last executing test programs: 1m22.789406149s ago: executing program 2 (id=379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000500)={0x0, 0x7}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000580)={r2, 0xe}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'geneve0\x00', 0x0}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x4) 1m22.712414579s ago: executing program 2 (id=380): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f9, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0xd9bf, 0xf, 0x0, 0x2, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88d0}, 0x44800) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = accept4$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f0000002280)=0xe, 0x800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000022c0)={'batadv_slave_1\x00'}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f00000000c0)={0x50, 0x0, r8, {0x7, 0x2b, 0x1, 0x20020, 0x0, 0x81, 0x8, 0x8, 0x0, 0x0, 0x100, 0x8}}, 0x50) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x46, r10}) 1m22.642051572s ago: executing program 2 (id=381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) syz_clone(0x101000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xb, 0x1, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x700, 0x7800, 0x0, 0xfffffff7}}) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (rerun: 64) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000340)={@empty}, &(0x7f0000000380)=0x14) getsockopt$packet_int(r2, 0x107, 0x7, 0x0, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$yama_ptrace_scope(r5, 0x0, 0x0) lseek(r4, 0x401, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (rerun: 64) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000002c0)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettaction={0x20, 0x32, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000014) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="40005200060010"], 0x24}}, 0x0) 1m22.641059348s ago: executing program 2 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="009da3922852480000001400010400000200fcffffff028831000100fd2929bf64daedcfeb488e63463d8554add1da6e03000000000000003c29240956d61165d6bd559023ea1945130000000000a7bd59adeb8b39c2a2a551ce601174eb99ce82772fa47e046b799367be5f362ec5c886365f73ec3faad98f142bfd2cf98b1b8b05d53976916f6a5b68b3a1eeedfe900f0ec20e8ff5171a58d2652b9042cad57e4e23a66b3a6bab135ac0c299ba18f8251796d02654565becf448623990398315c65be557b37de0450608459c732a47ae987b18b57778d2420db454da911e5afc5a291956db6ae028ccd80cfab4186b3403fef0f7ae6e275075ed17e1e879ae8859c50b3642f6456ab49dd53fad80a5764815"], 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) (async, rerun: 64) io_uring_enter(r3, 0x2a05, 0x865c, 0x0, &(0x7f0000000840), 0x8) (async, rerun: 64) r5 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x292000, 0x1) fanotify_mark(0xffffffffffffffff, 0x400, 0x1000, r5, &(0x7f0000000200)='./file0\x00') (async) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=@allocspi={0x248, 0x16, 0x300, 0x70bd28, 0x25dfdbfb, {{{@in=@dev={0xac, 0x14, 0x14, 0x3f}, @in=@remote, 0x4e23, 0x8000, 0x4e24, 0x8, 0x2, 0x80, 0xa0, 0x0, r2, r6}, {@in6=@remote, 0x4d6, 0xff}, @in=@remote, {0xffffffff80000000, 0x7fffffff, 0x101, 0x2, 0x6c1, 0x5abd, 0xe2}, {0x0, 0x4, 0x0, 0x5}, {0x896, 0xeb, 0x7fff}, 0x70bd26, 0x3501, 0x2, 0x2, 0x2, 0x2}, 0x57829064, 0x34}, [@etimer_thresh={0x8, 0xc, 0x2}, @tmpl={0x84, 0x5, [{{@in=@loopback, 0x4d5, 0xd2}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3503, 0x3, 0x3, 0x5, 0x100, 0x8, 0x8}, {{@in=@loopback, 0x4d6, 0x2b}, 0xa, @in=@multicast1, 0x3507, 0x3, 0x3, 0xc1, 0x14000000, 0xfffffff6, 0xff}]}, @extra_flags={0x8, 0x18, 0x400}, @srcaddr={0x14, 0xd, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, @srcaddr={0x14, 0xd, @in=@broadcast}, @mark={0xc, 0x15, {0x35075c, 0xc25}}, @sec_ctx={0x78, 0x8, {0x74, 0x8, 0x0, 0x29, 0x6c, "78394e80942b1ea4ec06cd642a3bc98694536411a23ae6586089695c7c312e750e803ee36a40ae218edf21f90df83cccaa3534cc8424bdc322da5fbe05b90d66f7f5b3a60e63fb610ef9e93da42682285aefe9dc107995ab57798934215cc83fc0491bb70210a8cbd743438a"}}, @tfcpad={0x8, 0x16, 0x3}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8e8}]}, 0x248}, 0x1, 0x0, 0x0, 0x10}, 0x880) 1m22.562467566s ago: executing program 2 (id=383): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) recvfrom(r1, 0x0, 0x0, 0x40000001, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mount$nfs4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x820, 0x0) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f00000000c0)=0xfffffff8, 0x4) 1m22.55955617s ago: executing program 2 (id=384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d0500000390093500000002", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)="1c8fb1c74553061706b40f6c4ea895e8fe4a6461ef04000000000000009c8cf3db69b443d21889a5c04f03215f21e2edc9b947eae73f985a", &(0x7f00000004c0), 0x1000, r0}, 0x38) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x24000080) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1m20.32175368s ago: executing program 0 (id=433): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000080)="9d14619698656e133d804a7c3ecdb8bf1c4cd76a35571158f7ed74defa62298f7caa6a8b980f21eaf8d5facfdea9be08c4ab90a61048f6cc1fc8cfcacdd102e5b24dfda7c92b464ec3fac913ddf2daba7f367fd839c9925550af2b7fb07a2d40e3c362b4350f863697a92d41071a15d76762b500f5eba5040dd04d7532bf77100c9713b346a545adc4b67e9588874f5427e0f349f855a50b76", 0x99) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x54}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) (async) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000480)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2418241, 0x0, 0xffff, 0x2, 0x9, 0x0, 0x0, 0x40}}, 0x50) (async) r5 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r6 = shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmdt(r6) (async) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) (async) io_setup(0x202, &(0x7f0000000200)=0x0) syz_fuse_handle_req(r3, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x18, 0x0, 0x0, {0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) io_submit(r8, 0x1, &(0x7f0000000780)=[&(0x7f0000000100)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x1000, r7, &(0x7f0000000140)="01aeca075b11f5e3a4a8", 0xa, 0x2, 0x0, 0x0, r7}]) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) (async) r11 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r11, &(0x7f0000000700)={@void, @void, @llc={@llc={0x2, 0xaa, 'Kk', "35b67183"}}}, 0x8) (async) r12 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r13, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}}, 0x40) (async) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r15, @ANYBLOB="ad43000000000100000019"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 1m20.232303593s ago: executing program 0 (id=434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000010000008100000005000000bd84e30408000000000000000700000001d946777275b6"]) (async) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000000)={[0xeeef0000, 0x1, 0xd000, 0x1], 0x4, 0x74, 0x2}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xc, 0x7, 0x9, '\x00', 0x9}) 1m20.120998757s ago: executing program 0 (id=435): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0e806005ffffffffffffaaaaaaaaaabb08004500001c000000000004"], 0x2e) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000180)={{r3, r4+10000000}, {r5, r6+60000000}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000100)={0x4, 0x2, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 1m19.772292571s ago: executing program 0 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff033}]}, 0x10) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80700a, 0x0) 1m19.77179389s ago: executing program 0 (id=438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x63}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_DATA={0x74, 0xc5, "63878ba2cfeb54621514143b27e41a6be2bb9820c549ea1463affe5a718954019689a213ff2572d530e4b5c3c2fef3436afc39612c054e96779a7a7a0496ca88682c43e0c5a59162c67a61e68248a5415fae1b5836de91a6d6b3c6370141f8c2620c404d7aabe7c03e81c3c0c63c5714"}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x218, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x46}}}}, [@NL80211_ATTR_TID_CONFIG={0x1f0, 0x11d, 0x0, 0x1, [{0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x7, 0x1}, {0x7, 0x6}, {0x7, 0x3}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x8}, {0x4, 0x4}, {0x4, 0x5}, {0x5, 0x7}, {0x7, 0x7}, {0x7, 0x3}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x8}, {0x7, 0x2}, {0x2, 0xa}, {0x2, 0x2}, {0x6, 0x9}, {0x7, 0x1}, {0x3, 0x9}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0x6}, {0x6, 0x8}, {0x2, 0x5}, {0x3, 0x9}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x5, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0x7}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4}, {0x6, 0x6}, {0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x5}, {0x7, 0x8}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x7}, {0x7, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x2, 0x8, 0x4, 0xa4, 0x9, 0x7]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x3, 0x0, 0x5, 0x4, 0x5, 0x5, 0x40]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x1, 0x16, 0x36, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6f8, 0x7f, 0x0, 0x401, 0x7, 0x7, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd658, 0x6, 0x3, 0xc, 0x2, 0x1, 0x3, 0xf1a0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xffff, 0x5, 0x8, 0x8000, 0x8, 0xfff0, 0xffff]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0xfc01, 0x401, 0x1575, 0x17, 0x2, 0x2]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x4, 0x4, 0x24, 0x36, 0x1b, 0xa, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x9}, {0x2, 0xa}, {0x0, 0x7}, {0x1, 0x4}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x5, 0x1, 0x10, 0x3, 0x7f80]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0x1, 0x9, 0x34, 0x30, 0x1, 0x60, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x4}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x7}, {0x6}, {0x1, 0x4}, {0x1, 0xa}, {0x1, 0x6}, {0x3, 0x9}, {0x7}, {0x5, 0x6}, {0x5, 0x2}, {0x4, 0x8}, {0x2, 0x2}, {0x3, 0x1}, {0x6, 0xa}, {0x0, 0x6}, {0x3}, {0x0, 0x8}, {0x3, 0x8}, {0x2, 0x8}, {0x5, 0x5}, {0x6, 0x7}, {0x2, 0x6}, {0x4, 0x9}, {0x3, 0x8}, {0x3, 0x8}, {0x2, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0x2}, {0x1, 0xa}, {0x7, 0xa}, {0x2, 0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0x5}, {0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x2, 0x2}, {}, {0x2, 0x8}, {0x7, 0x8}, {0x3, 0x7}, {0x5, 0xa}, {0x3, 0x6}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x8}, {0x2, 0xa}, {0x2, 0x5}, {0x4}, {0x4, 0x6}, {0x1, 0xa}, {0x0, 0x1}, {0x4, 0x9}, {0x2, 0x8}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {0x5, 0x1}, {0x0, 0x6}, {0x3, 0xa}, {0x7}, {0x6, 0x8}, {0x2, 0x2}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x1, 0xe}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x1}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0x7}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0xfffc, 0x7fbb, 0x0, 0x0, 0x3, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff2, 0x15c2, 0x4, 0xfb21, 0x800, 0xfbff, 0x3, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x218}}, 0x0) 1m19.541151103s ago: executing program 0 (id=440): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local, 0x200001}, @hyper, 0xb, 0x4, 0x200000000000347, 0x80000004, 0x24b, 0x10001, 0x100009}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000500)=""/196, 0xc4}], 0x1, 0x200000, 0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000000)={&(0x7f0000000140)={{@host, 0x10000}, {@local, 0x2}, 0x400, "f1d07c9be26744ae63f2b7f81a112f49e473a8ef67c7f27929c18dded2263498a96efdec6816968c9047626cc1557a64d774bb6054e65272c057afb91b823ab22d9f56cf7f69d8ed569909fb9390897048aae829da09e1c99ddca2c8d8dab1af31ebaf3984eda6ffbab437933f987073dd74055e57fbd1834ef43c7363cfc62fba210e9822ba775cce089f4fa04bb9373d5da12a43ae2223879702f797f42b1eb527f812c5c4ef8c26fd90ea15adcc78363be349fe8edf75ff45a9eeca6ca180bd0a6cafaa22f69da0e3792a2128b0f1e0848aad39ba5ae57eda9b33660dc4bb390eabe87ca38e57ba861dd8ee61e28210021206ab8ce7a74951a5f2b0bec6492b6a21a45fec50d8fb341d3990c18bf6d7ba5508665af321700f23cb3de11d85b2a1d64fd2930174d6d9f3644f5ab4ab09353ce10a3756b1d489bf2038942e94ae12b53ee9d8bdff95db858e75fee9c86b3572accfe55f6f45ab3e6ceee76ae2c4b651b129761ce2a93bc4138e4479c2151a3a2039c26834e3750a3d211c8d17e49652e90c4ff3ffae41fc7aa439717be5549d6f707d3d91b72114e41c2fb77c651c15aa6542a6429795e514fda6be3d7662c078d977e96d3cf45681375810d31fbcb094269ab598019bf41e2fff31735edb6cde45d0ae3e9ab487ad0ca885bc970fd4f2e4058f28d8ec3bab85bdf3ed1bf8816ba1223b441a4e176e55b55b53b114c924195ca407bec591459cd58b46e794a7052c0b86a02916afaca8a313e5df3c3d5e7f8608c5564184db34f5cb5caee55eba1cac475474940c145f407c06d33a9424fb6318b1457cd5f4e39f65c77fea59d75da6dbf6093f7cd930b44dda98e8d054131493c361fca3587e1d314e556da6b8781bf046a33619973ac3dd23301207a236cf4ff97b46e2cb929c81658ca0f6a6d05ec1b3565dfb17fddeec9f1a3c241cd9486a942ac11ca874a69f00264e45efb4460c441e395dbeeeaf56f029259b45667f76a32273879519a8cbed47251a0890f81e038d3e0f57eef62feb946c748f98bd2d7c46390328f8c6e0c31a383917a1072917bfdbe3d39fb0dca815140b473090ae6142aa382c1c212d918f955dc7b2f9d2a44c68b35bb13d5648515444512823a92784a341d0d45995f46a6ae97719da6b869ff275ebe9f8b1046b5acedb5dab0402db916dfb7641c38d08e5413fb0e30b6202eb6e86b3a9e89032a08fb8c3ae7fd72a27780c9bbcab2595eef037af063504d285c7e1399ba3e3ef2cbc794b7990c61f969a68f1ee6ee6596df311d98d8123823b661a60c1302f7741dfe07f8e5d578fdcec7116e6a658d48de8f40139b7b03f692e0b8fde8864b777ff6e66d129b67fe34cec0368716b0a6345d507ceb45a192cb0a9b2a7bfb084990e275783f7cc4489b9b3916071154032dbe40cd54ee49e5b1e2057b04245"}, 0x418, 0x3}) 1m19.513604563s ago: executing program 32 (id=440): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local, 0x200001}, @hyper, 0xb, 0x4, 0x200000000000347, 0x80000004, 0x24b, 0x10001, 0x100009}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000500)=""/196, 0xc4}], 0x1, 0x200000, 0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000000)={&(0x7f0000000140)={{@host, 0x10000}, {@local, 0x2}, 0x400, "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"}, 0x418, 0x3}) 1m7.549199339s ago: executing program 33 (id=384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d0500000390093500000002", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)="1c8fb1c74553061706b40f6c4ea895e8fe4a6461ef04000000000000009c8cf3db69b443d21889a5c04f03215f21e2edc9b947eae73f985a", &(0x7f00000004c0), 0x1000, r0}, 0x38) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x24000080) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 32.531340119s ago: executing program 1 (id=1193): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a000000000000000003001b00"], 0x24}}, 0x0) 32.529928599s ago: executing program 1 (id=1196): socket$pppl2tp(0x18, 0x1, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x108) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 32.460647999s ago: executing program 1 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40884) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x18}, 0x401}], 0x1, 0x40018003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x2}}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xffff}, {}, {0x7, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xfc0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 32.361337704s ago: executing program 1 (id=1198): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) syz_emit_ethernet(0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f0000000780)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80700a, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x10a2, 0x1, 0x2}, 0x18, 0x3) 32.350240429s ago: executing program 1 (id=1200): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0xb, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x80, 0x0, 0xc, @remote, @empty, 0x0, 0x10, 0x9d1}}) bind$bt_sco(r0, &(0x7f0000000340), 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) 32.347889567s ago: executing program 1 (id=1201): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0xdc000, 0x0) ioctl$CDROMVOLCTRL(r1, 0x31f, &(0x7f00000001c0)={0xa1, 0x16, 0xc2, 0xff}) r2 = dup2(r1, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2010, r2, 0x58e03000) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000b00)=0x2, 0x0) 32.278259902s ago: executing program 34 (id=1201): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0xdc000, 0x0) ioctl$CDROMVOLCTRL(r1, 0x31f, &(0x7f00000001c0)={0xa1, 0x16, 0xc2, 0xff}) r2 = dup2(r1, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2010, r2, 0x58e03000) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000b00)=0x2, 0x0) 3.159538178s ago: executing program 5 (id=1515): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x5501, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 3.158687675s ago: executing program 5 (id=1517): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x57f) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x2}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x2000) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x103c00, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x17}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x8000, 0x40, 0xe, 0x101, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x65, 0x0, 0x2, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp={0x44, 0xc, 0x75, 0x0, 0x7, [0xf84, 0x0]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@ipv4_delroute={0x48, 0x19, 0x200, 0x70bd2a, 0x25dfdbfd, {0x2, 0x90, 0x10, 0x2, 0xff, 0x2, 0x0, 0x0, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x9, 0x0, 0xfe, r3}}, @RTA_IIF={0x8, 0x3, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TABLE={0x8, 0xf, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40810) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r7, 0x110, 0x3) r8 = dup(r1) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000700)=0xb4d) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r7) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000007c0)={@mcast1, 0x0}, &(0x7f0000000800)=0x14) getsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000000840)={@empty, @empty, 0x0}, &(0x7f0000000880)=0xc) getsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f00000008c0)={@broadcast, @broadcast, 0x0}, &(0x7f0000000900)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r7, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000940)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000a00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000cc0)={'ip_vti0\x00', &(0x7f0000000c40)={'gretap0\x00', r3, 0x700, 0x7800, 0x6, 0x401, {{0xa, 0x4, 0x3, 0x8, 0x28, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xa0, 0x3, 0x6, [{@local, 0xf2}, {@remote, 0x100}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000016c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001680)={&(0x7f0000000d80)={0x8f0, r9, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3370}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb29}}}]}}, {{0x8, 0x1, r3}, {0x278, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r6}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb02}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r4}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x7, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r4}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfb40}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x8f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000001700)={{0x1, 0x1, 0x18, r0, {0xf}}, '\x00'}) sendmsg$kcm(r16, &(0x7f0000001ac0)={&(0x7f0000001740)=@phonet={0x23, 0x1, 0x5, 0xf0}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000017c0)="6ff82ef8383d5f3eaf97c52d442fc7daa508c6e1f66d793d86fbe98e1ee636831b2b8bfb1a54fe2d3cd55117f684", 0x2e}, {&(0x7f0000001800)="84523092739fdd4377e08e8e", 0xc}, {&(0x7f0000001840)="15c8b88a6b159d3736567dcb8b63ea32ae823e704a5487080741d9fb4610687b6986a54893eb90ba244f2885c8d0596308e0d05cfe3c86fd97c7f7c0c1d11e36f59f5ee0c2af8b6a9e169fa9bfb42a0423f19ca6745cf774e522", 0x5a}, {&(0x7f00000018c0)="9eeca4e41f63926a720d213cd363435e8cf60f04138629382c1db74c25e9dcea053b257bd27639332cae43392a90b0d257208f28fcfccf9ebed4ddf1b6b18c5a61639554628e4abc871d703b892e32a020e269d1d3f6c79a8d73dfe918753d0042dafb735fe2899052e4b9dc5b2b0992f7ac1d07cfc264be2016d5b94ed727b5397a55525fc86f4b0c6d76a3cb88f23bc5db9dd60ca8f6ab000e33ba47096347689564a8e6a8e8a1f0e9735047a7b83ad001c1c3590408e51f31e05ea120d289a085adb491efae08f84a32842d16f852d9ea0958394b95ad1d786e7e53826746284f77fa", 0xe4}, {&(0x7f00000019c0)="05f586305c71f2d5bff678a3fff03b87a5dbdadcf184f27e984348e10ebfb4c61ca35557049f9b312be13341f70ed117f5e7a60453e95e785820464568413a95ab46372f349108f7841769cbdc071fd642", 0x51}], 0x5}, 0x4008000) connect$rxrpc(r7, &(0x7f0000001b00)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) close_range(r1, r1, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000001b40), r16) 3.091128809s ago: executing program 5 (id=1519): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)={0x7b, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x41, 0x8001}}]}, 0x18) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ea654e105f143a0186050102030109021200010000000009048200001aeb0c001f"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0x25c}}, 0x0) 2.590887393s ago: executing program 4 (id=1531): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') exit(0x0) syz_emit_ethernet(0x32, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x65, 0x0, 0xb, 0x21, 0x0, @private=0xa010100, @local}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x6, 0x3, "fa0504", 0xf7, '!