./file0/file0/file0\x00', 0x8) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001ac0)) writev(r1, &(0x7f0000001d00)=[{&(0x7f0000001b00)="fddb7bd0983f38346763bea032fb95e3f83cab528b0382bca49eb9af0d1ddfe79963c0baf115538acfa7b5cd2a79560b874cc768e8319d661d1a52a9ad9c901308f00d5d11e4b342387ef45ac668d7ab7e15237e29efa7128533b9b0bd4b963e70e820de890230e92565b6db56d1f972dc39433a7ef7", 0x76}, {&(0x7f0000001b80)="5750f4570455ce41fa935f97ece0d0b386283e29760b0406dd1706d875436954dcb0cb83e6dffc23d862dc9917eb99ced13c6b67cd0c2be9a8e9fec1af9a51be58bbda752f7c1f5a64f6f74b6af7b6ae76102514df741577394fb35063351b60d86fa4c2864f393e30ccebfe091dd45087b6d44c8d16f239316b9d5be89cc2d1df946fe46e56ecbd6e36cb1c70b237bdcdde20ebfce708379125a5fc21c14cd934eb71d449210cdae3861f3d6c5963f3ace82cea608d4223c067c4640f30d89d0ec99d0dc4e9ff9750411e4e8e", 0xcd}, {&(0x7f0000001c80)="0d16c2e0f10dd5ed8914d13fd5b018e3d398d4b688ab3e27681abb0bb33e2fa1", 0x20}, {&(0x7f0000001cc0)="5256c6327d14a86c7142a1d9e28d6aa2d6b8a25d806140", 0x17}], 0x4) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xfe36}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xe9}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x40085) fgetxattr(r1, &(0x7f0000001e40)=@random={'security.', 'id_resolver\x00'}, &(0x7f0000001e80)=""/68, 0x44) sendmmsg$unix(r5, &(0x7f0000005240)=[{{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000001f80)="91b9fc59dc4ff05843eb7ea1471d8392f9bf8b87fd7667be01680ab1685aad107809187ba174cad04c6ca47ad2bba5bf8d6fe2cd5b09e335313d5f953ecf9a81c5cc7081975a951c2cc429a947c928e876cfb64ba665533961aa376a7bed48a0e72bb41fa10e9cb02965c418bfe2c24ef88303c9b0bd28653fb62a32f06bf871195a422ea53fa044dca2242f6bae04567e08beea58f0366684d520998482bb4b7d67ebbd5ab1f43a963cd0a92310453f3ca10c2598bb4620bee0ead2bee98b1fbdb3fd1dd3", 0xc5}, {&(0x7f0000002080)="a8d6dac554577f886c9f194ed68e126634aeee6272a1813023fab071f465912373d30f129225eca226a068cec4aabde1fe6d579ac58e435df633c533ac02782948f16fb2012f8dd962538adbee4c345eaf2fa8edd8123af445317d58651e6264a5099f9bd60e56cfd2c4e34c67124914f159468701f1f81218f1628eb588f343c3746120fd0333aab19d6a7f4a356859052c5c79eb6618b6c91cf0c36269464546", 0xa1}, {&(0x7f0000002140)="7f4c2d1e51000e88b876c5245c678d2d327bed758d27245c9fc80f7e2c71343fdb5cdc3a13f23dd098481659e63a23866f23876deeaf5c7a90f5c1cd95fe43b0d140b6a4c71e149f93a103af8199d835428261b6bdd2991990b263beda08af77412dd2fc3c85a2606746681dea9eff4e4ab2bc2b7a00a7152e39bc1945d39f1186d13e18685a2b223bb8f0c8ed3edf187f5c1e245a70885791fe8aa1a8f8c9648ccd605d8c41cadeb9809d2219645dc770db01db34586f3d792604c3f2adac5223", 0xc1}, {&(0x7f0000002240)="f53f15bcd6aa1d1ffb7e4c113815ffdbd7c819e947c1c27d2c5b52e9cc55cb5786c4e691ba51b9f379430af451efc8c563adf746cf3a8eab4584cea3976ff8127554a4ee3aca2747ad51e8001b2d5da528697cb0fd8246129100e25fe8d83b7be56ff4806582fe41bc8c07720e76dda2078373d52b2d64431d0fe46b5097", 0x7e}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="9927a2d019fdcfebec8ae62ae0534a1b24490127f8cf195667563147d8bbdd2ac42f8b01103f31908549f53ebbceb141f1ff394bdbec16105b83d42059fd05e084caf5462ac348c19a1545f1baeef951844a42e2c4598da407893e", 0x5b}], 0x6, &(0x7f0000003640)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r5, r5]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r4}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x2c, 0x1, 0x1, [r5, r0, r5, r0, 0xffffffffffffffff, r5, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x110}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003780)="fe1eccbfc44781f94bec6774999ce5b30b0d08cd09ba5345ac3ec025b780b8feb80fd48cf75293eb0dc47830a4eed97c", 0x30}, {&(0x7f00000037c0)="c187ad5a6571bf160940fe2f45091aa57cd0bc89beb7b757e830c6f1f7fd8391dbf8f1422b93cf47355369015e6fd6711aef5b40e9249d908d4df410ad9a02d03573b2d96109467a0ea7b570e5901327c068102e779065abf081e5794b4ebcc53e65a42ae4e28ecf7b41dba3d28fa667c270b9a52d102d62965d3c621384cd6aef1340a62c617eb7ef629f1c1bdbdeaaa9c623bf3ebd84556b5a658892853a896bcce7e0727c2561bac650172bf28809bdaabe209aed33b5610a469392291d2a73edd5ab", 0xc4}, {&(0x7f00000038c0)="b6ef1f1c5346e38b6f184c2701e850120d62812815e7b93d0ae8782fc41a7252031a2f176eeb74d24e7682ee5d155d6da066fc36665ed4bb89eb3c49c99f0c3fb8c8d9bed874a548ee9a1de9208a0fd26a25944405f96ecf85d52c93b40a12c3df8e58345ec9ba2d84bc9db146971a36ec0788d8becaffc21d61b9efd89f3afbd418601e2b7c33c6707af6804e7508306cea161a8003c4c2569fb6", 0x9b}, {&(0x7f0000003980)="d3c2b442b136bafd5b7af1ac9ecc98d10fdfbff90be180c9c0587bb1248f8dff17191bde34e9cb627430ed21c718331870511cbf3448163208a8f628cd23296f3ec0f17e05a4af109a3d9138565b8c9a7ccf54dcdc78c232a9e683535a36e82377ac04e0453c363abc8136f4be801087f09f0186214d6d4cc6acfd49bc669b8416c39c5994ac571e294d4e149e267c5e7a1bd923a1d5c000b677ae5b552bdd567fe48cd0e933dbaf68edab59b6c1486f0fd19b8b5a868c1ef203a61d4981eef0b5acf904967474", 0xc7}, {&(0x7f0000003a80)="8f4a1dae8c00f77a37782b3ee869d7c3fa8e76f0f7f2d6db5ca38740d677dad44f15b34ddae564b32c7807399b9aecf788f82751e6bf341e3aade8", 0x3b}], 0x5, &(0x7f0000003b80)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r1, r5]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}], 0x50}}, {{&(0x7f0000003c00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005000)=[{&(0x7f0000003c80)="b7804a52d810a9f40dff64f951d943621ca74fba0826714a3464ac7206a88f63263d69482b7056c36c7ca558096b2ff7bf1c3fdd58b3b81bfb7f99f984dbd6a074b801b289bf35581a76c6ca89354596167cc505cd9260992f61cb110bc6c1bba8aecd70a9621cf2454b693f02c30f7b2dab5b2e4122230779e1c9fe52fa946690992a5d3c25397c7dd4055460764258d9ee9eab33", 0x95}, {&(0x7f0000003d40)="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", 0x1000}, {&(0x7f0000004d40)="4ce6aa7e7f150239a6d831597c995b25ea37c4990446d120e86f0493cb17b7c8dac167fdd526a724791769471bdb6f24c0fc4beb2bb690b2df140473df6516e121b80f71d294c88a66fdcd116d72d53423abaaff68d71a0baad0fdd611a263342cb9dc1e383de353b3388a2c058b7b70cc7e0a35db600ab2a00cb32a9d9bcf3481295b", 0x83}, {&(0x7f0000004e00)="4d03501c4e360d23f4dcffd8eacca8cc100c089984bfad3f8d92f66b3e00015a49e06d07386287303a926efad83bf847ae78ff0197019c117045625be887e5ae4f9e01fe1b921acd04fbadd37746a93cb6bec0c577c95a089d5128e20023ac5b1be4a8", 0x63}, {&(0x7f0000004e80)="76b54bed563fe23cdbd807c0bf3eca33c68c5256f7324cca8108c17672aece4684cfb7802487cc4453488ba742f47bed96f3d8707179b4cca65844e18dbb6ab70165aeb9e808c211dea5aa202ed16dd1872d09dc9271ec4866e70549ebaf1ac8c117579e91ec2a577c68b71c357c03448e6788dbd0c9023dc27cef3243968e7f635babf7cc3aab14c763550622a4b473f55b95b923b961625741fed0314d4858497780808b5880219b10ea355fc40679386f956144d20a79ec6f97b2e632d2d31091d38e31bdbb4e40c1", 0xca}, {&(0x7f0000004f80)="fd82c117859acaaeeec2e044f615c8cc0eaf817bc740fdf00cd90530d1323663f5de162f78aa4f0d2420cd15", 0x2c}, {&(0x7f0000004fc0)="f5fb1b76c249925e9d762f4a4cc29c539dadb370db0caa36b28f363b45c955d9d2e429e58ad663f1bfc250", 0x2b}], 0x7, &(0x7f0000005140)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r5, r1, r1, r5, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, r5, r1, r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r1, r5]}}], 0x100, 0x1}}], 0x3, 0x0) 278.825777ms ago: executing program 0 (id=986): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) (async) pipe(0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0x1) (async) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) modify_ldt$write(0x1, &(0x7f0000000380)={0x0, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000200)={0x0, 0xfffffffffffffe64}) (async) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000200)={0x0, 0xfffffffffffffe64}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r5, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x3, 0x0, 0x0, 0x401}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd70004400000005000000080009000200000008000c00a80a53b8687401000500000008000b00020000000c000f004000000000000000", @ANYRESDEC=r0, @ANYBLOB="30bfac6a7ef92294a5267b1d2aed0e9e5804ca1af8e67ff8cdc28208cf4ef351132626ed1c42b083114f27077e075ca66ded0d572dfa3e5b58fee8"], 0x40}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd70004400000005000000080009000200000008000c00a80a53b8687401000500000008000b00020000000c000f004000000000000000", @ANYRESDEC=r0, @ANYBLOB="30bfac6a7ef92294a5267b1d2aed0e9e5804ca1af8e67ff8cdc28208cf4ef351132626ed1c42b083114f27077e075ca66ded0d572dfa3e5b58fee8"], 0x40}}, 0x0) 277.455482ms ago: executing program 2 (id=987): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e50107000000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010080000a8100000000000000000000000000bb86"], 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xb4}}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000300)=0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file1\x00', &(0x7f0000000100)={0x128142, 0x30, 0x10}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x44) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e50107000000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010080000a8100000000000000000000000000bb86"], 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xb4}}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000300)=0x10) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) (async) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file1\x00', &(0x7f0000000100)={0x128142, 0x30, 0x10}, 0x18) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x44) (async) 203.320342ms ago: executing program 3 (id=989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000280)=0x8) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000380)=@sr0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000740)=ANY=[@ANYBLOB="3cff0000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250400000014000180100001006574683a6e65747063693000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x42, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c20000020180c20000000800450000340000000000069078000000000000000000104e26", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c2000190780000080a00000008ffffedff0015"], 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x14dc02, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020609080000000000000700000000000000040001000000050005000a0000000500010a0700000005000400000000000c000300686173683a69700015000300686173683a69702c706f72742c6e657400000000"], 0x58}}, 0x0) sendmmsg$inet(r5, &(0x7f0000000940)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="df55b03b9d93262e1605f298f216b572a51bfa0d1bcfcac6b2846d42e6f3e2a92d3478acbfafbbdb92209cd2f02b1719c493ce219f5434a7a40042531043160b0b48366235e83a91ff75a3014cc931fe8604d9bc23e30d6ef559ffc5ad1d3808d32d56c5b6ff5cb9d1d0d04893578849477bc282efc62e1d6c6fece322280ec27aa0c943b9b4bdafe9d4aed47f2b499a616e0057f2591910bf5da1232ea41e470c98f12691d152ad31ba2607", 0xac}, {&(0x7f00000005c0)="ba547ff509504cc9c7f82368ee1f42ab5e3699bffc88307106640aec55baf1d6a70aeed5686579c805dd5dad60ccf07b75", 0x31}, {&(0x7f0000000600)="819db398e0961a0c46ede6163036c223b5c5ed831cd0b6609facbcaa92b8577bc5f67aa96b839ab8b55fe5c8db3cfee3549622c9c4c9f94f308091846e374f3799b998727a2da8e2d8", 0x49}, {&(0x7f0000000780)="3b4414568168d6dc1c87b18f6a964524ef9e8c8236ab76e8460083ae77fc23cd8a4d79bc6d0db9d095da027c861aa2761ae376867df7892354cf5a28267904181c795139c00dc891849cf13cc973ebc4298d27a079a69190106b6ec0c31b509df13a17fc1c01c8e0ab95a34c64d5cca502e13fb673c09d40c72eaefecb042b1aa1654da68e08dcf0c2c58f3ab68e43b24817d0200894788013de20191acc8a8fce0d65b7d12d2fead7c94357f501e7d8dac68ae5fc23548ffc4d90ab84", 0xbd}, {&(0x7f0000000840)="5549cc610460ff6b5aff43f01b50651b014718f6b0dba4b8dff3f8e460a0cdc43845a35a6066c5931e2733facb64e52765e88a2c2bc88abc1413690d639c88bc82631385fdfe78560a83661f99b24db6a6bb1d3999db107e60d91ca54c2ba7af40eea67bc86a527fdac961b6376aa9d0ade0fdb45a0034e8e69bcc9a6e9ccf151b35de83a24cc250d5d83c9c0f1a5bae4551f1", 0x93}], 0x5, &(0x7f0000000900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}], 0x18}}], 0x2, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) socket(0xa, 0x3, 0x3a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x5, 0x767, {{0x1b, 0x4, 0x2, 0x3d, 0x6c, 0x66, 0x0, 0xf9, 0x29, 0x0, @multicast2, @local, {[@cipso={0x86, 0x52, 0x3, [{0x6, 0x9, "8792b33f3333c4"}, {0x1, 0x7, "ac204b144a"}, {0x7, 0x2}, {0x5, 0xa, "f7083258a682fdc5"}, {0x6, 0xc, "6c4e9d420cdc444c0848"}, {0x1, 0x10, "f4d88ae32186d467d5a311eae187"}, {0x4190d9260507ff14, 0xb, "600dcdafd69b7d0c3a"}, {0x7, 0x9, "6b3c358159c85b"}]}, @ra={0x94, 0x4}]}}}}}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRESHEX, @ANYRES32], 0x44}, 0x1, 0x2, 0x0, 0x4}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r8, 0x1, {0x1, 0xff, 0x3}, 0xfd}, 0x18) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x1, {0x1, 0xff, 0x4}, 0xff}, 0x18) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140)=0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@rand_addr=0x64010100, 0x4e24, 0x4, 0x4e21, 0x8, 0xa, 0x20, 0x60, 0xff, r8, r10}, {0x1, 0x7b678d86, 0x206f2ce, 0x0, 0x1, 0x3, 0x3, 0x1}, {0x38, 0x7ff, 0x0, 0x7fff}, 0xb, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x6c}, 0xa, @in6=@private1, 0x3503, 0x0, 0x0, 0x53, 0x9, 0xfffffffd, 0x10001}}, 0xe8) 202.4373ms ago: executing program 2 (id=990): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$pptp(0x18, 0x1, 0x2) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000140)={r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2942, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x2ac}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r6}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 153.440878ms ago: executing program 3 (id=991): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000500)={@val={0x0, 0xa00}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x8100, 0xc, 0x0, @opaque="620575fd"}}}}}}, 0x32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)) 152.760212ms ago: executing program 3 (id=992): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, 0x0, 0x45, 0x4000010, &(0x7f0000000100)={0x2, 0xfffd, @private=0xa010101}, 0x10) (async, rerun: 32) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async, rerun: 32) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r8, {0xd, 0x9}, {0xa}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3f4, 0x10, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x400, 0x14}, [@IFLA_AF_SPEC={0x7c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x25}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x85}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfa}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x44, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}, @IFLA_VFINFO_LIST={0x348, 0x16, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x45, 0xc07, 0x1, 0x88a8}}, {0x14, 0x1, {0x7f, 0x223, 0x328b, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8000, 0xb}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x98b}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0xf10, 0xdc25}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x45, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x519, 0x1, 0x5}}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0xffffffff}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xa1c, 0x6, 0x8100}}, {0x14, 0x1, {0x6, 0xd41, 0x1, 0x88a8}}, {0x14, 0x1, {0x8000, 0xa95, 0x3, 0x88a8}}, {0x14, 0x1, {0x1, 0xf90, 0x10001, 0x8100}}, {0x14, 0x1, {0x4, 0x64, 0x8, 0x8100}}, {0x14, 0x1, {0x506f, 0xbb1, 0x1}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x10001}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0xb20}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x10}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x11d, 0x4}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x2}}]}, {0xb4, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x364, 0x7c5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xe, 0xd6b}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x912, 0x4}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x122, 0x1, 0x88a8}}, {0x14, 0x1, {0x5, 0x85f, 0x7, 0x8100}}, {0x14, 0x1, {0x3, 0x9cc, 0x4537c2b5, 0x8100}}, {0x14, 0x1, {0x3, 0x181, 0x8, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0xfffffffffffffff3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xd, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x7}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8270, 0xe0, 0xb7b4}}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8, 0x4}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x44d, 0xa3f, 0x8100}}, {0x14, 0x1, {0x10001, 0x31b, 0x0, 0x88a8}}, {0x14, 0x1, {0x90, 0xbf1, 0x9, 0x8100}}, {0x14, 0x1, {0x8, 0xeab, 0x6, 0x8100}}, {0x14, 0x1, {0x5, 0x930, 0xe37, 0x8100}}, {0x14, 0x1, {0x8, 0x328, 0x5, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffffe, 0x4bc, 0x6}}]}]}, @IFLA_MTU={0x8}, @IFLA_MTU={0x8, 0x4, 0x9182}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) 148.151359ms ago: executing program 2 (id=993): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0xd000, 0x4, 0x7fffffff, 0x3, 0x0, [{0x1, 0xff, 0xd, '\x00', 0x6}, {0x6, 0xe, 0x6, '\x00', 0x5}, {0xd, 0x3, 0x3}, {0x7f, 0x8, 0x4f, '\x00', 0x3}, {0x3d, 0x6, 0x5, '\x00', 0xd}, {0x32, 0x1, 0x2, '\x00', 0x7}, {0x2, 0x1, 0x7f, '\x00', 0x6b}, {0x2, 0x7, 0x0, '\x00', 0xc}, {0x9, 0x3}, {0x8, 0x1f, 0x7, '\x00', 0x3}, {0x2, 0x2, 0x26, '\x00', 0x8}, {0x1, 0x7, 0x9, '\x00', 0x5}, {0x6, 0x7, 0x7, '\x00', 0x7}, {0x6, 0x7, 0xa, '\x00', 0x4}, {0x1, 0x9, 0x7, '\x00', 0x4}, {0x6, 0x1, 0x8, '\x00', 0x5}, {0x1, 0x0, 0x7, '\x00', 0x4}, {0x1, 0xcf, 0x6}, {0x8, 0x9, 0x9, '\x00', 0x9d}, {0x7, 0xc, 0xf4, '\x00', 0x8}, {0xff, 0x7, 0x7f, '\x00', 0x9}, {0x88, 0x7f, 0x3, '\x00', 0xf3}, {0x3, 0x1, 0x18, '\x00', 0x2}, {0x6, 0x4, 0x9, '\x00', 0x5}]}}) (async) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bff200010074", "e2266bd8", "d1b29b99d21d88a2"}, 0x28) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r9, 0x400, 0x0) (async) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x8, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40010) 80.564092ms ago: executing program 0 (id=994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x20, 0x1, 0x9, 0x1ff, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x64, 0x0, 0xff, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0xfa, 0x3, 0xc, [{@broadcast, 0x8000}, {@local, 0xc162}]}, @cipso={0x86, 0x2c, 0x2, [{0x6, 0x3, 't'}, {0x7, 0x11, "56bae1d63140bbe3c2f5c77bbc5290"}, {0x6, 0x12, "ef78e026d6582e8005e65f6b6c4e037d"}]}]}}}}}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x73}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x68}}, 0x4005) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x80000001, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc880}, 0x2404c001) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000440)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000480)="ad8252d51054464dbfbb12fa2dc0d2dea25509a630e9db9cf664dc5a6eff8fce25de4edfba6f95972708a16dd18128", 0x2f}, {&(0x7f00000004c0)="081df2a1f6cba79eea4e28b5adf0347babfd19b948eb6b52c8ba4b382671d49a3516f99688b883ca5de807cd6e866b0ac864f5fb4cd823a648eabf59f48996984c759f49c6f8e1da65130502a77b4fe7a55018f8c9363edea8f2cc3b3286a57ccac2f00fa5cd1f0f7d4712c562c3ad9bbbab26c11ea4e4411a", 