last executing test programs: 55.359020483s ago: executing program 2 (id=13): r0 = socket$netlink(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x24}}, 0x0) gettid() r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) 55.358810906s ago: executing program 2 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x5, 0x8) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a002300000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040007"], 0x154}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d4, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x1d, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 55.21039223s ago: executing program 2 (id=18): ioctl$TCSETAF(0xffffffffffffffff, 0x5412, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b00)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c80"], 0x270}}, 0x40004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff1}, {0xa, 0x3}, {0x4, 0xa}}}, 0x24}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x200, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xc}, {0xffff, 0x7}, {0x0, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xb0e9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfff}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xc}, {0x6}, {0xd, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c1}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) 55.159113108s ago: executing program 2 (id=20): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f00000000c0)={0x19}) (async) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x6, 0x15, 0x7, 0x5, 0x8, 0x1, 0xcc7f, 0x81}, &(0x7f0000000700)={0x0, 0x989680}, 0x0) (async) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x9000, &(0x7f0000000740)={[{@xino_off}, {@xino_off}, {@uuid_null}, {@index_on}, {@default_permissions}, {@redirect_dir_off}, {@xino_auto}, {@uuid_auto}], [{@fowner_gt={'fowner>', r5}}, {@subj_type={'subj_type', 0x3d, '*,(!)'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@flag='ro'}, {@smackfshat={'smackfshat', 0x3d, '[!S.'}}]}) 54.960509484s ago: executing program 2 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x28, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="9c2d"}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000895}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xbd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x884) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf250b"], 0x24}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, &(0x7f0000000080)=0x5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18c}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) close_range(r8, 0xffffffffffffffff, 0x0) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4) 53.036264593s ago: executing program 2 (id=48): r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom(r0, &(0x7f0000000080)=""/25, 0x19, 0x2100, &(0x7f0000000140)=@vsock, 0x80) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000340)="82", 0x1}], 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000001780)='%U', 0x2, 0x24000015, 0x0, 0x0) sendto$inet(r3, &(0x7f00000003c0)="9e83179addc94debd3d7ba6c5dae0ddeccc12e68d4ab72a8aee5e391ac", 0x1d, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/107, 0x6b, 0x0, 0x0}, &(0x7f0000001400)=0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0xbb}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 53.035849289s ago: executing program 32 (id=48): r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom(r0, &(0x7f0000000080)=""/25, 0x19, 0x2100, &(0x7f0000000140)=@vsock, 0x80) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000340)="82", 0x1}], 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000001780)='%U', 0x2, 0x24000015, 0x0, 0x0) sendto$inet(r3, &(0x7f00000003c0)="9e83179addc94debd3d7ba6c5dae0ddeccc12e68d4ab72a8aee5e391ac", 0x1d, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/107, 0x6b, 0x0, 0x0}, &(0x7f0000001400)=0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0xbb}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 22.318120536s ago: executing program 3 (id=470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0xa, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x2000c094) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20202000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048c2}, 0x8) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r3, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'hsr0\x00'}) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000680)={0x1, 0x8, 0xa2, &(0x7f00000005c0)=""/162}) r9 = accept$netrom(r5, &(0x7f00000006c0)={{0x3, @null}, [@netrom, @default, @null, @rose, @default, @remote, @remote, @bcast]}, &(0x7f0000000740)=0x48) setsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, &(0x7f0000000780)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040810}, 0x20044800) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x98, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, [{0x5, 0x1}, {0x2}, {0x60, 0x1}, {0x12}, {0x16, 0x1}, {0x24, 0x1}, {0xb}, {0x16, 0x1}, {0x9, 0x1}, {0xa, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, [{0x12}, {0x16}, {0xb, 0x1}, {0xb}, {0x6c}, {}, {}, {0x12}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x3}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x924ad9c}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_IE={0xf, 0x2a, [@challenge={0x10, 0x1, 0x29}, @supported_rates={0x1, 0x6, [{0x24}, {0x6b, 0x1}, {0x36}, {0x30}, {0x6c, 0x1}, {0x24}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4040880) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008050}, 0x48880) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r11, 0xc0605345, &(0x7f0000000c40)={0x5, 0x0, {0x1, 0x0, 0x4, 0x1, 0x9}, 0x3d000000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r11, 0xc01064c1, &(0x7f0000000cc0)) syz_usb_connect(0x0, 0x4b5, &(0x7f0000000d00)={{0x12, 0x1, 0x250, 0x65, 0x46, 0x6e, 0x8, 0xf0d, 0xe980, 0xeea1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a3, 0x1, 0x40, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x92, 0x2, 0xa, 0xff, 0x5d, 0x81, 0x3, [], [{{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x80, 0xf7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0xf7, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x60, 0x73}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x7, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x80}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x6, 0x2f, 0x6}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x2, [@generic={0x14, 0x31, "3b08b0389806ebca9de205406ba6a6afe447"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x44}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x8, 0x5, 0xb, [@generic={0xf6, 0x8, "02db2f36a436440fb7e5f29c62e56ef53da232fe7ef7ad400f37d5e60ad7904289f95ab1fcc72942f293fef8ecae7f2971222aa828f020356ff2dc5e2cb10f6674ebe9b0f6a0e5cfd85c7f2d5e6087af9509bf9a09d3631b55aa84c7bec914c96e5aee427430e53f0c1474296228346e9da43133717a479ee1255d814562d72b5a6fa61e8f239f06e254ec16f7c28a6c462440a015fe9a9859f305979a92316b58939cf4e2610e8517cd4b9b6e7e16f88e7ac7554f8b5e6a7a228caa8858f24bb269fc83b71fa41e43ed522ef02b2deb5cc883878b723326e95c3ee344650eeaabdb85ec7958d4690b4a22ff068f43a5a2da327c"}, @generic={0xe0, 0x22, "424f784db06e130285a560881d0890e5e195745c31fe1bbd5724e98aed910976e8708d45754c3cbd932187efd32baf458f41af401ad3a2975ea8823fc2e661e9b27b2c10234225148b43214ee7071713080886e219f96446c4fa2eb75e3084d467563e14f036e20eee8813de92c3c2fa935306afda08bc76d91fc67fa4b52e7e8cc84acfa202ffa17c6858eaef73bd63a0495a897ee95a9d73af7e065fcb38b5ac05df0f6608fc463e3268bec0ba2e0fbd742536b2c2bc252f20203963a39c245cf906f7c7a40c5a48afacd13aba288b4c1567a403ac4327402d8017e920"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x72, 0x3, 0x80, [@generic={0xa9, 0x7, "bd63e9a5b89ec0babcd7f04b0bd4e7c20b4491c9dfe0693955a096d1ac3256627169c263060930d42dfdf8c414281d2badcaadbd8680493585116c51951acdab5717f4c6c76733f4f747ee4e68b979253f258d48a3f7ce9d0f20eda9969288bd482f087d0909e59d50cde6b9d54b7cb7223561059bc9221568aaccd223968fa935b9b83d0361b813a3ad1b2c0cf2bbf2ccaa27919c9ec7dcccd1e915b0b0cf746899503d597f56"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x9, 0x5, 0x1, [@generic={0xd9, 0x3, "f6983c6eed2340c113a9cbd24bdf33636bd5363286bfe2f4894d584763900662a4bc3535862ff1eb5a154800551be1b202378ff83d8b36b8314a12b275042318e346665f493e578650bf8ffbb16dfd23578b8490c2fe988f1ee5f9f534972df38d1210415dd3fed4f9b199430691f08c93578518fb943abda7ddd3820c3dad0e00632f893dc7b66ae73841aa33a82c14d62df502821df2c387d906862d6693f777a7c7b557471ac1c8f4e0c8828d8b9c4ec4ad3a0e8164b0634bcc1860c043249f748d6096591c15fd17e1366bb3eb85cef4dfdaf29b92"}]}}, {{0x9, 0x5, 0x1, 0x12, 0x8, 0x3, 0xfd, 0x8, [@generic={0xa8, 0xa, "7a3d01b3fbddb748adbeab6e463e82c9e6932fa38be33765ce48fd8693967acb4ec71dd3cbf3aaac65a3ad173a7721755545569e5becf14383fe5c3da45b6121d55ed30bd1b375b1e35a3394e7cf293285e744924fb8067062a547514aef633e48e39128060dc7f09b772817a5a7a0a1c6db801d16fa56264bbe7a0bc7793baafd67cad8547a9511ae79752bca0a8a1411656a76c4c6aeb5735435f19c6a8d37976724749f8c"}]}}]}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x250, 0x51, 0x5e, 0x5, 0x8, 0x7}, 0x3f, &(0x7f0000001200)={0x5, 0xf, 0x3f, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x3, 0xf0f, 0x1441}, @ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0x36b1764, 0xf, 0x9, [0x0, 0x0, 0xff0060, 0xff0030, 0xff3f0f, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x8}]}, 0x1, [{0x50, &(0x7f0000001240)=@string={0x50, 0x3, "fe6732af5d96f0bc7ac4d577e964ecf29f98ae7f6aa0ec9fc75d8d3cb8dbf58d7018fac38153c812101553868dde7c088dbe3c7d5ec2e0ae31389db9ec98fe3804277c78873768f1ee0786c44645"}}]}) socket$packet(0x11, 0x2, 0x300) close_range(r5, r5, 0x2) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, r12, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8010) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001440)={'veth0\x00'}) write$cgroup_subtree(r5, &(0x7f0000001480)={[{0x2d, 'cpu'}, {0x2d, 'devices'}]}, 0xe) 21.038559285s ago: executing program 3 (id=506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002100630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 20.990350833s ago: executing program 3 (id=508): ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000480)={0x101, "5e7803beb4381fd0831d734eea6710191e00fe68e36852aea8b984125400", 0x1, 0x1}) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) (async) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) r3 = open(&(0x7f0000000240)='./file0\x00', 0x800, 0x10b) (async) r4 = fsmount(0xffffffffffffffff, 0x1, 0x70) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/vmcoreinfo', 0x4300, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000006dc0), 0x0, 0x0) close(r10) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000080)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r10, 0x54a1) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008100}, 0x40d0) (async) r11 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x401, 0xfffffffe, 0x32315241, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x84080) connect$bt_sco(r12, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r13 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r13, &(0x7f0000002140)=[{&(0x7f00000014c0)=""/30, 0x1e}], 0x1) 20.938321795s ago: executing program 3 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x213815, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c010000100013070000000000000000ffffffff0000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016007d0000000c001c"], 0x14c}}, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80000, 0x10e) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x100, 0x66) move_mount(r2, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x200) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) 20.864598671s ago: executing program 3 (id=513): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a8000800a4001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000000c0)="b7", 0x1}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 20.609195405s ago: executing program 3 (id=516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002100630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 20.536535554s ago: executing program 33 (id=516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002100630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 19.34676871s ago: executing program 1 (id=527): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x3, "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"}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x2, 0x5, 0x100000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x228240, 0x0) ioctl$RTC_VL_CLR(r5, 0x7014) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000002c0)={&(0x7f0000000780)={{@my=0x0, 0x4}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x1}) ioctl$KDSKBENT(r0, 0x4b31, &(0x7f0000000580)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) 19.120452033s ago: executing program 1 (id=530): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f"], 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000380)={{0x2b, @multicast2, 0x4e24, 0x2, 'rr\x00', 0x1, 0x8001, 0x27}, {@local, 0x4e22, 0x2, 0xd, 0xffb, 0x5c30}}, 0x44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r4 = dup(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r9, r8, 0x2, 0x6, 0x4000, @void, @value}, 0x10) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wf}no=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,k']) r10 = fsopen(&(0x7f00000005c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f0000000600)='rfdno', 0x0, r3) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x82c02, 0x40) 18.589220198s ago: executing program 1 (id=540): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x02/file0\x00', 0x400000, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x02\x00', 0x88100) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendfile(r1, r2, 0x0, 0x8000002b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='.\x02\x00') unlinkat(r3, &(0x7f0000000280)='./file0\x00', 0x200) 18.385302948s ago: executing program 1 (id=545): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000043c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}, 0x1, 0xa7ffffff}, 0x0) 10.685511202s ago: executing program 1 (id=545): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000043c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}, 0x1, 0xa7ffffff}, 0x0) 5.389265355s ago: executing program 0 (id=672): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000280)=[@acquire={0x40046305, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x200, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000600)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x30, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @opaque="ff95fc65114ffabac2570e36fcc31320fab5a27e4717dcf6f0bcb7694415305aef77671d7f054a27"}}}}}}, 0x0) 5.318606811s ago: executing program 0 (id=675): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0xd5c5cabea6a913e1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="dc725946ead7f568af74939c45b5273b90cfeaeea72764c0dedd16726b648c7162b54f68709916ce77344e66012c54af693027431227434c61b2bf63c89f52a098571466e333fefb473a101ec030f853d2e2a17b6d97c481de65d2b732456f2d21cdc0247c2fe5bce1e7ca04b83cc033ecf2f6be58c74de6f48486e63bc60f42a6b73c91bcf2208eeddf9920d721fcf665366d479c0f1fd8293aa74a5c8d2071692264b9df98649c9f1a4958", 0xac}, {&(0x7f0000000100)="4527468ba061357c10b473598c3ab3c58683776e0a4ec31b37b7a6c4ceed5bc26c9f7164b6bfa0f722f84e0b93dd61f4a4ea827ab3784d485eb9d958867291ab2482e8d2fdd0eae9062a6e7a8b706a92b2c3f22edf4a7c52fb5dda71ecc548d58a8494ee3dff5caac59d0ddc", 0x6c}], 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r2 = syz_clone3(&(0x7f0000000440)={0x0, &(0x7f0000000200)=0xffffffffffffffff, &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x1f}, &(0x7f00000002c0)=""/34, 0x22, &(0x7f0000000300)=""/252, &(0x7f0000000400)=[0x0], 0x1, {r1}}, 0x58) capset(&(0x7f00000004c0)={0x19980330, r4}, &(0x7f0000000500)={0x895d, 0x8000, 0x2, 0x6, 0x401, 0x5a04e20c}) modify_ldt$write(0x1, &(0x7f0000000540)={0x1f, 0x1000, 0x2000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000580)=0x14f40000, 0x4) sched_setscheduler(r2, 0x6, &(0x7f00000005c0)=0xb9aa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000640)={0x1}) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000680)={{r5}, "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"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) syz_clone3(&(0x7f00000018c0)={0x20028000, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)=0x0, {0x40}, &(0x7f0000001740)=""/208, 0xd0, &(0x7f0000001840), &(0x7f0000001880)=[r2], 0x1, {r1}}, 0x58) capset(&(0x7f0000001940)={0x20071026, r7}, &(0x7f0000001980)={0x1, 0xd, 0x1, 0x7496f895, 0x8, 0x3}) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000019c0), 0x88000, 0x0) modify_ldt$write(0x1, &(0x7f0000001a00)={0x2, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000001a40)) read$FUSE(r1, &(0x7f0000001a80)={0x2020}, 0x2020) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000003ac0)={0x7, 'dvmrp0\x00', {0xffff}, 0xe2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000003b00)={0x0, @in6={{0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, 0x4, 0x59, 0x2, 0xfffffffe, 0x7}, &(0x7f0000003bc0)=0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000003c00)=r9, 0x4) syz_usb_connect(0x1, 0x7e3, &(0x7f0000003c40)={{0x12, 0x1, 0x310, 0x2a, 0xc7, 0xcc, 0x8, 0x8ca, 0x2042, 0xfa06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d1, 0x2, 0x31, 0x7, 0x10, 0x1, [{{0x9, 0x4, 0xdf, 0x2, 0xc, 0x9c, 0x52, 0xd1, 0x9a, [@hid_hid={0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x197}}, @generic={0x63, 0x7, "3e738a57e2e7452e09a0961aacecc7c061099a309cac2aae7d1b8ce3f973e24927ec7f3760a9cbcebe1a9843300393cf0b16790497c96e22181a4e1739f718db88ed44d00b6ef2f206a98b633ba58e77fbf4c66afc7f0a21f32e273e9e5c06a4dd"}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x10}}, {{0x9, 0x5, 0x16, 0x2, 0x40, 0x7, 0x9, 0x0, [@generic={0x6c, 0x22, "d6285c18f53e75d1b26a8d775e36e14acbe609f4db1eda067383355056ca5b364920d7baf1e8ad218c12950c79bdef17ada4dc632bd4b43b914fa1a92c8d6148c6b36d577e8d266f1c4a0c6fb2a09eaa1318d4ebc8192b3b62a45b49a85f89e443f51b43a8fac22bfb86"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0xb, 0x0, 0xe, [@generic={0xc6, 0x22, "8dc0bc2698bd45521099b25831f8fc884f54ae61c083cb6e39ec5c7300ea4fc5fda6a95f1c5a4c1be37acbc41f2db5e58af5724c3d6e7ec49280192c7e454046801e52abcec034cc902ed8b1efa43b4bb38cba40a7ecc32a2c7e0703bbd57d24d59accc51c082aa6af367d655f17391ec636fa2eba4690028e10fdae401e82b5175ca842f76dd28a4e4802026915e7ba774d5dbabfbfb8e1923cba1e3bc8c2cba32b73dea7306751017ec30727ea85142d7382a95556c76ef209e2cfc47ee5db053d3179"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x6, 0x0, 0x6b, [@generic={0x64, 0xa, "cf60e9e0e903d7ba342bebb973b23c9180433908c7ac103ad71737439405c176786f6b87e0323bf48fca246189e5d8243362f3eaf69a53d40d9a75d9feddedae0e4619341cea9f3d1bfb881607c383acfb895cba4b17e8c0cee6db83e3ca25f18c78"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x3, 0xb9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x96fa}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0xc8, 0xc, 0x1}}, {{0x9, 0x5, 0x5, 0x10, 0x80, 0x7f, 0xe9, 0x8}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x1e, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xe1}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x4, 0x6, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}, {{0x9, 0x5, 0xbc4eea15a5104ff7, 0x3, 0x10, 0x5f, 0xa0, 0x0, [@generic={0xa0, 0x22, "cbe985e97b073e817e1339eb1c952257e98901e0d4ca20bb31ff1cd03beada247fca7cc7ea38313631332a1acbaf12b1b2bf22ab337f0ceca35bbb9f5707789e50d62f0f2adccac120b15c11988b2d8be8df206eb62ecce5dfd6a8ea31f6dcf49d4c804a2fce72188e2b2e4b0769a2d680b1efb465f0176ed068edfa712471ca5e29a2f35a7986aa6ffdfa67d56b28bd1377a9870315f5c9176b94ebfb55"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x5, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x8}, @generic={0xfa, 0x11, "99e6a934b91a99399ebfa09095d47dce72448ff72e08fc7dd8d752f39eaba5ee2c4b13be5c3bbb80621c9c64f8efdbe8ac04f14d968c421599b657cef0de0c9bc75511e11310bfaf855660a5b5140f0e8673b573623d0d3fd0a60d29f8b95d20f8cbf43f96d2bd27e82c72c363dab47428ac917b27129c98a8fb343fdbbd7dba037a5f3c2db1dc009375253652558c58ab67900f1c49a65a28c57d129899eeac14a2effd741326f466dd3fdb46912e07b3ee342c124dd8033af067ade471afcb92cea11d1341080847d51e83c3351cd7a8754c4d1c0e2472e8d783930acf3085a3cba2a48d2cadbbb80b262491b3b0e16111e02f1731931a"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x7, 0x0, 0x4, [@generic={0xa7, 0x21, "6b9aa49640c76c67ea492f30a651fa0cb4f7e05f4d62a371f98c7234868392ff9a77087848d67f81c429c22d6ed8df910c3642c27e83c60a530341bc0777afc5cd305ae28febb32818deb0029fdb6e30e7f84a971684c053cd245840e208ee0bd872240dcb44805dae960d8265941aace1e651d5fe156644045b33064e6d0effaf4661212d790c22282e7b484e80d78e53e048c2ab4aa06c364e227c8100ca50217c96e3be"}, @generic={0xed, 0x10, "0ef9b49601ff3912fd98abb23c574ce027e7def0c04f7aa029b92429c07c1b8f26b39d16228afdaca5b137937f0795a49a7e23a6059748037d0f0b03043aa99ddb021898544d5d76df2edff2841f426527903c4eb1c5b18793244cb9d3e17337d063973739f36ca312a4df1690c1531473f0bf0a8321509ac19886cfcc0a0324b5567e89c2452650a2c3e5f5f87de34c7647ea53a06d2e626c1dadb388bc5c5541166e655ec52f605d5ef8b70f0cb9fe1db44683da96f53c05b00b668c8094fc636b0aa83c6a14e9b3f1844efb2d99c47b2dd003afd72fe199dcbb55e66e43c5fef2646054fc75313c007f"}]}}]}}, {{0x9, 0x4, 0x12, 0x7, 0x9, 0x52, 0xeb, 0x34, 0x5, [@hid_hid={0x9, 0x21, 0x100, 0x6, 0x1, {0x22, 0xd07}}], [{{0x9, 0x5, 0x2, 0x2, 0x400, 0x3, 0x9, 0x3}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x80, 0x7f, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x9}, @generic={0x57, 0x8, "06f0f098a9b93a1bcb43c29d29b57081bb1eee00cf2bfbe52f15d4017c22a966ffe33b963f5343f67a0f6742b8ecbf012268db5d1d310eb5ae1eb452f7da817b874e2e833ad181080af406f7ccc54941e740b20bf8"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x3e, 0x4, 0x6}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0x80, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x10}, @generic={0xcd, 0xa, "401e131bfe4f30802b459977a25964ec676f8cc5f0a1490d751b86e922d8f8660a5af7e915fb9f39f3977b56acf580804bbca5ed2439d85c7888324b5f25aa4d15248783655b15217f174c47cf5da6c9f0684e6049f08951c3887ef2d2017c781852108725aea1a881179957ec9743d786467198df442165ce02ed5a80c07a5fa648774393555dfb85ffe6d208bafb7797189cabdcd9033a5426fbb734ec5eb4d4a5f0664677a1dce5bc6f0decc8c6d60655ad4f2aae2bf47512ba8f60db7575d5c2d05557b87cf3f8b7d1"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0xa8, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xc, 0x1, 0xe6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x8}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x9, 0x8a, 0x4, [@generic={0x56, 0x30, "e2845a428f4f86384e540dfaa8389e38dbe36966c562f919cab44a22a287d9e4a40d5c89da54544da5ef23830dc756c52a2a232d8cd833d003e4c8b86e19efdc82af3b7153b55236752d058511dc99454d942eb8"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x6}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x9, 0xec, 0x4}}]}}]}}]}}, &(0x7f00000045c0)={0xa, &(0x7f0000004440)={0xa, 0x6, 0x110, 0x2, 0x12, 0xbe, 0x40, 0x2}, 0x27, &(0x7f0000004480)={0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x2, 0x7, 0x8000}, @ssp_cap={0x18, 0x10, 0xa, 0xe, 0x3, 0x2, 0xf00, 0x7, [0x3f30, 0xffc00f, 0xf]}]}, 0x4, [{0x4, &(0x7f00000044c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000004500)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000004540)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000004580)=@lang_id={0x4, 0x3, 