(\x00'}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.789341361s ago: executing program 5 (id=1539): r0 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200"], 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 1.70928395s ago: executing program 4 (id=1540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0xe8, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000040), {[{{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x11013d1b}}, './file0\x00'}) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x809b}, @val={0x0, 0x4, 0x6, 0xd, 0x8}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010100}}, 0x2a) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0x4, 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0xd, 0x8000029, r3, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x3) sendfile(r4, r5, 0x0, 0x6) (async, rerun: 32) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) (rerun: 32) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r6, r7, 0x3, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x19c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa7}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9a}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8c}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x14, 0x4, @loopback}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4c000}, 0x8000) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) (rerun: 32) 1.060917899s ago: executing program 3 (id=1558): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb910021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000040012000a00ff150048035c3b61c1d67f6f94007134cf6efb80073f6a5aa8457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001252c330f973f4953d2a6823a45", 0xd8}], 0x1}, 0x4000044) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x200000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfcc00000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r3, 0x0, 0x440, 0x880000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xa9) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000380)={0x3, 0x5, 0x3, 0x7, 0x1a, "90e05e7611df6e5b7a0b9154245b4688e1efd6"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000010c0)={0x14, r6, 0x1, 0x0, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x2404c800}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r10, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}]}]}}]}, 0xb8}, 0x1, 0x7a00}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x470, 0xffffffff, 0xffffffff, 0x470, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x3a, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x7}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'virt_wifi0\x00', {0x3ff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5a0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x0) 930.756937ms ago: executing program 5 (id=1560): r0 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = fanotify_init(0x4, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0xd, 0x8000029, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x181500, 0x80) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)}, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="da64cfc5feefcabc34201b801b5f6b23ec8ac32999ef69e9734c675c8b6a783ec72fa83bd72ba8ad00a90c60a6f9be79b1d251ed8851a310150b4197ee9edced99c61df0c7f0d5454c8931217460c543", 0x50}], 0x1}, 0x0) 928.853583ms ago: executing program 5 (id=1561): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) r1 = socket$qrtr(0x2a, 0x2, 0x0) setsockopt(r1, 0x9, 0x1, &(0x7f0000000080)="719dae85d82d490915763f38c24cf882233244d93e5067e77ff8061ea244ef4415596c675fd1d8d72ce8a2a4e917678691d507abf15077971d773f7d6596318b58ab2bd6d48c00692c3b9d92ecac356e3ca4fb2ce307ab9a24885102579a1708d6f98deb76c12de630c581972f7947cf0d0a6b46dd7732841116c0154e192216", 0x80) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x48000, 0x1) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r2, 0x32, 0x1, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup_type(r3, &(0x7f0000000280), 0x2, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x800, 0xa) r4 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x4f01) ioctl$CEC_ADAP_G_LOG_ADDRS(r4, 0x805c6103, &(0x7f0000000340)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000400)) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000440)=0x2, 0x4) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x83d53a3959250e) vmsplice(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)="060c7e8b8b02f9adb2a5b8876eeef870b3e21e925204094af72bf66de28c2ffd70a3648cbd05f98711c2f75d7596f1754968949e2838ceb28d1430612ef06f4f0cfa33463da574cf4abaa6b1ef46e739bf3684a143e2ba17a129d275d5149b4dcdbb98e4c17fe81061b174b9c6c58c7e1f69084de0dd8789df79a96a7dfbc367", 0x80}, {&(0x7f0000000540)="27ed4239eb9d1508e2f04959ef748fcfec2b78b3e8dde15cf1897ae3f3c2a0d4a2ef1e48df8aa6fc59493aeffc456084f4aa561f939d47b5e0f85fbcf76cc0fe33fea008d674efa1db0efa24d3a3b99c9b2da3799648be37ba53cade8aefd34398dfac1b513a994349bb7140a5adf010161f1d52d52fc4fc60806af57cc7717eafe17d59eb15abd913a9166fe38a1b82bdc34d4ff230d6d8fd60ad3e605833db24b0f449f98f0d8563d4425d07d59d8c0631a61c610ea397ff0967e6690c67dfd41c8dceff3ee5bf5c37027d70b83835d1d82952aa3e865fa2ded34e93d4e4bed5a49b7cd11f772360604cd6c833fe80197c", 0xf2}, {&(0x7f0000000640)="df6ebce000a33dbe033180c9622ef7aaa08f59e43dbc142de169c488f6360adb61450208fb80c90017a928a73e06a6a4", 0x30}], 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r7, &(0x7f00000006c0), &(0x7f0000000700)=@tcp6=r7, 0x4}, 0x20) connect$x25(r7, &(0x7f0000000780)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f00000007c0)) close(r1) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r6) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000980)={&(0x7f0000000800), 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb4, r8, 0x600, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2f}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x27}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x4040804) fanotify_init(0x1, 0x101000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r9, 0x201, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}}, 0x200048c0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1e00000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000000) 790.512926ms ago: executing program 4 (id=1562): timerfd_gettime(0xffffffffffffffff, 0x0) (async) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x10202, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x40000) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @any, 0x0, 0x0, 0x9, 0x0, 0x9, 0x4}) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @local, 0x0, 0x0, 0x23a}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xe6, 0xffffffffffffffff, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x8000, 0x800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040810) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000002900)={0x1, @sliced={0x1, [0x5, 0x2, 0x1000, 0x0, 0x931, 0x6, 0x5, 0xb44, 0x7, 0x4, 0x0, 0x2a2d, 0x3, 0xc2, 0x7, 0x1, 0x24bb, 0x77e1, 0x0, 0x5a, 0x400, 0x0, 0x1, 0xdc, 0x5, 0x2, 0x2, 0xc, 0xb, 0x3, 0xe8, 0x8c52, 0x1685, 0x8, 0xfff, 0x8001, 0x0, 0x4, 0x1, 0x401, 0x7, 0x6, 0x2, 0x1, 0x5, 0x7ff, 0x4], 0x5}}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000000)) (async) fcntl$lock(r10, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'wg2\x00'}) 790.016479ms ago: executing program 6 (id=1563): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000000fc010000000000000000000000000000ac1e000100000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000e00000000000000000000000000000000003c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400600000000000000014000e00fc0200"/188], 0x104}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x210, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x40, 0x3, 0x3}}, @common=@rt={{0x138}, {0xfffffffc, [0x5, 0x5], 0x400, 0x1, 0x1, [@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private0, @remote], 0x6}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x14, 0x7f, 0xfde3}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a542"], 0x38}}, 0x800) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="052c11fdc90000000000000000052b0700660005"], 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r2}, 0x10) syz_clone(0x101000, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$netlink(0x10, 0x3, 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x170, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8a}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc3b}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd0d3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xb5ce145eaca3addf}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x0) 789.152489ms ago: executing program 4 (id=1564): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x5) getpeername$netlink(r4, &(0x7f0000000080), &(0x7f0000000100)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x0, 0x7d, 0x78, &(0x7f0000000540)="86ec2d28610e41354bd748c64889f17b1dc1a8f268d0c27e6748eda5aa3841e6896a6142bfbb744e1e6a398b15b9959b4af03cc6fc0df9cc012f1c6f8cf77b86b9f5bb690c5c41cd5383ea7cd21e758ff11508baf826e9c0762a4e65434ac60f276caf969ebd9a707bccc80ba05847291ee95228691d82ba63a97873d2", &(0x7f00000005c0)=""/120, 0x9, 0x0, 0x7c, 0x84, &(0x7f0000000640)="da1ea2eff62706be1da781053b3866a8a60bfc94973ed0ccbcfce6d06aed8447f6e01b53ee6988fe48678b3f67dc1e1862c364105575eff1c4a75457126ab399cb08d236dcf207cfcf42c3dc791d34743ee772b89b4e610ea97876b6d9fef3a132b930c332ef7a2951238b522e8edb9070a62d88e10687f4254af2be", &(0x7f00000006c0)="46877fa59f021aafde1a1fe3d562d54fbea40cccd2960e5a0517697dbdcd880d19f2dadd89e23f617e2e1197fb27b47ad6bc5dcb60076fdebc55fb76c6be19d1093a3568b8e1b4ecf77666dec1d0bd618dd6668e67463106bb3fdbfbc0615dd52f71c431240c4865664e2fee990f8e35d3c2d4d737f2ec40ecd5a208c8ab8a9b2e364740", 0x3, 0x0, 0x8}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "66bba742a70077009ff2305bc3bf1db1"}]}}]}, 0x48}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000480)={@in6={0xa, 0x4e20, 0x4b, @mcast2, 0x1}, {&(0x7f0000000380)=""/209, 0xd1}, &(0x7f0000000140)}, 0xa0) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x5) (async) getpeername$netlink(r4, &(0x7f0000000080), &(0x7f0000000100)=0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x0, 0x7d, 0x78, &(0x7f0000000540)="86ec2d28610e41354bd748c64889f17b1dc1a8f268d0c27e6748eda5aa3841e6896a6142bfbb744e1e6a398b15b9959b4af03cc6fc0df9cc012f1c6f8cf77b86b9f5bb690c5c41cd5383ea7cd21e758ff11508baf826e9c0762a4e65434ac60f276caf969ebd9a707bccc80ba05847291ee95228691d82ba63a97873d2", &(0x7f00000005c0)=""/120, 0x9, 0x0, 0x7c, 0x84, &(0x7f0000000640)="da1ea2eff62706be1da781053b3866a8a60bfc94973ed0ccbcfce6d06aed8447f6e01b53ee6988fe48678b3f67dc1e1862c364105575eff1c4a75457126ab399cb08d236dcf207cfcf42c3dc791d34743ee772b89b4e610ea97876b6d9fef3a132b930c332ef7a2951238b522e8edb9070a62d88e10687f4254af2be", &(0x7f00000006c0)="46877fa59f021aafde1a1fe3d562d54fbea40cccd2960e5a0517697dbdcd880d19f2dadd89e23f617e2e1197fb27b47ad6bc5dcb60076fdebc55fb76c6be19d1093a3568b8e1b4ecf77666dec1d0bd618dd6668e67463106bb3fdbfbc0615dd52f71c431240c4865664e2fee990f8e35d3c2d4d737f2ec40ecd5a208c8ab8a9b2e364740", 0x3, 0x0, 0x8}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "66bba742a70077009ff2305bc3bf1db1"}]}}]}, 0x48}}, 0x4000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000480)={@in6={0xa, 0x4e20, 0x4b, @mcast2, 0x1}, {&(0x7f0000000380)=""/209, 0xd1}, &(0x7f0000000140)}, 0xa0) (async) 788.785163ms ago: executing program 6 (id=1565): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4000) 720.503389ms ago: executing program 6 (id=1566): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/125) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x3, @name="78e8fe20d3bbd0dd3f8abcc79f133e1539d53aaa7d4c80aa4b481c6ac08ea2b5"}, 0x8, 0x74, 0x6f5a82ee}) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x100, "33607ce667c30077af6e5fe54e86f5c08528218f5c0ef6bf961b937ef8986b23", 0x7, 0x9, 0xffffffffffffffff, 0x5000000000, 0x10, 0x5, 0x4, 0x10000, [0x7, 0x1ff, 0x7, 0x3]}) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x3ff, 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) fchdir(r1) flock(r0, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, @in6={0xa, 0x4e20, 0xfe, @private0, 0x5}, @in6={0xa, 0x4e23, 0x1, @private0, 0xfff}], 0x54) (async) sendfile(r2, r0, &(0x7f0000000300)=0xafe, 0x711c) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000340)={0x8, @remote, 0x4e23, 0x1, 'nq\x00', 0x0, 0x454, 0xa}, 0x2c) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000380)=""/252) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x8, 0x7, 0x37, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x700, 0x0, 0x4}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000540)={@local, 0x39, r3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) flock(r4, 0x1) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000005c0)={'raw\x00', 0x0, [0x1, 0x3, 0xffff, 0xa7d3, 0x3]}, &(0x7f0000000640)=0x54) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x10, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@exit, @ldst={0x3, 0x3, 0x4, 0xa, 0x2, 0x18}, @call={0x85, 0x0, 0x0, 0x55}, @jmp={0x5, 0x1, 0x8, 0x7, 0x0, 0xc, 0x10}, @ldst={0x3, 0x2, 0x2, 0x2, 0x3, 0x1, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000700)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x12, '\x00', r3, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x7, 0x48, 0x80000001}, 0x10, r6, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000a80)=[{0x2, 0x3, 0x6, 0x6}], 0x10, 0x80000001, @void, @value}, 0x94) connect$inet6(r1, &(0x7f0000000b80)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000bc0), 0x400200, 0x0) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0x100, 0x1, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xc5, 0x6, "6717293ab21d2f25b65ea1ccd387eb1c2d7be8c9c3c0774c17420a038ee8e5c9b5b0f5b09bd04f7845883af9f8237c8f966b944ac8a3a0a933684604730cf3038566ce63027a4a25addfa2f2d5bb72e08c87a3de7a1363444a75f0c708221fb827e04e3f3384f0a5f54dac8500d16d8e7ad6e3150aaa8ba5a3c6c68357b8845d8c40c27285a1894d3b14fbda959fe36e3e8ab81123ce92b55fcd63d23cc0b10711df55af720628f71c9ece0b38196218e412e28684bb0d61136c94d2763e249da6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e21, @private=0xa010101}}}, &(0x7f00000011c0)=0x84) sendmsg$inet_sctp(r8, &(0x7f00000012c0)={&(0x7f0000000dc0)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000e00)="b53a1734d91b63cf323f92dde0c21699f5c1dc6ee618a169ed292a44591c4fa134b06f07e525b22b74154246b811235a3296b53eba82681433ab191575c29f510a5f735b3a8d4056334bb6808a4a3a926dcead2d79dc006cc55ec8572f0fc9f9186e5938c8d5ba07180a81813e7d959cea75b43bf8dce787e07999e01027bf24f9ac358e8b3c85ff9700ab53b31b765684a866b5b891cb6036846c28a38c6b281e65cd69534c22dd1fe4852a72838e6b67d62dd99ce6dd8f4904f201aef26e11b99115e370", 0xc5}, {&(0x7f0000000f00)="b3e79f52cd7b26fa9edddf76bd0b1d30a19c347cd5da016c135fc75ffe596cb35481f8793771367797c56af245a8625267216ea1a23e64149127e45ff6a939fcd6a9a5d569f23577b0bfa7bcbafe3bd662ba6fd1123f936b2cd35c52d3eea35a4c28e1d361adc587baf4fc8a94d3641261e9945b7085dd22bf022453b37cfdf5cd097da6c4ad5f17cce63bf72bb55e411f3b40d0a982c25d979436c457b38f1e9bea1426f8fbe351e4349bd42191997b7e6521c38b410c7e82b32b6531a878b7d759", 0xc2}, {&(0x7f0000001000)="0a1fe3a08842a023d60528a04134139ab78f8249882ecc831c94", 0x1a}, {&(0x7f0000001040)="314bca9661269bfef1550d32c63641642efa1a398cb18b1ffd0e28db1a617feff93fad33f2407e470cebc78645994d598a651950d2de7efc6920383091bebaeed74877af6fa050819d5218107c3a4509e0c6dc09aef7289fd64a47f5", 0x5c}], 0x4, &(0x7f0000001200)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0xa19, 0x8, 0x0, 0x10d52b65, 0xeb0, 0x3, 0x100}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @init={0x18, 0x84, 0x0, {0xbc9a, 0x5, 0x260, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xfffa, 0x207, 0x4, 0x763, 0x8, 0x0, 0x401, r9}}, @authinfo={0x18, 0x84, 0x6, {0x4}}], 0xa8, 0x4008004}, 0x8000) sendmsg$nl_route(r1, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=@ipv4_getnetconf={0x1c, 0x52, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) syz_emit_ethernet(0x7c, &(0x7f0000001400)={@multicast, @multicast, @void, {@llc={0x4, {@llc={0xaa, 0x7e, "b257", "871124a2cd60c4f7dcdebe7d82ca67dad2650ec00562b922406bad2e2bc7ca1023d4faa1d5124f66e84bf1832b61262b478c7bc5d60a815368a52998901b08cf580bfdded1545fe61ef6241c1c5fb2d25b41398ba562e58f8bb5e09733e144d227117d0c10338ca54c73"}}}}}, &(0x7f0000001480)={0x1, 0x3, [0x8c8, 0x7b9, 0x602, 0xeba]}) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000001540)={0x0, 0x1, 0xc, 0x5, 0xcea2, 0x9, 0xe, 0x7, {r9, @in6={{0xa, 0x4e21, 0x8, @local, 0x9}}, 0x0, 0xe477, 0x3, 0x2, 0x7fffffff}}, &(0x7f0000001600)=0xb0) 720.427429ms ago: executing program 6 (id=1567): r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23, @rand_addr=0x6000000}, 0x10) 718.883384ms ago: executing program 4 (id=1568): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0xfffffffa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001080)={0xc8, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '}\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2594}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffff801}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}}]}]}, 0xc8}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 717.902932ms ago: executing program 6 (id=1569): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x20) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 640.797262ms ago: executing program 4 (id=1570): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r1, 0x0) socketpair(0xa, 0x2, 0x88, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000000c0)='net/icmp6\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="77d2bcbdedb6eddc072584bc4ed3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x20000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4], 0x1}, 0x58) close_range(r1, r1, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000100)) 637.387164ms ago: executing program 6 (id=1571): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x581100, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x10, 0x7fffffff, 0x25dfdbff, {0x7a, 0x0, 0x0, 0x0, 0x84}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4731}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x810) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}], 0x1, 0xc0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x40, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3, 0x0, 0xb7}}, 0xe8) sendto$inet(r5, 0x0, 0x0, 0x20004800, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r6, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4f000}, 0x8084) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) 170.168901ms ago: executing program 3 (id=1572): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000000000000000000000002001000000000000000000008000100ac"], 0x24}}, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0xc, 0x0, 'queue1\x00'}) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x2bb, @time={0x7, 0x6}, 0x7c, {0x7}}) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="99177fa508000000aaaaaa2886dd60080000001811fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e220800000000000000bd2f2eef5bbe568a5cd008337a9f0b5d528efc57120c7ea8ccb8925413aa05d4faa8463fd2340f8480324ac9f59ee0a5f422af42104d4f8f"], 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='ufs\x00', 0xa00000, &(0x7f0000000140)='grpquota') r4 = accept4(r0, 0x0, 0x0, 0x0) (async) r5 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) (async) r6 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0x0) (async) r7 = socket(0x22, 0x2, 0x24) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="20c13d10", 0x4) (async) sendmmsg$inet6(r4, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0) 169.547021ms ago: executing program 3 (id=1573): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x6, 0x309, 0x38, 0x0, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={[&(0x7f00000000c0)='v!