0x79}, {&(0x7f0000000540)="2f6065323c250e7be6e226be873ca0b2d458aeaa6ec4ec63e6b1cd6a8ccd38d28aa2ebfef27cea94449f7ac38505c02479a2d2b15a8e0f5cd88bde46ed461d83e43ae8df2a8f8bf5a7820c05168a8e40cf84da34521ef5a3f080ba047752325b0b3c9f996720400c7c1916d9c024e56e16384b69a9202c75fca1543147f6b3b5c7b2a49035fd3184850853261d1bb7073ac133dc2f09fbe65aeb5f3782bebed19bca0c508f210017fc4f470ddae0ba2446bb146eacd41aaf0ad2710d3e4dd3", 0xbf}, {&(0x7f0000000600)}, {&(0x7f0000000640)="081fd8bd429f9f629b7b841b4d1eb952aa641729ecce3a09e618eb6213e89eeb22ff7e7e68647b8457d395bafc870a0ad7a3e9a1096b3248aaa740cd", 0x3c}], 0x5, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}}], 0x1, 0x20000001) accept4$llc(0xffffffffffffffff, &(0x7f0000000780)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000007c0)=0x10, 0x800) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000840)=0x20, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000b40)={0x0, &(0x7f0000000940)=[@code={0x1, 0x49, {"66b81e000f00d866b83e008ec066baf80cb8708d6b84ef66bafc0ced360f71e6090f76713b0f01c8f30fbc472c400f0866baa10066ed366d"}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x75, {"48b868760000000000000f23c00f21f835000006000f23f8b8010000000f01c12e3e400f01c965650f01c9c4a2459d5d9666b820000f00d8b9450a0000b8d728d09fba000000000f30b920000040b81c4d334bba04213f490f3066420f61fe66ba4300ec"}}, @code={0x1, 0x5f, {"66ba410066edb8010000000f01c166baa000ec66baf80cb8ce61eb8cef66bafc0cecb9800000c00f3235000400000f3066b892008ee8b95b0800000f322ef3410fc731b9ff0b00000f32450f01c2"}}, @code={0x1, 0x4c, {"fd0f01c0c421996dcd66baf80cb8bb8a228fef66bafc0cec66f30f0967f30f09b9250800000f3264410f01cf66430f3a0955090066b837010f00d8"}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x1}], 0x1c9}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000c80)=0x0) recvfrom$inet_nvme(r5, &(0x7f0000000b80)=""/252, 0xfc, 0x1, &(0x7f0000000cc0)=@nfc={0x27, r7, 0x1, 0x5}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) sendmsg$NL80211_CMD_DEL_STATION(r8, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r9, 0x200, 0x83, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004a}, 0xc0) connect$vsock_stream(r5, &(0x7f0000000e80)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r5, {0x37}}, './file0\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000f00)=0x1000000, 0x4) r11 = syz_open_dev$admmidi(&(0x7f0000000f40), 0xc, 0x80) ppoll(&(0x7f0000000f80)=[{r5, 0x120}, {r6}, {r0, 0x4280}, {r11}, {r0, 0x84}, {r10, 0x4000}], 0x6, &(0x7f0000000fc0), &(0x7f0000001000)={[0x400]}, 0x8) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001040)={0x2, 0x0, [{0x824, 0x0, 0xe}, {0x9f8, 0x0, 0x61f1}]}) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001080), 0x44500, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r12, 0x40085112, &(0x7f00000010c0)=@l={0x92, 0x2, 0xe0, 0x16, 0x2, 0x8}) 79.697649ms ago: executing program 3 (id=995): r0 = landlock_create_ruleset(&(0x7f0000000100)={0x2000, 0x2, 0x2}, 0x18, 0x3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0xd8, 0x604001) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x0, 0x0, 0x0}) close_range(r0, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r3, 0xa74}}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @remote, @local}, &(0x7f0000000840)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x1, 0x7f, {{0x6, 0x4, 0x1, 0x10, 0x18, 0x65, 0x0, 0x7f, 0x2f, 0x0, @local, @broadcast, {[@end]}}}}}) sendmsg$inet(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)="581b3150ca449dca0a14078f6100ca94f5d1cfdd00bd9608a80df8a23fab39ffba82a1f706b8f7bc28d458280d38d239eb0a58dd5801acd1e58c0c4bd92c02edbdf30ccb38a50d5f24768bfd17718ff2f3c9e4d9f2fb41e36fb94ec1f8e0211ce79f13f77beae5b60374196810bbc5f66b543557a4abfd74d8a5626aec1a8a8ee7edca181a090cd93685729059259edcb7386b206f55167b58f64cde8adf8f011b7c9dd596658ee003e576864d4b2dc22927136cd1fd4a9cae880fb9f4c31436158f7a367188ebd607128808f6d495130476f8dd5171b19649472e7a4475905f3e", 0xe1}, {&(0x7f0000000000)="67abc768cac146724eabfe97bf7a7d87e65a8bd21febc49f98e371ad0dafb5cc8ba9e833cd7ef04bbd1c76", 0x2b}, {&(0x7f0000000500)="8a322c207355c034a63868eb5893e733c506229fb65f5629d1bd31c040ae41c3c1b507111340a9a817f103d451656e487f5e92d731e3c21898732ab88c5c876ef5893b65d354fdc2a437fc1d8a8477b5876f836242eab18602d5eb26", 0x5c}, {&(0x7f0000000580)="bcf8ea218011ec717ce7b538e70d5218c40fca653b68aec9095f77aafc1841faeb4974265d51d235870e878a2d12f1a94e2902ae8b79313239e313993836971ed654755b5baec97a50f58e98183988f208b31a3963b0805e65ffba906b9a086b5eadcd65e86d8644bdbe569330b5e300b83260af00e9279a16761ca957c0e1814c5e84636624e6652344d50fefb305e4df40273b8efad814d315fe7ef284f400aa0ec377a360742c460c52113142bda18c422e33f457664d3d58a97a0344c9c4a65ef62fe81c624f6d1fd8997d7d81f5c96e6447076e5b1b4d5fa50e9d0833a943faf0beddee2ea6e2", 0xe9}, {&(0x7f0000000680)="379ae477b8bfbfced930de6904510637c7b17f564692882c1a6aebf8aa2841812525b9e18ab4fea3193d3ac1c9a5f5ed0b20f95c70a168cc120d4e3bd55539a3adead63407b7821934bd7649c18526f81a1f05bb8e271cfdef6fe9eb80fadcf4bb541d3631cdcf5f4012b23e94b905495e0ea5", 0x73}, {&(0x7f0000000700)="57c636d78826c1cfebd41bfa81f63677c7d671c1a30cb74e187c310c6d1c6cd8a1b6c67b411ee6f400fb3858dc5e1e21f4eaf14628cbdbaa91213db1dd2cf74b1225862ba860248d0ac1922899847ae17f4c627a6786b54f0226a64447349a", 0x5f}], 0x6, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xed5f, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @dev={0xac, 0x14, 0x14, 0x38}}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc5}}], 0xe8}, 0x24004084) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="b09a96e3b1e41ec7db0d891cc961d055cbc7c32fcb72c68094d6734dbaf641a18c9c6a2376e1405340bd6b6363af6a87162349df608d26056e244fb0a4908dc7fafe8a7e863081a7cbd2cc872253c874594709e393ba304049ce865ad6b6f5ba86a93985f115296f24e3329cc60e36a83b3be0c7464bcc46"], 0x10}}, 0x20004040) r8 = socket$netlink(0x10, 0x3, 0x14) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xc, &(0x7f0000000100)=0x40049, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000312"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r10 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x5, &(0x7f0000000a80)=ANY=[@ANYRES16=r12, @ANYRES64=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r13 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x800, 0x0, 0xff, 0x0, 0x4}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000006100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r14, {0x7, 0x2b, 0x5, 0x400400, 0x9, 0x1ff, 0x0, 0x7fffffff, 0x0, 0x0, 0x1, 0x2}}, 0x50) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r15, 0x4}, 0x38) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000000c0)={0x8, r0}, 0x0) 79.16781ms ago: executing program 0 (id=996): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "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"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r3, @ANYBLOB="000000000000000008000300", @ANYRES32=r4], 0x28}, 0x1, 0x8}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x300}]}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x5f, 0x2e, 0x61, 0x2e]}}, &(0x7f0000000400)=""/159, 0x42, 0x9f, 0x0, 0xffff8156, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0xb8, 0x0}, 0x8) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffb6, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x1, 0xa, 0x4, 0x4, 0x18, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x1, 0x2, 0x6, 0xffffffffffffffde}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0xd4, &(0x7f0000000200)=""/212, 0x40f00, 0x41, '\x00', r4, @netfilter, r5, 0x8, &(0x7f0000000500)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x0, 0xe5, 0x8}, 0x10, r6, r7, 0x6, &(0x7f00000006c0)=[r8, r9, r10], &(0x7f0000000700)=[{0x3, 0x4, 0x7, 0x8}, {0x0, 0x1, 0xe, 0x2}, {0x1, 0x3, 0x2, 0x7}, {0x4, 0x2, 0x7, 0xa}, {0x2, 0x1, 0x8, 0xb}, {0x0, 0x4, 0xc, 0x7}], 0x10, 0x8, @void, @value}, 0x94) 3.229503ms ago: executing program 3 (id=997): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x187, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xd, 0x1, 0x40000000, 0x10}) (async) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) (async) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000008800)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x800, @local, 0x10}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000480)="f920e5bedd", 0x5}], 0x1}}], 0x1, 0x2000c841) (async) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 885.187µs ago: executing program 0 (id=998): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x218, 0x2d, 0x1, 0x72bd26, 0x25dfdbfc, {0x4}, [@nested={0x202, 0xd, 0x0, 0x1, [@generic="9ffb", @typed={0x8, 0x13f, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0xf8, 0x0, 0x0, @u32=0x8613}, @nested={0x1ec, 0x67, 0x0, 0x1, [@nested={0x1e8, 0xc5, 0x0, 0x1, [@typed={0xd9, 0xe, 0x0, 0x0, @binary="3896cce6cacee512edc1887dfc00a3ca924b2b14aea790ac9d08812e7ec41d64cf1884298383123f624c158d643a347628961a73a184f345b18f1e5c81cadc0ad2b70b864d8c84eefa089e77211b81c799cbe60037a66dc0bff9230d17ffcf9977b275c7a46759095f2b190dfd000663249658dbce855296e7c2e138dcde8218314189550a8f748e5fbb64f2dffc7d02db1cd7f5e264e430596a8203c4c562f451849cedfc61c9b7cf422842c568791e14e75caa3302dec3433820cb8129ff650d7169ca3a0b8a220a522b60baf63029546ee60bd0"}, @typed={0x4, 0xea}, @generic="306b48a2dd9d0c871d73e48d052c93d6053ae31b24a9d50b0fa7c6940ea688d8638c4fd10758a8e766f802fc54737be3fc192c", @generic="2f62021182019486fe562ef0512bf9518ba95ac67cb1efbb04d32e0aaf75ce0345fd976b09ed1aa62674c426546673340aef840d8850342b8d2a5e20149dcd9b3fda3ebf03de6ce9927dc632dd2e908b4b8c60d6f8aa8209a5ed08f0afa730d494f60e44fe69e49aadccbbd05a54fd4801695d0a540127759a703a47cdf2ec11e5ce59eda71c44348d32dfbc1c9e4b4936df358757d8f20ce428eb8a4cdf82a309214ebc206090a69b51cbc1d977a598cffce722fae021a560776465c84595ef82d138ce6f", @typed={0x6, 0xdf, 0x0, 0x0, @str='/\x00'}, @nested={0x4, 0x88}]}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040000) 343.294µs ago: executing program 2 (id=999): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x40, 0x6, @remote}, 0x14) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000000001030000000000000000000a000000480006802c000380060002004e240000060002004e210000060002004e230000060001004e230000060001004e2100000400000000000000000100"/92], 0x5c}}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000180), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) listen(r2, 0x8) r4 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0x1c, "9402c886ed2a76707113b8c59ff308ac887d5090c61d1d0d60c973db"}, &(0x7f0000000100)=0x24) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 0s ago: executing program 3 (id=1000): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000002c0), &(0x7f00000004c0)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r3, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) r6 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r6, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x16, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x34ad}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x7, 0xa, 0x5, 0xffffffffffffffc0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f00000002c0)='GPL\x00', 0x4, 0xcb, &(0x7f0000000300)=""/203, 0x1f00, 0x20, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x79, 0x8001}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000580)=[r7], &(0x7f00000005c0)=[{0x0, 0x4, 0x6, 0x81b44200c0d1b272}, {0x1, 0x1, 0x1, 0x9}, {0x2, 0x5, 0x0, 0x1}, {0x5, 0x2, 0x0, 0x2}, {0x5, 0x1, 0x1}, {0x0, 0x4, 0xa, 0x5}, {0x3, 0x5, 0x3, 0xc}], 0x10, 0xfff, @void, @value}, 0x94) 0s ago: executing program 0 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r4, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_b, @device_a, @from_mac, {0xe, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x2d, 0x1a, {0x8, 0x3, 0x3, 0x0, {0xfffffffffffffffa, 0x80, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x7f, 0x5}}, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x18}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x850) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x28, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x2718, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(r6) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000040000000000000005000007"], 0x0, 0x84, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="0f15a82c", @ANYRES16=r8, @ANYBLOB="00042abd7000ffdbdf250a000000940001804c0002800800010016000000080001000d00000008000200ff0f00000800010013000000080003006c030000080001001b00000008000200f22f0000080004000100008008000200000100002c0002800800020001000000080001001e0000000800020002000000080004008784000008000200ffffff7f080003007f00000008000300090000000800030080000000"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd700000000000040000001303178010"], 0x328}}, 0x84) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r10) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x4c, r11, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @loopback={0x2600000000000000}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x4c}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) ioctl$PPPIOCGIDLE(r9, 0x8010743f, &(0x7f0000000180)) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x68, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.360076][ T5931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.368895][ T5935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.372992][ T5935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.376536][ T5935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.379720][ T5935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.399464][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.422872][ T5938] veth0_vlan: entered promiscuous mode [ 55.442605][ T5938] veth1_vlan: entered promiscuous mode [ 55.481845][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.485143][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.488549][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.490969][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.509504][ T5942] veth0_vlan: entered promiscuous mode [ 55.521452][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.524452][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.529388][ T5938] veth0_macvtap: entered promiscuous mode [ 55.537157][ T5938] veth1_macvtap: entered promiscuous mode [ 55.545050][ T5942] veth1_vlan: entered promiscuous mode [ 55.551779][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.554668][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.563120][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.567235][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.571027][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.576065][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.581586][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.586453][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.590128][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.595139][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.598410][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.603457][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.607233][ T5935] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.619589][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.623831][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.628267][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.633633][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.644200][ T5942] veth0_macvtap: entered promiscuous mode [ 55.648062][ T5942] veth1_macvtap: entered promiscuous mode [ 55.669177][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 55.673868][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.678467][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.686216][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.692944][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.696133][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.700112][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.704507][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.707725][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.712155][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.720599][ T5998] IPv6: Can't replace route, no match found [ 55.727958][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.734149][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.738316][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.742612][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.746145][ T5998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 55.746551][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.754289][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.758088][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.771027][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.774082][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.777052][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.779833][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.823308][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.825970][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.860485][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.865191][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.883278][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 55.884649][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.889434][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.913223][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.915924][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.043467][ T6021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=873 sclass=netlink_route_socket pid=6021 comm=syz.1.2 [ 56.055178][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 56.057961][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.062792][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.068326][ T6030] IPv6: Can't replace route, no match found [ 56.098518][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 56.103645][ T6033] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 56.140415][ T5944] Bluetooth: hci2: unexpected subevent 0x06 length: 5 < 10 [ 56.156839][ T6036] Unknown options in mask 5 [ 56.163867][ T6036] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.190486][ T6021] netlink: 'syz.1.2': attribute type 25 has an invalid length. [ 56.256350][ T6047] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 56.258947][ T6047] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.267041][ T6047] vhci_hcd vhci_hcd.0: Device attached [ 56.273869][ T6047] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.279061][ T6047] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 56.281357][ T6047] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.285935][ T6047] vhci_hcd vhci_hcd.0: Device attached [ 56.288563][ T6047] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 56.290656][ T6047] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 56.293540][ T6047] vhci_hcd vhci_hcd.0: Device attached [ 56.296391][ T6047] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.304334][ T6047] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 56.307175][ T6047] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 56.310626][ T6047] vhci_hcd vhci_hcd.0: Device attached [ 56.314366][ T6047] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.319079][ T6047] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 56.321323][ T6047] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 56.324696][ T6047] vhci_hcd vhci_hcd.0: Device attached [ 56.328040][ T6047] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 56.334704][ T6058] vhci_hcd: connection closed [ 56.335053][ T6062] vhci_hcd: connection closed [ 56.335393][ T6054] vhci_hcd: connection closed [ 56.339497][ T6048] vhci_hcd: connection closed [ 56.341220][ T64] vhci_hcd: stop threads [ 56.344846][ T64] vhci_hcd: release socket [ 56.346305][ T64] vhci_hcd: disconnect device [ 56.346316][ T6064] vhci_hcd: connection closed [ 56.348079][ T64] vhci_hcd: stop threads [ 56.351245][ T64] vhci_hcd: release socket [ 56.352793][ T64] vhci_hcd: disconnect device [ 56.354689][ T64] vhci_hcd: stop threads [ 56.356061][ T64] vhci_hcd: release socket [ 56.357481][ T64] vhci_hcd: disconnect device [ 56.360483][ T64] vhci_hcd: stop threads [ 56.362915][ T64] vhci_hcd: release socket [ 56.371438][ T64] vhci_hcd: disconnect device [ 56.373976][ T64] vhci_hcd: stop threads [ 56.375815][ T64] vhci_hcd: release socket [ 56.376253][ T64] vhci_hcd: disconnect device [ 56.580462][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 56.802644][ T5944] Bluetooth: hci0: command tx timeout [ 56.803721][ T5941] Bluetooth: hci1: command tx timeout [ 56.872317][ T5941] Bluetooth: hci3: command tx timeout [ 56.877435][ T6094] netlink: 'syz.1.28': attribute type 11 has an invalid length. [ 56.880478][ T6094] netlink: 224 bytes leftover after parsing attributes in process `syz.1.28'. [ 56.880501][ T6093] netlink: 48 bytes leftover after parsing attributes in process `syz.1.28'. [ 56.883535][ T5941] Bluetooth: hci2: command tx timeout [ 56.886845][ T6093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.28'. [ 56.912628][ T6091] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 57.250106][ T6113] Bluetooth: MGMT ver 1.23 [ 57.265876][ T6121] process 'syz.2.36' launched '/dev/fd/3' with NULL argv: empty string added [ 57.317483][ T6131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.39'. [ 57.394211][ T6140] mmap: syz.1.43 (6140) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.398607][ T40] kauditd_printk_skb: 110 callbacks suppressed [ 57.398617][ T40] audit: type=1400 audit(1746213981.338:225): avc: denied { watch watch_reads } for pid=6136 comm="syz.0.42" path="/12" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.399251][ T6140] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET) [ 57.400793][ T40] audit: type=1400 audit(1746213981.338:226): avc: denied { ioctl } for pid=6137 comm="syz.1.43" path="socket:[9896]" dev="sockfs" ino=9896 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.418941][ T40] audit: type=1400 audit(1746213981.358:227): avc: denied { ioctl } for pid=6137 comm="syz.1.43" path="socket:[8826]" dev="sockfs" ino=8826 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.845367][ T40] audit: type=1400 audit(1746213981.788:228): avc: denied { override_creds } for pid=6167 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.904163][ T40] audit: type=1400 audit(1746213981.848:229): avc: denied { write } for pid=6172 comm="syz.1.50" name="001" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.910951][ T40] audit: type=1400 audit(1746213981.848:230): avc: denied { write } for pid=6172 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 58.000376][ T40] audit: type=1400 audit(1746213981.938:231): avc: denied { getopt } for pid=6172 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.037250][ T40] audit: type=1400 audit(1746213981.978:232): avc: denied { write } for pid=6184 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.041117][ T6185] binder: 6184:6185 ioctl c00c620f 200000000040 returned -22 [ 58.043414][ T40] audit: type=1400 audit(1746213981.978:233): avc: denied { read } for pid=6184 comm="syz.1.51" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.055351][ T40] audit: type=1400 audit(1746213981.978:234): avc: denied { open } for pid=6184 comm="syz.1.51" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.471264][ T6209] netlink: 'syz.1.59': attribute type 10 has an invalid length. [ 58.481822][ T5976] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 58.488217][ T6209] team0: Port device geneve0 added [ 58.496646][ T6209] No source specified [ 58.561510][ T5974] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.654648][ T5976] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.658879][ T5976] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 58.663417][ T5976] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 58.666955][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.672095][ T5976] usb 7-1: config 0 descriptor?? [ 58.677730][ T5976] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 58.679985][ T5976] dvb-usb: bulk message failed: -22 (3/0) [ 58.684832][ T5976] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 58.689295][ T5976] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 58.692844][ T5976] usb 7-1: media controller created [ 58.696756][ T5976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 58.708212][ T5976] dvb-usb: bulk message failed: -22 (6/0) [ 58.710110][ T5976] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 58.712456][ T5974] usb 5-1: Using ep0 maxpacket: 16 [ 58.719065][ T5976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5 [ 58.723301][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.726632][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.729596][ T5974] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.735904][ T5976] dvb-usb: schedule remote query interval to 150 msecs. [ 58.738111][ T5976] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 58.741722][ T5974] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 58.744582][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.749608][ T5974] usb 5-1: config 0 descriptor?? [ 58.786233][ T6219] Zero length message leads to an empty skb [ 58.880767][ T5976] usb 7-1: USB disconnect, device number 2 [ 58.881981][ T5944] Bluetooth: hci1: command tx timeout [ 58.884525][ T5941] Bluetooth: hci0: command tx timeout [ 58.914953][ T5976] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 58.952038][ T5944] Bluetooth: hci3: command tx timeout [ 58.952089][ T5941] Bluetooth: hci2: command tx timeout [ 59.113933][ T6227] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.161109][ T5974] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 59.164293][ T5974] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 59.166552][ T5974] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 59.168851][ T5974] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 59.171639][ T5974] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 59.173938][ T5974] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 59.176089][ T5974] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 59.178787][ T5974] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 59.181052][ T5974] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 59.184076][ T5974] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 59.187274][ T5974] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 59.197977][ T5974] microsoft 0003:045E:07DA.0002: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 59.202176][ T5974] microsoft 0003:045E:07DA.0002: no inputs found [ 59.204308][ T5974] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 59.275164][ T6250] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 59.277797][ T6250] netlink: 'syz.3.73': attribute type 2 has an invalid length. [ 59.283016][ T6246] SELinux: failed to load policy [ 59.336063][ T6255] netlink: 'syz.3.76': attribute type 29 has an invalid length. [ 59.339308][ T6255] netlink: 'syz.3.76': attribute type 29 has an invalid length. [ 59.344129][ T6255] netlink: 'syz.3.76': attribute type 29 has an invalid length. [ 59.357312][ T1336] usb 5-1: USB disconnect, device number 2 [ 59.851436][ T6292] 9pnet_fd: p9_fd_create_tcp (6292): problem connecting socket to 127.0.0.1 [ 59.863583][ T6292] 9pnet_fd: p9_fd_create_tcp (6292): problem connecting socket to 127.0.0.1 [ 59.892946][ T6298] binder: BINDER_SET_CONTEXT_MGR already set [ 59.896575][ T6298] binder: 6296:6298 ioctl 4018620d 200000000040 returned -16 [ 59.947877][ T6306] Invalid ELF header magic: != ELF [ 60.040711][ T6312] program syz.0.93 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.044385][ T6302] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 60.086607][ T6314] capability: warning: `syz.0.94' uses deprecated v2 capabilities in a way that may be insecure [ 60.163292][ T6325] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 60.256425][ T6342] program syz.3.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.366270][ T6349] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.369021][ T6349] overlayfs: failed to set xattr on upper [ 60.371128][ T6349] overlayfs: ...falling back to redirect_dir=nofollow. [ 60.374389][ T6349] overlayfs: ...falling back to index=off. [ 60.376609][ T6349] overlayfs: ...falling back to uuid=null. [ 60.378768][ T6349] overlayfs: ...falling back to xino=off. [ 60.380971][ T6349] overlayfs: conflicting lowerdir path [ 60.410069][ T6354] xt_l2tp: v2 doesn't support IP mode [ 60.527414][ T6364] pim6reg1: entered promiscuous mode [ 60.529521][ T6364] pim6reg1: entered allmulticast mode [ 60.596896][ T6367] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 60.618775][ T6369] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 60.645259][ T6371] ======================================================= [ 60.645259][ T6371] WARNING: The mand mount option has been deprecated and [ 60.645259][ T6371] and is ignored by this kernel. Remove the mand [ 60.645259][ T6371] option from the mount to silence this warning. [ 60.645259][ T6371] ======================================================= [ 60.659834][ T6371] devtmpfs: Cannot change global quota limit on remount [ 60.747998][ T6385] __nla_validate_parse: 51 callbacks suppressed [ 60.748009][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 60.854264][ T6388] overlay: Unknown parameter '6 4¸)ÿ…¿Ù•;º)‡¦s™êÄ'ÑEÕ' [ 60.952591][ T5944] Bluetooth: hci0: command tx timeout [ 60.954720][ T5944] Bluetooth: hci1: command tx timeout [ 61.001528][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 61.031534][ T5946] Bluetooth: hci2: command tx timeout [ 61.033571][ T5944] Bluetooth: hci3: command tx timeout [ 61.117972][ T6392] overlayfs: conflicting lowerdir path [ 61.168347][ T6394] netlink: 452 bytes leftover after parsing attributes in process `syz.1.121'. [ 61.175324][ T9] usb 7-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 61.178992][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 61.182658][ T6394] binder: 6393:6394 unknown command 0 [ 61.184660][ T6394] binder: 6393:6394 ioctl c0306201 200000000080 returned -22 [ 61.187677][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 61.190680][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.196769][ T9] usb 7-1: Product: syz [ 61.198586][ T9] usb 7-1: Manufacturer: syz [ 61.200310][ T9] usb 7-1: SerialNumber: syz [ 61.212216][ T6386] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 61.297523][ T6400] netlink: 'syz.1.124': attribute type 1 has an invalid length. [ 61.300584][ T6400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 61.303497][ T6400] IPv6: NLM_F_CREATE should be set when creating new route [ 61.308360][ T6400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6400 comm=syz.1.124 [ 61.313812][ T6400] netlink: 'syz.1.124': attribute type 1 has an invalid length. [ 61.316904][ T6400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 61.378025][ T6401] tmpfs: Bad value for 'mpol' [ 61.428192][ T9] usb 7-1: USB disconnect, device number 3 [ 61.745500][ T5944] Bluetooth: hci0: connection err: -111 [ 61.988452][ T6410] tmpfs: Unknown parameter 'usrquota_' [ 62.301538][ T1023] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.431522][ T1023] usb 5-1: device descriptor read/64, error -71 [ 62.671485][ T1023] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 62.791471][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 62.791541][ T5944] Bluetooth: hci4: command 0x1003 tx timeout [ 62.803457][ T1023] usb 5-1: device descriptor read/64, error -71 [ 62.922330][ T1023] usb usb5-port1: attempt power cycle [ 63.261654][ T1023] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 63.282140][ T1023] usb 5-1: device descriptor read/8, error -71 [ 63.523617][ T1023] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 63.552068][ T1023] usb 5-1: device descriptor read/8, error -71 [ 63.662085][ T1023] usb usb5-port1: unable to enumerate USB device [ 71.195183][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.197340][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.912423][ T40] kauditd_printk_skb: 106 callbacks suppressed [ 74.912439][ T40] audit: type=1400 audit(1746213998.858:341): avc: denied { accept } for pid=6433 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.925146][ T40] audit: type=1400 audit(1746213998.858:342): avc: denied { getopt } for pid=6425 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.956609][ T40] audit: type=1400 audit(1746213998.898:343): avc: denied { ioctl } for pid=6426 comm="syz.0.132" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 74.963397][ T6439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.136'. [ 74.972276][ T6440] vlan2: entered promiscuous mode [ 74.974556][ T6440] vlan2: entered allmulticast mode [ 74.976742][ T6440] hsr_slave_1: entered allmulticast mode [ 75.083673][ T6455] netlink: 6 bytes leftover after parsing attributes in process `syz.2.141'. [ 75.087267][ T40] audit: type=1400 audit(1746213999.028:344): avc: denied { map } for pid=6454 comm="syz.2.141" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.094695][ T40] audit: type=1400 audit(1746213999.028:345): avc: denied { create } for pid=6457 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.102846][ T40] audit: type=1400 audit(1746213999.038:346): avc: denied { ioctl } for pid=6454 comm="syz.2.141" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x5517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.110493][ T40] audit: type=1400 audit(1746213999.048:347): avc: denied { wake_alarm } for pid=6460 comm="syz.0.143" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.138770][ T40] audit: type=1400 audit(1746213999.078:348): avc: denied { write } for pid=6462 comm="syz.2.144" name="/" dev="9p" ino=35913840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.147224][ T40] audit: type=1400 audit(1746213999.078:349): avc: denied { remove_name } for pid=6462 comm="syz.2.144" name="file0" dev="9p" ino=35913874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.154190][ T40] audit: type=1400 audit(1746213999.078:350): avc: denied { unlink } for pid=6462 comm="syz.2.144" name="file0" dev="9p" ino=35913874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.158929][ T6464] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 75.543743][ T6483] openvswitch: netlink: Tunnel attr 157 out of range max 16 [ 76.118362][ T6503] netdevsim netdevsim2: loading /lib/firmware// failed with error -22 [ 76.120799][ T6503] netdevsim netdevsim2: Direct firmware load for / failed with error -22 [ 76.124201][ T6503] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 76.261550][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 76.291196][ T6514] ptrace attach of "/syz-executor exec"[6515] was attempted by "/syz-executor exec"[6514] [ 76.391836][ T24] usb 6-1: device descriptor read/64, error -71 [ 76.604815][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.164'. [ 76.608770][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 76.608799][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 76.618780][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 76.631572][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 76.751653][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 76.754505][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 76.773698][ T24] usb 6-1: device descriptor read/64, error -71 [ 76.798713][ T6540] netlink: 'syz.3.166': attribute type 3 has an invalid length. [ 76.802227][ T6540] netlink: 132 bytes leftover after parsing attributes in process `syz.3.166'. [ 76.882019][ T24] usb usb6-port1: attempt power cycle [ 77.188385][ T6566] uprobe: syz.2.176:6566 failed to unregister, leaking uprobe [ 77.221479][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 77.242177][ T24] usb 6-1: device descriptor read/8, error -71 [ 77.297366][ T6574] bridge_slave_0: left allmulticast mode [ 77.299770][ T6574] bridge_slave_0: left promiscuous mode [ 77.302093][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.309485][ T6574] bridge_slave_1: left promiscuous mode [ 77.311447][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.316822][ T6574] bond0: (slave bond_slave_0): Releasing backup interface [ 77.324922][ T6574] bond0: (slave bond_slave_1): Releasing backup interface [ 77.338212][ T6574] team0: Port device team_slave_0 removed [ 77.350999][ T6574] team0: Port device team_slave_1 removed [ 77.354614][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.357650][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.362324][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.365476][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.399070][ T6577] netlink: 68 bytes leftover after parsing attributes in process `syz.0.179'. [ 77.501559][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 77.533234][ T24] usb 6-1: device descriptor read/8, error -71 [ 77.652124][ T24] usb usb6-port1: unable to enumerate USB device [ 77.675566][ T6584] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 77.679250][ T6584] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (5) [ 77.683771][ T6584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6584 comm=syz.2.182 [ 77.688893][ T6584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6584 comm=syz.2.182 [ 77.803254][ T6586] nfs: Unknown parameter '0x000000000000000300000000000000000003' [ 78.946577][ T6639] netlink: ct family unspecified [ 78.948241][ T6639] openvswitch: netlink: Actions may not be safe on all matching packets [ 79.328640][ T6657] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 79.443118][ T6678] ./file0: Can't lookup