0x439}}]}) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004640), 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000004680)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000046c0), 0x40000, 0x0) ioctl$TUNSETLINK(r11, 0x400454cd, 0x323) ioctl$CDROMREADMODE1(r8, 0x530d, &(0x7f0000004700)={0x0, 0xbe, 0x7, 0x34, 0x4, 0x4}) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000005180), 0x200100, 0x0) ioctl$int_in(r12, 0x5421, &(0x7f00000051c0)=0x1) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000005200)={0x1, r4}) 3.919274185s ago: executing program 0 (id=701): r0 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080)=[0x400000000000]}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) pread64(r1, &(0x7f0000000740)=""/58, 0x3a, 0x246) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="dbdf250900020073797a3000000000080041f59f5f52d2753bc5ff75007278650014003300626f6e643010"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf2508000100000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000240)={0xfffffffd, 0x0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000500)=""/116, 0x74}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/116, 0x74}, {&(0x7f0000000600)=""/169, 0xa9}], &(0x7f00000001c0)=[0x8, 0x1, 0x9, 0x0, 0xff, 0x1, 0x4, 0x101], 0x7}, 0x20) 3.465721239s ago: executing program 5 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="001600e400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x58) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000440)=ANY=[@ANYRES8], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xda, 0x75, 0x56, 0x8, 0x5ac, 0xfa33, 0xcbaa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7, 0x0, 0xf5, [{{0x9, 0x4, 0xf4, 0x1, 0x0, 0xff, 0xfd, 0x1, 0x80}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.959044905s ago: executing program 1 (id=545): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000043c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}, 0x1, 0xa7ffffff}, 0x0) 2.299096113s ago: executing program 0 (id=725): socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mremap(&(0x7f000090e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000139000/0x4000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008004}}], 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="ff9d45cabb003d24f54a5adee896b63772dfaf8ce182bb88d75f05b55d796eac29257eefd8b37ff29eb93b1a75a0b215950388b395134f55d464f80682875b0d371e6bb3c4bca2f4722d4fc9a4b87738a968a866e56d45558c80ca33f4be844f6e221fd4211a86e16dae8f45eb942c7b0c3e2198f57c6e7222b25ddfc0a8f118ac0e407e98a1f491256d55553665a5759413af2973d8d36b21cd2d728abc00580f8859f0759de0d208a2f9d15b9f580f0b8bdb8af21266cad5076b2e0e49"], 0x1c}}, 0x0) poll(&(0x7f0000000080)=[{r2, 0x4501}, {0xffffffffffffffff, 0x981f1f85f813bfbc}], 0x2, 0x5) r5 = socket(0x22, 0x2, 0x11) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000380)={0x40001ff}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000160000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000002c0)={0x5cb}) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f00000000c0)={0x0, 0xd6, [0x401, 0x8, 0xffffffffffffff9b, 0x2, 0xa, 0x4]}) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) 2.298596569s ago: executing program 0 (id=728): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)="fe", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.398952861s ago: executing program 0 (id=738): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x1b, 0xd, 0x1d2}) mkdir(&(0x7f0000000440)='./file0\x00', 0x42) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000480)=@filename='./file0\x00', r1, &(0x7f0000002500)) mount$binder(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000002580), 0x8001, &(0x7f00000025c0)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x2}}, {@stats}, {}, {@max={'max', 0x3d, 0x3}}, {@stats}, {@stats}], [{@subj_role={'subj_role', 0x3d, '#}-'}}]}) mount$bind(&(0x7f0000002680)='./file0\x00', &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700), 0x1440, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000002740)) timer_create(0x3, &(0x7f0000002780)={0x0, 0x37, 0x4, @tid=r2}, &(0x7f00000027c0)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x1, 0x2}, 0x18) r4 = openat2(r3, &(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x200002, 0x4, 0x10}, 0x18) r5 = syz_usb_connect(0x2, 0xb0b, &(0x7f0000002900)={{0x12, 0x1, 0x200, 0x91, 0x1, 0x7d, 0xff, 0x67b, 0x1, 0xbc17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf9, 0x3, 0x8, 0x9, 0x20, 0x3, [{{0x9, 0x4, 0x7f, 0xa, 0xd, 0x1b, 0xee, 0xfe, 0x2, [@generic={0x9e, 0xa, "b2176d7ae86d43abbbc286b49398eaf4a080fae6d14a2de07ba673164698c45d42bef8fd35f1995bf8325c74c56a34d9cba163de7d1c18ced0386d55f591baa362482aceba587410da5e925fd55c9063d4a2e8fd13644ded2006f63f1fe2307850dda9e7d17183efefdb749c10870da39f007c1b7f957cc8ca42776bdcff563bab04f54c8194737df2836771f0d3088b76e5880009075094f39ef729"}], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x4, 0x8, [@generic={0x10, 0x23, "1e3abe26fc1846ce093e6f95c8e0"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0xf, 0x7, 0x8, [@generic={0xef, 0x2, "94a1002a6473611bedd30752db62fa99311f384108facf25655166472d1f2aeefca79fd824ea3b5696a91df7afc384602ad626a78012da37fcb8a5621390b8bafac83151dffcd9514b40d5499614628ecba98df1aef41d24f8503e0dfa0985db96147b464fcc86e580664ae81145cbca3528404185b40724a39fffbd91140167de527bd5f3e11327a6628369ca1accc4bfad11b66d72cc1808f9dc5158bb4ce913dae08774100761a5fcef5b72055210ba85efee69089996d07975485b44b51795af983b7541e2494f2ee8099c6b031fa22f8e363a7d99f706788712dd93b1bcc7ddbbe9880c80fa6a51ffdb08"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x200}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xf9, 0x1, 0x4, [@generic={0xc8, 0x22, "7f5f9b06fb51b3f5e789ba06678fd812be332f3078656741c68e2d40ad01012c7b3aa49ad85a82d35f296c5a60186b9f6b4efe5743c47f81a539866b13a6418d081899d039f3cb53b3bc11bbef5c95644a43c32542e6463765252e5a9db64b1f3cfd6e40629b0e311a36af8be82be873cdca09abae38847240d59a0ba31543cf5d7cdd9bc44f6b2099d633e0d7c694f238d9f6da99434377d500aa61638a7a90a6397079f164dada31e05ff110a751403885fa32de561eff769d94b3f6a72b50a1827d5e1012"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x0, 0x6, 0x3, [@generic={0x4b, 0x21, "a0ad5e4a7ac9316fcb439fae409d8650291cdb075cfe877ca39c65ff7d12a8b0110c061bfcfaa83cb19cd140fa504969170b23ce7dad165f9029bb87ceb75add2a16f15b0f67012a96"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x1, 0x26, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x32, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x39, 0x1, 0x7, [@generic={0x12, 0x4, "6542b8845b35e4f2ba79e79b0964fdf8"}, @generic={0xfb, 0x30, "7443599b5eceb6cc5ecfafdc3142f0c21aee02399fbbeb17d1570ddb8e367e1a1b8afe035d9e375d90e5bfa5d455901c435a512134e33d18616a1df8bfa606c138a547150e6206b08dc323dc43652ba8e6fae764a78b195f33ba7caab040f464b0c110ee680fdfb0c548c54adc9405679098ea310a232fc3b14d0f9e7ce9b82b15342cf3a5387a60d69812e40fe60e4db7f5c68e5f7b31b14e05430b61c27ab8eb571f2a24d9203b4730358f7cf9d7dddc0bbdc0907a2bd6c6b3f2973dc719d5837088bd66e317c143404cc4557632fc243b80617ef3dd61218802c86941d6c60897bc37c367c433177432da59dea23237cf9da1879bc81a38"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x3, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1ff}, @generic={0x6a, 0x11, "b73df1c1f9abc2c46e7d4f021137c2c51f96e5fce25c7cdf4c54123a5c17d807b2abb64e3111da28c4731e74ed4c8f15df58f579b80523aa47deb90a60b18959c4bfc2c1e8923baa65c981ebacdabb85de65b7f5156983e3c3d2b881793e7a7e7f69c089676bb2ba"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x10, 0x9, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x1}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x1, 0x9d, 0x1e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1a, 0x20}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x3, 0x6, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xf7, 0x13, 0x4, [@generic={0x5c, 0x23, "4317e9b0520b5d3ed7fbb6fdcc1fc2756b7586922aead3bdfb6c462249b894a6085c4a03c9d1dcb7bf64e7fb3edddd73903e080301de7b9299605934f5d33970bba518a70fd0e3e45b733e256f81c10cb2c8c9de2372a146e1b1"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x31, 0x9, 0x8, [@generic={0x95, 0x10, "96c571be1a6a1dd3f5cd3106e727b1c78803541789fa5e6eedda15a59a173c9d2aa5f47b722d9b015f7c431f2c0107c6d12eb0f612d3b5600f082c778712693e731454bb9db256cfd6fba0a7824facd68fe3fcc85a4abe78e16da29118e60dcf4b61ff6efe2f127b6a6a0f3b33b4b6edbb60b4539c332f816f16fe784656412336808f9964a48ee7cd585565b5473d3ea0335e"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0xc, 0x7e, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x10, 0x311}]}}]}}, {{0x9, 0x4, 0x26, 0x40, 0x1, 0x50, 0x46, 0xc2, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0xecfe, 0x40}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x3, 0x3, [0x7, 0x6, 0x8], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x6, 0x9}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0xf7, "fd"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0xe, "f195512f"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x3, 0x2, 0x2}]}], [{{0x9, 0x5, 0x1, 0x10, 0x20, 0x4, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x7, 0x2f7}]}}]}}, {{0x9, 0x4, 0x6b, 0xb, 0x5, 0x3d, 0x54, 0xf2, 0xff, [@generic={0x47, 0x6, "670684790d7216e73374cd38b84c363faabfb6a20beb143616ff11bc0966d226ceb99da1e25312021263b1fcfdd6d1e9d13ca347eaf1fe5e0c85bd2e2cf569ff6054de1791"}, @generic={0xc1, 0x9, "a7f92379040b9199a673515b462c4be34388cd5198e5f270161623b0943682a3fd2cb2c706d70d9feaa4f763776e71f291c1b4390cebcbce4dde70de55c216cd196545f78c52b6fa11c4f3dd35bfd9857b90b09e128f94469384525e74ca59c615a856fcaa01a1e84a595f6a37e828ce6520772b1db15d664f4670b87ea83d31901d7f505eedea55441f39f2de46d04dd130daff498db0a22ffbfec148b8151ec1a8ae1f1fe481996fccb36e88f78caf74a5cb91a4b12622611c233406e837"}], [{{0x9, 0x5, 0x7, 0x1, 0x400, 0x2, 0xa, 0x0, [@generic={0xa5, 0xb, "0d2180e98164227fffcf316be1b34520a62887fe44847a8632087f3db80cd556c272df0efb3a671ee413e1de65122a860c4707ee90bd6833365447ffac58ef4cde837178638e4382b017a9f028f58a2e218498768aa063fc755f7b32f76990a6ed895538b9b0593f0dae0edd4a0188a8895f5857603adff0b18647e42d8ef256373c67599a150fbac4d5833aab8a3be39b310ea3d2905909c167ad22d3c1d92f923505"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8d7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x1, 0x3, 0x9, [@generic={0xf4, 0x8, "d97040b374c392785928db27b71c7cdba3f97f712ea0e221a96bde08b6fb581f12f58c88ce0eb207f69a5a19c2e2fc6337025e66226390d3dfef8eee17c1dc3d941b0f04cc938bce0b02b7f9eea67a1fbf34a17085c2311a476ca9a554dc33f2b35523bda095081d159a425e06ff4cc7ce055c22019c4e3b425ee196d42a5f8b1a5399e8e69370e07b2d7f901e33b9cd596575c0d0100efb2b55453488a5adb20038312713e8db9a2e1cdbbb9f84ac1d23787fd8e0c920ff096d5aecfb901cb90de7769d8911b9292687929485124483ebca76a0ba0d9e8f270e03135a2f735ac29e9eac41578c4b2a4c8b3800b451d2b3f6"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x5, 0x5, 0x79, [@generic={0xa9, 0x1, "3765c8a5d0e7fccca5f043d08bd25cbe5437f2991c617bf71b25e0b07d8506e42942aca3fc760f4e8bb23ae6a1a97ebaae302725eb00d6de4a1fa970f6a4e49b0fdc01c0d078fc080df8d303235f9176b28633060eaaa7bdb28281af4e549864404964dfca17394cdf8aea8505c999d89087a4b47ed4a2ad3f0061e5b378dde564bd9e35542fc20ccb96131a0f8c261261a77624c94b5decdf5478bf7e8539b86dde8cded34f89"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x2, 0x0, 0x6, [@generic={0x20, 0x36613db122989935, "89b26870ad7bf643df35d58aa4e3983a944183393e33cdf6106868570963"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0xaa, 0x4, 0xb, [@generic={0xc7, 0x11, "7da5223412cfc0939a4733353344f2995e08bde3dd0c2737bc42f5d688f5e1d4e4f96d08be1b55de11e3d75a27fcf2ed5a643cf713d60b4fdd087db281439f1b9e978705447bbb0a76ccd11b1a03845cd13111986d4ce14cc9f0a60bf5b4e0e7d1b1e56c4430d752f68cf476e1fa99ef51995568e3933e9ea2244ec26d73a1d16a75aaf72cd06743893063b4c020bad1bba4944428fce9d42bc99725bbe5b19ac11bd374fbcbbf22b3fdaf15eef2020d77fa355f1815ca3b3e3cd8f4cea66e0b16b8a61fca"}, @generic={0x53, 