\x00', &(0x7f0000000100)='-&}$!/,!\x00', &(0x7f0000000140)=')\x00', &(0x7f0000000180)='a-@}\x00']}, &(0x7f0000000240)={[&(0x7f0000000200)='\x00']}) (async) execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={[&(0x7f00000000c0)='v!\x00', &(0x7f0000000100)='-&}$!/,!\x00', &(0x7f0000000140)=')\x00', &(0x7f0000000180)='a-@}\x00']}, &(0x7f0000000240)={[&(0x7f0000000200)='\x00']}) ioctl$CDROMRESET(r0, 0x5312) 100.921387ms ago: executing program 3 (id=1574): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4000) 99.140446ms ago: executing program 3 (id=1575): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000180)={0x2}, &(0x7f0000000280)=0x20) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) (async) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) (async) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 0s ago: executing program 3 (id=1576): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004880}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1], [0x0, 0x3, 0x2, 0x0, 0x3, 0x4], [0xe4]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0xfffffffd}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x8, 0xb0, 0x1, [{{0x9, 0x4, 0x0, 0x81, 0x3, 0x2, 0x6, 0x0, 0xf9, {{0x5}, {0x5, 0x24, 0x0, 0x1bcb}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x9, 0x6, 0x7f}, [@mdlm_detail={0x4, 0x24, 0x13, 0x6}, @mdlm_detail={0x4, 0x24, 0x13, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x4c, 0x58, 0xc1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x13, 0xc, 0x6}}}}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x1, r6, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x24008804}, 0x40) kernel console output (not intermixed with test programs): =root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.528996][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.532264][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.560551][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.563066][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.597932][ T40] audit: type=1400 audit(1745246340.593:571): avc: denied { mounton } for pid=8070 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 88.643755][ T8187] syz.5.610 (8187): /proc/8186/oom_adj is deprecated, please use /proc/8186/oom_score_adj instead. [ 88.657912][ T8192] netlink: 'syz.3.637': attribute type 10 has an invalid length. [ 88.660643][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.663188][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.678773][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.681196][ T8192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.683972][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.686318][ T8192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.691878][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.694248][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.789436][ T40] audit: type=1326 audit(1745246340.783:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.639" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb2bab8e169 code=0x7fc00000 [ 88.795574][ T8204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.640'. [ 89.258797][ T40] audit: type=1400 audit(1745246341.253:573): avc: denied { setrlimit } for pid=8224 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 89.423677][ T8233] overlayfs: conflicting lowerdir path [ 89.661076][ T8247] bridge: RTM_NEWNEIGH with invalid ether address [ 89.688952][ T8249] Bluetooth: MGMT ver 1.23 [ 89.782525][ T40] audit: type=1400 audit(1745246341.773:574): avc: denied { map } for pid=8254 comm="syz.5.647" path="/proc/27/net/if_inet6" dev="proc" ino=4026534113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 89.905605][ T8270] overlayfs: conflicting lowerdir path [ 89.938979][ T8273] netlink: 'syz.5.651': attribute type 3 has an invalid length. [ 89.943233][ T40] audit: type=1400 audit(1745246341.933:575): avc: denied { ioctl } for pid=8272 comm="syz.5.651" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.973190][ T40] audit: type=1400 audit(1745246341.963:576): avc: denied { map } for pid=8275 comm="syz.5.653" path="socket:[23801]" dev="sockfs" ino=23801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.975286][ T8276] netlink: 'syz.5.653': attribute type 1 has an invalid length. [ 89.981269][ T40] audit: type=1400 audit(1745246341.963:577): avc: denied { read } for pid=8275 comm="syz.5.653" path="socket:[23801]" dev="sockfs" ino=23801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.988877][ T8276] ip6gretap1: entered allmulticast mode [ 90.036648][ T8280] netlink: 28 bytes leftover after parsing attributes in process `syz.5.653'. [ 90.179712][ T8294] overlayfs: conflicting lowerdir path [ 90.269380][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.660'. [ 90.272143][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.660'. [ 90.304235][ T6147] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 90.345063][ T8303] overlayfs: conflicting lowerdir path [ 90.377965][ T8311] overlayfs: failed to resolve './file0': -2 [ 90.454242][ T6147] usb 8-1: Using ep0 maxpacket: 16 [ 90.457691][ T6147] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 90.460306][ T6147] usb 8-1: config 0 has no interface number 0 [ 90.462298][ T6147] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.465876][ T6147] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 90.471360][ T6147] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 90.476751][ T6147] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 90.479940][ T6147] usb 8-1: Product: syz [ 90.481681][ T6147] usb 8-1: SerialNumber: syz [ 90.490713][ T6147] usb 8-1: config 0 descriptor?? [ 90.497737][ T6147] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 90.502776][ T6147] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input16 [ 90.569315][ T10] usb 6-1: USB disconnect, device number 13 [ 90.576214][ T10] usblp0: removed [ 90.610549][ T8330] Mount JFS Failure: -22 [ 90.611946][ T8330] jfs_mount failed w/return code = -22 [ 90.614932][ T8330] No control pipe specified [ 90.619210][ T8330] NILFS (nbd5): device size too small [ 90.635298][ T8338] overlayfs: conflicting lowerdir path [ 90.697507][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 90.902729][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 90.905820][ T8286] netlink: 'syz.3.656': attribute type 19 has an invalid length. [ 90.908278][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'. [ 90.918707][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.918816][ T6007] usb 8-1: USB disconnect, device number 6 [ 90.921027][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 90.933281][ T6007] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 91.032008][ T8362] FAT-fs (nullb0): bogus number of reserved sectors [ 91.035049][ T8362] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 91.039196][ T8364] Falling back ldisc for pty22. [ 91.041092][ T8366] debugfs: Directory 'pty22' with parent 'caif_serial' already present! [ 91.109813][ T8376] overlayfs: conflicting lowerdir path [ 91.151788][ T8387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1552 sclass=netlink_route_socket pid=8387 comm=syz.1.686 [ 91.274994][ T8409] loop6: detected capacity change from 0 to 63 [ 91.280335][ T8409] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.285164][ T8409] Buffer I/O error on dev loop6, logical block 1, async page read [ 91.289016][ T8409] Buffer I/O error on dev loop6, logical block 2, async page read [ 91.292816][ T8409] Buffer I/O error on dev loop6, logical block 3, async page read [ 91.295398][ T8415] netlink: 48 bytes leftover after parsing attributes in process `syz.4.692'. [ 91.299361][ T6033] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.304329][ T6033] Buffer I/O error on dev loop6, logical block 1, async page read [ 91.306730][ T6033] Buffer I/O error on dev loop6, logical block 2, async page read [ 91.309365][ T6033] Buffer I/O error on dev loop6, logical block 3, async page read [ 91.311952][ T8409] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.314519][ T8409] Buffer I/O error on dev loop6, logical block 1, async page read [ 91.346950][ T8422] overlayfs: conflicting lowerdir path [ 91.422928][ T8428] netlink: 277 bytes leftover after parsing attributes in process `syz.5.697'. [ 91.522123][ T8440] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 91.524285][ T8440] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 91.529602][ T8440] vhci_hcd vhci_hcd.0: Device attached [ 91.535838][ T8441] usbip_core: unknown command [ 91.537920][ T8441] vhci_hcd: unknown pdu 1476395008 [ 91.544219][ T8441] usbip_core: unknown command [ 91.548597][ T1142] vhci_hcd: stop threads [ 91.550285][ T1142] vhci_hcd: release socket [ 91.551707][ T1142] vhci_hcd: disconnect device [ 91.606920][ T8451] overlayfs: conflicting lowerdir path [ 91.788031][ T8469] random: crng reseeded on system resumption [ 92.304543][ T834] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 92.403565][ T8483] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 92.428185][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.716'. [ 92.462044][ T8492] XFS (nullb0): Invalid superblock magic number [ 92.465723][ T834] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 92.468894][ T834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 92.476426][ T834] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 92.479272][ T834] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 92.481878][ T834] usb 8-1: Product: syz [ 92.483613][ T834] usb 8-1: Manufacturer: syz [ 92.486744][ T834] usb 8-1: SerialNumber: syz [ 92.489778][ T834] usb 8-1: config 0 descriptor?? [ 92.496274][ T834] usb 8-1: selecting invalid altsetting 0 [ 92.528360][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 92.530678][ T8506] netlink: 'syz.4.721': attribute type 10 has an invalid length. [ 92.531152][ T8500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.720'. [ 92.541061][ T8506] veth0_macvtap: left promiscuous mode [ 92.579673][ T8506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8506 comm=syz.4.721 [ 92.696146][ T834] usb 8-1: USB disconnect, device number 7 [ 93.432385][ T8532] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 93.495786][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 93.495796][ T40] audit: type=1400 audit(1745246345.493:596): avc: denied { setopt } for pid=8541 comm="syz.1.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.584744][ T8548] sp0: Synchronizing with TNC [ 93.588194][ T8548] sp0: Found TNC [ 93.682957][ T8551] tmpfs: Bad value for 'mpol' [ 93.720618][ T8554] 9p: Unknown access argument 01777777777777777777777: -34 [ 93.754743][ T5945] Bluetooth: hci4: command 0xfc11 tx timeout [ 93.754930][ T5954] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 93.762264][ T40] audit: type=1400 audit(1745246345.753:597): avc: denied { mounton } for pid=8556 comm="syz.4.738" path="/67/file0/file0" dev="9p" ino=36831579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.769820][ T8558] 9pnet_virtio: no channels available for device syz [ 93.854349][ T40] audit: type=1400 audit(1745246345.843:598): avc: denied { getopt } for pid=8553 comm="syz.1.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.924771][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 93.977094][ T8584] vlan2: entered allmulticast mode [ 93.978837][ T8584] bond0: entered allmulticast mode [ 93.980864][ T8584] bond_slave_0: entered allmulticast mode [ 93.982694][ T8584] bond_slave_1: entered allmulticast mode [ 93.995208][ T40] audit: type=1400 audit(1745246345.993:599): avc: denied { accept } for pid=8589 comm="syz.4.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.039717][ T8596] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 4, id = 0 [ 94.046528][ T40] audit: type=1400 audit(1745246346.043:600): avc: denied { bind } for pid=8597 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.117731][ T8609] netlink: 'syz.4.752': attribute type 3 has an invalid length. [ 94.294925][ T8620] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 94.368884][ T8632] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.410291][ T8632] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.474051][ T40] audit: type=1400 audit(1745246346.463:601): avc: denied { ioctl } for pid=8643 comm="syz.3.761" path="socket:[25113]" dev="sockfs" ino=25113 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 94.490097][ T40] audit: type=1400 audit(1745246346.483:602): avc: denied { ioctl } for pid=8650 comm="syz.5.762" path="socket:[24424]" dev="sockfs" ino=24424 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.516706][ T6147] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 94.522207][ T40] audit: type=1400 audit(1745246346.513:603): avc: denied { connect } for pid=8654 comm="syz.3.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 94.643610][ T40] audit: type=1400 audit(1745246346.633:604): avc: denied { mount } for pid=8676 comm="syz.3.771" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 94.651326][ T40] audit: type=1400 audit(1745246346.633:605): avc: denied { remount } for pid=8676 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 94.676021][ T6147] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.679502][ T6147] usb 6-1: config 0 has no interfaces? [ 94.681344][ T6147] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 94.684669][ T6147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.688928][ T6147] usb 6-1: config 0 descriptor?? [ 94.886674][ T8703] ALSA: seq fatal error: cannot create timer (-22) [ 94.926168][ T6147] usb 6-1: USB disconnect, device number 14 [ 95.436873][ T8712] __nla_validate_parse: 5 callbacks suppressed [ 95.436884][ T8712] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.780'. [ 95.541697][ T8722] syz.3.784: attempt to access beyond end of device [ 95.541697][ T8722] loop3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 95.546662][ T8722] gfs2: error -5 reading superblock [ 95.560404][ T8719] kvm: pic: non byte read [ 95.563190][ T8719] kvm: pic: level sensitive irq not supported [ 95.563450][ T8719] kvm: pic: non byte read [ 95.569239][ T8719] kvm: pic: level sensitive irq not supported [ 95.571662][ T8719] kvm: pic: non byte read [ 95.578407][ T8719] kvm: pic: level sensitive irq not supported [ 95.578639][ T8719] kvm: pic: non byte read [ 95.653172][ T8734] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.787'. [ 95.653236][ T8734] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.787'. [ 95.658046][ T8734] netlink: 56 bytes leftover after parsing attributes in process `syz.3.787'. [ 95.885320][ T8761] nfs: Unknown parameter '' [ 95.912721][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 95.994302][ T5945] Bluetooth: hci4: command 0x1003 tx timeout [ 95.998433][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 96.014371][ T6147] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 96.022130][ T8783] sctp: [Deprecated]: syz.5.798 (pid 8783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.022130][ T8783] Use struct sctp_sack_info instead [ 96.043366][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.802'. [ 96.062313][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.802'. [ 96.080769][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.802'. [ 96.100719][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.802'. [ 96.118228][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.802'. [ 96.136249][ T8774] evm: overlay not supported [ 96.176071][ T6147] usb 8-1: Using ep0 maxpacket: 8 [ 96.178939][ T6147] usb 8-1: config index 0 descriptor too short (expected 5138, got 18) [ 96.181612][ T6147] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.185274][ T6147] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 96.190033][ T6147] usb 8-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 96.193031][ T6147] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.197252][ T6147] usb 8-1: Product: syz [ 96.198634][ T6147] usb 8-1: Manufacturer: syz [ 96.200171][ T6147] usb 8-1: SerialNumber: syz [ 96.208289][ T6147] usb 8-1: config 0 descriptor?? [ 96.235056][ T8804] netlink: 'syz.5.804': attribute type 1 has an invalid length. [ 96.237678][ T8804] netlink: 'syz.5.804': attribute type 2 has an invalid length. [ 96.344265][ T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 96.384626][ T8823] sp0: Synchronizing with TNC [ 96.396936][ T8823] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 96.421107][ T8744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.425462][ T8744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.428936][ T9] usb 8-1: USB disconnect, device number 8 [ 96.515583][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 96.518865][ T34] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 96.521379][ T34] usb 9-1: config 0 has no interface number 0 [ 96.523297][ T34] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.526886][ T34] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 96.531149][ T34] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 96.533963][ T34] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 96.536990][ T34] usb 9-1: Product: syz [ 96.538317][ T34] usb 9-1: SerialNumber: syz [ 96.541088][ T34] usb 9-1: config 0 descriptor?? [ 96.544433][ T34] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 96.547392][ T34] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input17 [ 96.748443][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 96.778133][ T8860] openvswitch: netlink: Key type 42 is out of range max 32 [ 96.838498][ T8868] nbd: must specify a size in bytes for the device [ 96.924108][ T8880] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 96.952284][ T8885] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 96.954630][ T8793] netlink: 'syz.4.803': attribute type 29 has an invalid length. [ 96.956314][ T8885] overlayfs: missing 'lowerdir' [ 96.963072][ T34] usb 9-1: USB disconnect, device number 3 [ 96.971840][ T34] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 97.128328][ T8910] netlink: 'syz.1.826': attribute type 142 has an invalid length. [ 97.131217][ T8910] netlink: 'syz.1.826': attribute type 142 has an invalid length. [ 97.133672][ T8910] netlink: 'syz.1.826': attribute type 142 has an invalid length. [ 97.136369][ T8910] netlink: 'syz.1.826': attribute type 142 has an invalid length. [ 97.138983][ T8910] netlink: 'syz.1.826': attribute type 142 has an invalid length. [ 97.308881][ T8916] @: renamed from bond_slave_0 (while UP) [ 98.052985][ T5954] Bluetooth: hci0: Malformed LE Event: 0x1b [ 98.111473][ T8938] hfsplus: unable to find HFS+ superblock [ 98.530899][ T8958] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 98.531025][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 98.531035][ T40] audit: type=1400 audit(1745246350.523:617): avc: denied { read } for pid=8955 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.542945][ T40] audit: type=1400 audit(1745246350.523:618): avc: denied { read } for pid=8955 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 98.568934][ T8963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.573805][ T8963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.579444][ T8963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.584474][ T8963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.589434][ T8963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.595980][ T8963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.601016][ T8963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.607732][ T8963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.612644][ T8963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.617948][ T8963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.703216][ T5954] Bluetooth: hci1: Malformed LE Event: 0x1b [ 98.913916][ T8986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.919322][ T8986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.923517][ T8986] bond0 (unregistering): Released all slaves [ 99.241734][ T40] audit: type=1400 audit(1745246351.233:619): avc: denied { setopt } for pid=9005 comm="syz.1.853" lport=43945 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 99.251902][ T40] audit: type=1400 audit(1745246351.243:620): avc: denied { getopt } for pid=9005 comm="syz.1.853" lport=43945 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 99.368978][ T5954] Bluetooth: hci3: Malformed LE Event: 0x1b [ 99.386553][ T34] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 99.424651][ T40] audit: type=1400 audit(1745246351.413:621): avc: denied { read write } for pid=9011 comm="syz.1.856" name="file1" dev="9p" ino=36831369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.433502][ T40] audit: type=1400 audit(1745246351.423:622): avc: denied { open } for pid=9011 comm="syz.1.856" path="/191/file0/file1" dev="9p" ino=36831369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.442980][ T40] audit: type=1400 audit(1745246351.423:623): avc: denied { rename } for pid=9011 comm="syz.1.856" name="file1" dev="9p" ino=36831369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.550533][ T40] audit: type=1400 audit(1745246351.543:624): avc: denied { connect } for pid=9036 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.564558][ T34] usb 8-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 99.567885][ T34] usb 8-1: config 1 interface 0 has no altsetting 0 [ 99.571520][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 99.574324][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.576724][ T34] usb 8-1: Product: syz [ 99.577998][ T34] usb 8-1: Manufacturer: syz [ 99.579695][ T34] usb 8-1: SerialNumber: syz [ 99.587130][ T9004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.590089][ T40] audit: type=1400 audit(1745246351.583:625): avc: denied { audit_write } for pid=9040 comm="syz.1.868" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.607790][ T40] audit: type=1400 audit(1745246351.603:626): avc: denied { unlink } for pid=9038 comm="syz.4.866" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=36831369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.623474][ T5954] Bluetooth: hci3: Malformed LE Event: 0x1b [ 99.649048][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.651380][ T9045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.671010][ T9045] validate_nla: 61 callbacks suppressed [ 99.671021][ T9045] netlink: 'syz.1.869': attribute type 13 has an invalid length. [ 100.079385][ T59] Bluetooth: Error in BCSP hdr checksum [ 100.113451][ T5945] Bluetooth: hci0: Malformed LE Event: 0x1b [ 100.335742][ T1146] Bluetooth: Error in BCSP hdr checksum [ 100.345457][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 100.444256][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 100.515795][ T24] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 100.525342][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.528180][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.534285][ T24] usb 10-1: Product: syz [ 100.535678][ T24] usb 10-1: Manufacturer: syz [ 100.537159][ T24] usb 10-1: SerialNumber: syz [ 100.542211][ T9077] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 100.546369][ T9092] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 100.546951][ T9093] __nla_validate_parse: 55 callbacks suppressed [ 100.546964][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 100.594443][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 100.599151][ T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 100.599213][ T10] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 100.599234][ T10] usb 6-1: Product: syz [ 100.599248][ T10] usb 6-1: Manufacturer: syz [ 100.599262][ T10] usb 6-1: SerialNumber: syz [ 100.601657][ T10] usb 6-1: config 0 descriptor?? [ 100.615707][ T1146] Bluetooth: Error in BCSP hdr checksum [ 100.748703][ T24] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 100.814177][ T57] usb 6-1: USB disconnect, device number 15 [ 100.865295][ T79] Bluetooth: Error in BCSP hdr checksum [ 100.956471][ T9077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.998691][ T6007] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 101.001613][ T6007] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 101.010477][ T79] wlan1: authenticated [ 101.010558][ T9077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.025339][ T79] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 101.066341][ T79] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 101.066481][ T9077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.069195][ T79] wlan1: associated [ 101.074006][ T9077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.077378][ T9077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.089758][ T10] usb 10-1: USB disconnect, device number 2 [ 101.096933][ T10] usblp0: removed [ 101.124745][ T1146] Bluetooth: Error in BCSP hdr checksum [ 101.367681][ T5945] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 101.395683][ T1142] Bluetooth: Error in BCSP hdr checksum [ 101.416511][ T5945] Bluetooth: hci0: Malformed LE Event: 0x1b [ 101.517765][ T9125] program syz.1.888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.529816][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 101.533438][ T9125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 101.619530][ T9130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9130 comm=syz.1.890 [ 101.623267][ T9130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9130 comm=syz.1.890 [ 101.654542][ T12] Bluetooth: Error in BCSP hdr checksum [ 101.720305][ T9139] netlink: 'syz.4.892': attribute type 10 has an invalid length. [ 101.750458][ T9141] kvm: kvm [9140]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x4000001f) = 0x0 [ 101.844742][ T5945] Bluetooth: hci5: command 0x1003 tx timeout [ 101.845636][ T5954] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 101.927930][ T1146] Bluetooth: Error in BCSP hdr checksum [ 101.946707][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 101.973101][ T9159] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 101.976582][ T9159] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 102.053131][ T9165] netlink: 'syz.4.898': attribute type 5 has an invalid length. [ 102.223286][ T34] usb 8-1: USB disconnect, device number 9 [ 102.225671][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 102.364461][ T834] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 102.495949][ T9198] fuse: Unknown parameter '' [ 102.496558][ T9199] fuse: Unknown parameter '' [ 102.504562][ T834] usb 9-1: device descriptor read/64, error -71 [ 102.585516][ T9198] block nbd1: Device being setup by another task [ 102.744278][ T834] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 102.874625][ T834] usb 9-1: device descriptor read/64, error -71 [ 102.985606][ T834] usb usb9-port1: attempt power cycle [ 103.193532][ T9204] (unnamed net_device) (uninitialized): (slave ip_vti0): Device is not bonding slave [ 103.196798][ T9204] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip_vti0) [ 103.249969][ T9210] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 103.265653][ T9210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.283922][ T9210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.287139][ T9210] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 103.292339][ T9210] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 103.324342][ T834] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 103.326873][ T9213] ip6erspan0: entered promiscuous mode [ 103.327893][ T5954] block nbd1: Receive control failed (result -32) [ 103.330284][ T9199] block nbd1: shutting down sockets [ 103.344861][ T834] usb 9-1: device descriptor read/8, error -71 [ 103.585205][ T834] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 103.597847][ T9230] could not open pipe file descriptor [ 103.604868][ T834] usb 9-1: device descriptor read/8, error -71 [ 103.679367][ T9233] block nbd5: Unsupported socket: shutdown callout must be supported. [ 103.714385][ T834] usb usb9-port1: unable to enumerate USB device [ 103.748107][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 103.748118][ T40] audit: type=1400 audit(1745246356.745:640): avc: denied { execmem } for pid=9240 comm="syz.5.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 103.913076][ T9253] netlink: 'syz.5.924': attribute type 10 has an invalid length. [ 103.918789][ T9253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.924220][ T9253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.930648][ T9253] batadv_slave_0: entered allmulticast mode [ 103.933731][ T9253] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 103.945038][ T5954] Bluetooth: hci0: Malformed LE Event: 0x1b [ 104.030840][ T9262] IPVS: stopping backup sync thread 8596 ... [ 104.069842][ T9266] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 104.084464][ T9266] bond2: entered promiscuous mode [ 104.086780][ T9266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.101220][ T9266] bond2: (slave bridge1): making interface the new active one [ 104.103720][ T9266] bridge1: entered promiscuous mode [ 104.105893][ T9266] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 104.285275][ T40] audit: type=1400 audit(1745246357.283:641): avc: denied { setopt } for pid=9273 comm="syz.5.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.295693][ T834] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 104.312330][ T40] audit: type=1400 audit(1745246357.314:642): avc: denied { map } for pid=9276 comm="syz.5.933" path="socket:[28216]" dev="sockfs" ino=28216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.320493][ T40] audit: type=1400 audit(1745246357.314:643): avc: denied { read } for pid=9276 comm="syz.5.933" path="socket:[28216]" dev="sockfs" ino=28216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.327989][ T40] audit: type=1400 audit(1745246357.324:644): avc: denied { create } for pid=9276 comm="syz.5.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.359251][ T9283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.442021][ T834] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.444719][ T834] usb 8-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 104.447946][ T834] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.450798][ T834] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 104.454313][ T834] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1631, setting to 1024 [ 104.455057][ T5954] Bluetooth: hci3: Malformed LE Event: 0x1b [ 104.459721][ T834] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.463930][ T834] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.466323][ T834] usb 8-1: Product: syz [ 104.467627][ T834] usb 8-1: Manufacturer: syz [ 104.473319][ T9264] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.476562][ T834] cdc_wdm 8-1:1.0: skipping garbage [ 104.478742][ T834] cdc_wdm 8-1:1.0: skipping garbage [ 104.483247][ T834] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 104.485121][ T834] cdc_wdm 8-1:1.0: Unknown control protocol [ 104.536339][ T9288] netlink: 'syz.5.936': attribute type 2 has an invalid length. [ 104.539508][ T9288] netlink: 244 bytes leftover after parsing attributes in process `syz.5.936'. [ 104.544071][ T9288] program syz.5.936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.588755][ T5954] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 104.593602][ T5954] CPU: 2 UID: 0 PID: 5954 Comm: kworker/u33:4 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 104.593628][ T5954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.593641][ T5954] Workqueue: hci3 hci_rx_work [ 104.593680][ T5954] Call Trace: [ 104.593686][ T5954] [ 104.593707][ T5954] dump_stack_lvl+0x16c/0x1f0 [ 104.593736][ T5954] sysfs_warn_dup+0x7f/0xa0 [ 104.593756][ T5954] sysfs_create_dir_ns+0x24b/0x2b0 [ 104.593772][ T5954] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 104.593788][ T5954] ? find_held_lock+0x2b/0x80 [ 104.593814][ T5954] ? do_raw_spin_unlock+0x172/0x230 [ 104.593834][ T5954] kobject_add_internal+0x2c4/0x9b0 [ 104.593863][ T5954] kobject_add+0x16e/0x240 [ 104.593888][ T5954] ? __pfx_kobject_add+0x10/0x10 [ 104.593914][ T5954] ? do_raw_spin_unlock+0x172/0x230 [ 104.593934][ T5954] ? kobject_put+0xab/0x5a0 [ 104.593964][ T5954] device_add+0x288/0x1a70 [ 104.593990][ T5954] ? __pfx_dev_set_name+0x10/0x10 [ 104.594007][ T5954] ? __pfx_device_add+0x10/0x10 [ 104.594027][ T5954] ? mgmt_send_event_skb+0x2fb/0x460 [ 104.594053][ T5954] hci_conn_add_sysfs+0x17e/0x230 [ 104.594074][ T5954] le_conn_complete_evt+0x1075/0x1d70 [ 104.594102][ T5954] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 104.594121][ T5954] ? hci_event_packet+0x43c/0x1190 [ 104.594141][ T5954] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 104.594157][ T5954] ? skb_pull_data+0x166/0x210 [ 104.594181][ T5954] hci_le_meta_evt+0x2f3/0x5e0 [ 104.594200][ T5954] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 104.594218][ T5954] hci_event_packet+0x669/0x1190 [ 104.594237][ T5954] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 104.594256][ T5954] ? __pfx_hci_event_packet+0x10/0x10 [ 104.594275][ T5954] ? kcov_remote_start+0x3c9/0x6d0 [ 104.594291][ T5954] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.594319][ T5954] hci_rx_work+0x2c5/0x16b0 [ 104.594339][ T5954] ? rcu_is_watching+0x12/0xc0 [ 104.594362][ T5954] process_one_work+0x9cc/0x1b70 [ 104.594394][ T5954] ? __pfx_process_one_work+0x10/0x10 [ 104.594420][ T5954] ? assign_work+0x1a0/0x250 [ 104.594439][ T5954] worker_thread+0x6c8/0xf10 [ 104.594471][ T5954] ? __pfx_worker_thread+0x10/0x10 [ 104.594488][ T5954] kthread+0x3c2/0x780 [ 104.594505][ T5954] ? __pfx_kthread+0x10/0x10 [ 104.594528][ T5954] ? __pfx_kthread+0x10/0x10 [ 104.594543][ T5954] ? __pfx_kthread+0x10/0x10 [ 104.594559][ T5954] ? __pfx_kthread+0x10/0x10 [ 104.594574][ T5954] ? rcu_is_watching+0x12/0xc0 [ 104.594595][ T5954] ? __pfx_kthread+0x10/0x10 [ 104.594611][ T5954] ret_from_fork+0x45/0x80 [ 104.594627][ T5954] ? __pfx_kthread+0x10/0x10 [ 104.594640][ T5954] ret_from_fork_asm+0x1a/0x30 [ 104.594664][ T5954] [ 104.594894][ T5954] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 104.676344][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 104.679085][ T5954] Bluetooth: hci3: failed to register connection device [ 104.679974][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 104.695256][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 104.697571][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 104.700059][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 104.702089][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 104.704210][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 104.706242][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 104.708328][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 104.710342][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 104.712314][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 104.714791][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 104.717009][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 104.719704][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 104.722324][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 104.724358][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 104.726337][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 104.728814][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 104.730800][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 104.732841][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 105.082832][ T9299] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 105.157471][ T9300] ALSA: mixer_oss: invalid OSS volume '' [ 105.243993][ T40] audit: type=1400 audit(1745246358.272:645): avc: denied { mount } for pid=9308 comm="syz.4.942" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 105.299388][ T9309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.942'. [ 105.302943][ T9309] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 105.394934][ T5954] Bluetooth: hci1: Malformed LE Event: 0x1b [ 105.400297][ T40] audit: type=1400 audit(1745246358.427:646): avc: denied { getopt } for pid=9315 comm="syz.5.