blockdev [ 79.682460][ T6702] warning: `syz.0.218' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.456823][ T6735] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 80.461718][ T6734] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 80.464634][ T6734] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 80.467343][ T6734] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 80.470157][ T6734] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 80.475252][ T6734] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 80.478430][ T6734] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 80.479626][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 80.479634][ T40] audit: type=1400 audit(1746214004.418:388): avc: denied { read } for pid=6736 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.482850][ T6734] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 80.493008][ T6734] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 80.499198][ T6734] geneve2: entered promiscuous mode [ 80.502533][ T6734] geneve2: entered allmulticast mode [ 80.553432][ T6735] __nla_validate_parse: 9 callbacks suppressed [ 80.553443][ T6735] netlink: 187444 bytes leftover after parsing attributes in process `syz.0.227'. [ 80.558898][ T40] audit: type=1400 audit(1746214004.498:389): avc: denied { read } for pid=6733 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 80.589451][ T40] audit: type=1400 audit(1746214004.528:390): avc: denied { connect } for pid=6749 comm="syz.0.229" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.617221][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.628396][ T6761] xt_hashlimit: size too large, truncated to 1048576 [ 80.667266][ T40] audit: type=1400 audit(1746214004.608:391): avc: denied { ioctl } for pid=6769 comm="syz.3.233" path="socket:[12732]" dev="sockfs" ino=12732 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 80.676433][ T40] audit: type=1400 audit(1746214004.608:392): avc: denied { write } for pid=6769 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 80.759278][ T6784] nft_compat: unsupported protocol 0 [ 80.775436][ T6786] batadv_slave_1: entered promiscuous mode [ 80.790223][ T6786] batadv_slave_1: left promiscuous mode [ 80.853156][ T40] audit: type=1400 audit(1746214004.798:393): avc: denied { read append open } for pid=6797 comm="syz.2.242" path="/57/file0/blkio.throttle.io_service_bytes_recursive" dev="9p" ino=35913960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.910147][ T6802] cgroup: Unknown subsys name 'dont_hash' [ 80.993847][ T40] audit: type=1400 audit(1746214004.938:394): avc: denied { name_connect } for pid=6804 comm="syz.3.246" dest=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 81.011430][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.028529][ T6814] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20000 [ 81.034953][ T6814] GUP no longer grows the stack in syz.2.248 (6814): 200000004000-200000005000 (200000003000) [ 81.039526][ T6814] CPU: 2 UID: 0 PID: 6814 Comm: syz.2.248 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 81.039549][ T6814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.039560][ T6814] Call Trace: [ 81.039566][ T6814] [ 81.039573][ T6814] dump_stack_lvl+0x16c/0x1f0 [ 81.039616][ T6814] gup_vma_lookup+0x1d2/0x220 [ 81.039641][ T6814] __get_user_pages+0x234/0x36f0 [ 81.039695][ T6814] ? psi_task_switch+0x201/0x8e0 [ 81.039719][ T6814] ? look_up_lock_class+0x59/0x150 [ 81.039739][ T6814] ? __pfx___get_user_pages+0x10/0x10 [ 81.039763][ T6814] ? find_held_lock+0x2b/0x80 [ 81.039789][ T6814] __gup_longterm_locked+0x20d/0x1850 [ 81.039821][ T6814] ? __pfx___gup_longterm_locked+0x10/0x10 [ 81.039855][ T6814] pin_user_pages_remote+0xed/0x140 [ 81.039879][ T6814] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 81.039901][ T6814] ? mm_access+0x22d/0x2e0 [ 81.039931][ T6814] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 81.039955][ T6814] ? futex_wait_queue+0x14c/0x220 [ 81.039979][ T6814] ? futex_unqueue+0xba/0x140 [ 81.040005][ T6814] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 81.040023][ T6814] ? __pfx___futex_wait+0x10/0x10 [ 81.040048][ T6814] ? import_ubuf+0x1b6/0x220 [ 81.040090][ T6814] ? iovec_from_user+0xbb/0x140 [ 81.040121][ T6814] process_vm_rw+0x2ff/0x360 [ 81.040143][ T6814] ? __pfx_process_vm_rw+0x10/0x10 [ 81.040184][ T6814] ? sock_ioctl+0x3a9/0x6b0 [ 81.040216][ T6814] ? __pfx___x64_sys_futex+0x10/0x10 [ 81.040235][ T6814] ? selinux_file_ioctl+0xb4/0x270 [ 81.040266][ T6814] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 81.040283][ T6814] ? do_syscall_64+0x91/0x260 [ 81.040304][ T6814] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.040322][ T6814] do_syscall_64+0xcd/0x260 [ 81.040347][ T6814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.040362][ T6814] RIP: 0033:0x7fecc058e969 [ 81.040376][ T6814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.040391][ T6814] RSP: 002b:00007fecbe3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 81.040407][ T6814] RAX: ffffffffffffffda RBX: 00007fecc07b5fa0 RCX: 00007fecc058e969 [ 81.040419][ T6814] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 00000000000000bc [ 81.040428][ T6814] RBP: 00007fecc0610ab1 R08: 0000000000000001 R09: 0000000000000000 [ 81.040445][ T6814] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000000 [ 81.040454][ T6814] R13: 0000000000000000 R14: 00007fecc07b5fa0 R15: 00007ffeb7f90848 [ 81.040477][ T6814] [ 81.163285][ T6818] cgroup: Need name or subsystem set [ 81.221646][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 81.226265][ T9] usb 5-1: config 5 has an invalid interface number: 177 but max is 3 [ 81.229624][ T9] usb 5-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 81.233622][ T40] audit: type=1400 audit(1746214005.178:395): avc: denied { write } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.241866][ T9] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 81.242851][ T40] audit: type=1400 audit(1746214005.178:396): avc: denied { remove_name } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.245512][ T9] usb 5-1: config 5 has an invalid interface number: 27 but max is 3 [ 81.245532][ T9] usb 5-1: config 5 has an invalid interface number: 191 but max is 3 [ 81.245548][ T9] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 81.255181][ T40] audit: type=1400 audit(1746214005.178:397): avc: denied { rename } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.257875][ T9] usb 5-1: config 5 has 3 interfaces, different from the descriptor's value: 4 [ 81.274861][ T9] usb 5-1: config 5 has no interface number 0 [ 81.276807][ T9] usb 5-1: config 5 has no interface number 1 [ 81.279434][ T9] usb 5-1: config 5 has no interface number 2 [ 81.282388][ T9] usb 5-1: config 5 interface 177 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 81.286548][ T9] usb 5-1: config 5 interface 177 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 81.290191][ T9] usb 5-1: config 5 interface 191 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 81.294052][ T9] usb 5-1: config 5 interface 191 altsetting 9 has an endpoint descriptor with address 0x24, changing to 0x4 [ 81.297824][ T9] usb 5-1: config 5 interface 191 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 81.301935][ T9] usb 5-1: config 5 interface 177 has no altsetting 0 [ 81.304263][ T9] usb 5-1: config 5 interface 27 has no altsetting 0 [ 81.306490][ T9] usb 5-1: config 5 interface 191 has no altsetting 0 [ 81.311083][ T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2022, bcdDevice=73.4e [ 81.314849][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.318027][ T9] usb 5-1: Product: 鮿ⰽå¾ï•¥å¹¡é¹²ë‡¨ã¤†Ìžéꖄ햑뛓剾ｸä­æˆà¥¦äº¨ì¢«é…‰ã¶‹á„¾àµµï»ªêŸ»ï‚¯î¬‡ä…†èžå¶»á€šæ¦³êºæ¤£åƒžá°ƒë‰¾á±³à¯—㽚ᵕᦔₔ朘矹껵膌絶î¸é‰ºïŠ“崕볆度釂à·à£´è¤¿í¤ã¥„鵲럥殰楽팚ヂ魄ꖣഠ䯽リ䨊૊醞ꪣ䖗Ჷ〻᳧鎰ᵾ抲ゞ倸䓗䱰ុ熚쥯觥朚隄秇눞⢻ै逭̺钰ä²ã„˜ï”«â«ƒé¨›äŒ¦å‡©å¶ºä¦¿é•¦â–¼â¸‘匠ꉠ輾䴉 [ 81.331634][ T9] usb 5-1: Manufacturer: 粩é–åšë¨¹ç«â…¸ä‚Œâ¡‡ê¢·à¤œí•²á­»áŽŒî´‹ïŒ—藪禴æµâ¨¦é“¬à£Œæ„†ä»¼å¢šã–šé•±ã‘…뉎뵖밹㭩ꔰ劘䎓Ⲟ龬厉挻붟ኺ喣꿙鲢å‹èº©í“†àµƒã¤¸ãŒ¸á©—䂩ꖔ盗틷ìŸì¶«ìž ç¥âƒ‚՘圔拗跮䑓ꇅ<⨊ꢠ鮎픊燴籧 [ 81.340799][ T9] usb 5-1: SerialNumber: ጠ[ 81.433982][ T63] cfg80211: failed to load regulatory.db [ 81.554331][ T9] ftdi_sio 5-1:5.177: FTDI USB Serial Device converter detected [ 81.557528][ T9] ftdi_sio ttyUSB0: unknown device type: 0x734e [ 81.561125][ T9] ftdi_sio 5-1:5.27: FTDI USB Serial Device converter detected [ 81.564091][ T9] ftdi_sio ttyUSB1: unknown device type: 0x734e [ 81.569203][ T9] ftdi_sio 5-1:5.191: FTDI USB Serial Device converter detected [ 81.572189][ T9] ftdi_sio ttyUSB2: unknown device type: 0x734e [ 81.576579][ T9] usb 5-1: USB disconnect, device number 7 [ 81.579640][ T9] ftdi_sio 5-1:5.177: device disconnected [ 81.582649][ T9] ftdi_sio 5-1:5.27: device disconnected [ 81.586263][ T9] ftdi_sio 5-1:5.191: device disconnected [ 81.607678][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.256'. [ 81.611961][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.256'. [ 81.690503][ T6847] overlayfs: failed to resolve './file0': -2 [ 81.845940][ T6855] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -32767, delta: 1 [ 81.848822][ T6855] ref_ctr increment failed for inode: 0x1c0 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802aeb2800 [ 81.884309][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'. [ 81.887930][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'. [ 82.138627][ T6882] netlink: 344 bytes leftover after parsing attributes in process `syz.2.271'. [ 82.143095][ T6881] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 82.145747][ T6881] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.149152][ T6881] vhci_hcd vhci_hcd.0: Device attached [ 82.153436][ T6883] vhci_hcd: connection closed [ 82.153963][ T6746] vhci_hcd: stop threads [ 82.157641][ T6746] vhci_hcd: release socket [ 82.159558][ T6746] vhci_hcd: disconnect device [ 82.630680][ T6910] netlink: 44 bytes leftover after parsing attributes in process `syz.1.277'. [ 82.635592][ T6910] netlink: 43 bytes leftover after parsing attributes in process `syz.1.277'. [ 82.639337][ T6910] netlink: 'syz.1.277': attribute type 6 has an invalid length. [ 82.643272][ T6910] netlink: 'syz.1.277': attribute type 5 has an invalid length. [ 82.647394][ T6910] netlink: 43 bytes leftover after parsing attributes in process `syz.1.277'. [ 82.685665][ T6915] syz_tun: entered allmulticast mode [ 82.773384][ T6914] syz_tun: left allmulticast mode [ 82.774171][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.284'. [ 82.838904][ T6936] IPVS: Scheduler module ip_vs_non not found [ 82.903109][ T6948] ip6t_rpfilter: unknown options [ 82.991625][ T5976] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 83.146602][ T5976] usb 6-1: Using ep0 maxpacket: 8 [ 83.149499][ T5976] usb 6-1: config 1 interface 0 has no altsetting 0 [ 83.153492][ T5976] usb 6-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.40 [ 83.156298][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.158732][ T5976] usb 6-1: Product: syz [ 83.160052][ T5976] usb 6-1: Manufacturer: â° [ 83.176137][ T5976] usb 6-1: SerialNumber: syz [ 83.239449][ T5941] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 83.553061][ T7001] gretap0: entered promiscuous mode [ 83.583436][ T7003] ip6t_srh: unknown srh invflags 7D00 [ 83.591856][ T57] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 83.628921][ T7006] ip6t_srh: unknown srh invflags 7D00 [ 83.743391][ T57] usb 7-1: not running at top speed; connect to a high speed hub [ 83.748670][ T57] usb 7-1: config 1 interface 0 altsetting 249 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.752494][ T57] usb 7-1: config 1 interface 0 altsetting 249 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.755651][ T57] usb 7-1: config 1 interface 0 altsetting 249 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.759767][ T57] usb 7-1: config 1 interface 0 has no altsetting 0 [ 83.769651][ T7012] x_tables: duplicate underflow at hook 2 [ 83.775702][ T57] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.779141][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.782101][ T57] usb 7-1: Product: syz [ 83.783526][ T57] usb 7-1: Manufacturer: à ‡ [ 83.784984][ T57] usb 7-1: SerialNumber: syz [ 83.788574][ T6994] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 83.999036][ T57] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 84.005376][ T57] usb 7-1: USB disconnect, device number 4 [ 84.128250][ T5941] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 84.385014][ T7063] sctp: [Deprecated]: syz.0.316 (pid 7063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.385014][ T7063] Use struct sctp_sack_info instead [ 84.452253][ T7068] netlink: 'syz.3.321': attribute type 2 has an invalid length. [ 84.714448][ T5941] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 84.921161][ T7095] netlink: 'syz.3.331': attribute type 2 has an invalid length. [ 85.087114][ T5941] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 85.245822][ T7110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.254344][ T7115] dlm: no local IP address has been set [ 85.254572][ T7116] tmpfs: Group quota block hardlimit too large. [ 85.256812][ T7115] dlm: cannot start dlm midcomms -107 [ 85.327717][ T7121] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 85.543005][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 85.543016][ T40] audit: type=1400 audit(1746214009.488:442): avc: denied { write } for pid=7128 comm="syz.0.341" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.561516][ T7078] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 85.626126][ T7134] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4227364200 (541102617600 ns) > initial count (274802525568 ns). Using initial count to start timer. [ 85.632664][ T7129] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 85.688280][ T7139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64273 sclass=netlink_route_socket pid=7139 comm=syz.3.344 [ 85.715067][ T5976] usbhid 6-1:1.0: can't add hid device: -71 [ 85.717054][ T5976] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 85.737117][ T5976] usb 6-1: USB disconnect, device number 6 [ 85.817841][ T40] audit: type=1400 audit(1746214009.758:443): avc: denied { nlmsg_write } for pid=7152 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 85.985666][ T5941] Bluetooth: hci2: unexpected subevent 0x06 length: 5 < 10 [ 86.052905][ T7182] netlink: 'syz.1.356': attribute type 10 has an invalid length. [ 86.329976][ T40] audit: type=1400 audit(1746214010.268:444): avc: denied { mount } for pid=7193 comm="syz.3.358" name="/" dev="autofs" ino=14041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 86.437810][ T7197] __nla_validate_parse: 11 callbacks suppressed [ 86.437822][ T7197] netlink: 72 bytes leftover after parsing attributes in process `syz.3.359'. [ 86.687253][ T7204] tmpfs: Unknown parameter ' ' [ 86.694197][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.362'. [ 86.697904][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.362'. [ 86.729247][ T5941] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 86.771104][ T40] audit: type=1400 audit(1746214010.708:445): avc: denied { getopt } for pid=7208 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.791490][ T5941] Bluetooth: hci0: command 0x080f tx timeout [ 86.798525][ T7212] 9pnet: p9_errstr2errno: server reported unknown error @íÿÿÿÿÿÿÿÿ [ 87.061329][ T7222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.368'. [ 87.066387][ T834] IPVS: starting estimator thread 0... [ 87.161492][ T7223] IPVS: using max 44 ests per chain, 105600 per kthread [ 87.279182][ T40] audit: type=1400 audit(1746214011.218:446): avc: denied { accept } for pid=7226 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.362955][ T7232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.371'. [ 87.693043][ T5944] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 87.890931][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 88.034279][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 88.041426][ T7261] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 88.074711][ T5944] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 88.167435][ T6748] tipc: Subscription rejected, illegal request [ 88.246570][ T7276] capability: warning: `syz.3.388' uses 32-bit capabilities (legacy support in use) [ 88.286845][ T40] audit: type=1400 audit(88.205:447): avc: denied { execute } for pid=7272 comm="syz.2.387" path="/dev/audio1" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 88.336669][ T7287] netlink: 84 bytes leftover after parsing attributes in process `syz.1.391'. [ 88.340686][ T5944] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 88.375908][ T7290] netlink: 'syz.3.393': attribute type 4 has an invalid length. [ 88.382416][ T7290] netlink: 'syz.3.393': attribute type 4 has an invalid length. [ 88.408278][ T40] audit: type=1400 audit(88.325:448): avc: denied { create } for pid=7296 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.412696][ T7297] overlayfs: missing 'lowerdir' [ 88.417689][ T40] audit: type=1400 audit(88.325:449): avc: denied { connect } for pid=7296 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.423628][ T40] audit: type=1400 audit(88.325:450): avc: denied { setopt } for pid=7296 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.429604][ T40] audit: type=1400 audit(88.325:451): avc: denied { bind } for pid=7296 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.041449][ T5976] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 89.120674][ T5944] Bluetooth: hci1: unexpected subevent 0x06 length: 5 < 10 [ 89.192868][ T5976] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 89.197655][ T5976] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.205917][ T5976] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.210548][ T5976] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.215105][ T5976] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.218570][ T5976] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.222770][ T5976] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.226094][ T5976] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.228968][ T5976] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.232497][ T5976] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.235446][ T5976] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.238423][ T5976] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.242996][ T5976] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.246115][ T5976] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.248910][ T5976] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.253426][ T5976] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.257257][ T5976] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.260682][ T5976] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.264376][ T5976] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.268315][ T5976] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.271577][ T5976] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.275299][ T5976] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.279654][ T5976] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.284385][ T5976] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.288849][ T5976] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.294138][ T5976] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 89.297840][ T5976] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 89.301162][ T5976] usb 6-1: Product: syz [ 89.303460][ T5976] usb 6-1: Manufacturer: syz [ 89.305600][ T5976] usb 6-1: SerialNumber: syz [ 89.311958][ T5976] usb 6-1: config 0 descriptor?? [ 89.313080][ T7337] netlink: 68 bytes leftover after parsing attributes in process `syz.2.408'. [ 89.320257][ T5976] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 89.361008][ T7347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.370131][ T7347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.484066][ T5944] Bluetooth: hci0: unexpected subevent 0x06 length: 5 < 10 [ 89.520756][ T1023] usb 6-1: USB disconnect, device number 7 [ 89.527169][ T1023] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 89.528167][ T7357] mkiss: ax0: crc mode is auto. [ 89.659342][ T7361] futex_wake_op: syz.0.417 tries to shift op by 32; fix this program [ 89.667350][ T7361] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 89.669629][ T7361] overlayfs: failed to set xattr on upper [ 89.671918][ T7361] overlayfs: ...falling back to redirect_dir=nofollow. [ 89.674128][ T7361] overlayfs: ...falling back to index=off. [ 89.675965][ T7361] overlayfs: ...falling back to uuid=null. [ 89.677868][ T7361] overlayfs: ...falling back to xino=off. [ 89.679710][ T7361] overlayfs: conflicting lowerdir path [ 89.911852][ T7370] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 89.933228][ T7374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7374 comm=syz.0.422 [ 89.946339][ T5944] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 90.117050][ T7386] xt_hashlimit: size too large, truncated to 1048576 [ 90.117057][ T7385] xt_hashlimit: size too large, truncated to 1048576 [ 90.746761][ T5941] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 90.995657][ T7411] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 90.998373][ T7411] SELinux: failed to load policy [ 91.098510][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 91.098525][ T40] audit: type=1400 audit(91.015:468): avc: denied { mounton } for pid=7416 comm="syz.1.438" path="/79/file0" dev="9p" ino=35913840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.156660][ T40] audit: type=1400 audit(91.075:469): avc: denied { mount } for pid=7416 comm="syz.1.438" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 91.164239][ T40] audit: type=1400 audit(91.075:470): avc: denied { search } for pid=7416 comm="syz.1.438" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 91.331265][ T5944] Bluetooth: hci0: unexpected subevent 0x06 length: 5 < 10 [ 91.398135][ T40] audit: type=1400 audit(91.315:471): avc: denied { append } for pid=7432 comm="syz.0.443" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.428094][ T40] audit: type=1400 audit(91.345:472): avc: denied { read } for pid=7437 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.438814][ T7443] overlayfs: failed to clone upperpath [ 91.456518][ T40] audit: type=1400 audit(91.375:473): avc: denied { setopt } for pid=7444 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.466936][ T40] audit: type=1400 audit(91.375:474): avc: denied { create } for pid=7444 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 91.476404][ T40] audit: type=1400 audit(91.375:475): avc: denied { setopt } for pid=7444 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 91.479593][ T7447] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 91.490659][ T7447] 9pnet_virtio: no channels available for device syz [ 91.552732][ T7453] tipc: Started in network mode [ 91.554982][ T7453] tipc: Node identity ac14140f, cluster identity 4711 [ 91.557655][ T7453] tipc: New replicast peer: 255.255.255.255 [ 91.560775][ T7453] tipc: Enabled bearer , priority 10 [ 91.564839][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 91.655531][ T7459] binder: 7458:7459 ioctl c0306201 2000000003c0 returned -14 [ 91.658248][ T7459] binder: 7458:7459 unknown command 0 [ 91.659211][ T40] audit: type=1400 audit(91.575:476): avc: denied { call } for pid=7458 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 91.660064][ T7459] binder: 7458:7459 ioctl c0306201 2000000001c0 returned -22 [ 91.672366][ T7461] binder: BINDER_SET_CONTEXT_MGR already set [ 91.674835][ T7461] binder: 7458:7461 ioctl 4018620d 2000000000c0 returned -16 [ 91.736358][ T7467] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 91.773639][ T7467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.915164][ T7472] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 91.924705][ T7472] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 91.929255][ T40] audit: type=1400 audit(91.845:477): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 92.552822][ T24] tipc: Node number set to 2886997007 [ 92.632187][ T7501] sctp: [Deprecated]: syz.2.463 (pid 7501) Use of int in max_burst socket option. [ 92.632187][ T7501] Use struct sctp_assoc_value instead [ 93.937121][ T7528] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 94.874980][ T5944] Bluetooth: hci0: unexpected subevent 0x06 length: 5 < 10 [ 95.515186][ T7565] xt_hashlimit: Unknown mode mask 180, kernel too old? [ 95.570532][ T7567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.740475][ T7570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=7570 comm=syz.0.479 [ 95.746124][ T7570] netlink: 'syz.0.479': attribute type 3 has an invalid length. [ 95.749210][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 95.892219][ T7572] 9pnet: p9_errstr2errno: server reported unknown error @íÿÿÿÿÿÿÿÿ$ [ 95.981573][ T5944] Bluetooth: hci0: unexpected subevent 0x06 length: 5 < 10 [ 96.229847][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 96.229858][ T40] audit: type=1400 audit(96.145:484): avc: denied { unlink } for pid=5938 comm="syz-executor" name="file0" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.241437][ T1023] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 96.363669][ T7582] vlan2: entered promiscuous mode [ 96.365387][ T7582] bridge0: entered promiscuous mode [ 96.391427][ T1023] usb 5-1: Using ep0 maxpacket: 16 [ 96.396088][ T1023] usb 5-1: config 0 has an invalid interface number: 114 but max is 0 [ 96.398613][ T1023] usb 5-1: config 0 has no interface number 0 [ 96.400634][ T1023] usb 5-1: config 0 interface 114 has no altsetting 0 [ 96.405940][ T1023] usb 5-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=f2.69 [ 96.408873][ T1023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.411558][ T1023] usb 5-1: Product: syz [ 96.412896][ T1023] usb 5-1: Manufacturer: syz [ 96.414448][ T1023] usb 5-1: SerialNumber: syz [ 96.417514][ T1023] usb 5-1: config 0 descriptor?? [ 96.507371][ T7589] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 96.513434][ T40] audit: type=1400 audit(96.435:485): avc: denied { mount } for pid=7587 comm="syz.3.487" name="/" dev="configfs" ino=2143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 96.630870][ T63] usb 5-1: USB disconnect, device number 8 [ 96.814153][ T40] audit: type=1400 audit(96.735:486): avc: denied { ioctl } for pid=7603 comm="syz.0.491" path="socket:[17718]" dev="sockfs" ino=17718 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 96.934862][ T7608] IPVS: length: 212 != 8 [ 97.014591][ T40] audit: type=1400 audit(96.935:487): avc: denied { getopt } for pid=7609 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.024604][ T40] audit: type=1400 audit(96.945:488): avc: denied { execute } for pid=7609 comm="syz.0.494" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.093825][ T7613] netlink: 'syz.3.495': attribute type 13 has an invalid length. [ 97.097022][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.495'. [ 97.165364][ T7619] netlink: 'syz.3.499': attribute type 2 has an invalid length. [ 97.169484][ T7619] netlink: 'syz.3.499': attribute type 11 has an invalid length. [ 97.173134][ T7619] netlink: 132 bytes leftover after parsing attributes in process `syz.3.499'. [ 97.179190][ T7624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.238361][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 97.245989][ T7641] netlink: zone id is out of range [ 97.325372][ T7651] CIFS mount error: No usable UNC path provided in device string! [ 97.325372][ T7651] [ 97.329803][ T7651] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 97.339289][ T7651] efs: device does not support 512 byte blocks [ 97.341434][ T7651] device does not support 512 byte blocks [ 97.341434][ T7651] [ 97.405734][ T40] audit: type=1400 audit(97.325:489): avc: denied { read } for pid=7655 comm="syz.2.509" path="socket:[19638]" dev="sockfs" ino=19638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.518053][ T40] audit: type=1400 audit(97.435:490): avc: denied { ioctl } for pid=7659 comm="syz.2.510" path="socket:[17750]" dev="sockfs" ino=17750 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.518185][ T7660] netlink: 44 bytes leftover after parsing attributes in process `syz.2.510'. [ 97.530482][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 97.556979][ T7670] openvswitch: netlink: Duplicate or invalid key (type 0). [ 97.559602][ T7670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.862846][ T40] audit: type=1400 audit(97.785:491): avc: denied { read } for pid=7683 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.008354][ T40] audit: type=1400 audit(97.925:492): avc: denied { ioctl } for pid=7687 comm="syz.2.520" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.017807][ T40] audit: type=1400 audit(97.925:493): avc: denied { map } for pid=7687 comm="syz.2.520" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.113518][ T7695] overlayfs: failed to resolve './file1': -2 [ 98.133071][ T7697] syzkaller1: entered promiscuous mode [ 98.135374][ T7697] syzkaller1: entered allmulticast mode [ 98.286741][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 98.289500][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 98.295914][ T7701] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.298791][ T7701] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.301600][ T7701] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.304370][ T7701] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.308199][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 98.310934][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 98.464294][ T7709] netlink: 'syz.2.528': attribute type 2 has an invalid length. [ 99.637222][ T7721] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 99.640905][ T7721] syz.2.533 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.673517][ T7723] openvswitch: netlink: IP tunnel dst address not specified [ 99.733441][ T7725] netlink: 80 bytes leftover after parsing attributes in process `syz.2.535'. [ 100.031864][ T1336] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 100.181588][ T1336] usb 7-1: Using ep0 maxpacket: 8 [ 100.185050][ T1336] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.188601][ T1336] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.192171][ T1336] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.195715][ T1336] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.200310][ T1336] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.204298][ T1336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.417789][ T1336] usb 7-1: GET_CAPABILITIES returned 0 [ 100.419948][ T1336] usbtmc 7-1:16.0: can't read capabilities [ 100.621390][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.624761][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.627574][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.630596][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.633734][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.637915][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.640827][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.643645][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.646441][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.649338][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.652207][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.655201][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.658005][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.660925][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.664046][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 100.667048][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 100.673412][ T57] usb 7-1: USB disconnect, device number 5 [ 101.353775][ T7754] FAULT_INJECTION: forcing a failure. [ 101.353775][ T7754] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.359402][ T7754] CPU: 3 UID: 0 PID: 7754 Comm: syz.1.545 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 101.359424][ T7754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.359433][ T7754] Call Trace: [ 101.359439][ T7754] [ 101.359445][ T7754] dump_stack_lvl+0x16c/0x1f0 [ 101.359501][ T7754] should_fail_ex+0x512/0x640 [ 101.359526][ T7754] _copy_to_user+0x32/0xd0 [ 101.359549][ T7754] simple_read_from_buffer+0xcb/0x170 [ 101.359575][ T7754] proc_fail_nth_read+0x197/0x270 [ 101.359602][ T7754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.359628][ T7754] ? rw_verify_area+0xcf/0x680 [ 101.359649][ T7754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.359673][ T7754] vfs_read+0x1de/0xc70 [ 101.359698][ T7754] ? __pfx___mutex_lock+0x10/0x10 [ 101.359718][ T7754] ? __pfx_vfs_read+0x10/0x10 [ 101.359746][ T7754] ? __fget_files+0x20e/0x3c0 [ 101.359778][ T7754] ksys_read+0x12a/0x240 [ 101.359802][ T7754] ? __pfx_ksys_read+0x10/0x10 [ 101.359833][ T7754] do_syscall_64+0xcd/0x260 [ 101.359858][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.359876][ T7754] RIP: 0033:0x7f14bef8d37c [ 101.359889][ T7754] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.359906][ T7754] RSP: 002b:00007f14bfea7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.359928][ T7754] RAX: ffffffffffffffda RBX: 00007f14bf1b5fa0 RCX: 00007f14bef8d37c [ 101.359938][ T7754] RDX: 000000000000000f RSI: 00007f14bfea70a0 RDI: 0000000000000009 [ 101.359947][ T7754] RBP: 00007f14bfea7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.359956][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.359965][ T7754] R13: 0000000000000000 R14: 00007f14bf1b5fa0 R15: 00007ffce8d2ee68 [ 101.359986][ T7754] [ 101.497049][ T7769] efs: device does not support 512 byte blocks [ 101.498950][ T7769] device does not support 512 byte blocks [ 101.498950][ T7769] [ 101.772150][ T5944] Bluetooth: hci3: ISO packet too small [ 101.953713][ T834] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 102.101462][ T834] usb 5-1: Using ep0 maxpacket: 8 [ 102.105182][ T834] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 102.107881][ T834] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 102.110522][ T834] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 102.113450][ T834] usb 5-1: config 250 has no interface number 0 [ 102.116104][ T834] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 102.119825][ T834] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 102.123113][ T834] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.126457][ T834] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 102.130223][ T834] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 102.135168][ T834] usb 5-1: config 250 interface 228 has no altsetting 0 [ 102.139114][ T834] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 102.142439][ T834] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 102.145080][ T834] usb 5-1: Product: syz [ 102.146708][ T834] usb 5-1: SerialNumber: syz [ 102.155259][ T834] hub 5-1:250.228: bad descriptor, ignoring hub [ 102.157296][ T834] hub 5-1:250.228: probe with driver hub failed with error -5 [ 102.319968][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 102.319982][ T40] audit: type=1400 audit(102.235:500): avc: denied { read } for pid=7801 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 102.354902][ T834] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 102.554088][ T40] audit: type=1400 audit(102.475:502): avc: denied { read write } for pid=7774 comm="syz.0.553" name="lp0" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 102.563877][ T40] audit: type=1400 audit(102.475:501): avc: denied { read write } for pid=7774 comm="syz.0.553" name="lp0" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 102.572776][ T1023] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 102.573537][ T40] audit: type=1400 audit(102.475:503): avc: denied { open } for pid=7774 comm="syz.0.553" path="/dev/usb/lp0" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 102.585563][ T40] audit: type=1400 audit(102.475:504): avc: denied { open } for pid=7774 comm="syz.0.553" path="/dev/usb/lp0" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 102.741416][ T1023] usb 7-1: Using ep0 maxpacket: 8 [ 102.744436][ T1023] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 102.747448][ T1023] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.750510][ T1023] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.755307][ T1023] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.758428][ T1023] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.762482][ T1023] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.765286][ T1023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.939450][ T7825] __nla_validate_parse: 6 callbacks suppressed [ 102.939477][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 102.971944][ T1023] usb 7-1: usb_control_msg returned -32 [ 102.973762][ T1023] usbtmc 7-1:16.0: can't read capabilities [ 102.976408][ T7828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64512 sclass=netlink_route_socket pid=7828 comm=syz.3.569 [ 102.986459][ T7775] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 103.110487][ T40] audit: type=1400 audit(103.025:505): avc: denied { mount } for pid=7839 comm="syz.3.573" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 103.340823][ T7815] vlan2: entered allmulticast mode [ 103.343686][ T7815] team0: entered allmulticast mode [ 103.345383][ T7815] team_slave_0: entered allmulticast mode [ 103.347179][ T7815] team_slave_1: entered allmulticast mode [ 103.349170][ T7815] team0: Device vlan2 is already an upper device of the team interface [ 104.205837][ T7871] xt_l2tp: v2 sid > 0xffff: 150994944 [ 104.516561][ T7883] sctp: [Deprecated]: syz.1.584 (pid 7883) Use of int in max_burst