0x10, "eb9997c164d2dd0e52b14544674558b7ba02121efdedf51ad5c34305f305890b2195e2477c1e529789fe12c806937d9ae267b76118dd21275f8f11ff36648ecb31a5cdb7d5316e5f5e5bf8944e9905e82a"}]}}]}}]}}]}}, &(0x7f0000003580)={0xa, &(0x7f0000003440)={0xa, 0x6, 0x110, 0xa0, 0x5, 0x4, 0x40, 0x9}, 0x19, &(0x7f0000003480)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x0, 0xf00f, 0x8, [0xff3f3f, 0xc030]}]}, 0x1, [{0xaa, &(0x7f00000034c0)=@string={0xaa, 0x3, "de304c1b46cb5b02f87fd3874aa73c94ffef597f14bd5faa8a3aec4a8ea0d97708d711d3c6e7bdc9480fe1ea18f5308b2183f39e0add68d01615aeee45549e05a824e876348485767b90a15424ad2f7a809757b65ad4a6b496938fc7a4f32fb2fca8c719079c42aa0631ee7cd476e628105085b7229dd8c2cbde0abf17f63cdf21c3fab46643e9033f91cfe2da892268c85ff88e835755897b5ec2a9fc6f8b8090ff9c8b1ba8d135"}}]}) syz_usb_control_io$hid(r5, &(0x7f00000036c0)={0x24, &(0x7f00000035c0)={0x20, 0x9, 0x20, {0x20, 0x3, "2947f5323fb73a140eef348d2ba0bad324a8cbbbfef83218ec11ce73f797"}}, &(0x7f0000003600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}, &(0x7f0000003640)={0x0, 0x22, 0x1f, {[@global=@item_4={0x3, 0x1, 0xa, "b8a06002"}, @global=@item_012={0x2, 0x1, 0x4, "a45a"}, @local=@item_4={0x3, 0x2, 0x9, "2ffe5556"}, @main=@item_012={0x1, 0x0, 0x9, "a8"}, @global=@item_012={0x1, 0x1, 0x3, "b1"}, @global=@item_012={0x0, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xc, "b759265b"}, @local=@item_012={0x2, 0x2, 0x0, "02f6"}, @global=@item_4={0x3, 0x1, 0x8, "7962af66"}]}}, &(0x7f0000003680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x657}}}}, &(0x7f00000038c0)={0x2c, &(0x7f0000003700)={0x40, 0x18, 0xa2, "b696f63d29f7dd26321c667de8430ae34a7be4f13ec9f6a581bc60beaead59c84a0390d4a08696d8c3b8f52e48a7d6289a948b3487c54ceea8591a998f6f634bb41d046ec70d1eef22a5a6e3fd65b5beb2ed5fd929077b6fa73650ce57acf6b81326d80c6e0f467c4e93e92434096c2a91f65090faaf33da0f4e8a6c894e02f36133ddad1f646f18354795d5164caaa76b23627bc5bc260a86194a4350d495464ac5"}, &(0x7f00000037c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000003800)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000003840)={0x20, 0x1, 0x2c, "1e2301a9b4e979aa5610d1e80f5365e4913f47e374b518697ba8f2ae8d476a75609af43011c31150f9e66ff7"}, &(0x7f0000003880)={0x20, 0x3, 0x1, 0x3}}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x1e, &(0x7f0000003900)=0x1, 0x4) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000003940), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003980)=@bloom_filter={0x1e, 0x800, 0xfffffff1, 0x8f2, 0x600c8, r7, 0x31, '\x00', 0x0, r7, 0x4, 0x5, 0x4, 0xd, @void, @value, @void, @value}, 0x50) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003a40), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000003cc0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003c80)={&(0x7f0000003a80)={0x1c4, r8, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0xa}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5a1}, {0x8, 0x15, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x24}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x60}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x400}, {0x8, 0x15, 0x83}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x10841}, 0x40014) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000003d00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000003d80)={0x6, &(0x7f0000003d40)=[{0x9, 0x1, 0x6, 0x132}, {0x2d, 0x4, 0xa4, 0x31}, {0x9be, 0x4, 0x6, 0xa0e7}, {0x6, 0xc4, 0x9, 0x6540}, {0x3, 0x5, 0x6, 0xa77a}, {0x5, 0x5, 0xfa, 0x9}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) accept$ax25(r4, &(0x7f0000003dc0)={{0x3, @bcast}, [@default, @null, @null, @remote, @netrom, @rose, @rose, @null]}, &(0x7f0000003e40)=0x48) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r9, 0x4068aea3, &(0x7f0000003e80)={0xdf, 0x0, 0x12000}) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000003f00)={{0x3c, @private=0xa010101, 0x4e24, 0x0, 'wrr\x00', 0x0, 0xafd2, 0x17}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0x0, 0x2, 0x971}}, 0x44) ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f0000003f80)={0x0, 0x0, {0xb, 0xfffffff7, 0x9}}) statx(r3, &(0x7f0000003fc0)='./file0\x00', 0x100, 0x1, &(0x7f0000004000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r7, &(0x7f0000004940)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004900)={&(0x7f0000004140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x130, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xe3, 0x7, 0x1, 0x0, "d23422b3ab3926f45940afa13ea21c90b7a9e0ee7598429212b314696ebe55a3343fa264fc66a5eec8eefa50093a57dc402dcf2fc97e627c8cf867e9af8ba37cd6b64a4166970fb61b4e002c7efd42e0bd94e199963f3b88f1bbee8292b15b9beeac5b69992d31c93611b7a0a5c34f6d6a5f67de5317843ee81b23fe83465bcbcbba2260dd124885369447ceef8274e4b4dd6869992f0397c08c4afd34fff145405bf6da6ae167b7056960491b847362d4e3cf4ac49ff62048af0e36bd8ce6c148403229586fdfcef5de520341e89d5ffcd85b72fc4a0d73e576cb40038b06"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x88, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xdfe}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELCHAIN={0x19c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x57, 0xc, "8a282cc551f5375241d73719c98c42428714a319140a27e8958f7164299e72571f4ed6cd66a0c89aabefd9e6fa14d207a5712e6920cf51dd80ae6f0b69e7e79dc667769c65bda7ec75a3f7ab90418a7462c12c"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xf3, 0xc, "fba6e40500bf6c3e215fac051feb18aa5e141bb25ee46211b2ccb69020e1ff52b52390f6ed5d27f969ded7991caf12918b3ae2753cd2e4a4409784874a75649db4d5b2a6cf62288215070a43dff4d3bbc7c5280fc3f5e60b54febaea20d8cdd59fcba689bb37a0c28fa7e2b00220588861642b6de4f13710a683a1518b763a13ffb337f18f208820c9c0cf428bdc9dbcc96766549572d4058fe5e8ab12dc5878037849b3f537f8af8fd46a935d61ab53a14104b5160b6d00d769ae3a59509319a383120415843961037bb770fa986affac638f7eaa4a823c660c4f8180a50e3af8a4adf251c5b3b258e9c854aead43"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x1e0, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x48, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x75}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x60000000000000}, @NFTA_SET_DESC={0xf4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x84}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1898e7b3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeaad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x96ab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}]}]}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_DREG={0x8}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc6}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x160, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11f9cf84}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x76bd5b13}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1c82e61}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x71, 0xc, "59e8c190f37442b37f5be12f8d2a75cb2e481f6eccea3ffd2af417b2b4bf05f3661709933a26b643825105e6fc46ce50930c56ebbbf4dc3136b990f6c29a4b81bc15c026436a0325025470b5ca60cf4a9ead46c10db12eb5057b42564726cdde455c07f11005c3222a4ec018a2"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x14, 0xc, "c8b9ad17e4ed054c40bfe21d47db16ce"}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0x2f, 0xd, 0x1, 0x0, "ba86aae07e35b80274e841ff8ced9c3c70dbf17a0f912c0a7a04502f5daddf1b1fb3b25d5fdcfb8577d85c"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa6e91e7934c0a0c9}}}, 0x7b4}, 0x1, 0x0, 0x0, 0x4048000}, 0x20040c50) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000004b00)={0x0, 0x0, r10}, 0xc) 1.398445845s ago: executing program 4 (id=739): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)="fe", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.349003663s ago: executing program 4 (id=740): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) (async) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r1 = creat(0x0, 0x0) (rerun: 64) write(r1, 0x0, 0x0) (async) write$uinput_user_dev(r1, 0x0, 0x0) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r2) (async) creat(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x6, 0x8000000000000001}, &(0x7f0000000080), 0x0) (rerun: 32) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"a2e3ad09edf809f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b07323068090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f00000000c0)={&(0x7f0000000380)={{}, {@hyper, 0x100000}, 0x400, "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"}, 0x418, 0xe}) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r4) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1c30b0983acbe253}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000429bd7000fedbdf250200000008000200030000001400050000000000000000000000000000000000140006030000000000000000000000000000000108000c0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) (async) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x4c30c30c3a581dd7, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYRES64=r9, @ANYRESDEC], 0x8c}}, 0x4000) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="4d7e00000000020000002a00000008002f000000000005003600000000000500370001000000050037000000000000000000", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x4, 0x700000002000000, 0x0, 0x4000050}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.348690547s ago: executing program 4 (id=741): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0500000001040000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300006001000000030000e001220000d54e1b60da746da1"], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x800) read(r0, &(0x7f0000000100)=""/165, 0xa5) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=@ipv6_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x12}, [@FRA_DST={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 436.744481ms ago: executing program 4 (id=742): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000500)={{&(0x7f0000565000/0x1000)=nil, 0x1000}}) 436.530994ms ago: executing program 5 (id=743): r0 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000180)) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffff"], 0x398}}, 0x0) 359.456176ms ago: executing program 5 (id=744): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000500)={{&(0x7f0000565000/0x1000)=nil, 0x1000}}) (fail_nth: 3) 294.686599ms ago: executing program 4 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000140000059781986000000000000", @ANYRES32=0x0], 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="feffffff", @ANYRES16=0x0, @ANYBLOB="850e2ef1bd8b853e70700002", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0585611, &(0x7f0000000200)={0x0, 0xd, 0x0, "6e145c0ef63b736608314ceb833d278f8739057c56b9f38df459aa6db8a9f4d6"}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/221, 0xdd}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0xfffffffffffffe4c) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYBLOB="604b1f301a65eb9b73b5c182c13650e5e5ce94614aa97b49cf2397f9f97851ec7a8dca0d96557e558cd268797cffd4a879a373b3d9301e5ae5ef086b758598be58a7c3e0a031f45142334661c488de5859be4e8c70f334cec30545237977bbabd25c9c5ae8add97feaf3daf75ed2bc7ff047eb967e26f08d4159b4f6771d7f03c3bbd88733e95b777042a22e04059d6006e53f6f5d5df240b7df3dbeb8ca385a649b8e29d24f05562211141f69dbbe4fd28c9bc5360edfd424febca72ae8fef1027b9bb97a67a7bf08894b662d72b5939bef1e20fc17bf1712402f2b", @ANYBLOB="01002bbd7000fcdbdf25170000001c0006"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xa0) r7 = socket(0x28, 0x5, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) r8 = socket(0x28, 0x5, 0x0) r9 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000001440)={'bridge_slave_0\x00', @remote}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf, 0x4008031, r3, 0x1002000) r4 = userfaultfd(0x801) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) r6 = openat$cgroup_ro(r5, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r8 = memfd_create(&(0x7f00000009c0)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x01\x00\x00\x00\x00\x00\x00\x00\xd0\xc0\xa9\b\x98\xfc\\\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\xd6k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2\xc0\xbd\xdb\x82X}\x18\xdc\xf7\xad\xf3\xcf]J\xf2\xb5h\x9bt*\xd2\xfb;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\x00\x00\x00\x00\x00\x00\x00\a\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda\x00\x00\x00\x00\xa7)0\x86\x1e\'O', 0x0) write(r8, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x20000) r9 = dup3(r7, r4, 0xc144608ca2fd8565) r10 = socket$inet(0x2, 0x2, 0x4) setsockopt$inet_tcp_int(r10, 0x6, 0x3, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_SIOCGARP(r10, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21, @empty}, {0x6, @local}, 0x2e, {0x2, 0x4e20, @private=0xa010102}, 'pim6reg\x00'}) sendto$inet(r10, 0x0, 0x0, 0x2000073d, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x2}, 0x10) sendto$inet(r9, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974995abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x4d, 0x20000004, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x248, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xc}, @loopback, 0xffffffff, 0x0, 'syz_tun\x00', 'vlan0\x00', {}, {0xff}, 0x21, 0x3, 0x4}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x4, 0x1, 0x7, 0x0, 0x7], 0x0, 0x4}, {0x1, [0x6, 0x4, 0x1, 0x3, 0x3], 0x3, 0x6}}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x4, 0x0, 0x2, 0xa, 0x2], 0x4}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3ff, 0x6, 0xfff}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x28, 0x0, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x400}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) fchdir(r9) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x57f4f581d95f1ad8}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000500)={{&(0x7f0000565000/0x1000)=nil, 0x1000}}) 90.172059ms ago: executing program 5 (id=747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000f00000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000e080005400000000f2c0000000b0a01080000000000000000010000000900020073797a32000000000900010073797a3000"], 0xc4}}, 0x0) 89.859921ms ago: executing program 5 (id=748): socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mremap(&(0x7f000090e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000139000/0x4000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008004}}], 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r4, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="ff9d45cabb003d24f54a5adee896b63772dfaf8ce182bb88d75f05b55d796eac29257eefd8b37ff29eb93b1a75a0b215950388b395134f55d464f80682875b0d371e6bb3c4bca2f4722d4fc9a4b87738a968a866e56d45558c80ca33f4be844f6e221fd4211a86e16dae8f45eb942c7b0c3e2198f57c6e7222b25ddfc0a8f118ac0e407e98a1f491256d55553665a5759413af2973d8d36b21cd2d728abc00580f8859f0759de0d208a2f9d15b9f580f0b8bdb8af21266cad5076b2e0e49"], 0x1c}}, 0x0) poll(&(0x7f0000000080)=[{r2, 0x4501}, {0xffffffffffffffff, 0x981f1f85f813bfbc}], 0x2, 0x5) r5 = socket(0x22, 0x2, 0x11) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000380)={0x40001ff}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000160000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000002c0)={0x5cb}) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f00000000c0)={0x0, 0xd6, [0x401, 0x8, 0xffffffffffffff9b, 0x2, 0xa, 0x4]}) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) 0s ago: executing program 5 (id=749): unshare(0x62040200) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfd, &(0x7f0000001480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x9c, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x80, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x9c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11, 0x48001}}, 0x20}}, 0x0) unshare(0x62040200) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfd, &(0x7f0000001480)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x9c, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x80, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x9c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11, 0x48001}}, 0x20}}, 0x0) (async) kernel console output (not intermixed with test programs): 9] RIP: 0033:0x7f2c8e180849 [ 50.780892][ T6179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.785981][ T6179] RSP: 002b:00007f2c8efb0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 50.788174][ T6179] RAX: ffffffffffffffda RBX: 00007f2c8e345fa0 RCX: 00007f2c8e180849 [ 50.790254][ T6179] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 50.792311][ T6179] RBP: 00007f2c8efb00a0 R08: 0000000000000000 R09: 0000000000000000 [ 50.794368][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.796442][ T6179] R13: 0000000000000000 R14: 00007f2c8e345fa0 R15: 00007fffe9b015e8 [ 50.798524][ T6179] [ 50.966324][ T5966] Bluetooth: hci1: command tx timeout [ 50.967888][ T5966] Bluetooth: hci0: command tx timeout [ 50.968758][ T5964] Bluetooth: hci3: command tx timeout [ 51.095869][ T4520] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.247453][ T4520] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 51.251122][ T4520] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 51.254405][ T4520] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 51.256876][ T4520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.262730][ T6185] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 51.267591][ T4520] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 51.457952][ T1143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.470804][ T8] usb 5-1: USB disconnect, device number 2 [ 51.509323][ T1143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.563571][ T1143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.629885][ T6015] usb 6-1: USB disconnect, device number 2 [ 51.635564][ T6202] cgroup: subsys name conflicts with all [ 51.665960][ T1143] bridge_slave_1: left allmulticast mode [ 51.667608][ T1143] bridge_slave_1: left promiscuous mode [ 51.669940][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.680662][ T1143] bridge_slave_0: left allmulticast mode [ 51.682260][ T1143] bridge_slave_0: left promiscuous mode [ 51.683907][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.747624][ T6211] kvm: Disabled LAPIC found during irq injection [ 51.776444][ T5964] Bluetooth: hci2: command tx timeout [ 51.967258][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.971407][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.977377][ T1143] bond0 (unregistering): Released all slaves [ 51.983690][ T6185] vlan0: entered promiscuous mode [ 52.208896][ T5941] IPVS: starting estimator thread 0... [ 52.252615][ T6247] cgroup: subsys name conflicts with all [ 52.255202][ T6247] __nla_validate_parse: 14 callbacks suppressed [ 52.255218][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 52.301737][ T1143] hsr_slave_0: left promiscuous mode [ 52.304177][ T1143] hsr_slave_1: left promiscuous mode [ 52.309403][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.312767][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.317128][ T6244] IPVS: using max 36 ests per chain, 86400 per kthread [ 52.318010][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.322740][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.336448][ T63] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 52.347069][ T1143] veth1_macvtap: left promiscuous mode [ 52.348823][ T1143] veth0_macvtap: left promiscuous mode [ 52.350273][ T1143] veth1_vlan: left promiscuous mode [ 52.352008][ T1143] veth0_vlan: left promiscuous mode [ 52.488239][ T63] usb 9-1: device descriptor read/64, error -71 [ 52.746011][ T63] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 52.887177][ T63] usb 9-1: device descriptor read/64, error -71 [ 52.996287][ T63] usb usb9-port1: attempt power cycle [ 53.047790][ T5964] Bluetooth: hci3: command tx timeout [ 53.056029][ T5964] Bluetooth: hci0: command tx timeout [ 53.056062][ T5956] Bluetooth: hci1: command tx timeout [ 53.082922][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 53.157707][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 53.167665][ T6263] FAULT_INJECTION: forcing a failure. [ 53.167665][ T6263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.172447][ T6263] CPU: 2 UID: 0 PID: 6263 Comm: syz.1.79 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 53.175462][ T6263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.178461][ T6263] Call Trace: [ 53.179401][ T6263] [ 53.180331][ T6263] dump_stack_lvl+0x16c/0x1f0 [ 53.181788][ T6263] should_fail_ex+0x497/0x5b0 [ 53.183430][ T6263] _copy_from_iter+0x2a1/0x1560 [ 53.184889][ T6263] ? trace_lock_acquire+0x14e/0x1f0 [ 53.186494][ T6263] ? __alloc_skb+0x1fe/0x380 [ 53.188156][ T6263] ? __pfx__copy_from_iter+0x10/0x10 [ 53.189512][ T6263] ? __virt_addr_valid+0x1a4/0x590 [ 53.190879][ T6263] ? __virt_addr_valid+0x5e/0x590 [ 53.192221][ T6263] ? __phys_addr_symbol+0x30/0x80 [ 53.193561][ T6263] ? __check_object_size+0x488/0x710 [ 53.194950][ T6263] netlink_sendmsg+0x813/0xd70 [ 53.196230][ T6263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.197647][ T6263] ____sys_sendmsg+0xaaf/0xc90 [ 53.199028][ T6263] ? copy_msghdr_from_user+0x10b/0x160 [ 53.200757][ T6263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.202367][ T6263] ? __lock_acquire+0xcc5/0x3c40 [ 53.203804][ T6263] ? hlock_class+0x4e/0x130 [ 53.205096][ T6263] ? __lock_acquire+0x15a9/0x3c40 [ 53.206655][ T6263] ___sys_sendmsg+0x135/0x1e0 [ 53.207850][ T6263] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.209240][ T6263] ? __pfx___lock_acquire+0x10/0x10 [ 53.210547][ T6263] ? __pfx___might_resched+0x10/0x10 [ 53.211881][ T6263] ? __might_fault+0xe3/0x190 [ 53.213099][ T6263] __sys_sendmmsg+0x201/0x420 [ 53.214362][ T6263] ? __pfx___sys_sendmmsg+0x10/0x10 [ 53.215702][ T6263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 53.217252][ T6263] ? fput+0x67/0x440 [ 53.218226][ T6263] ? ksys_write+0x1ba/0x250 [ 53.219494][ T6263] ? __pfx_ksys_write+0x10/0x10 [ 53.220831][ T6263] __x64_sys_sendmmsg+0x9c/0x100 [ 53.222202][ T6263] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.223640][ T6263] do_syscall_64+0xcd/0x250 [ 53.224894][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.226426][ T6263] RIP: 0033:0x7fe678580849 [ 53.227611][ T6263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.232863][ T6263] RSP: 002b:00007fe6793e4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 53.235190][ T6263] RAX: ffffffffffffffda RBX: 00007fe678745fa0 RCX: 00007fe678580849 [ 53.237306][ T6263] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000003 [ 53.239572][ T6263] RBP: 00007fe6793e40a0 R08: 0000000000000000 R09: 0000000000000000 [ 53.241757][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.244022][ T6263] R13: 0000000000000000 R14: 00007fe678745fa0 R15: 00007fff655c1338 [ 53.246326][ T6263] [ 53.336033][ T63] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 53.356347][ T63] usb 9-1: device descriptor read/8, error -71 [ 53.595947][ T63] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 53.624645][ T63] usb 9-1: device descriptor read/8, error -71 [ 53.738886][ T63] usb usb9-port1: unable to enumerate USB device [ 53.848705][ T5956] Bluetooth: hci2: command tx timeout [ 53.866356][ T6265] netlink: 268 bytes leftover after parsing attributes in process `syz.1.80'. [ 53.931194][ T6271] FAULT_INJECTION: forcing a failure. [ 53.931194][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 53.935051][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.1.82 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 53.938613][ T6271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.942429][ T6271] Call Trace: [ 53.943694][ T6271] [ 53.944749][ T6271] dump_stack_lvl+0x16c/0x1f0 [ 53.946440][ T6271] should_fail_ex+0x497/0x5b0 [ 53.948147][ T6271] should_failslab+0xc2/0x120 [ 53.949848][ T6271] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 53.951640][ T6271] ? skb_clone+0x190/0x3f0 [ 53.952925][ T6271] skb_clone+0x190/0x3f0 [ 53.954446][ T6271] netlink_deliver_tap+0xabd/0xd30 [ 53.956252][ T6271] netlink_unicast+0x6b4/0x7f0 [ 53.957985][ T6271] ? __pfx_netlink_unicast+0x10/0x10 [ 53.959850][ T6271] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 53.961648][ T6271] netlink_ack+0x6ac/0xb80 [ 53.963243][ T6271] netlink_rcv_skb+0x348/0x440 [ 53.964981][ T6271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 53.966943][ T6271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 53.968863][ T6271] ? netlink_deliver_tap+0x1ae/0xd30 [ 53.970823][ T6271] netlink_unicast+0x53c/0x7f0 [ 53.972202][ T6271] ? __pfx_netlink_unicast+0x10/0x10 [ 53.973966][ T6271] netlink_sendmsg+0x8b8/0xd70 [ 53.975690][ T6271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.977320][ T6271] ____sys_sendmsg+0xaaf/0xc90 [ 53.978992][ T6271] ? copy_msghdr_from_user+0x10b/0x160 [ 53.980904][ T6271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.982792][ T6271] ? __lock_acquire+0xcc5/0x3c40 [ 53.984483][ T6271] ? hlock_class+0x4e/0x130 [ 53.985818][ T6271] ? __lock_acquire+0x15a9/0x3c40 [ 53.987584][ T6271] ___sys_sendmsg+0x135/0x1e0 [ 53.989308][ T6271] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.991068][ T6271] ? __pfx___lock_acquire+0x10/0x10 [ 53.992507][ T6271] ? __pfx___might_resched+0x10/0x10 [ 53.993947][ T6271] ? __might_fault+0xe3/0x190 [ 53.995640][ T6271] __sys_sendmmsg+0x201/0x420 [ 53.997337][ T6271] ? __pfx___sys_sendmmsg+0x10/0x10 [ 53.999206][ T6271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.001330][ T6271] ? fput+0x67/0x440 [ 54.002688][ T6271] ? ksys_write+0x1ba/0x250 [ 54.004256][ T6271] ? __pfx_ksys_write+0x10/0x10 [ 54.005938][ T6271] __x64_sys_sendmmsg+0x9c/0x100 [ 54.007629][ T6271] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.009483][ T6271] do_syscall_64+0xcd/0x250 [ 54.011098][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.013045][ T6271] RIP: 0033:0x7fe678580849 [ 54.014835][ T6271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.021657][ T6271] RSP: 002b:00007fe6793e4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 54.024035][ T6271] RAX: ffffffffffffffda RBX: 00007fe678745fa0 RCX: 00007fe678580849 [ 54.026771][ T6271] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 54.029392][ T6271] RBP: 00007fe6793e40a0 R08: 0000000000000000 R09: 0000000000000000 [ 54.031708][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.034359][ T6271] R13: 0000000000000000 R14: 00007fe678745fa0 R15: 00007fff655c1338 [ 54.037093][ T6271] [ 54.045427][ T6271] netlink: 268 bytes leftover after parsing attributes in process `syz.1.82'. [ 54.133690][ T6284] cgroup: subsys name conflicts with all [ 54.135505][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 54.465921][ T6015] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.626073][ T6015] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 54.628923][ T6015] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.631287][ T6015] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.634157][ T6015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 54.637342][ T6015] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.639992][ T6015] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.643117][ T6015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 54.645936][ T6015] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.648407][ T6015] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.651223][ T6015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 54.654142][ T6015] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.666683][ T6015] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.669843][ T6015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 54.674184][ T6015] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.677034][ T6015] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.679850][ T6015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 54.682354][ T6015] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.684724][ T6015] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.685087][ T6326] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 54.687646][ T6015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 54.688505][ T6015] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.690498][ T6326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.692033][ T6015] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.699656][ T6015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 54.703289][ T6015] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.706319][ T6015] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.710481][ T6015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 54.714647][ T6015] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 54.717276][ T6015] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 54.719839][ T6015] usb 5-1: Product: syz [ 54.721132][ T6015] usb 5-1: Manufacturer: syz [ 54.722555][ T6015] usb 5-1: SerialNumber: syz [ 54.732815][ T6015] usb 5-1: config 0 descriptor?? [ 54.740169][ T39] kauditd_printk_skb: 49 callbacks suppressed [ 54.740185][ T39] audit: type=1400 audit(1732899192.122:269): avc: denied { nlmsg_write } for pid=6331 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 54.741279][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 54.741374][ T6015] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 54.791647][ T6337] 9pnet_fd: Insufficient options for proto=fd [ 54.793961][ T39] audit: type=1400 audit(1732899192.172:270): avc: denied { create } for pid=6336 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.799417][ T39] audit: type=1400 audit(1732899192.172:271): avc: denied { setopt } for pid=6336 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.856508][ T39] audit: type=1400 audit(1732899192.242:272): avc: denied { create } for pid=6344 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.862614][ T39] audit: type=1400 audit(1732899192.242:273): avc: denied { setopt } for pid=6344 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.872613][ T39] audit: type=1400 audit(1732899192.242:274): avc: denied { write } for pid=6344 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.895515][ T6349] cgroup: subsys name conflicts with all [ 54.900731][ T6347] netlink: 1 bytes leftover after parsing attributes in process `syz.1.97'. [ 54.942921][ T6014] usb 5-1: USB disconnect, device number 3 [ 54.947797][ T6014] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 55.132244][ T39] audit: type=1400 audit(1732899192.512:275): avc: denied { create } for pid=6367 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.138759][ T39] audit: type=1400 audit(1732899192.512:276): avc: denied { write } for pid=6367 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.178947][ T39] audit: type=1400 audit(1732899192.562:277): avc: denied { create } for pid=6369 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.184187][ T6370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.187007][ T6370] IPv6: NLM_F_CREATE should be set when creating new route [ 55.190085][ T39] audit: type=1400 audit(1732899192.572:278): avc: denied { map } for pid=6369 comm="syz.1.105" path="socket:[12468]" dev="sockfs" ino=12468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 55.277033][ T6375] netlink: 80 bytes leftover after parsing attributes in process `syz.1.106'. [ 55.476176][ T6015] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 55.484265][ T6379] cgroup: subsys name conflicts with all [ 55.559451][ T6382] syz.0.108 uses obsolete (PF_INET,SOCK_PACKET) [ 55.563290][ T6382] dccp_invalid_packet: P.Data Offset(0) too small [ 55.626068][ T6015] usb 9-1: Using ep0 maxpacket: 32 [ 55.629113][ T6015] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 55.633666][ T6015] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 55.636266][ T6015] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 55.638439][ T6015] usb 9-1: Product: syz [ 55.639576][ T6015] usb 9-1: Manufacturer: syz [ 55.640835][ T6015] usb 9-1: SerialNumber: syz [ 55.648233][ T6015] usb 9-1: config 0 descriptor?? [ 55.650736][ T6366] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 55.748530][ T6386] Cannot find add_set index 2 as target [ 55.829474][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 55.859057][ T5954] usb 9-1: USB disconnect, device number 6 [ 55.925891][ T5956] Bluetooth: hci2: command tx timeout [ 56.068342][ T6366] overlayfs: unescaped trailing colons in lowerdir mount option. [ 56.608649][ T6409] overlayfs: failed to resolve './file0': -2 [ 57.096244][ T6015] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 57.107585][ T6430] warning: `syz.1.121' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.137283][ T6432] netlink: 92 bytes leftover after parsing attributes in process `syz.1.122'. [ 57.163104][ T6432] netlink: 432 bytes leftover after parsing attributes in process `syz.1.122'. [ 57.246042][ T6015] usb 5-1: Using ep0 maxpacket: 8 [ 57.253483][ T6015] usb 5-1: config 122 has an invalid interface number: 196 but max is 2 [ 57.256090][ T6015] usb 5-1: config 122 contains an unexpected descriptor of type 0x1, skipping [ 57.259313][ T6015] usb 5-1: config 122 has an invalid descriptor of length 1, skipping remainder of the config [ 57.262900][ T6015] usb 5-1: config 122 has 1 interface, different from the descriptor's value: 3 [ 57.266084][ T6015] usb 5-1: config 122 has no interface number 0 [ 57.267727][ T6015] usb 5-1: config 122 interface 196 altsetting 2 endpoint 0x2 has invalid maxpacket 57933, setting to 1024 [ 57.270702][ T6015] usb 5-1: config 122 interface 196 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 57.275134][ T6015] usb 5-1: config 122 interface 196 has no altsetting 0 [ 57.279772][ T6015] usb 5-1: New USB device found, idVendor=19d2, idProduct=0066, bcdDevice=84.44 [ 57.282166][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.284232][ T6015] usb 5-1: Product: 骕赨귝잽䘪 [ 57.286060][ T6015] usb 5-1: Manufacturer: ࠬ [ 57.287429][ T6015] usb 5-1: SerialNumber: Ъ [ 57.500761][ T6422] netlink: 'syz.0.118': attribute type 26 has an invalid length. [ 57.597815][ T6422] netlink: 132 bytes leftover after parsing attributes in process `syz.0.118'. [ 57.601803][ T6422] netlink: 'syz.0.118': attribute type 10 has an invalid length. [ 57.608946][ T6422] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.642319][ T6015] option 5-1:122.196: GSM modem (1-port) converter detected [ 57.663571][ T6015] usb 5-1: USB disconnect, device number 4 [ 57.674249][ T6015] option 5-1:122.196: device disconnected [ 57.930424][ T6455] fuse: Bad value for 'fd' [ 58.005916][ T5956] Bluetooth: hci2: command tx timeout [ 58.172979][ T6469] netlink: 32 bytes leftover after parsing attributes in process `syz.0.132'. [ 58.360862][ T6481] kvm: kvm [6480]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x100000000000000 [ 58.500775][ T6484] loop8: detected capacity change from 0 to 7 [ 58.506557][ T6484] Dev loop8: unable to read RDB block 7 [ 58.506758][ T5954] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 58.509001][ T6484] loop8: unable to read partition table [ 58.512754][ T6484] loop8: partition table beyond EOD, truncated [ 58.514454][ T6484] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 58.514454][ T6484] ) failed (rc=-5) [ 58.657619][ T5954] usb 9-1: not running at top speed; connect to a high speed hub [ 58.661279][ T5954] usb 9-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 58.664842][ T5954] usb 9-1: config 1 interface 0 has no altsetting 0 [ 58.668552][ T5954] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.671031][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.707251][ T5954] usb 9-1: Product: syz [ 58.708432][ T5954] usb 9-1: Manufacturer: syz [ 58.709704][ T5954] usb 9-1: SerialNumber: syz [ 58.712869][ T6478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 58.735482][ T6489] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 58.801469][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 58.927337][ T5954] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 58.935960][ T5954] usb 9-1: USB disconnect, device number 7 [ 58.983780][ T6505] batman_adv: batadv0: Adding interface: erspan1 [ 58.985557][ T6505] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 59.030136][ T6507] ALSA: seq fatal error: cannot create timer (-22) [ 59.036722][ T6507] capability: warning: `syz.1.142' uses deprecated v2 capabilities in a way that may be insecure [ 59.347731][ T6532] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 59.460160][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'. [ 59.464399][ T6536] xfrm1: entered promiscuous mode [ 59.466021][ T6536] xfrm1: entered allmulticast mode [ 59.491435][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.152'. [ 59.572254][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.577556][ T6552] batadv_slave_1: entered promiscuous mode [ 59.641967][ T6568] raw_sendmsg: syz.0.159 forgot to set AF_INET. Fix it! [ 59.683128][ T6573] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 59.750297][ T6581] can0: slcan on ptm0. [ 59.756322][ T39] kauditd_printk_skb: 48 callbacks suppressed [ 59.756333][ T39] audit: type=1400 audit(1732899197.142:327): avc: denied { read write } for pid=6580 comm="syz.3.163" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.764830][ T39] audit: type=1400 audit(1732899197.142:328): avc: denied { open } for pid=6580 comm="syz.3.163" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.772180][ T6583] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.775653][ T39] audit: type=1400 audit(1732899197.152:329): avc: denied { ioctl } for pid=6580 comm="syz.3.163" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.784544][ T6583] trusted_key: encrypted_key: insufficient parameters specified [ 59.793842][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 59.800483][ T5941] IPVS: starting estimator thread 0... [ 59.802750][ T6583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.165'. [ 59.805607][ T6583] program syz.4.165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.886435][ T6587] IPVS: using max 37 ests per chain, 88800 per kthread [ 59.910363][ T39] audit: type=1400 audit(1732899197.292:330): avc: denied { mount } for pid=6595 comm="syz.1.164" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.916136][ T6596] tmpfs: Unknown parameter 'grock_' [ 59.921308][ T39] audit: type=1400 audit(1732899197.302:331): avc: denied { remount } for pid=6595 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.955825][ T39] audit: type=1400 audit(1732899197.332:332): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.049202][ T39] audit: type=1326 audit(1732899197.432:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.168" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe678580849 code=0x0 [ 60.166402][ T6015] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.315946][ T6015] usb 8-1: Using ep0 maxpacket: 16 [ 60.327164][ T5956] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 60.330353][ T5956] Bluetooth: hci0: Injecting HCI hardware error event [ 60.330977][ T6015] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 60.333462][ T5956] Bluetooth: hci0: hardware error 0x00 [ 60.334703][ T6015] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 60.334721][ T6015] usb 8-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.348784][ T6015] usb 8-1: config 1 interface 0 has no altsetting 0 [ 60.354530][ T6015] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.357893][ T6015] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.360098][ T6015] usb 8-1: Product: 吞 [ 60.361249][ T6015] usb 8-1: Manufacturer: 伓Ɑゕ耒䍧拟뽕뺽ᢰ⿧䘃㶞ꍾߨ☢漥@䳮ۘ搪㌧﫤짻㼅늣喹霴ꎭ㭴齣朶閝ಆ㥑⤟夵⠕홣韈쐫餾ύ㜨튠濟⻸٬褱ﶡh몉✾发㡰퍚岑픸濐ⵡ삔ﺎ惾뺛먌욝ⓘ쬿裏㳚ᶒ캗㉝总⛣뗮ꤌ [ 60.371829][ T6015] usb 8-1: SerialNumber: ﳿ [ 60.378982][ T6592] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.380947][ T6592] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.503972][ T39] audit: type=1400 audit(1732899197.882:334): avc: denied { setrlimit } for pid=6609 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 60.593297][ T6015] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 60.599839][ T6015] usb 8-1: USB disconnect, device number 3 [ 60.621348][ T39] audit: type=1400 audit(1732899198.002:335): avc: denied { create } for pid=6610 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.630126][ T39] audit: type=1400 audit(1732899198.022:336): avc: denied { ioctl } for pid=6610 comm="syz.0.169" path="socket:[12064]" dev="sockfs" ino=12064 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.668475][ T6580] can0 (unregistered): slcan off ptm0. [ 60.737033][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.792401][ T6626] program syz.4.172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.795195][ T6626] ata1.00: invalid command format 0 [ 60.798811][ T6623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.871596][ T6632] kvm: emulating exchange as write [ 60.907399][ T6635] ip6t_rpfilter: unknown options [ 61.109436][ T6646] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 61.112141][ T6646] netlink: 224 bytes leftover after parsing attributes in process `syz.0.178'. [ 61.938947][ T6665] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 62.239696][ T6676] netlink: 209024 bytes leftover after parsing attributes in process `syz.4.183'. [ 62.244567][ T6676] netlink: get zone limit has 8 unknown bytes [ 62.421349][ T5956] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 62.424909][ T6680] 9pnet: Found fid 0 not clunked [ 62.461709][ T6681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.186'. [ 62.864937][ T6684] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 62.869688][ T6684] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 62.873591][ T6684] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 62.876996][ T6684] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 62.966909][ T6696] team0: Device gtp0 is of different type [ 62.977192][ T6697] ======================================================= [ 62.977192][ T6697] WARNING: The mand mount option has been deprecated and [ 62.977192][ T6697] and is ignored by this kernel. Remove the mand [ 62.977192][ T6697] option from the mount to silence this warning. [ 62.977192][ T6697] ======================================================= [ 63.100657][ T6701] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 63.109312][ T6701] evm: overlay not supported [ 63.116108][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 63.228960][ T6709] netlink: 44 bytes leftover after parsing attributes in process `syz.3.196'. [ 63.281397][ T6712] syzkaller0: entered promiscuous mode [ 63.283628][ T6712] syzkaller0: entered allmulticast mode [ 63.287501][ T94] syzkaller0: tun_net_xmit 48 [ 63.389672][ T6713] could not allocate digest TFM handle blake2s-224 [ 63.882387][ T6724] Bluetooth: MGMT ver 1.23 [ 64.558790][ T6716] dvmrp8: entered allmulticast mode [ 64.560728][ T6716] dvmrp8: left allmulticast mode [ 64.690699][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 64.757692][ T6760] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 64.818261][ T39] kauditd_printk_skb: 39 callbacks suppressed [ 64.818278][ T39] audit: type=1400 audit(1732899202.202:376): avc: denied { map } for pid=6761 comm="syz.3.208" path="socket:[12231]" dev="sockfs" ino=12231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.825277][ T6732] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 64.828848][ T39] audit: type=1400 audit(1732899202.202:377): avc: denied { read } for pid=6761 comm="syz.3.208" path="socket:[12231]" dev="sockfs" ino=12231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.917840][ T39] audit: type=1400 audit(1732899202.302:378): avc: denied { create } for pid=6756 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 65.099851][ T39] audit: type=1400 audit(1732899202.482:379): avc: denied { read } for pid=6769 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.135929][ T9] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 65.234080][ T6783] netlink: 148 bytes leftover after parsing attributes in process `syz.0.213'. [ 65.289274][ T9] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 65.291352][ T9] usb 9-1: can't read configurations, error -22 [ 65.406408][ T6789] capability: warning: `syz.0.215' uses 32-bit capabilities (legacy support in use) [ 65.436362][ T9] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 65.444615][ T6797] netlink: 'syz.1.216': attribute type 1 has an invalid length. [ 65.449128][ T6797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.451457][ T6797] IPv6: NLM_F_CREATE should be set when creating new route [ 65.467352][ T6797] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 65.470691][ T6797] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 65.473645][ T6797] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 65.478008][ T6797] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 65.523502][ T6804] can0: slcan on ptm0. [ 65.528344][ T39] audit: type=1400 audit(1732899202.912:380): avc: denied { name_bind } for pid=6802 comm="syz.1.218" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 65.541329][ T39] audit: type=1400 audit(1732899202.922:381): avc: denied { mounton } for pid=6802 comm="syz.1.218" path="mnt:[4026532878]" dev="nsfs" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.599807][ T9] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 65.604897][ T9] usb 9-1: can't read configurations, error -22 [ 65.607689][ T9] usb usb9-port1: attempt power cycle [ 65.640497][ T6812] tmpfs: Bad value for 'mpol' [ 65.728266][ T6820] 9pnet_fd: Insufficient options for proto=fd [ 65.732658][ T6820] 9pnet_fd: Insufficient options for proto=fd [ 65.734921][ T39] audit: type=1400 audit(1732899203.112:382): avc: denied { nlmsg_read } for pid=6819 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.735525][ T6820] overlay: Unknown parameter 'uid>00000000000000000000' [ 65.792217][ T6824] Mount JFS Failure: -22 [ 65.793500][ T6824] jfs_mount failed w/return code = -22 [ 65.816066][ T4520] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 65.918204][ T5956] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 65.920436][ T5956] Bluetooth: Wrong link type (-22) [ 65.922819][ T5956] Bluetooth: Wrong link type (-71) [ 65.956557][ T9] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 65.989007][ T4520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.990093][ T9] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 65.992381][ T4520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.994469][ T9] usb 9-1: can't read configurations, error -22 [ 66.001255][ T4520] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.005188][ T4520] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.008166][ T4520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.011373][ T4520] usb 5-1: config 0 descriptor?? [ 66.126023][ T9] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 66.149904][ T9] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 66.152529][ T9] usb 9-1: can't read configurations, error -22 [ 66.156418][ T9] usb usb9-port1: unable to enumerate USB device [ 66.213836][ T39] audit: type=1400 audit(1732899203.592:383): avc: denied { write } for pid=6850 