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.448599][ T40] audit: type=1400 audit(1745246358.478:647): avc: denied { write } for pid=9319 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.450373][ T9320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.946'. [ 105.454921][ T40] audit: type=1400 audit(1745246358.478:648): avc: denied { nlmsg_write } for pid=9319 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.712324][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 105.721953][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 105.776533][ T40] audit: type=1400 audit(1745246358.818:649): avc: denied { append } for pid=9342 comm="syz.4.953" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.786298][ T9343] ecryptfs: Unknown parameter '/dev/ptmx' [ 105.860050][ T10] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.863359][ T10] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.871569][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.882810][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 105.886233][ T9352] netlink: 'syz.4.957': attribute type 29 has an invalid length. [ 105.892405][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 105.904119][ T10] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.908096][ T10] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.911541][ T10] usb 10-1: Product: syz [ 105.913426][ T10] usb 10-1: Manufacturer: syz [ 105.921154][ T9354] ubi31: attaching mtd0 [ 105.921174][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 105.924439][ T9354] ubi31: scanning is finished [ 105.924698][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 105.928525][ T9354] ubi31: empty MTD device detected [ 105.932470][ T10] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 105.934815][ T10] cdc_wdm 10-1:1.0: Unknown control protocol [ 106.000508][ T9354] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 106.003662][ T9354] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 106.007208][ T9354] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 106.010145][ T9354] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 106.013199][ T9354] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 106.016875][ T9354] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 106.019506][ T9354] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4071294893 [ 106.022599][ T9359] IPVS: persistence engine module ip_vs_pe_" not found [ 106.024122][ T9354] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 106.030413][ T9361] ubi31: background thread "ubi_bgt31d" started, PID 9361 [ 106.107777][ T9365] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.120386][ T834] usb 10-1: USB disconnect, device number 3 [ 106.143892][ T9376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=9376 comm=syz.4.962 [ 106.172864][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.228785][ T9382] netlink: 188 bytes leftover after parsing attributes in process `syz.1.965'. [ 106.763096][ T57] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 106.776319][ T9393] kvm: MWAIT instruction emulated as NOP! [ 106.932743][ T57] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.936310][ T57] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 106.941114][ T57] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.944750][ T57] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 106.951356][ T57] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 106.957324][ T57] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.961308][ T57] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.964708][ T57] usb 10-1: Product: syz [ 106.966486][ T57] usb 10-1: Manufacturer: syz [ 106.972624][ T57] cdc_wdm 10-1:1.0: skipping garbage [ 106.974804][ T57] cdc_wdm 10-1:1.0: skipping garbage [ 106.988474][ T57] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 106.990979][ T57] cdc_wdm 10-1:1.0: Unknown control protocol [ 107.003956][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 107.008801][ T57] usb 8-1: USB disconnect, device number 10 [ 107.464917][ T834] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 107.495512][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 107.613575][ T834] usb 9-1: not running at top speed; connect to a high speed hub [ 107.617546][ T834] usb 9-1: config 2 has an invalid interface number: 97 but max is 1 [ 107.620997][ T834] usb 9-1: config 2 has no interface number 1 [ 107.623630][ T834] usb 9-1: config 2 interface 97 altsetting 11 endpoint 0xF has invalid maxpacket 3136, setting to 64 [ 107.628145][ T834] usb 9-1: config 2 interface 97 altsetting 11 endpoint 0x8 has an invalid bInterval 0, changing to 4 [ 107.632806][ T834] usb 9-1: config 2 interface 97 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 107.637210][ T834] usb 9-1: config 2 interface 0 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 107.641706][ T834] usb 9-1: config 2 interface 0 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 107.645496][ T834] usb 9-1: config 2 interface 0 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.649450][ T834] usb 9-1: config 2 interface 0 altsetting 7 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 107.653689][ T834] usb 9-1: config 2 interface 97 has no altsetting 0 [ 107.655797][ T834] usb 9-1: config 2 interface 0 has no altsetting 0 [ 107.660510][ T834] usb 9-1: Dual-Role OTG device on HNP port [ 107.663285][ T834] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=10.94 [ 107.667184][ T834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.671067][ T834] usb 9-1: Product: 턇薂⠙羂ᱛ냪㛩 [ 107.673608][ T834] usb 9-1: Manufacturer: 㰊 [ 107.675583][ T834] usb 9-1: SerialNumber: syz [ 107.882125][ T834] option 9-1:2.97: GSM modem (1-port) converter detected [ 107.892170][ T834] usb 9-1: USB disconnect, device number 8 [ 107.896289][ T834] option 9-1:2.97: device disconnected [ 108.186615][ T834] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 108.335400][ T834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.339985][ T834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.344694][ T834] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.350074][ T834] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.354214][ T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.359662][ T834] usb 9-1: config 0 descriptor?? [ 108.379154][ T9324] overlayfs: statfs failed on './file0' [ 108.399968][ T10] usb 10-1: USB disconnect, device number 4 [ 108.450305][ T9414] tun0: tun_chr_ioctl cmd 1074025675 [ 108.452099][ T9414] tun0: persist enabled [ 108.454171][ T9414] tun0: tun_chr_ioctl cmd 1074025675 [ 108.456016][ T9414] tun0: persist disabled [ 108.574585][ T834] usbhid 9-1:0.0: can't add hid device: -71 [ 108.576945][ T834] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 108.585801][ T834] usb 9-1: USB disconnect, device number 9 [ 108.657606][ T9428] smc: net device bond0 applied user defined pnetid SYZ0 [ 108.666426][ T9428] veth1_vlan: left promiscuous mode [ 108.678053][ T9428] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 108.680596][ T9428] netlink: 'syz.4.980': attribute type 2 has an invalid length. [ 108.738934][ T5954] Bluetooth: hci1: Malformed LE Event: 0x1b [ 108.788047][ T9441] input: syz1 as /devices/virtual/input/input18 [ 108.888820][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 108.888835][ T40] audit: type=1400 audit(1745246362.009:658): avc: denied { mount } for pid=9445 comm="syz.4.987" name="/" dev="9p" ino=36831303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 108.908619][ T40] audit: type=1400 audit(1745246362.029:659): avc: denied { unmount } for pid=7470 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 108.989686][ T40] audit: type=1400 audit(1745246362.121:660): avc: denied { read write } for pid=7470 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.000137][ T40] audit: type=1400 audit(1745246362.121:661): avc: denied { open } for pid=7470 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.010129][ T40] audit: type=1400 audit(1745246362.121:662): avc: denied { ioctl } for pid=7470 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.015592][ T9450] [U] v3:D [ 109.020655][ T40] audit: type=1400 audit(1745246362.132:663): avc: denied { name_connect } for pid=9448 comm="syz.4.988" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.024715][ T9448] [U] [ 109.031402][ T40] audit: type=1400 audit(1745246362.152:664): avc: denied { ioctl } for pid=9448 comm="syz.4.988" path="socket:[29149]" dev="sockfs" ino=29149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.076182][ T40] audit: type=1400 audit(1745246362.213:665): avc: denied { watch } for pid=9451 comm="syz.4.989" path="/147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.095080][ T40] audit: type=1400 audit(1745246362.213:666): avc: denied { watch_sb } for pid=9451 comm="syz.4.989" path="/147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.187937][ T9459] net_ratelimit: 55 callbacks suppressed [ 109.187952][ T9459] openvswitch: netlink: Actions may not be safe on all matching packets [ 109.351741][ T5954] Bluetooth: hci2: Malformed LE Event: 0x1b [ 109.366165][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 109.393664][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 109.397704][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 109.417273][ T9470] 9pnet_fd: Insufficient options for proto=fd [ 109.530873][ T9480] overlayfs: conflicting options: userxattr,metacopy=on [ 109.533001][ T40] audit: type=1400 audit(1745246362.674:667): avc: denied { ioctl } for pid=9481 comm="syz.4.1001" path="socket:[28582]" dev="sockfs" ino=28582 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.611039][ T9488] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1003'. [ 109.660061][ T5954] Bluetooth: hci3: Malformed LE Event: 0x1b [ 110.171229][ T6147] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 110.210248][ T34] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 110.280389][ T5954] Bluetooth: hci2: Malformed LE Event: 0x1b [ 110.298372][ T6147] usb 9-1: device descriptor read/64, error -71 [ 110.371779][ T5954] block nbd0: Receive control failed (result -107) [ 110.376706][ T34] usb 10-1: Using ep0 maxpacket: 32 [ 110.381317][ T34] usb 10-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 110.384166][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.387024][ T34] usb 10-1: Product: syz [ 110.388590][ T34] usb 10-1: Manufacturer: syz [ 110.390057][ T34] usb 10-1: SerialNumber: syz [ 110.392762][ T34] usb 10-1: config 0 descriptor?? [ 110.397727][ T34] as10x_usb: device has been detected [ 110.399972][ T34] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 110.408752][ T34] usb 10-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 110.415309][ T34] as10x_usb: error during firmware upload part1 [ 110.418055][ T34] Registered device Abilis Systems DVB-Titan [ 110.435469][ T9520] nbd0: detected capacity change from 0 to 32 [ 110.443456][ T6033] block nbd0: Dead connection, failed to find a fallback [ 110.446857][ T6033] block nbd0: shutting down sockets [ 110.449021][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.452024][ T6033] buffer_io_error: 18834 callbacks suppressed [ 110.452031][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.457206][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.459996][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.462449][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.466020][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.468507][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.471289][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.473749][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.476888][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.479360][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.482278][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.485470][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.488435][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.490883][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.493659][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.496404][ T6033] ldm_validate_partition_table(): Disk read failed. [ 110.498612][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.501511][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.504670][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.507738][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.510375][ T6033] Dev nbd0: unable to read RDB block 0 [ 110.512457][ T6033] nbd0: unable to read partition table [ 110.524970][ T6033] ldm_validate_partition_table(): Disk read failed. [ 110.528327][ T6033] Dev nbd0: unable to read RDB block 0 [ 110.531024][ T6033] nbd0: unable to read partition table [ 110.553766][ T6147] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 110.596609][ T9516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9516 comm=syz.5.1013 [ 110.601093][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1013'. [ 110.606306][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1013'. [ 110.615037][ T24] usb 10-1: USB disconnect, device number 5 [ 110.624193][ T24] Unregistered device Abilis Systems DVB-Titan [ 110.624908][ T24] as10x_usb: device has been disconnected [ 110.652614][ T9526] sp0: Synchronizing with TNC [ 110.690207][ T6147] usb 9-1: device descriptor read/64, error -71 [ 110.754852][ T9528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1018'. [ 110.798481][ T6147] usb usb9-port1: attempt power cycle [ 110.841024][ T9536] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1022'. [ 110.874772][ T5954] Bluetooth: hci0: Malformed LE Event: 0x1b [ 111.004542][ T9551] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1025'. [ 111.007500][ T9551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1025'. [ 111.007990][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 111.010398][ T9551] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1025'. [ 111.017251][ T9551] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1025'. [ 111.077162][ T5954] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 111.140903][ T6147] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 111.149538][ T9557] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1028'. [ 111.171032][ T6147] usb 9-1: device descriptor read/8, error -71 [ 111.194133][ T9561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9561 comm=syz.5.1030 [ 111.235246][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 111.336702][ T5954] Bluetooth: hci3: Malformed LE Event: 0x1b [ 111.406095][ T6147] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 111.425984][ T6147] usb 9-1: device descriptor read/8, error -71 [ 111.535553][ T6147] usb usb9-port1: unable to enumerate USB device [ 111.660229][ T9590] syz.5.1040 (9590): drop_caches: 2 [ 111.695344][ T5954] Bluetooth: hci3: Malformed LE Event: 0x1b [ 111.784349][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 111.791547][ T9615] overlayfs: failed to resolve './file1/file0': -2 [ 111.930199][ T9626] netlink: 'syz.5.1048': attribute type 10 has an invalid length. [ 111.937670][ T9626] netlink: 'syz.5.1048': attribute type 27 has an invalid length. [ 112.406720][ T5954] Bluetooth: hci0: Malformed LE Event: 0x1b [ 112.528457][ T9638] kvm: pic: non byte write [ 112.530243][ T9638] kvm: pic: non byte write [ 112.537815][ T9641] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 112.879381][ T9656] netlink: zone id is out of range [ 112.881333][ T9656] netlink: zone id is out of range [ 112.883327][ T9656] netlink: zone id is out of range [ 112.884964][ T9656] netlink: get zone limit has 8 unknown bytes [ 112.918213][ T9664] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 112.965372][ T5954] Bluetooth: hci1: Malformed LE Event: 0x1b [ 113.142829][ T9677] loop6: detected capacity change from 0 to 63 [ 113.856462][ T5945] Bluetooth: hci2: Malformed LE Event: 0x1b [ 113.891175][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 113.891185][ T40] audit: type=1400 audit(1745246367.119:687): avc: denied { ioctl } for pid=9693 comm="syz.3.1073" path="socket:[30935]" dev="sockfs" ino=30935 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.388347][ T5945] Bluetooth: hci0: Malformed LE Event: 0x1b [ 114.448601][ T9722] Invalid logical block size (9) [ 114.557910][ T40] audit: type=1400 audit(1745246623.787:688): avc: denied { accept } for pid=9725 comm="syz.1.1084" path="socket:[29522]" dev="sockfs" ino=29522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.654401][ T9729] xfrm1: entered promiscuous mode [ 114.657536][ T9729] xfrm1: entered allmulticast mode [ 115.013980][ T5945] Bluetooth: hci3: Malformed LE Event: 0x1b [ 115.035141][ T5954] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.168346][ T40] audit: type=1400 audit(1745246624.397:689): avc: denied { append } for pid=9770 comm="syz.4.1099" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 115.263609][ T5954] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 115.268999][ T5954] Bluetooth: hci2: Malformed LE Event: 0x1b [ 115.337596][ T9789] syz.3.1104: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 115.344710][ T9789] CPU: 0 UID: 0 PID: 9789 Comm: syz.3.1104 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 115.344749][ T9789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.344764][ T9789] Call Trace: [ 115.344770][ T9789] [ 115.344777][ T9789] dump_stack_lvl+0x16c/0x1f0 [ 115.344867][ T9789] warn_alloc+0x248/0x3a0 [ 115.344887][ T9789] ? __pfx_warn_alloc+0x10/0x10 [ 115.344914][ T9789] ? __get_vm_area_node+0x1b9/0x300 [ 115.344937][ T9789] ? __get_vm_area_node+0x1e5/0x300 [ 115.344966][ T9789] __vmalloc_node_range_noprof+0x1110/0x1540 [ 115.344999][ T9789] ? xskq_create+0xfb/0x1d0 [ 115.345025][ T9789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 115.345057][ T9789] ? xskq_create+0xfb/0x1d0 [ 115.345078][ T9789] vmalloc_user_noprof+0x6b/0x90 [ 115.345102][ T9789] ? xskq_create+0xfb/0x1d0 [ 115.345121][ T9789] xskq_create+0xfb/0x1d0 [ 115.345143][ T9789] xsk_setsockopt+0x684/0x840 [ 115.345163][ T9789] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.345188][ T9789] ? selinux_socket_setsockopt+0x6a/0x80 [ 115.345217][ T9789] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.345236][ T9789] do_sock_setsockopt+0x221/0x470 [ 115.345260][ T9789] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 115.345299][ T9789] __sys_setsockopt+0x1a0/0x230 [ 115.345323][ T9789] __x64_sys_setsockopt+0xbd/0x160 [ 115.345340][ T9789] ? do_syscall_64+0x91/0x260 [ 115.345362][ T9789] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.345384][ T9789] do_syscall_64+0xcd/0x260 [ 115.345409][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.345426][ T9789] RIP: 0033:0x7f222f18e169 [ 115.345440][ T9789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.345456][ T9789] RSP: 002b:00007f2230001038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.345473][ T9789] RAX: ffffffffffffffda RBX: 00007f222f3b5fa0 RCX: 00007f222f18e169 [ 115.345484][ T9789] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009 [ 115.345494][ T9789] RBP: 00007f222f210a68 R08: 0000000000000004 R09: 0000000000000000 [ 115.345510][ T9789] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 115.345520][ T9789] R13: 0000000000000000 R14: 00007f222f3b5fa0 R15: 00007ffdde643608 [ 115.345544][ T9789] [ 115.424187][ T9789] Mem-Info: [ 115.425420][ T9789] active_anon:16924 inactive_anon:0 isolated_anon:0 [ 115.425420][ T9789] active_file:16867 inactive_file:38346 isolated_file:0 [ 115.425420][ T9789] unevictable:1768 dirty:17 writeback:0 [ 115.425420][ T9789] slab_reclaimable:11965 slab_unreclaimable:80055 [ 115.425420][ T9789] mapped:25038 shmem:11663 pagetables:1104 [ 115.425420][ T9789] sec_pagetables:303 bounce:0 [ 115.425420][ T9789] kernel_misc_reclaimable:0 [ 115.425420][ T9789] free:428447 free_pcp:9574 free_cma:0 [ 115.442836][ T9789] Node 0 active_anon:67696kB inactive_anon:0kB active_file:67468kB inactive_file:153308kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100152kB dirty:68kB writeback:0kB shmem:43116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12528kB pagetables:4416kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB [ 115.453813][ T9789] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 115.463793][ T9789] Node 0 DMA free:15156kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:172kB local_pcp:48kB free_cma:0kB [ 115.472658][ T9789] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 115.474484][ T9789] Node 0 DMA32 free:154448kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB active_anon:67696kB inactive_anon:0kB active_file:67468kB inactive_file:153308kB unevictable:3536kB writepending:64kB present:2080628kB managed:1265888kB mlocked:0kB