socket option. [ 104.516561][ T7883] Use struct sctp_assoc_value instead [ 105.138740][ T40] audit: type=1400 audit(105.055:506): avc: denied { ioctl } for pid=7893 comm="syz.3.588" path="socket:[19853]" dev="sockfs" ino=19853 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.246757][ T40] audit: type=1400 audit(105.165:507): avc: denied { setopt } for pid=7902 comm="syz.3.591" lport=48692 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 105.253218][ T40] audit: type=1400 audit(105.165:508): avc: denied { write } for pid=7902 comm="syz.3.591" lport=48692 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 105.665137][ T40] audit: type=1400 audit(105.585:509): avc: denied { mount } for pid=7920 comm="syz.1.595" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 105.668400][ T7921] devpts: Bad value for 'max' [ 106.976355][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 107.013989][ T7941] af_packet: tpacket_rcv: packet too big, clamped from 417 to 4294967272. macoff=96 [ 107.147026][ T7946] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 107.169481][ T7946] 9pnet: Could not find request transport: ot [ 107.627520][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 107.627572][ T40] audit: type=1400 audit(107.545:516): avc: denied { ioctl } for pid=7968 comm="syz.1.611" path="socket:[20048]" dev="sockfs" ino=20048 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.010070][ T40] audit: type=1400 audit(107.925:517): avc: denied { ioctl } for pid=7976 comm="syz.1.614" path="socket:[19290]" dev="sockfs" ino=19290 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 108.135991][ T7984] IPVS: Error connecting to the multicast addr [ 108.152196][ T7775] usb 5-1: failed to restore interface 228 altsetting 255 (error=-110) [ 108.155352][ T834] usb 5-1: USB disconnect, device number 9 [ 108.160192][ T834] usblp0: removed [ 108.173146][ T24] usb 7-1: USB disconnect, device number 6 [ 108.215849][ T7994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7994 comm=syz.0.619 [ 108.219954][ T7994] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 108.246108][ T7994] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 108.250463][ T7994] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 108.261000][ T7994] bond3: (slave wireguard0): making interface the new active one [ 108.266836][ T7994] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 108.350774][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 108.414853][ T8025] syz.1.628 uses old SIOCAX25GETINFO [ 108.418743][ T8024] netlink: 'syz.1.628': attribute type 4 has an invalid length. [ 108.465195][ T40] audit: type=1400 audit(108.375:518): avc: denied { getattr } for pid=8034 comm="syz.1.632" path="mnt:[4026533021]" dev="nsfs" ino=4026533021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.473197][ T40] audit: type=1400 audit(108.385:519): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 108.493776][ T8040] binder: BC_ATTEMPT_ACQUIRE not supported [ 108.495729][ T8040] binder: 8038:8040 ioctl c0306201 200000000100 returned -22 [ 108.522783][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 108.525633][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.635'. [ 108.608148][ T8064] netlink: 'syz.1.640': attribute type 10 has an invalid length. [ 108.610672][ T8064] netlink: 40 bytes leftover after parsing attributes in process `syz.1.640'. [ 108.644427][ T40] audit: type=1400 audit(108.565:520): avc: denied { module_request } for pid=8067 comm="syz.3.642" kmod="crypto-cryptd(__cbc-twofish-avx)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 108.665288][ T8064] netlink: 'syz.1.640': attribute type 8 has an invalid length. [ 108.713704][ T8074] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 108.716217][ T8074] netlink: 224 bytes leftover after parsing attributes in process `syz.1.643'. [ 108.805419][ T40] audit: type=1326 audit(108.725:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.644" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecc058e969 code=0x0 [ 108.811426][ T834] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 108.870812][ T8094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=8094 comm=syz.1.648 [ 108.928326][ T40] audit: type=1400 audit(108.845:522): avc: denied { relabelfrom } for pid=8104 comm="syz.1.651" name="" dev="pipefs" ino=20114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 108.931056][ T8105] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 108.940793][ T40] audit: type=1400 audit(108.855:523): avc: denied { relabelto } for pid=8104 comm="syz.1.651" name="" dev="pipefs" ino=20114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 108.971610][ T834] usb 5-1: Using ep0 maxpacket: 8 [ 108.975535][ T834] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 108.977858][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 108.981282][ T834] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.985253][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.988654][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 108.993362][ T834] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 108.995829][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 108.999251][ T834] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.002998][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.006549][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 109.010340][ T834] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 109.013013][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 109.016671][ T834] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.020288][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.023978][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 109.029277][ T834] usb 5-1: string descriptor 0 read error: -22 [ 109.031268][ T834] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 109.034254][ T834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.043669][ T834] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 109.247263][ T40] audit: type=1400 audit(109.165:524): avc: denied { mounton } for pid=8041 comm="syz.0.631" path="/137/bus" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 109.248400][ T8042] JFS: discard option not supported on device [ 109.257513][ T8042] syz.0.631: attempt to access beyond end of device [ 109.257513][ T8042] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 109.261716][ T8042] syz.0.631: attempt to access beyond end of device [ 109.261716][ T8042] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 109.265652][ T8042] Mount JFS Failure: -5 [ 109.272018][ T1023] usb 5-1: USB disconnect, device number 10 [ 109.628866][ T40] audit: type=1400 audit(109.545:525): avc: denied { map } for pid=8116 comm="syz.3.654" path="socket:[20121]" dev="sockfs" ino=20121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 109.645935][ T8119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'. [ 109.724353][ T8129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.015446][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.663'. [ 110.020159][ T8147] netlink: 'syz.3.664': attribute type 12 has an invalid length. [ 110.175062][ T8155] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 110.179441][ T8155] netlink: 'syz.1.666': attribute type 2 has an invalid length. [ 110.183195][ T8155] netlink: 'syz.1.666': attribute type 2 has an invalid length. [ 110.186481][ T8155] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 110.307789][ T8173] bond0: entered promiscuous mode [ 110.309449][ T8173] bond_slave_0: entered promiscuous mode [ 110.311295][ T8173] bond_slave_1: entered promiscuous mode [ 110.321015][ T8173] bond0: left promiscuous mode [ 110.322739][ T8173] bond_slave_0: left promiscuous mode [ 110.324568][ T8173] bond_slave_1: left promiscuous mode [ 110.461619][ T834] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 110.496830][ T8198] syz.0.678: attempt to access beyond end of device [ 110.496830][ T8198] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 110.501523][ T8198] syz.0.678: attempt to access beyond end of device [ 110.501523][ T8198] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 110.506342][ T8198] Mount JFS Failure: -5 [ 110.507956][ T8198] jfs_mount failed w/return code = -5 [ 110.577116][ T8212] overlayfs: failed to resolve './file0': -2 [ 110.611555][ T834] usb 6-1: Using ep0 maxpacket: 8 [ 110.618254][ T834] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.622631][ T834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.625679][ T834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.628781][ T834] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.633491][ T834] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.636497][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.707483][ T8225] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 110.711594][ T8225] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 110.855345][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 110.858142][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 110.880553][ T834] usb 6-1: GET_CAPABILITIES returned 0 [ 110.883635][ T834] usbtmc 6-1:16.0: can't read capabilities [ 111.082752][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.085654][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.088591][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.091447][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.094508][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.097345][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.101044][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.103993][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.106782][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.109599][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.112411][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.116145][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.119056][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.121883][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.124721][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.127492][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 111.152149][ T5994] usb 6-1: USB disconnect, device number 8 [ 111.555953][ T8243] openvswitch: netlink: Key type 30 is not supported [ 111.626987][ T8255] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.697'. [ 111.683770][ T8259] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 111.736170][ T8268] overlayfs: failed to clone upperpath [ 111.741421][ T8268] overlayfs: missing 'workdir' [ 111.772486][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 111.774786][ T5944] Bluetooth: Wrong link type (-22) [ 111.777980][ T5944] Bluetooth: hci3: link tx timeout [ 111.779723][ T5944] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.781231][ T8277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8277 comm=syz.0.706 [ 111.787368][ T8279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8279 comm=syz.0.706 [ 111.814045][ T8286] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 111.839496][ T8291] Bluetooth: MGMT ver 1.23 [ 111.872026][ T8295] ./file0: Can't lookup blockdev [ 111.949028][ T8307] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 112.152892][ T63] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 112.303848][ T63] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 112.307497][ T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 112.312447][ T63] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.317182][ T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.322218][ T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 112.327949][ T63] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 112.331071][ T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 112.335529][ T63] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.339727][ T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.344356][ T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 112.348655][ T63] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 112.351087][ T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 112.355347][ T63] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.359518][ T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.363174][ T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 112.369787][ T63] usb 5-1: string descriptor 0 read error: -22 [ 112.372627][ T63] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.376252][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.387089][ T63] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 112.588876][ T63] usb 5-1: USB disconnect, device number 11 [ 112.871602][ T1023] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 112.991213][ T8336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.022104][ T1023] usb 7-1: Invalid ep0 maxpacket: 16 [ 113.171517][ T1023] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 113.313944][ T8343] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 113.317376][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 113.317385][ T40] audit: type=1400 audit(113.235:545): avc: denied { relabelto } for pid=8342 comm="syz.0.731" name="160" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 113.321460][ T1023] usb 7-1: Invalid ep0 maxpacket: 16 [ 113.327549][ T40] audit: type=1400 audit(113.235:546): avc: denied { associate } for pid=8342 comm="syz.0.731" name="160" dev="tmpfs" ino=865 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 113.329362][ T1023] usb usb7-port1: attempt power cycle [ 113.435583][ T8344] __nla_validate_parse: 2 callbacks suppressed [ 113.435600][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.731'. [ 113.692651][ T1023] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 113.711901][ T1023] usb 7-1: Invalid ep0 maxpacket: 16 [ 113.831477][ T5941] Bluetooth: hci3: command 0x0405 tx timeout [ 113.841516][ T1023] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 113.861922][ T1023] usb 7-1: Invalid ep0 maxpacket: 16 [ 113.864713][ T1023] usb usb7-port1: unable to enumerate USB device [ 113.906006][ T8367] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 114.095409][ T40] audit: type=1400 audit(114.015:547): avc: denied { execute } for pid=8384 comm="syz.3.748" dev="hugetlbfs" ino=20647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 114.103305][ T40] audit: type=1400 audit(114.015:548): avc: denied { execute_no_trans } for pid=8384 comm="syz.3.748" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=20647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 114.224444][ T40] audit: type=1400 audit(114.145:549): avc: denied { write } for pid=5931 comm="syz-executor" name="160" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 114.233525][ T40] audit: type=1400 audit(114.145:550): avc: denied { remove_name } for pid=5931 comm="syz-executor" name="binderfs" dev="tmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 114.243168][ T40] audit: type=1400 audit(114.145:551): avc: denied { rmdir } for pid=5931 comm="syz-executor" name="160" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 114.267001][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.754'. [ 114.530507][ T40] audit: type=1400 audit(114.445:552): avc: denied { bind } for pid=8412 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.532787][ T8413] xt_hashlimit: size too large, truncated to 1048576 [ 114.589985][ T40] audit: type=1400 audit(114.505:553): avc: denied { read } for pid=8412 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.861588][ T7961] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 115.031514][ T7961] usb 5-1: Using ep0 maxpacket: 16 [ 115.034903][ T7961] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.038487][ T7961] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.041784][ T7961] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 115.045161][ T7961] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 115.048189][ T7961] usb 5-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 115.052385][ T7961] usb 5-1: config 7 interface 0 has no altsetting 0 [ 115.054504][ T7961] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 115.057402][ T7961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.174082][ T40] audit: type=1400 audit(115.095:554): avc: denied { setopt } for pid=8422 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.280518][ T8433] overlay: Bad value for 'workdir' [ 115.333654][ T8437] validate_nla: 9 callbacks suppressed [ 115.333666][ T8437] netlink: 'syz.3.766': attribute type 142 has an invalid length. [ 115.340219][ T8437] netlink: 'syz.3.766': attribute type 142 has an invalid length. [ 115.369313][ T8442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.767'. [ 115.372285][ T8442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.767'. [ 115.410162][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 115.447680][ T8446] overlayfs: failed to clone upperpath [ 115.476492][ T7961] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:7.0/0003:0458:5010.0003/input/input10 [ 115.497417][ T8450] netlink: 'syz.3.771': attribute type 2 has an invalid length. [ 115.573491][ T8456] ipt_ECN: cannot use operation on non-tcp rule [ 115.609774][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'. [ 115.613388][ T8456] bridge_slave_1: left promiscuous mode [ 115.615716][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.624879][ T8456] bridge_slave_0: left allmulticast mode [ 115.627442][ T8456] bridge_slave_0: left promiscuous mode [ 115.630042][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.632254][ T7961] kye 0003:0458:5010.0003: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 115.897514][ T8487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3059194103 (97894211296 ns) > initial count (54719359488 ns). Using initial count to start timer. [ 115.906826][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 115.909595][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.784'. [ 116.032433][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 116.116969][ T8498] netlink: 108 bytes leftover after parsing attributes in process `syz.2.786'. [ 116.142771][ T8508] lo speed is unknown, defaulting to 1000 [ 116.145001][ T8508] lo speed is unknown, defaulting to 1000 [ 116.148046][ T8508] lo speed is unknown, defaulting to 1000 [ 116.153573][ T8508] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.159771][ T8508] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.177409][ T8508] lo speed is unknown, defaulting to 1000 [ 116.181039][ T8508] lo speed is unknown, defaulting to 1000 [ 116.184957][ T8508] lo speed is unknown, defaulting to 1000 [ 116.193300][ T8508] lo speed is unknown, defaulting to 1000 [ 116.233258][ T8512] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 116.360309][ T8516] mkiss: ax0: crc mode is auto. [ 116.467370][ T8524] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 