bounce:0kB free_pcp:23144kB local_pcp:11632kB free_cma:0kB [ 115.484491][ T9789] lowmem_reserve[]: 0 0 0 0 0 [ 115.486164][ T9789] Node 1 Normal free:1560056kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:16388kB local_pcp:3692kB free_cma:0kB [ 115.497072][ T9789] lowmem_reserve[]: 0 0 0 0 0 [ 115.499136][ T9789] Node 0 DMA: 8*4kB (UM) 7*8kB (UM) 8*16kB (UM) 9*32kB (UM) 9*64kB (UM) 8*128kB (UM) 7*256kB (UM) 8*512kB (UM) 5*1024kB (UM) 1*2048kB (U) 0*4096kB = 15160kB [ 115.506323][ T9789] Node 0 DMA32: 560*4kB (UM) 50*8kB (UM) 128*16kB (UM) 201*32kB (UME) 219*64kB (UME) 164*128kB (UME) 73*256kB (UME) 63*512kB (U) 36*1024kB (UE) 8*2048kB (UM) 1*4096kB (M) = 154416kB [ 115.513409][ T9789] Node 1 Normal: 57*4kB (UM) 44*8kB (UME) 34*16kB (UME) 25*32kB (UME) 23*64kB (UME) 26*128kB (UME) 22*256kB (UE) 21*512kB (UM) 9*1024kB (UE) 6*2048kB (UME) 370*4096kB (M) = 1560132kB [ 115.521628][ T9789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.524698][ T9789] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.527657][ T9789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.530656][ T9789] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.533559][ T9789] 66876 total pagecache pages [ 115.536839][ T9789] 0 pages in swap cache [ 115.538265][ T9789] Free swap = 124996kB [ 115.539650][ T9789] Total swap = 124996kB [ 115.541026][ T9789] 1048443 pages RAM [ 115.542297][ T9789] 0 pages HighMem/MovableOnly [ 115.542330][ T9789] 282640 pages reserved [ 115.542334][ T9789] 0 pages cma reserved [ 115.578136][ T9796] fuse: Bad value for 'group_id' [ 115.579774][ T9796] fuse: Bad value for 'group_id' [ 115.691108][ T5945] Bluetooth: hci2: unexpected event for opcode 0x200f [ 115.691411][ T9810] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 115.722453][ T5945] Bluetooth: hci2: Malformed LE Event: 0x1b [ 115.769876][ T9816] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 115.786632][ T9816] kvm: requested 141638 ns i8254 timer period limited to 200000 ns [ 115.912896][ T9829] team0: Device vti0 is of different type [ 116.014858][ T6004] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 116.060693][ T5945] Bluetooth: hci2: Malformed LE Event: 0x1b [ 116.082613][ T9848] kvm: pic: non byte read [ 116.087460][ T9848] kvm: pic: non byte read [ 116.090308][ T9848] kvm: pic: non byte read [ 116.093195][ T9848] kvm: pic: non byte read [ 116.146389][ T6004] usb 9-1: device descriptor read/64, error -71 [ 116.166506][ T9861] netlink: 'syz.1.1125': attribute type 1 has an invalid length. [ 116.188318][ T9861] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.193714][ T9861] __nla_validate_parse: 10 callbacks suppressed [ 116.193723][ T9861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1125'. [ 116.205163][ T40] audit: type=1400 audit(1745246625.437:690): avc: denied { read write } for pid=9868 comm="syz.3.1127" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 116.213730][ T40] audit: type=1400 audit(1745246625.437:691): avc: denied { open } for pid=9868 comm="syz.3.1127" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 116.262731][ T5945] Bluetooth: hci0: Malformed LE Event: 0x1b [ 116.381224][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1135'. [ 116.405716][ T6004] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 116.432438][ T9895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9895 comm=syz.5.1136 [ 116.535505][ T6007] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 116.544880][ T6004] usb 9-1: device descriptor read/64, error -71 [ 116.658566][ T6004] usb usb9-port1: attempt power cycle [ 116.686504][ T6007] usb 6-1: Using ep0 maxpacket: 32 [ 116.690756][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 116.695059][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.698127][ T6007] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.701792][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 116.705489][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 116.710520][ T6007] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 116.713954][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.716810][ T6007] usb 6-1: Product: syz [ 116.720865][ T6007] usb 6-1: Manufacturer: syz [ 116.722342][ T6007] usb 6-1: SerialNumber: syz [ 116.729312][ T6007] usb 6-1: config 0 descriptor?? [ 116.731733][ T9887] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.737393][ T6007] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input19 [ 116.742932][ T5343] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.753011][ T5945] Bluetooth: hci2: Malformed LE Event: 0x1b [ 116.755018][ T5343] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.763409][ T5343] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.777450][ T5343] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.787478][ T5343] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.798465][ T5343] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.803649][ T6198] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.814417][ T5343] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.827281][ T5343] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.903880][ T40] audit: type=1400 audit(1745246626.127:692): avc: denied { ioctl } for pid=9920 comm="syz.3.1142" path="socket:[32232]" dev="sockfs" ino=32232 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 116.903980][ T9921] netlink: 'syz.3.1142': attribute type 10 has an invalid length. [ 116.951607][ T9887] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.957730][ T57] usb 6-1: USB disconnect, device number 16 [ 117.005171][ T6004] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 117.035742][ T6004] usb 9-1: device descriptor read/8, error -71 [ 117.126894][ T9944] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 117.137449][ T9944] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1145'. [ 117.234874][ T835] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 117.271894][ T9948] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 117.280460][ T9949] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 117.294820][ T6004] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 117.325285][ T6004] usb 9-1: device descriptor read/8, error -71 [ 117.386161][ T835] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 117.389318][ T835] usb 10-1: config 0 interface 0 has no altsetting 0 [ 117.393287][ T835] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.396229][ T835] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.398787][ T835] usb 10-1: Product: syz [ 117.400185][ T835] usb 10-1: Manufacturer: syz [ 117.401699][ T835] usb 10-1: SerialNumber: syz [ 117.404444][ T835] usb 10-1: config 0 descriptor?? [ 117.408648][ T835] usb 10-1: selecting invalid altsetting 0 [ 117.435704][ T6004] usb usb9-port1: unable to enumerate USB device [ 117.531964][ T40] audit: type=1400 audit(1745246626.757:693): avc: denied { connect } for pid=9954 comm="syz.1.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 117.545446][ T9955] input: syz0 as /devices/virtual/input/input20 [ 117.609111][ T6147] usb 10-1: USB disconnect, device number 6 [ 117.814795][ T6004] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 117.974790][ T6004] usb 6-1: Invalid ep0 maxpacket: 32 [ 118.104861][ T6004] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 118.153461][ T5945] Bluetooth: hci2: Malformed LE Event: 0x1b [ 118.275134][ T6004] usb 6-1: Invalid ep0 maxpacket: 32 [ 118.277008][ T6004] usb usb6-port1: attempt power cycle [ 118.366468][ T9975] ptrace attach of "/syz-executor exec"[8070] was attempted by ""[9975] [ 118.433015][ T40] audit: type=1400 audit(1745246627.657:694): avc: denied { shutdown } for pid=9978 comm="syz.5.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.466978][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1157'. [ 118.589697][ T5945] Bluetooth: hci3: Malformed LE Event: 0x1b [ 118.637536][ T6004] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 118.657297][ T6004] usb 6-1: Invalid ep0 maxpacket: 32 [ 118.760711][T10005] netlink: 'syz.5.1163': attribute type 23 has an invalid length. [ 118.802754][ T6004] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 118.825257][ T6004] usb 6-1: Invalid ep0 maxpacket: 32 [ 118.827176][ T6004] usb usb6-port1: unable to enumerate USB device [ 118.839177][T10007] loop6: detected capacity change from 0 to 524287999 [ 119.030542][ T5945] Bluetooth: hci3: Malformed LE Event: 0x1b [ 119.302514][ T40] audit: type=1400 audit(1745246628.527:695): avc: denied { append } for pid=10041 comm="syz.3.1174" name="pfkey" dev="proc" ino=4026533367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 119.322295][ T40] audit: type=1400 audit(1745246628.547:696): avc: denied { map } for pid=10041 comm="syz.3.1174" path="/305/file0/pids.current" dev="9p" ino=36831602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.334313][T10042] netfs: Couldn't get user pages (rc=-14) [ 119.343495][ T40] audit: type=1400 audit(1745246628.567:697): avc: denied { write } for pid=10041 comm="syz.3.1174" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 119.649107][ T5945] Bluetooth: hci2: Malformed LE Event: 0x1b [ 119.740318][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 119.914379][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 120.224814][ T5945] Bluetooth: hci3: Malformed LE Event: 0x1b [ 120.268632][ T40] audit: type=1400 audit(1745246629.497:698): avc: denied { mounton } for pid=10089 comm="syz.5.1188" path="mnt:[4026532900]" dev="nsfs" ino=4026532900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.273842][T10090] dns_resolver: Unsupported server list version (0) [ 120.515721][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052aa1000: rx timeout, send abort [ 120.546417][T10104] pimreg: entered allmulticast mode [ 120.572758][T10106] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 120.612203][ T5945] Bluetooth: hci0: Malformed LE Event: 0x1b [ 120.642076][ T40] audit: type=1400 audit(1745246629.867:699): avc: denied { create } for pid=10113 comm="syz.1.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 120.708390][T10110] block nbd1: server does not support multiple connections per device. [ 120.712383][T10110] block nbd1: shutting down sockets [ 120.938898][T10124] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 120.985674][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.989286][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.992332][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.996487][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.999898][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.001084][ T5957] Bluetooth: hci2: Malformed LE Event: 0x1b [ 121.019474][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052aa1000: abort rx timeout. Force session deactivation [ 121.092933][T10129] chnl_net:caif_netlink_parms(): no params data found [ 121.186401][T10129] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.188791][T10129] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.191149][T10129] bridge_slave_0: entered allmulticast mode [ 121.193950][T10129] bridge_slave_0: entered promiscuous mode [ 121.197689][T10129] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.200001][T10129] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.202318][T10129] bridge_slave_1: entered allmulticast mode [ 121.205081][T10129] bridge_slave_1: entered promiscuous mode [ 121.238876][T10129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.243260][T10129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.289438][T10129] team0: Port device team_slave_0 added [ 121.292869][T10129] team0: Port device team_slave_1 added [ 121.323620][T10129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.328253][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.336462][T10129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.340659][T10129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.342818][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.343148][ T5945] Bluetooth: hci1: Malformed LE Event: 0x1b [ 121.350938][T10129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.400218][T10129] hsr_slave_0: entered promiscuous mode [ 121.402482][T10129] hsr_slave_1: entered promiscuous mode [ 121.451119][T10173] /dev/sg0: Can't lookup blockdev [ 121.527078][T10129] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.530955][T10129] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.535906][T10129] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.539684][T10129] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.551222][T10129] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.553465][T10129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.555887][T10129] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.558108][T10129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.589028][T10129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.599980][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.603439][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.616236][T10129] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.622742][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.625044][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.631064][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.634046][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.738850][T10129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.848404][T10129] veth0_vlan: entered promiscuous mode [ 121.853270][T10129] veth1_vlan: entered promiscuous mode [ 121.866219][T10129] veth0_macvtap: entered promiscuous mode [ 121.872225][T10129] veth1_macvtap: entered promiscuous mode [ 121.880067][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.883566][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.887103][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.890326][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.893409][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.897036][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.900939][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.904337][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.909141][T10129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.914318][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.917917][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.920949][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.924299][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.927432][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.930640][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.933671][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.937089][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.940151][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.943353][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.947366][T10129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.952008][T10129] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.955730][T10129] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.958577][T10129] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.961302][T10129] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.003101][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.006169][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.028746][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.031288][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.042057][ T40] audit: type=1400 audit(1745246631.267:700): avc: denied { mounton } for pid=10129 comm="syz-executor" path="/syzkaller.gj6Xs1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=31507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 122.099382][T10187] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1202'. [ 122.102261][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1202'. [ 123.035013][ T5945] Bluetooth: hci0: command tx timeout [ 125.115021][ T5945] Bluetooth: hci0: command tx timeout [ 127.205015][ T5945] Bluetooth: hci0: command tx timeout [ 129.284878][ T5945] Bluetooth: hci0: command tx timeout [ 132.320884][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.323018][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.592260][ T40] audit: type=1400 audit(1745246641.817:701): avc: denied { accept } for pid=10190 comm="syz.6.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.619332][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1219'. [ 132.632939][ T5945] Bluetooth: hci3: Malformed LE Event: 0x1b [ 132.692787][ T6147] hid (null): unknown global tag 0xe [ 132.694704][ T6147] hid (null): unknown global tag 0xd [ 132.699882][ T6147] hid (null): unknown global tag 0xd [ 132.706156][ T6147] hid-generic 0008:7FFFFFFF:000D.0005: unknown global tag 0xe [ 132.708754][ T6147] hid-generic 0008:7FFFFFFF:000D.0005: item 0 0 1 14 parsing failed [ 132.711558][ T6147] hid-generic 0008:7FFFFFFF:000D.0005: probe with driver hid-generic failed with error -22 [ 132.722579][ T29] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 132.793041][T10246] batadv_slave_1: entered promiscuous mode [ 132.798202][T10246] batadv_slave_1: left promiscuous mode [ 132.803989][ T5945] Bluetooth: hci3: Malformed LE Event: 0x1b [ 133.005809][ T40] audit: type=1400 audit(1745246642.237:702): avc: denied { unmount } for pid=8070 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 133.023105][ T40] audit: type=1400 audit(1745246642.247:703): avc: denied { ioctl } for pid=10269 comm="syz.5.1239" path="socket:[33701]" dev="sockfs" ino=33701 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 133.082337][ T5957] Bluetooth: hci0: Malformed LE Event: 0x1b [ 133.288386][T10287] overlay: Unknown parameter 'fowner>18446744073709551615' [ 133.292620][ T5957] Bluetooth: hci1: unexpected event for opcode 0x2007 [ 133.321865][T10288] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 133.522248][T10298] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1247'. [ 133.531145][T10299] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1247'. [ 133.541468][ T40] audit: type=1400 audit(1745246642.767:704): avc: denied { ioctl } for pid=10297 comm="syz.4.1247" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 133.554804][ T40] audit: type=1400 audit(1745246642.777:705): avc: denied { getopt } for pid=10297 comm="syz.4.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.667845][ T5957] Bluetooth: hci2: Malformed LE Event: 0x1b [ 133.681191][ T5957] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 133.703268][T10318] netlink: 'syz.4.1254': attribute type 33 has an invalid length. [ 133.826303][T10322] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 134.156423][ T40] audit: type=1400 audit(1745246643.387:706): avc: denied { accept } for pid=10339 comm="syz.6.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 134.653306][ T5957] Bluetooth: hci1: Malformed LE Event: 0x1b [ 134.689165][T10350] pim6reg1: entered promiscuous mode [ 134.689186][T10350] pim6reg1: entered allmulticast mode [ 134.958184][T10358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1264'. [ 134.961554][T10358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1264'. [ 135.114449][T10366] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1267'. [ 135.115197][ T5945] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 135.156633][ T5945] Bluetooth: hci0: Malformed LE Event: 0x1b [ 135.193958][T10377] deleting an unspecified loop device is not supported. [ 135.206020][T10383] SELinux: ebitmap start bit (67108864) is beyond the end of the bitmap (1472) [ 135.210442][T10384] 9pnet_virtio: no channels available for device syz [ 135.210890][T10383] SELinux: failed to load policy [ 135.216201][T10382] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 135.219301][T10382] SELinux: failed to load policy [ 135.230089][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1272'. [ 135.243829][T10390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.258350][T10390] hfs: can't find a HFS filesystem on dev sr0 [ 135.264166][T10390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18691 sclass=netlink_route_socket pid=10390 comm=syz.6.1276 [ 135.291597][T10394] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 135.294962][T10394] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.380870][ T5957] Bluetooth: hci0: Malformed LE Event: 0x1b [ 135.403890][T10412] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0 [ 135.407410][T10411] IPVS: stopping backup sync thread 10412 ... [ 135.429995][T10417] overlayfs: conflicting options: userxattr,redirect_dir=on [ 135.639563][ T40] audit: type=1400 audit(1745246644.867:707): avc: denied { rename } for pid=10436 comm="syz.4.1289" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=36831598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 135.674916][ T24] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 135.830165][ T5957] Bluetooth: hci0: Malformed LE Event: 0x1b [ 135.837954][ T24] usb 8-1: not running at top speed; connect to a high speed hub [ 135.842136][ T24] usb 8-1: config 1 interface 0 has no altsetting 0 [ 135.847159][ T24] usb 8-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.40 [ 135.850057][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.852478][ T24] usb 8-1: Product: 陋쿌⸃儏胷〦굲輰鳻ľ尪䑔ⲃꨰ㗊뀩䉲ⷮ㤄䑼⭃㬩䖺ﱁ㑞쫍Ά [ 135.857871][ T24] usb 8-1: Manufacturer: ☪䠄팬Ꞟ熞㜜삶赭ը㺶섍墿㦲鈎蕆yⱓﾕ奬ᘉᝐꠂ繉৑ [ 135.861354][ T24] usb 8-1: SerialNumber: ⡅ꑰ뿐늲ꖀ퉏鈠셒秲㩇빊鶴ڃ䌖Ꝅ伩츈癒ҕ쏬ⶤ䶎㥑嚏莅송틄摡暭洝穜ং臑ꇑ屗᫔옥圐棲증ೞ旜県鿴㇌␣ⶱ싳촣 [ 135.973305][T10451] QAT: failed to copy from user. [ 136.079065][ T24] usbhid 8-1:1.0: can't add hid device: -71 [ 136.081024][ T24] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 136.084497][ T24] usb 8-1: USB disconnect, device number 11 [ 136.108382][T10460] xt_ecn: cannot match TCP bits for non-tcp packets [ 136.674712][ T40] audit: type=1400 audit(1745246645.897:708): avc: denied { unmount } for pid=7470 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 136.692774][ T5957] Bluetooth: hci0: Malformed LE Event: 0x1b [ 136.742586][ T40] audit: type=1400 audit(1745246645.967:709): avc: denied { append } for pid=10492 comm="syz.4.1306" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.837798][ T5957] Bluetooth: hci0: ISO packet too small [ 136.864847][ T6004] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 136.994822][ T6004] usb 8-1: device descriptor read/64, error -71 [ 137.244841][ T6004] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 137.355040][ T5957] Bluetooth: hci5: command 0x1003 tx timeout [ 137.355522][ T5945] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 137.377189][ T6004] usb 8-1: device descriptor read/64, error -71 [ 137.426675][ T40] audit: type=1400 audit(1745246646.657:710): avc: denied { read } for pid=10509 comm="syz.6.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 137.433024][T10513] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 137.435291][T10513] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 137.438720][T10513] vhci_hcd vhci_hcd.0: Device attached [ 137.442615][T10514] vhci_hcd: connection closed [ 137.444584][ T12] vhci_hcd: stop threads [ 137.449095][ T12] vhci_hcd: release socket [ 137.451013][ T12] vhci_hcd: disconnect device [ 137.485555][ T6004] usb usb8-port1: attempt power cycle [ 137.701568][ T5945] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 137.806633][ T5945] Bluetooth: hci1: Malformed LE Event: 0x1b [ 137.835067][ T6004] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 137.855265][ T6004] usb 8-1: device descriptor read/8, error -71 [ 138.049872][ T40] audit: type=1400 audit(1745246647.277:711): avc: denied { remount } for pid=10530 comm="syz.4.1317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 138.114983][ T6004] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 138.137146][ T6004] usb 8-1: device descriptor read/8, error -71 [ 138.255103][ T6004] usb usb8-port1: unable to enumerate USB device [ 138.901416][T10549] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 138.906807][T10551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1321'. [ 138.909750][T10551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1321'. [ 139.238594][ T40] audit: type=1400 audit(1745246648.467:712): avc: denied { getopt } for pid=10574 comm="syz.6.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.244393][ T40] audit: type=1400 audit(1745246648.467:713): avc: denied { read } for pid=10574 comm="syz.6.1328" path="socket:[34621]" dev="sockfs" ino=34621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.276595][T10580] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 139.279889][T10580] overlayfs: overlapping lowerdir path [ 139.304636][ T5945] Bluetooth: hci0: Malformed LE Event: 0x1b [ 139.309591][ T40] audit: type=1400 audit(1745246648.537:714): avc: denied { read } for pid=10586 comm="syz.4.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 139.588474][ T5945] Bluetooth: hci3: Malformed LE Event: 0x1b [ 139.616464][ T40] audit: type=1400 audit(1745246648.847:715): avc: denied { bind } for pid=10616 comm="syz.5.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.617998][T10617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1342'. [ 139.622223][ T40] audit: type=1400 audit(1745246648.847:716): avc: denied { name_bind } for pid=10616 comm="syz.5.1342" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 139.631899][ T40] audit: type=1400 audit(1745246648.847:717): avc: denied { node_bind } for pid=10616 comm="syz.5.1342" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 139.675134][ T24] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 139.688758][T10627] No such timeout policy "syz1" [ 139.835898][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 139.838731][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.841902][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.845395][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.849371][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.853423][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.857134][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.064282][ T24] usb 9-1: usb_control_msg returned -32 [ 140.066187][ T24] usbtmc 9-1:16.0: can't read capabilities [ 140.075354][ T10] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 140.103495][ T40] audit: type=1400 audit(1745246649.327:718): avc: denied { getopt } for pid=10642 comm="syz.5.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.183744][T10647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.197147][ T40] audit: type=1400 audit(1745246649.427:719): avc: denied { setattr } for pid=10599 comm="syz.4.1337" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.249331][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.252892][ T10] usb 8-1: config 0 has no interface number 0 [ 140.255701][ T10] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 140.260106][ T10] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.263177][ T10] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.266473][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.271586][ T10] usb 8-1: config 0 descriptor?? [ 140.276856][T10651] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.277159][ T10] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 140.402332][T10651] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.512792][T10651] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.523672][T10625] smb3: Unknown parameter 'rdma' [ 140.552754][T10654] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 140.583929][ T24] usb 8-1: USB disconnect, device number 16 [ 140.602931][T10651] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.673593][T10651] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.681527][T10651] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.689717][T10651] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.696880][T10651] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.701765][T10651] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.767577][T10651] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.818254][T10651] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.899155][T10651] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.785024][ T6147] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 141.936941][ T6147] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 141.940222][ T6147] usb 11-1: config 0 interface 0 has no altsetting 0 [ 141.944319][ T6147] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.947247][ T6147] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 141.949899][ T6147] usb 11-1: Product: syz [ 141.951317][ T6147] usb 11-1: Manufacturer: syz [ 141.952876][ T6147] usb 11-1: SerialNumber: syz [ 141.955689][ T6147] usb 11-1: config 0 descriptor?? [ 141.960697][ T6147] usb 11-1: selecting invalid altsetting 0 [ 142.158773][ T5945] Bluetooth: hci2: Malformed LE Event: 0x1b [ 142.182899][ T6147] usb 11-1: USB disconnect, device number 2 [ 142.216217][T10684] xt_hashlimit: size too large, truncated to 1048576 [ 142.290000][ T40] audit: type=1400 audit(1745246651.517:720): avc: denied { ioctl } for pid=10683 comm="syz.3.1364" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 142.352309][T10697] program syz.3.1367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.355549][T10697] ata1.00: invalid transfer count 0 [ 142.358614][T10697] blktrace: Concurrent blktraces are not allowed on sg0 [ 142.450435][ T6004] usb 9-1: USB disconnect, device number 18 [ 142.461782][T10701] tipc: Enabling of bearer rejected, failed to enable media [ 142.663711][ T5945] Bluetooth: hci2: Malformed LE Event: 0x1b [ 142.786411][T10717] tipc: Enabling of bearer rejected, failed to enable media [ 142.812250][T10719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1374'. [ 142.939519][T10730] random: crng reseeded on system resumption [ 143.116588][T10736] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 143.275026][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 143.423798][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 143.423809][ T40] audit: type=1400 audit(1745246652.647:722): avc: denied { write } for pid=10747 comm="syz.4.1383" name="file0" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.424809][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 143.426536][ T40] audit: type=1400 audit(1745246652.647:723): avc: denied { open } for pid=10747 comm="syz.4.1383" path="/237/file0" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.435021][ T24] usb 8-1: config 4 has an invalid interface number: 184 but max is 0 [ 143.435037][ T24] usb 8-1: config 4 has no interface number 0 [ 143.435055][ T24] usb 8-1: config 4 interface 184 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 143.435068][ T24] usb 8-1: config 4 interface 184 has no altsetting 0 [ 143.436741][ T24] usb 8-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=94.68 [ 143.457176][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.459761][ T24] usb 8-1: Product: syz [ 143.461090][ T24] usb 8-1: Manufacturer: syz [ 143.462555][ T24] usb 8-1: SerialNumber: syz [ 143.482428][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'. [ 143.551406][ T40] audit: type=1400 audit(1745246652.777:724): avc: denied { listen } for pid=10752 comm="syz.6.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 143.659409][ T40] audit: type=1400 audit(1745246652.887:725): avc: denied { create } for pid=10757 comm="syz.4.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 143.665894][ T40] audit: type=1400 audit(1745246652.887:726): avc: denied { setopt } for pid=10757 comm="syz.4.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 143.678405][ T24] gspca_main: sunplus-2.14.0 probing 08ca:0104 [ 143.680691][ T24] gspca_sunplus: reg_r err -71 [ 143.682319][ T24] sunplus 8-1:4.184: probe with driver sunplus failed with error -71 [ 143.686200][ T24] usb 8-1: USB disconnect, device number 17 [ 144.124984][ T34] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 144.286682][ T34] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 64 [ 144.291104][ T34] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.296739][ T34] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.299777][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.508777][ T40] audit: type=1400 audit(1745246653.737:727): avc: denied { accept } for pid=10768 comm="syz.6.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 144.514704][ T34] usb 11-1: GET_CAPABILITIES returned 0 [ 144.516855][ T34] usbtmc 11-1:16.0: can't read capabilities [ 144.625058][T10794] FAULT_INJECTION: forcing a failure. [ 144.625058][T10794] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 144.628955][T10794] CPU: 3 UID: 0 PID: 10794 Comm: syz.4.1398 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 144.628977][T10794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.628987][T10794] Call Trace: [ 144.629001][T10794] [ 144.629007][T10794] dump_stack_lvl+0x16c/0x1f0 [ 144.629051][T10794] should_fail_ex+0x512/0x640 [ 144.629078][T10794] _copy_from_user+0x2e/0xd0 [ 144.629098][T10794] move_addr_to_kernel+0x65/0x170 [ 144.629126][T10794] __sys_connect+0xaf/0x170 [ 144.629142][T10794] ? __pfx___sys_connect+0x10/0x10 [ 144.629167][T10794] ? __pfx_ksys_write+0x10/0x10 [ 144.629180][T10794] ? rcu_is_watching+0x12/0xc0 [ 144.629205][T10794] __x64_sys_connect+0x72/0xb0 [ 144.629220][T10794] ? lockdep_hardirqs_on+0x7c/0x110 [ 144.629237][T10794] do_syscall_64+0xcd/0x260 [ 144.629253][T10794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.629264][T10794] RIP: 0033:0x7f365e18e169 [ 144.629275][T10794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.629285][T10794] RSP: 002b:00007f365bff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 144.629295][T10794] RAX: ffffffffffffffda RBX: 00007f365e3b5fa0 RCX: 00007f365e18e169 [ 144.629302][T10794] RDX: 0000000000000010 RSI: 0000200000772000 RDI: 0000000000000003 [ 144.629308][T10794] RBP: 00007f365bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 144.629314][T10794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.629320][T10794] R13: 0000000000000000 R14: 00007f365e3b5fa0 R15: 00007ffcf5860cd8 [ 144.629333][T10794] [ 144.715892][ T835] usb 11-1: USB disconnect, device number 3 [ 144.783218][T10796] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1399'. [ 144.787554][ T40] audit: type=1400 audit(1745246654.027:728): avc: denied { connect } for pid=10795 comm="syz.4.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.911139][T10801] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.1401'. [ 144.914025][T10801] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.1401'. [ 144.939093][T10651] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.946453][T10651] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.952969][T10651] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.953780][T10803] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1402'. [ 144.959642][T10651] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.962601][T10803] unsupported nlmsg_type 40 [ 144.992747][T10809] program syz.5.1403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.248107][T10825] FAULT_INJECTION: forcing a failure. [ 145.248107][T10825] name failslab, interval 1, probability 0, space 0, times 1 [ 145.252404][T10825] CPU: 1 UID: 0 PID: 10825 Comm: syz.3.1407 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 145.252419][T10825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.252425][T10825] Call Trace: [ 145.252429][T10825] [ 145.252434][T10825] dump_stack_lvl+0x16c/0x1f0 [ 145.252465][T10825] should_fail_ex+0x512/0x640 [ 145.252483][T10825] should_failslab+0xc2/0x120 [ 145.252496][T10825] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 145.252506][T10825] ? __lock_acquire+0x5ca/0x1ba0 [ 145.252516][T10825] ? dst_alloc+0x99/0x1a0 [ 145.252529][T10825] dst_alloc+0x99/0x1a0 [ 145.252540][T10825] rt_dst_alloc+0x35/0x3a0 [ 145.252556][T10825] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 145.252571][T10825] ip_route_output_key_hash+0x137/0x2e0 [ 145.252582][T10825] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 145.252596][T10825] ? register_lock_class+0x41/0x4c0 [ 145.252609][T10825] dccp_v4_connect+0x793/0x1530 [ 145.252625][T10825] __inet_stream_connect+0x3c5/0x1020 [ 145.252646][T10825] ? __pfx___inet_stream_connect+0x10/0x10 [ 145.252662][T10825] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 145.252675][T10825] ? __pfx_inet_stream_connect+0x10/0x10 [ 145.252692][T10825] ? __local_bh_enable_ip+0xa4/0x120 [ 145.252708][T10825] ? __pfx_inet_stream_connect+0x10/0x10 [ 145.252722][T10825] inet_stream_connect+0x57/0xa0 [ 145.252739][T10825] __sys_connect_file+0x13e/0x1a0 [ 145.252752][T10825] __sys_connect+0x14d/0x170 [ 145.252762][T10825] ? __pfx___sys_connect+0x10/0x10 [ 145.252777][T10825] ? __pfx_ksys_write+0x10/0x10 [ 145.252789][T10825] __x64_sys_connect+0x72/0xb0 [ 145.252799][T10825] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.252813][T10825] do_syscall_64+0xcd/0x260 [ 145.252828][T10825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.252839][T10825] RIP: 0033:0x7f222f18e169 [ 145.252848][T10825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.252858][T10825] RSP: 002b:00007f2230001038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 145.252868][T10825] RAX: ffffffffffffffda RBX: 00007f222f3b5fa0 RCX: 00007f222f18e169 [ 145.252874][T10825] RDX: 0000000000000010 RSI: 0000200000772000 RDI: 0000000000000003 [ 145.252880][T10825] RBP: 00007f2230001090 R08: 0000000000000000 R09: 0000000000000000 [ 145.252886][T10825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.252892][T10825] R13: 0000000000000000 R14: 00007f222f3b5fa0 R15: 00007ffdde643608 [ 145.252906][T10825] [ 145.357422][T10827] 9pnet_fd: Insufficient options for proto=fd [ 145.417966][T10829] gtp0: entered promiscuous mode [ 145.610908][ T5945] Bluetooth: hci0: Malformed LE Event: 0x1b [ 145.646725][ T40] audit: type=1400 audit(1745246654.877:729): avc: denied { nlmsg_write } for pid=10841 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 145.736363][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 145.736385][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 145.888303][ T40] audit: type=1400 audit(1745246655.117:730): avc: denied { ioctl } for pid=10856 comm="syz.4.1419" path="socket:[36627]" dev="sockfs" ino=36627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.898840][ T40] audit: type=1400 audit(1745246655.127:731): avc: denied { create } for pid=10856 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.958886][T10864] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1421'. [ 145.978584][T10862] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 146.114908][T10869] random: crng reseeded on system resumption [ 146.843427][T10894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1430'. [ 146.851507][T10894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1430'. [ 147.479355][T10940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1445'. [ 147.482332][T10942] tty tty1: ldisc open failed (-12), clearing slot 0 [ 147.714019][T10970] tmpfs: Bad value for 'mpol' [ 147.840745][ T5945] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 147.861262][T10979] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 147.871982][T10988] overlayfs: missing 'lowerdir' [ 147.880310][T10988] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 147.888976][T10988] can0: slcan on ptm1. [ 147.910232][T10993] netlink: 'syz.6.1465': attribute type 1 has an invalid