116.584069][ C0] kye 0003:0458:5010.0003: usb_submit_urb(ctrl) failed: -1 [ 117.123225][ T8543] netlink: 'syz.0.801': attribute type 3 has an invalid length. [ 117.202087][ T8546] loop6: detected capacity change from 0 to 524287999 [ 117.292010][ T8558] ptm ptm5: ldisc open failed (-12), clearing slot 5 [ 117.349612][ T8564] netlink: 'syz.0.807': attribute type 21 has an invalid length. [ 117.354736][ T8564] netlink: 'syz.0.807': attribute type 5 has an invalid length. [ 117.357896][ T8564] netlink: 'syz.0.807': attribute type 6 has an invalid length. [ 117.378445][ T5994] usb 5-1: USB disconnect, device number 12 [ 117.584364][ T8585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 117.770836][ T8598] netlink: 'syz.3.818': attribute type 2 has an invalid length. [ 117.773465][ T8598] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 117.782192][ T8602] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 117.807955][ T8606] IPv4: Oversized IP packet from 127.202.26.0 [ 117.835951][ T8611] 9pnet_fd: p9_fd_create_tcp (8611): problem binding to privport [ 117.837793][ T8612] 9pnet_fd: p9_fd_create_tcp (8612): problem connecting socket to 127.0.0.1 [ 117.844062][ T8611] Invalid source name [ 117.846522][ T8611] UBIFS error (pid: 8611): cannot open "/dev/sg0", error -22 [ 118.308570][ T8647] 9p: Unknown Cache mode or invalid value ‡map [ 118.358931][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 118.358943][ T40] audit: type=1400 audit(118.275:565): avc: denied { execute } for pid=8646 comm="syz.1.834" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.361427][ T63] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 118.512558][ T63] usb 5-1: device descriptor read/64, error -71 [ 118.569650][ T40] audit: type=1400 audit(118.485:566): avc: denied { ioctl } for pid=8660 comm="syz.1.839" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 118.580184][ T8661] __nla_validate_parse: 7 callbacks suppressed [ 118.580194][ T8661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.839'. [ 118.588445][ T8661] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8661 comm=syz.1.839 [ 118.598929][ T40] audit: type=1400 audit(118.515:567): avc: denied { setopt } for pid=8660 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.602239][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 118.648641][ T8663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.840'. [ 118.757299][ T63] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 118.764718][ T5944] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 118.788151][ T40] audit: type=1400 audit(118.705:568): avc: denied { listen } for pid=8671 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.799208][ T8674] @: renamed from vlan0 (while UP) [ 118.820514][ T8677] netlink: 284 bytes leftover after parsing attributes in process `syz.1.846'. [ 118.842609][ T8679] No such timeout policy "syz1" [ 118.890334][ T8679] overlayfs: failed to clone lowerpath [ 118.891480][ T63] usb 5-1: device descriptor read/64, error -71 [ 118.926804][ T8684] tipc: Started in network mode [ 118.928433][ T8684] tipc: Node identity fe80000000000000000000000000001e, cluster identity 4711 [ 118.933488][ T8684] tipc: Enabled bearer , priority 10 [ 118.937219][ T8683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.849'. [ 119.001603][ T63] usb usb5-port1: attempt power cycle [ 119.078238][ T8696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.853'. [ 119.093022][ T8696] team0: Port device geneve0 added [ 119.136516][ T5944] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 119.234611][ T8706] binder: BINDER_SET_CONTEXT_MGR already set [ 119.236572][ T8707] binder: BINDER_SET_CONTEXT_MGR already set [ 119.238450][ T8707] binder: 8704:8707 ioctl 4018620d 200000000040 returned -16 [ 119.240841][ T8706] binder: 8704:8706 ioctl 4018620d 200000000440 returned -16 [ 119.241461][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 119.246120][ T8705] binder: 8704:8705 ioctl 4018620d 200000000040 returned -16 [ 119.281529][ T5944] Bluetooth: hci1: unexpected event 0x3e length: 262 > 260 [ 119.281549][ T5944] Bluetooth: hci1: unexpected subevent 0x0d length: 261 > 260 [ 119.281837][ T40] audit: type=1326 audit(119.205:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.2.858" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecc058e969 code=0x0 [ 119.283953][ T5944] Bluetooth: hci1: adv larger than maximum supported [ 119.294140][ T5944] Bluetooth: hci1: adv larger than maximum supported [ 119.361463][ T63] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 119.368006][ T8722] netlink: 256 bytes leftover after parsing attributes in process `syz.2.860'. [ 119.382424][ T63] usb 5-1: device descriptor read/8, error -71 [ 119.435113][ T5944] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 119.454285][ T8732] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 119.515464][ T40] audit: type=1400 audit(119.435:570): avc: denied { add_name } for pid=8741 comm="syz.2.866" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 119.534297][ T40] audit: type=1400 audit(119.435:571): avc: denied { create } for pid=8741 comm="syz.2.866" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 119.541038][ T40] audit: type=1400 audit(119.435:572): avc: denied { associate } for pid=8741 comm="syz.2.866" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.547875][ T40] audit: type=1400 audit(119.445:573): avc: denied { mounton } for pid=8741 comm="syz.2.866" path="/178/file0" dev="tmpfs" ino=967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 119.585945][ T8751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.870'. [ 119.591294][ T8754] overlayfs: failed to clone upperpath [ 119.596183][ T5944] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 119.600606][ T8751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.870'. [ 119.621503][ T63] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 119.653114][ T63] usb 5-1: device descriptor read/8, error -71 [ 119.666026][ T40] audit: type=1400 audit(119.585:574): avc: denied { rmdir } for pid=5935 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 119.717935][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 119.771593][ T63] usb usb5-port1: unable to enumerate USB device [ 119.804833][ T8770] team0 (unregistering): Port device team_slave_0 removed [ 119.812467][ T8770] team0 (unregistering): Port device team_slave_1 removed [ 119.822129][ T8770] team0 (unregistering): Port device geneve0 removed [ 119.869479][ T8781] ipvlan2: entered allmulticast mode [ 119.871178][ T8781] veth0_vlan: entered allmulticast mode [ 119.922094][ T5944] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 119.941520][ T1023] tipc: Node number set to 4269801502 [ 119.981463][ T65] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 120.131435][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 120.135292][ T65] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.138469][ T65] usb 7-1: config 0 has no interfaces? [ 120.140282][ T65] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.143873][ T6424] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 120.146339][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.149083][ T834] IPVS: starting estimator thread 0... [ 120.150712][ T65] usb 7-1: config 0 descriptor?? [ 120.153550][ T8793] tipc: Enabled bearer , priority 10 [ 120.251633][ T8794] IPVS: using max 44 ests per chain, 105600 per kthread [ 120.291847][ T6424] usb 6-1: Using ep0 maxpacket: 8 [ 120.294885][ T6424] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.298283][ T6424] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 120.301822][ T6424] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.305593][ T6424] usb 6-1: config 0 descriptor?? [ 120.402509][ T8776] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 120.407149][ T8776] macsec1: entered allmulticast mode [ 120.409427][ T8776] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 120.417146][ T65] IPVS: starting estimator thread 0... [ 120.422102][ T65] usb 7-1: USB disconnect, device number 11 [ 120.501521][ T8803] IPVS: using max 44 ests per chain, 105600 per kthread [ 120.513516][ T6424] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 120.522654][ T29] usb 6-1: USB disconnect, device number 9 [ 120.622456][ T8811] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 120.626279][ T8811] ref_ctr increment failed for inode: 0x38e offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888034fb4600 [ 121.075435][ T8829] overlayfs: failed to clone upperpath [ 121.078023][ T8829] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 121.080491][ T8829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 121.764702][ T8863] tmpfs: Unknown parameter 'm­²pol' [ 121.888608][ T8867] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 121.893326][ T8867] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 122.437525][ T5944] Bluetooth: hci3: unexpected subevent 0x06 length: 5 < 10 [ 122.499257][ T29] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 122.599605][ T8922] bridge_slave_0: left allmulticast mode [ 122.602388][ T8922] bridge_slave_0: left promiscuous mode [ 122.604575][ T8922] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.610381][ T8922] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 122.651442][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 122.655583][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.660299][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.664592][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 122.670573][ T29] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 122.675907][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.683726][ T29] usb 7-1: config 0 descriptor?? [ 122.888756][ T8934] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 122.919595][ T8936] validate_nla: 2 callbacks suppressed [ 122.919610][ T8936] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 122.926297][ T8937] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 123.094962][ T29] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 123.097392][ T29] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 123.099606][ T29] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 123.102622][ T29] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 123.105272][ T29] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 123.114762][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 123.164510][ T29] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 123.168286][ T29] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 123.301972][ T8895] random: crng reseeded on system resumption [ 123.344797][ T8954] Bluetooth: hci0: unsupported parameter 16384 [ 123.346761][ T8954] Bluetooth: hci0: unsupported parameter 16384 [ 123.366348][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 123.366360][ T40] audit: type=1400 audit(123.285:587): avc: denied { map } for pid=8894 comm="syz.2.911" path="pipe:[738]" dev="pipefs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 123.394868][ T40] audit: type=1400 audit(123.315:588): avc: denied { execute } for pid=8957 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 123.404774][ T40] audit: type=1400 audit(123.325:589): avc: denied { execute_no_trans } for pid=8957 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 123.423657][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.427333][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.439157][ T8895] NILFS (nullb0): couldn't find nilfs on the device [ 123.444729][ T57] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 123.448918][ T29] usb 7-1: USB disconnect, device number 12 [ 123.451512][ T57] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 123.456039][ T57] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 123.466614][ T57] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 123.485410][ T40] audit: type=1400 audit(123.405:590): avc: denied { read } for pid=8965 comm="syz.3.933" path="socket:[23103]" dev="sockfs" ino=23103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.517673][ T8969] Invalid ELF header type: 2 != 1 [ 123.518058][ T40] audit: type=1400 audit(123.435:591): avc: denied { module_load } for pid=8967 comm="syz.3.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 123.521009][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.529584][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.540784][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.544287][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.546937][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.553029][ T40] audit: type=1400 audit(123.475:592): avc: denied { mounton } for pid=8968 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 123.558718][ T8969] xt_cgroup: invalid path, errno=-2 [ 123.571016][ T8968] lo speed is unknown, defaulting to 1000 [ 123.644923][ T8979] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.647907][ T8979] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.663568][ T8968] chnl_net:caif_netlink_parms(): no params data found [ 123.677278][ T40] audit: type=1400 audit(123.595:593): avc: denied { read } for pid=8983 comm="syz.3.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 123.681799][ T8984] __nla_validate_parse: 10 callbacks suppressed [ 123.681809][ T8984] netlink: 11 bytes leftover after parsing attributes in process `syz.3.936'. [ 123.733208][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.735527][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.737749][ T8968] bridge_slave_0: entered allmulticast mode [ 123.740316][ T8968] bridge_slave_0: entered promiscuous mode [ 123.743891][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.746142][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.748408][ T8968] bridge_slave_1: entered allmulticast mode [ 123.750942][ T8968] bridge_slave_1: entered promiscuous mode [ 123.781239][ T8968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.786507][ T8968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.821788][ T8968] team0: Port device team_slave_0 added [ 123.825727][ T8968] team0: Port device team_slave_1 added [ 123.856706][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.859631][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.870361][ T8968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.876666][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.879242][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.887304][ T8968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.939917][ T8968] hsr_slave_0: entered promiscuous mode [ 123.942717][ T8968] hsr_slave_1: entered promiscuous mode [ 123.944793][ T8968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.947176][ T8968] Cannot create hsr debugfs directory [ 123.976510][ T40] audit: type=1400 audit(123.895:594): avc: denied { setopt } for pid=8988 comm="syz.2.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 124.075000][ T8968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.108386][ T8998] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 124.110941][ T8998] overlayfs: failed to set xattr on upper [ 124.114100][ T8998] overlayfs: ...falling back to redirect_dir=nofollow. [ 124.116783][ T8998] overlayfs: ...falling back to index=off. [ 124.119126][ T8998] overlayfs: ...falling back to uuid=null. [ 124.133754][ T8968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.184183][ T40] audit: type=1400 audit(124.105:595): avc: denied { setattr } for pid=9001 comm="syz.2.943" name="/" dev="9p" ino=35913840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.217328][ T8968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.274792][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 124.277522][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 124.283159][ T9010] ipvlan2: entered allmulticast mode [ 124.284854][ T9010] veth0_vlan: entered allmulticast mode [ 124.304042][ T5941] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 124.307725][ T5941] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 124.310006][ T5941] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 124.313451][ T5941] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 124.386019][ T8968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.466014][ T9025] No buffer was provided with the request [ 124.469940][ T9025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.950'. [ 124.508176][ T5941] Bluetooth: hci1: Malformed LE Event: 0x0b [ 124.508491][ T40] audit: type=1400 audit(124.425:596): avc: denied { map } for pid=9026 comm="syz.2.951" path="/198" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 124.527700][ T8968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.532873][ T8968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.545175][ T8968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 124.550247][ T8968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.577974][ T9034] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.953'. [ 124.590726][ T5941] Bluetooth: hci1: unexpected subevent 0x06 length: 5 < 10 [ 124.593184][ T8968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.606825][ T8968] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.615175][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.617419][ T8503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.625686][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.627962][ T8499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.674489][ T9041] netlink: 'syz.0.956': attribute type 10 has an invalid length. [ 124.686769][ T9041] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 124.689320][ T9041] team0: Port device wlan1 added [ 124.745805][ T8968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.783467][ T8968] veth0_vlan: entered promiscuous mode [ 124.789529][ T8968] veth1_vlan: entered promiscuous mode [ 124.807000][ T8968] veth0_macvtap: entered promiscuous mode [ 124.811566][ T8968] veth1_macvtap: entered promiscuous mode [ 124.820371][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.823751][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.827059][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.830883][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.836128][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.840460][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.845750][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.853776][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.857953][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.861568][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.864772][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.867817][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.871094][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.875628][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.879782][ T8968] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.882594][ T8968] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.885337][ T8968] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.888033][ T8968] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.943582][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.948753][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.966795][ T6744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.969346][ T6744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.199331][ T5941] Bluetooth: hci0: unexpected subevent 0x06 length: 5 < 10 [ 125.505875][ T9089] PM: Enabling pm_trace changes system date and time during resume. [ 125.505875][ T9089] PM: Correct system time has to be restored manually after resume. [ 125.557801][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.971'. [ 125.577346][ T9091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.667041][ T9094] Invalid ELF header magic: != ELF [ 125.809133][ T9104] devpts: Bad value for 'max' [ 126.020301][ T9116] vivid-001: disconnect [ 126.027182][ T9114] vivid-001: reconnect [ 126.090529][ T9126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.981'. [ 126.201172][ T9140] netlink: 'syz.2.987': attribute type 29 has an invalid length. [ 126.205685][ T9140] netlink: 'syz.2.987': attribute type 29 has an invalid length. [ 126.205977][ T9138] xt_hashlimit: size too large, truncated to 1048576 [ 126.208954][ T9140] netlink: 500 bytes leftover after parsing attributes in process `syz.2.987'. [ 126.240122][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 126.244335][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 126.271108][ T9141] syzkaller1: entered promiscuous mode [ 126.273679][ T9141] syzkaller1: entered allmulticast mode [ 126.381970][ T9172] bridge0: port 1(veth0_to_bridge) entered blocking state [ 126.384490][ T9172] bridge0: port 1(veth0_to_bridge) entered disabled state [ 126.387398][ T9172] veth0_to_bridge: entered allmulticast mode [ 126.393990][ T9172] veth0_to_bridge: entered promiscuous mode [ 126.397998][ T9172] bridge0: port 1(veth0_to_bridge) entered blocking state [ 126.400720][ T9172] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 126.446206][ T9178] syz_tun: entered allmulticast mode [ 126.466555][ T9177] syz_tun: left allmulticast mode [ 126.495391][ T9189] ------------[ cut here ]------------ [ 126.497341][ T9189] no supported rates for sta 08:02:11:00:00:01 (0xf, band 0) in rate_mask 0xffffffff with flags 0x10 [ 126.501141][ T9189] WARNING: CPU: 3 PID: 9189 at net/mac80211/rate.c:399 __rate_control_send_low+0x6d9/0x800 [ 126.504374][ T9189] Modules linked in: [ 126.505995][ T9189] CPU: 3 UID: 0 PID: 9189 Comm: syz.0.1001 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 126.511282][ T9189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.514846][ T9189] RIP: 0010:__rate_control_send_low+0x6d9/0x800 [ 126.516856][ T9189] Code: a4 a0 d4 00 00 00 e8 56 e5 d7 f6 44 8b 44 24 3c 45 89 e9 89 d9 48 8b 74 24 18 44 89 e2 48 c7 c7 a0 1b e4 8c e8 c8 70 97 f6 90 <0f> 0b 90 90 e9 ff fc ff ff 48 8b 7c 24 30 e8 64 60 3d f7 e9 e1 fb [ 126.522903][ T9189] RSP: 0018:ffffc90003386d18 EFLAGS: 00010282 Connection to localhost closed by remote host. [ 126.525009][ T9189] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90006f61000 [ 126.527753][ T9189] RDX: 0000000000080000 RSI: ffffffff817ac025 RDI: 0000000000000001 [ 126.530337][ T9189] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 126.532903][ T9189] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000f [ 126.535587][ T9189] R13: 0000000000000010 R14: 000000000000000c R15: dffffc0000000000 [ 126.538111][ T9189] FS: 00007fef42b466c0(0000) GS:ffff8880d6ce2000(0000) knlGS:0000000000000000 [ 126.540899][ T9189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.543029][ T9189] CR2: 000000110c35e7c5 CR3: 0000000012dc8000 CR4: 0000000000352ef0 [ 126.545553][ T9189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.548033][ T9189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.550496][ T9189] Call Trace: [ 126.551619][ T9189] [ 126.552567][ T9189] ? kasan_save_stack+0x42/0x60 [ 126.554142][ T9189] rate_control_send_low+0x116/0x820 [ 126.555833][ T9189] ? cfg80211_mlme_mgmt_tx+0x7d2/0x1660 [ 126.557597][ T9189] ? nl80211_tx_mgmt+0x804/0xd60 [ 126.559164][ T9189] rate_control_get_rate+0x1be/0x5e0 [ 126.560834][ T9189] ieee80211_tx_h_rate_ctrl+0xad3/0x1a90 [ 126.562673][ T9189] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 126.564637][ T9189] ? lock_acquire+0x179/0x350 [ 126.566147][ T9189] invoke_tx_handlers_late+0xca9/0x2b40 [ 126.567907][ T9189] ? ieee80211_tx_h_select_key+0x279/0x1a50 [ 126.569759][ T9189] ? invoke_tx_handlers_early+0x663/0x2720 [ 126.571656][ T9189] ieee80211_tx+0x304/0x420 [ 126.573096][ T9189] ? __pfx_ieee80211_tx+0x10/0x10 [ 126.574714][ T9189] ? ieee80211_skb_resize+0x22a/0x630 [ 126.576376][ T9189] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 126.578048][ T9189] ieee80211_xmit+0x30f/0x3e0 [ 126.579532][ T9189] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 126.581405][ T9189] ieee80211_tx_skb_tid+0x176/0x4f0 [ 126.583048][ T9189] ieee80211_mgmt_tx+0x14d2/0x2310 [ 126.585232][ T9189] cfg80211_mlme_mgmt_tx+0x7d2/0x1660 [ 126.587494][ T9189] nl80211_tx_mgmt+0x804/0xd60 [ 126.589589][ T9189] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 126.591316][ T9189] ? __pfx___mutex_lock+0x10/0x10 [ 126.592964][ T9189] ? nl80211_pre_doit+0x1b0/0xb10 [ 126.594575][ T9189] genl_family_rcv_msg_doit+0x206/0x2f0 [ 126.596334][ T9189] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 126.598242][ T9189] ? bpf_lsm_capable+0x9/0x10 [ 126.599722][ T9189] ? security_capable+0x7e/0x260 [ 126.601283][ T9189] ? ns_capable+0xd7/0x110 [ 126.602764][ T9189] genl_rcv_msg+0x55c/0x800 [ 126.604331][ T9189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.605934][ T9189] ? __pfx___dev_queue_xmit+0x10/0x10 [ 126.607654][ T9189] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 126.609365][ T9189] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 126.611052][ T9189] ? __pfx_nl80211_post_doit+0x10/0x10 [ 126.612814][ T9189] ? __lock_acquire+0xaa4/0x1ba0 [ 126.614394][ T9189] netlink_rcv_skb+0x16a/0x440 [ 126.615909][ T9189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.617484][ T9189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.619182][ T9189] ? __pfx_down_read+0x10/0x10 [ 126.620701][ T9189] ? netlink_deliver_tap+0x1ae/0xd30 [ 126.622414][ T9189] genl_rcv+0x28/0x40 [ 126.623690][ T9189] netlink_unicast+0x53a/0x7f0 [ 126.625217][ T9189] ? __pfx_netlink_unicast+0x10/0x10 [ 126.626870][ T9189] netlink_sendmsg+0x8d1/0xdd0 [ 126.628387][ T9189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.630492][ T9189] ____sys_sendmsg+0xa95/0xc70 [ 126.632226][ T9189] ? copy_msghdr_from_user+0x10a/0x160 [ 126.633928][ T9189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.635631][ T9189] ___sys_sendmsg+0x134/0x1d0 [ 126.637118][ T9189] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.638753][ T9189] __sys_sendmsg+0x16d/0x220 [ 126.640206][ T9189] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.641858][ T9189] ? __x64_sys_futex+0x1e0/0x4c0 [ 126.643426][ T9189] ? rcu_is_watching+0x12/0xc0 [ 126.645027][ T9189] do_syscall_64+0xcd/0x260 [ 126.646503][ T9189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.648369][ T9189] RIP: 0033:0x7fef41d8e969 [ 126.650146][ T9189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.656202][ T9189] RSP: 002b:00007fef42b46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.658866][ T9189] RAX: ffffffffffffffda RBX: 00007fef41fb5fa0 RCX: 00007fef41d8e969 [ 126.661238][ T9189] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 126.663667][ T9189] RBP: 00007fef41e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 126.666090][ T9189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.668544][ T9189] R13: 0000000000000000 R14: 00007fef41fb5fa0 R15: 00007ffe0d9d9de8 [ 126.671430][ T9189] [ 126.672401][ T9189] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.674617][ T9189] CPU: 3 UID: 0 PID: 9189 Comm: syz.0.1001 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 126.678210][ T9189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.681806][ T9189] Call Trace: [ 126.682849][ T9189] [ 126.683801][ T9189] dump_stack_lvl+0x3d/0x1f0 [ 126.685248][ T9189] panic+0x71c/0x800 [ 126.686461][ T9189] ? __pfx_panic+0x10/0x10 [ 126.687842][ T9189] ? show_trace_log_lvl+0x29b/0x3e0 [ 126.689884][ T9189] ? __rate_control_send_low+0x6d9/0x800 [ 126.691659][ T9189] check_panic_on_warn+0xab/0xb0 [ 126.693192][ T9189] __warn+0xf6/0x3c0 [ 126.694499][ T9189] ? __rate_control_send_low+0x6d9/0x800 [ 126.696302][ T9189] report_bug+0x3c3/0x580 [ 126.697739][ T9189] ? __rate_control_send_low+0x6d9/0x800 [ 126.699556][ T9189] handle_bug+0x184/0x210 [ 126.700957][ T9189] exc_invalid_op+0x17/0x50 [ 126.702382][ T9189] asm_exc_invalid_op+0x1a/0x20 [ 126.703912][ T9189] RIP: 0010:__rate_control_send_low+0x6d9/0x800 [ 126.705874][ T9189] Code: a4 a0 d4 00 00 00 e8 56 e5 d7 f6 44 8b 44 24 3c 45 89 e9 89 d9 48 8b 74 24 18 44 89 e2 48 c7 c7 a0 1b e4 8c e8 c8 70 97 f6 90 <0f> 0b 90 90 e9 ff fc ff ff 48 8b 7c 24 30 e8 64 60 3d f7 e9 e1 fb [ 126.712126][ T9189] RSP: 0018:ffffc90003386d18 EFLAGS: 00010282 [ 126.714053][ T9189] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90006f61000 [ 126.716528][ T9189] RDX: 0000000000080000 RSI: ffffffff817ac025 RDI: 0000000000000001 [ 126.719086][ T9189] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 126.721549][ T9189] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000f [ 126.724055][ T9189] R13: 0000000000000010 R14: 000000000000000c R15: dffffc0000000000 [ 126.726565][ T9189] ? __warn_printk+0x1a5/0x350 [ 126.728135][ T9189] ? __rate_control_send_low+0x6d8/0x800 [ 126.730293][ T9189] ? kasan_save_stack+0x42/0x60 [ 126.731841][ T9189] rate_control_send_low+0x116/0x820 [ 126.733514][ T9189] ? cfg80211_mlme_mgmt_tx+0x7d2/0x1660 [ 126.735260][ T9189] ? nl80211_tx_mgmt+0x804/0xd60 [ 126.736836][ T9189] rate_control_get_rate+0x1be/0x5e0 [ 126.738573][ T9189] ieee80211_tx_h_rate_ctrl+0xad3/0x1a90 [ 126.740595][ T9189] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 126.742518][ T9189] ? lock_acquire+0x179/0x350 [ 126.744058][ T9189] invoke_tx_handlers_late+0xca9/0x2b40 [ 126.745788][ T9189] ? ieee80211_tx_h_select_key+0x279/0x1a50 [ 126.747649][ T9189] ? invoke_tx_handlers_early+0x663/0x2720 [ 126.749604][ T9189] ieee80211_tx+0x304/0x420 [ 126.751041][ T9189] ? __pfx_ieee80211_tx+0x10/0x10 [ 126.752639][ T9189] ? ieee80211_skb_resize+0x22a/0x630 [ 126.754319][ T9189] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 126.756009][ T9189] ieee80211_xmit+0x30f/0x3e0 [ 126.757496][ T9189] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 126.759705][ T9189] ieee80211_tx_skb_tid+0x176/0x4f0 [ 126.761861][ T9189] ieee80211_mgmt_tx+0x14d2/0x2310 [ 126.763661][ T9189] cfg80211_mlme_mgmt_tx+0x7d2/0x1660 [ 126.765360][ T9189] nl80211_tx_mgmt+0x804/0xd60 [ 126.766898][ T9189] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 126.768664][ T9189] ? __pfx___mutex_lock+0x10/0x10 [ 126.770546][ T9189] ? nl80211_pre_doit+0x1b0/0xb10 [ 126.772123][ T9189] genl_family_rcv_msg_doit+0x206/0x2f0 [ 126.773848][ T9189] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 126.775791][ T9189] ? bpf_lsm_capable+0x9/0x10 [ 126.777276][ T9189] ? security_capable+0x7e/0x260 [ 126.778866][ T9189] ? ns_capable+0xd7/0x110 [ 126.780243][ T9189] genl_rcv_msg+0x55c/0x800 [ 126.781602][ T9189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.783115][ T9189] ? __pfx___dev_queue_xmit+0x10/0x10 [ 126.784805][ T9189] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 126.786410][ T9189] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 126.788030][ T9189] ? __pfx_nl80211_post_doit+0x10/0x10 [ 126.790140][ T9189] ? __lock_acquire+0xaa4/0x1ba0 [ 126.791825][ T9189] netlink_rcv_skb+0x16a/0x440 [ 126.793204][ T9189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.794751][ T9189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.796922][ T9189] ? __pfx_down_read+0x10/0x10 [ 126.798906][ T9189] ? netlink_deliver_tap+0x1ae/0xd30 [ 126.801095][ T9189] genl_rcv+0x28/0x40 [ 126.802736][ T9189] netlink_unicast+0x53a/0x7f0 [ 126.804702][ T9189] ? __pfx_netlink_unicast+0x10/0x10 [ 126.806900][ T9189] netlink_sendmsg+0x8d1/0xdd0 [ 126.808749][ T9189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.810835][ T9189] ____sys_sendmsg+0xa95/0xc70 [ 126.812725][ T9189] ? copy_msghdr_from_user+0x10a/0x160 [ 126.814914][ T9189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.817099][ T9189] ___sys_sendmsg+0x134/0x1d0 [ 126.819008][ T9189] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.821241][ T9189] __sys_sendmsg+0x16d/0x220 [ 126.823208][ T9189] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.825120][ T9189] ? __x64_sys_futex+0x1e0/0x4c0 [ 126.826653][ T9189] ? rcu_is_watching+0x12/0xc0 [ 126.828149][ T9189] do_syscall_64+0xcd/0x260 [ 126.829642][ T9189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.831488][ T9189] RIP: 0033:0x7fef41d8e969 [ 126.832844][ T9189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.838911][ T9189] RSP: 002b:00007fef42b46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.841860][ T9189] RAX: ffffffffffffffda RBX: 00007fef41fb5fa0 RCX: 00007fef41d8e969 [ 126.844202][ T9189] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 126.846576][ T9189] RBP: 00007fef41e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 126.849179][ T9189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.851758][ T9189] R13: 0000000000000000 R14: 00007fef41fb5fa0 R15: 00007ffe0d9d9de8 [ 126.854175][ T9189] [ 126.855802][ T9189] Kernel Offset: disabled [ 126.857131][ T9189] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:27:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffc90003148000 RDX=1ffff92000628f0e RSI=ffffc90003147ba8 RDI=ffffc900031478b0 RBP=ffff88801c6f1cc0 RSP=ffffc90003147800 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000002 R11=000000000001207c R12=ffffc900031478c0 R13=ffffc90003147870 R14=ffffc90003147bc0 R15=ffffc900031478a4 RIP=ffffffff8169df21 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555606bc500 ffffffff 00c00000 GS =0000 ffff8880d69e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39142f CR3=00000000318b3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 db73c9600d1d1dc6 90507d88ac08f39f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecc0611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecc0611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecc0611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecc0611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecc0611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecc0611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 220e204eaa000000 0000000000000000 000080febb000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000100 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000234e00010006 0000234e00020006 0000214e00020006 0000244e00020006 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e3bf5c0 RCX=ffffc90003fc8001 RDX=0000000000000000 RSI=ffffffff8dcd16fb RDI=ffffffff8bf47e20 RBP=0000000000000001 RSP=ffffc90003fc7058 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=00000000000117db R12=ffffffff8169cd14 R13=0000000000000206 R14=ffff88802534c880 R15=ffffc90003fc7144 RIP=ffffffff81980b73 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ae2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1a33ce7d60 CR3=0000000031c03000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a331836a3 00007f1a331836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefb5cda60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555588308e5f 0000555588308100 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555882f34a8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555588306c58 0000555588305ec0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0422100002 1000018004000401 0000100806010800 100172f400100001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 0001000010080606 011eae0010000fff ffffffffff040010 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002100008800400 0401000010080601 00000c0806100172 f400100008a0030f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0408 9003018010000880 030010000fffffff ffffff0422100002 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000018004000401 0000100806010800 100172f400100001 a0030fffffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea000101cd40 RCX=ffffffff820d3170 RDX=ffff888027664880 RSI=ffffffff820d3188 RDI=0000000000000007 RBP=ffffea000101cd40 RSP=ffffc9000177f580 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bb32f8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d6be2000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000003056d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000400 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc32b34580 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666666666666678 30206b73616d5f65 746172206e692029 3020646e61622000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666666666666672 3020617361675565 7461722064632023 3020646461622000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 352e343231202020 3e363c00313d6565 69205d3836393854 205b5d3030373732 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3524342031202020 3436360031376565 3020553836393854 20305d3030373732 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726f7e6465697e2a 7e55676e6b797379 307855676e6b7973 79307e656578377e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f243e383b2a2a51 343c36003b376f7c 6379796367786f7a 2a78636e3779796b ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f27b5 RDI=ffffffff9adf64e0 RBP=ffffffff9adf64a0 RSP=ffffc90003386680 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adf64a0 R15=ffffffff854f2750 RIP=ffffffff854f27df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fef42b466c0 ffffffff 00c00000 GS =0000 ffff8880d6ce2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c35e7c5 CR3=0000000012dc8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef41e11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef41e11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef41e11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef41e11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef41e11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef41e11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef41f83488 00007fef41f83480 00007fef41f83478 00007fef41f83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef42aed100 00007fef41f83440 00007fef41f83458 00007fef41f834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef41f83498 00007fef41f83490 00007fef41f83488 00007fef41f83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000