length. [ 147.932318][T10993] nbd: must specify a size in bytes for the device [ 147.937992][T10993] bond1: entered promiscuous mode [ 147.939681][T10993] bond1: entered allmulticast mode [ 147.941521][T10993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.005894][T10988] can0 (unregistered): slcan off ptm1. [ 148.350400][T11039] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 148.352829][T11039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.358792][T11039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.388531][T11039] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 148.633422][T11065] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 148.695726][T11069] No such timeout policy "syz0" [ 148.954621][T11082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11082 comm=syz.3.1496 [ 149.325626][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 149.357885][T11020] Set syz1 is full, maxelem 65536 reached [ 149.379794][ T5945] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 149.474808][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 149.477994][ T9] usb 8-1: config 1 interface 0 altsetting 106 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.482496][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 149.491776][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.40 [ 149.494416][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.497141][ T9] usb 8-1: Product: ᳰ銍䢮ଁ䷝檻⧧ [ 149.499102][ T9] usb 8-1: Manufacturer: Ẅ묊漷甲좼俔뒆뉭뺉鵾乱렞ඊ᤺넀稏꾝璣꫱녫ԭ댺书੝쉴넃芠⊥ꝱ믑ꕆ됻릣ꤏᵖ쀞공捻蜴衐詵왲釡ἃ೪Ⱟ횟⩏쑲舔ㆨ鋗儺塉〴슊婴愝訥ῥ晕毵랖僘餱挔菛ⱻ藯蕼捛凣鲨鹙㷔렍犑댓졫櫔䣻⭜潴ࡼᖍ뾬䯢咃旸몾⍖鹺딑Ｕ䠝黮侘 [ 149.513449][ T9] usb 8-1: SerialNumber: ࠁ [ 149.530441][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 149.530456][ T40] audit: type=1326 audit(1745246658.757:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.4.1508" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f365e18e169 code=0x0 [ 149.712944][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880581f3000: rx timeout, send abort [ 149.737389][T11094] netlink: 'syz.3.1499': attribute type 5 has an invalid length. [ 149.811388][ T9] usbhid 8-1:1.0: can't add hid device: -71 [ 149.813473][ T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 149.820401][ T9] usb 8-1: USB disconnect, device number 18 [ 149.897505][T11134] program syz.5.1514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.897976][ T40] audit: type=1326 audit(1745246659.127:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.5.1514" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2bab8e169 code=0x7ffc0000 [ 149.914801][ T40] audit: type=1326 audit(1745246659.127:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.5.1514" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2bab8e169 code=0x7ffc0000 [ 149.927383][ T40] audit: type=1326 audit(1745246659.127:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.5.1514" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2bab8e169 code=0x7ffc0000 [ 149.934406][ T40] audit: type=1326 audit(1745246659.127:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.5.1514" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2bab8e169 code=0x7ffc0000 [ 149.937909][T11139] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 149.941584][ T40] audit: type=1326 audit(1745246659.127:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.5.1514" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2bab8e169 code=0x7ffc0000 [ 150.006660][ T40] audit: type=1400 audit(1745246659.237:749): avc: denied { name_bind } for pid=11148 comm="syz.5.1519" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 150.213077][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880581f3000: abort rx timeout. Force session deactivation [ 150.262785][T11159] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 150.344810][ T6004] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 150.347872][T11166] __nla_validate_parse: 6 callbacks suppressed [ 150.347912][T11166] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1526'. [ 150.436994][T11173] 9pnet_fd: Insufficient options for proto=fd [ 150.464167][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1529'. [ 150.502303][ T6004] usb 10-1: config 0 has an invalid interface number: 130 but max is 0 [ 150.505955][ T6004] usb 10-1: config 0 has no interface number 0 [ 150.509952][ T6004] usb 10-1: New USB device found, idVendor=145f, idProduct=013a, bcdDevice= 5.86 [ 150.512769][ T6004] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.515673][ T6004] usb 10-1: Product: syz [ 150.515973][ T40] audit: type=1400 audit(1745246659.747:750): avc: denied { write } for pid=11183 comm="syz.3.1533" path="socket:[42042]" dev="sockfs" ino=42042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.516959][ T6004] usb 10-1: Manufacturer: syz [ 150.525320][ T6004] usb 10-1: SerialNumber: syz [ 150.527924][ T6004] usb 10-1: config 0 descriptor?? [ 150.531257][ T6004] gspca_main: pac207-2.14.0 probing 145f:013a [ 150.561935][T11191] dccp_invalid_packet: P.Data Offset(4) too small [ 150.637045][ T6004] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 150.735053][ T6004] usb 10-1: USB disconnect, device number 7 [ 151.212997][T11203] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 151.214979][T11203] PKCS7: Only support pkcs7_signedData type [ 151.310944][T11206] 9pnet_fd: Insufficient options for proto=fd [ 151.337084][ T40] audit: type=1400 audit(1745246660.567:751): avc: denied { remount } for pid=11202 comm="syz.6.1538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 151.470729][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1541'. [ 151.761517][T11237] syz.6.1549: attempt to access beyond end of device [ 151.761517][T11237] nbd6: rw=0, sector=6, nr_sectors = 2 limit=0 [ 151.770059][T11237] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 151.799558][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 151.802915][T11243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1551'. [ 151.808985][T11243] erspan0: entered promiscuous mode [ 151.811876][T11243] erspan0: left promiscuous mode [ 152.089879][T11268] netlink: 'syz.6.1559': attribute type 4 has an invalid length. [ 152.090506][T11267] netlink: 'syz.6.1559': attribute type 4 has an invalid length. [ 152.124873][T11270] netlink: 'syz.3.1558': attribute type 7 has an invalid length. [ 152.187429][ T40] audit: type=1400 audit(1745246661.417:752): avc: denied { read } for pid=11264 comm="syz.3.1558" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 152.419771][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.423380][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.426608][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.429096][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.431487][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.457548][T11308] random: crng reseeded on system resumption [ 152.639902][T11299] chnl_net:caif_netlink_parms(): no params data found [ 152.720229][T11299] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.722483][T11299] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.724703][T11299] bridge_slave_0: entered allmulticast mode [ 152.727843][T11299] bridge_slave_0: entered promiscuous mode [ 152.732125][T11299] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.734348][T11299] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.737230][T11299] bridge_slave_1: entered allmulticast mode [ 152.740198][T11299] bridge_slave_1: entered promiscuous mode [ 152.775719][T11299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.780319][T11299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.816663][T11299] team0: Port device team_slave_0 added [ 152.821107][T11299] team0: Port device team_slave_1 added [ 152.824797][ T6007] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 152.849289][T11299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.851370][T11299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.859031][T11299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.863103][T11299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.865399][T11299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.873068][T11299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.913207][T11299] hsr_slave_0: entered promiscuous mode [ 152.915484][T11299] hsr_slave_1: entered promiscuous mode [ 152.917445][T11299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.919652][T11299] Cannot create hsr debugfs directory [ 152.932259][T11322] ufs: Invalid option: "grpquota" or missing value [ 152.934655][T11322] ufs: wrong mount options [ 152.942538][T11319] delete_channel: no stack [ 152.994837][ T6007] usb 11-1: Using ep0 maxpacket: 16 [ 152.997906][ T6007] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 153.001417][ T6007] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 153.008561][T11299] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.009981][ T6007] usb 11-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 153.015002][ T6007] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.017469][ T6007] usb 11-1: Product: syz [ 153.018844][ T6007] usb 11-1: Manufacturer: syz [ 153.020372][ T6007] usb 11-1: SerialNumber: syz [ 153.023109][ T6007] usb 11-1: config 0 descriptor?? [ 153.083196][T11299] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.132039][T11299] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.220433][T11299] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.237949][T11310] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] SMP KASAN NOPTI [ 153.242695][T11310] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 153.246762][T11310] CPU: 1 UID: 0 PID: 11310 Comm: syz.6.1571 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 153.252000][T11310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.256211][T11310] RIP: 0010:skb_segment+0x194f/0x3ef0 [ 153.258325][T11310] Code: 00 00 fe e9 48 eb ff ff e8 4e cd 75 f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 90 48 db f8 48 8b 84 24 d0 [ 153.265513][T11310] RSP: 0018:ffffc9000364e8f0 EFLAGS: 00010202 [ 153.267823][T11310] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffffff8945724a [ 153.270798][T11310] RDX: 000000000000000e RSI: ffffffff894582a2 RDI: 0000000000000070 [ 153.273912][T11310] RBP: ffffc9000364ea98 R08: 0000000000000005 R09: 000000000000ffff [ 153.277044][T11310] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff888057c62f00 [ 153.280070][T11310] R13: 000000000001fffe R14: 000000000000ffff R15: 000000000000004a [ 153.283088][T11310] FS: 00007fd8539576c0(0000) GS:ffff8880d6ab2000(0000) knlGS:0000000000000000 [ 153.286595][T11310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.289182][T11310] CR2: 0000200000200000 CR3: 000000005f2e6000 CR4: 0000000000352ef0 [ 153.292252][T11310] DR0: 0000000000006000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.295271][ T6007] appledisplay 11-1:0.0: Error while getting initial brightness: -110 [ 153.295675][ T6007] appledisplay 11-1:0.0: probe with driver appledisplay failed with error -110 [ 153.298459][T11310] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 153.304326][T11310] Call Trace: [ 153.305660][T11310] [ 153.306856][T11310] ? find_held_lock+0x2b/0x80 [ 153.308755][T11310] ? __skb_flow_dissect+0x3e7/0x7d90 [ 153.310803][T11310] ? __skb_flow_dissect+0x11b2/0x7d90 [ 153.312929][T11310] ? __pfx_skb_segment+0x10/0x10 [ 153.314879][T11310] ? check_irq_usage+0xcb/0x920 [ 153.316528][T11310] ? chacha_permute+0x5ae/0x6d0 [ 153.318035][T11310] tcp_gso_segment+0x3be/0x19e0 [ 153.319537][T11310] ? __pfx_tcp_wfree+0x10/0x10 [ 153.321067][T11310] ? __flow_hash_from_keys+0x186/0x4e0 [ 153.323078][T11310] tcp6_gso_segment+0x1ec/0x1140 [ 153.324879][T11310] ipv6_gso_segment+0x810/0x1db0 [ 153.326754][T11310] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 153.328666][T11310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 153.330884][T11310] skb_mac_gso_segment+0x2a5/0x650 [ 153.332728][T11310] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 153.334646][T11310] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 153.336803][T11310] __skb_gso_segment+0x36e/0x700 [ 153.338571][T11310] cake_enqueue+0x2bef/0x3fa0 [ 153.340421][T11310] ? __lock_acquire+0xaa4/0x1ba0 [ 153.342328][T11310] ? find_held_lock+0x2b/0x80 [ 153.344187][T11310] ? __pfx_cake_enqueue+0x10/0x10 [ 153.346089][T11310] __dev_queue_xmit+0x2142/0x43e0 [ 153.348015][T11310] ? selinux_ip_postroute+0x73a/0xde0 [ 153.350136][T11310] ? __pfx___dev_queue_xmit+0x10/0x10 [ 153.352255][T11310] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 153.354274][T11310] ? __lock_acquire+0xaa4/0x1ba0 [ 153.355878][T11310] ip6_finish_output2+0xe98/0x2020 [ 153.357855][T11310] ip6_finish_output+0x3f9/0x1360 [ 153.359759][T11310] ip6_output+0x1f9/0x540 [ 153.361447][T11310] ? __pfx_ip6_output+0x10/0x10 [ 153.363361][T11310] ip6_xmit+0x12d7/0x2320 [ 153.365088][T11310] ? __pfx_ip6_xmit+0x10/0x10 [ 153.366952][T11310] ? __sk_dst_check+0x120/0x350 [ 153.368900][T11310] inet6_csk_xmit+0x3c7/0x740 [ 153.370766][T11310] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 153.372861][T11310] ? csum_ipv6_magic+0x299/0x320 [ 153.374836][T11310] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 153.376828][T11310] __tcp_transmit_skb+0x19d6/0x3e90 [ 153.378879][T11310] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 153.381105][T11310] ? kasan_quarantine_put+0x10a/0x240 [ 153.383220][T11310] ? kfree_skbmem+0x16c/0x1f0 [ 153.385124][T11310] tcp_write_xmit+0x1274/0x8770 [ 153.387066][T11310] __tcp_push_pending_frames+0xaf/0x390 [ 153.389250][T11310] tcp_rcv_established+0x860/0x2180 [ 153.391316][T11310] ? ip6_dst_check+0x352/0x940 [ 153.393227][T11310] ? __pfx_tcp_rcv_established+0x10/0x10 [ 153.395461][T11310] tcp_v6_do_rcv+0x895/0x1740 [ 153.397343][T11310] ? __local_bh_enable_ip+0xa4/0x120 [ 153.399418][T11310] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 153.401458][T11310] __release_sock+0x14c/0x400 [ 153.403327][T11310] __sk_flush_backlog+0x27/0xc0 [ 153.405263][T11310] tcp_sendmsg_locked+0x3058/0x3930 [ 153.407144][T11310] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 153.409225][T11310] ? do_raw_spin_lock+0x12c/0x2b0 [ 153.411252][T11310] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 153.413260][T11310] ? __local_bh_enable_ip+0xa4/0x120 [ 153.415378][T11310] tcp_sendmsg+0x2e/0x50 [ 153.417114][T11310] ? __pfx_tcp_sendmsg+0x10/0x10 [ 153.419193][T11310] inet6_sendmsg+0xb9/0x140 [ 153.420820][T11310] __sys_sendto+0x37d/0x510 [ 153.422298][T11310] ? __pfx___sys_sendto+0x10/0x10 [ 153.423905][T11310] ? xfd_validate_state+0x5d/0x180 [ 153.425461][T11310] ? rcu_is_watching+0x12/0xc0 [ 153.426936][T11310] __x64_sys_sendto+0xe0/0x1c0 [ 153.428468][T11310] ? do_syscall_64+0x91/0x260 [ 153.429919][T11310] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.431533][T11310] do_syscall_64+0xcd/0x260 [ 153.432930][T11310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.434752][T11310] RIP: 0033:0x7fd852b8e169 [ 153.436429][T11310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.443579][T11310] RSP: 002b:00007fd853957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 153.446756][T11310] RAX: ffffffffffffffda RBX: 00007fd852db5fa0 RCX: 00007fd852b8e169 [ 153.449766][T11310] RDX: ffffffffffffff1d RSI: 00002000000000c0 RDI: 0000000000000006 [ 153.452787][T11310] RBP: 00007fd852c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 153.455761][T11310] R10: 0000000000000850 R11: 0000000000000246 R12: 0000000000000000 [ 153.458740][T11310] R13: 0000000000000000 R14: 00007fd852db5fa0 R15: 00007fff48b2ec68 [ 153.461653][T11310] [ 153.462850][T11310] Modules linked in: [ 153.464712][T11310] ---[ end trace 0000000000000000 ]--- [ 153.466893][T11310] RIP: 0010:skb_segment+0x194f/0x3ef0 [ 153.469017][T11310] Code: 00 00 fe e9 48 eb ff ff e8 4e cd 75 f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 90 48 db f8 48 8b 84 24 d0 [ 153.476198][T11310] RSP: 0018:ffffc9000364e8f0 EFLAGS: 00010202 [ 153.478458][T11310] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffffff8945724a [ 153.481418][T11310] RDX: 000000000000000e RSI: ffffffff894582a2 RDI: 0000000000000070 [ 153.484351][T11310] RBP: ffffc9000364ea98 R08: 0000000000000005 R09: 000000000000ffff [ 153.487314][T11310] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff888057c62f00 [ 153.490224][T11310] R13: 000000000001fffe R14: 000000000000ffff R15: 000000000000004a [ 153.492699][T11310] FS: 00007fd8539576c0(0000) GS:ffff8880d6ab2000(0000) knlGS:0000000000000000 [ 153.495481][T11310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.497650][T11310] CR2: 0000200000200000 CR3: 000000005f2e6000 CR4: 0000000000352ef0 [ 153.500732][T11310] DR0: 0000000000006000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.503740][T11310] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 153.506804][T11310] Kernel panic - not syncing: Fatal exception in interrupt [ 153.510133][T11310] Kernel Offset: disabled [ 153.511799][T11310] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:40:05 Registers: info registers vcpu 0 CPU#0 RAX=000000000015da44 RBX=0000000000000000 RCX=ffffffff8b72a419 RDX=ffffed100d4865be RSI=ffffffff8bf464c0 RDI=ffffffff8191b751 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90864910 R15=0000000000000000 RIP=ffffffff8b728caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd853936d58 CR3=000000005f2e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852d83488 00007fd852d83480 00007fd852d83478 00007fd852d83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd8538ed100 00007fd852d83440 00007fd852d83458 00007fd852d834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852d83498 00007fd852d83490 00007fd852d83488 00007fd852d83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000000d RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff854e3af5 RDI=ffffffff9ae264a0 RBP=ffffffff9ae26460 RSP=ffffc9000364e2f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=000000000000000d R14=ffffffff9ae26460 R15=ffffffff854e3a90 RIP=ffffffff854e3b1f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd8539576c0 ffffffff 00c00000 GS =0000 ffff8880d6ab2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000200000 CR3=000000005f2e6000 CR4=00352ef0 DR0=0000000000006000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd853954f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000362e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000f9964 RBX=0000000000000002 RCX=ffffffff8b72a419 RDX=ffffed100d4c65be RSI=ffffffff8bf464c0 RDI=ffffffff8191b751 RBP=ffffed1003a59910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d2cc880 R14=ffffffff90864910 R15=0000000000000000 RIP=ffffffff8b728caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd853935f98 CR3=000000005f374000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff48b2eff0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd852c11bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000012764c RBX=0000000000000003 RCX=ffffffff8b72a419 RDX=ffffed100d4e65be RSI=ffffffff8bf464c0 RDI=ffffffff8191b751 RBP=ffffed1003bdc000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dee0000 R14=ffffffff90864910 R15=0000000000000000 RIP=ffffffff8b728caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c368ece CR3=0000000033098000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf5861060 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365e211a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365e211a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365e211a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365e211a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365e211aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f365e211bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000