comm="syz.3.226" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.226146][ T6804] can0 (unregistered): slcan off ptm0. [ 66.228053][ T39] audit: type=1400 audit(1732899203.612:384): avc: denied { setattr } for pid=6850 comm="syz.3.226" name="/" dev="9p" ino=35922513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.255219][ T39] audit: type=1400 audit(1732899203.632:385): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.426273][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.428464][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.430364][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.432370][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.434328][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.436648][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.438549][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.440444][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.442379][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.444284][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.446548][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.448538][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.450506][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.452404][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.455410][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.458051][ T4520] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 66.465743][ T4520] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 66.735908][ T57] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 66.887137][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 66.888676][ T6892] ALSA: seq fatal error: cannot create timer (-22) [ 66.892481][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.895246][ T57] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 66.897674][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.901525][ T57] usb 6-1: config 0 descriptor?? [ 67.106959][ T57] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 67.390358][ T6898] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 67.730378][ T6807] usb 5-1: string descriptor 0 read error: -32 [ 67.736043][ T25] usb 6-1: USB disconnect, device number 3 [ 67.739633][ T25] iowarrior 6-1:0.0: I/O-Warror #1 now disconnected [ 67.786795][ T6807] raw-gadget.1 gadget.0: fail, usb_ep_queue returned -108 [ 67.856950][ T57] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 67.903739][ T6905] ipt_REJECT: ECHOREPLY no longer supported. [ 67.964252][ T6907] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 67.969213][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.971322][ T6909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.998784][ T6912] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 68.001316][ T6912] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 68.003712][ T6912] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 68.185837][ T6933] netlink: 'syz.0.247': attribute type 2 has an invalid length. [ 68.191199][ T6933] batadv0: entered promiscuous mode [ 68.194208][ T6933] team0: entered promiscuous mode [ 68.197047][ T6933] team_slave_0: entered promiscuous mode [ 68.200556][ T6933] team_slave_1: entered promiscuous mode [ 68.204075][ T6933] hsr1: entered promiscuous mode [ 68.206973][ T6933] hsr1: entered allmulticast mode [ 68.208525][ T6933] batadv0: entered allmulticast mode [ 68.210279][ T6933] team0: entered allmulticast mode [ 68.212047][ T6933] team_slave_0: entered allmulticast mode [ 68.213959][ T6933] team_slave_1: entered allmulticast mode [ 68.261271][ T6939] loop2: detected capacity change from 0 to 7 [ 68.265516][ T6939] Dev loop2: unable to read RDB block 7 [ 68.267218][ T6939] loop2: unable to read partition table [ 68.268817][ T6939] loop2: partition table beyond EOD, truncated [ 68.270477][ T6939] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 68.325437][ T6947] netlink: 'syz.1.249': attribute type 63 has an invalid length. [ 68.628888][ T6965] delete_channel: no stack [ 68.649690][ T35] usb 5-1: USB disconnect, device number 5 [ 68.820071][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.260'. [ 68.822519][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 68.965888][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.965996][ T5964] Bluetooth: hci4: command 0x1003 tx timeout [ 69.034315][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 69.040011][ T6984] bond0: Unable to set down delay as MII monitoring is disabled [ 69.781121][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 69.883542][ T7034] tipc: Started in network mode [ 69.885282][ T7034] tipc: Node identity 101, cluster identity 4711 [ 69.887627][ T7034] tipc: Node number set to 257 [ 69.928408][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.280'. [ 70.046053][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 70.099842][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 70.099853][ T39] audit: type=1400 audit(1732899207.482:399): avc: denied { getopt } for pid=7043 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.156720][ T39] audit: type=1400 audit(1732899207.542:400): avc: denied { read } for pid=7043 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.217783][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 70.221361][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 70.223816][ T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 70.227220][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 70.230382][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.237042][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.259685][ T25] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 70.282234][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.349527][ T7048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.448128][ T39] audit: type=1400 audit(1732899207.832:401): avc: denied { setattr } for pid=7031 comm="syz.0.278" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.454874][ T39] audit: type=1400 audit(1732899207.832:402): avc: denied { write } for pid=7031 comm="syz.0.278" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.463307][ T39] audit: type=1400 audit(1732899207.832:403): avc: denied { open } for pid=7031 comm="syz.0.278" path="/72/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.471224][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'. [ 70.490477][ T35] usb 5-1: USB disconnect, device number 6 [ 70.545675][ T39] audit: type=1326 audit(1732899207.922:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7049 comm="syz.4.286" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c8e180849 code=0x0 [ 71.059476][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.061913][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.206967][ T39] audit: type=1400 audit(1732899208.592:405): avc: denied { read } for pid=7064 comm="syz.0.291" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.215079][ T39] audit: type=1400 audit(1732899208.592:406): avc: denied { open } for pid=7064 comm="syz.0.291" path="/dev/usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.343925][ T7069] delete_channel: no stack [ 71.545365][ T39] audit: type=1400 audit(1732899208.922:407): avc: denied { append } for pid=7089 comm="syz.4.300" name="file0" dev="9p" ino=35922557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.558520][ T39] audit: type=1400 audit(1732899208.942:408): avc: denied { read } for pid=7089 comm="syz.4.300" name="file0" dev="9p" ino=35922557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.571928][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.574945][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.578107][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.581235][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.583793][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.586537][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.591030][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.593657][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.596364][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.599404][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.602010][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.604778][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.764643][ T7093] Illegal XDP return value 4234678272 on prog (id 34) dev N/A, expect packet loss! [ 71.766869][ T7096] ALSA: seq fatal error: cannot create timer (-22) [ 71.854657][ T7107] input: syz0 as /devices/virtual/input/input7 [ 71.859839][ T7107] input: failed to attach handler leds to device input7, error: -6 [ 72.216891][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 72.371729][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.375603][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.378663][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.383075][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.388054][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.395282][ T25] usb 5-1: config 0 descriptor?? [ 72.464996][ T7151] delete_channel: no stack [ 72.518475][ T7159] netlink: 892 bytes leftover after parsing attributes in process `syz.3.322'. [ 72.579371][ T7163] Cannot find del_set index 128 as target [ 72.690361][ T7170] netlink: 'syz.3.326': attribute type 4 has an invalid length. [ 72.819161][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.821274][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.823404][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.826047][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.829956][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.829987][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.830005][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.830023][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.830043][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.830057][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.830069][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.830080][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.830092][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.830104][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.830115][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.830348][ T25] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 72.831685][ T25] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 72.879962][ T7185] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.883886][ T7185] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.887997][ T7185] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.891052][ T7185] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.989567][ T7185] cdrom: dropping to single frame dma [ 73.028746][ T7196] netlink: 276 bytes leftover after parsing attributes in process `syz.4.336'. [ 73.208740][ T7216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.343'. [ 73.235033][ T7218] netlink: 892 bytes leftover after parsing attributes in process `syz.4.344'. [ 73.281800][ T7220] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 73.302838][ T7228] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 73.523826][ T7255] macvlan0: entered allmulticast mode [ 73.527193][ T7255] veth1_vlan: entered allmulticast mode [ 73.534040][ T7255] pim6reg: entered allmulticast mode [ 73.636042][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.729939][ T7265] delete_channel: no stack [ 73.806718][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 73.827988][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 73.831619][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 73.837414][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.840521][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.842993][ T9] usb 6-1: Product: Ї [ 73.844496][ T9] usb 6-1: Manufacturer: 枿̯ ꒞ꞅᚠ諎혼≊ᴻ᜕걈ᆔ唕핹Ҝ외꣯⼥䷒砚⋥娏礽༫੎퀧㨎箴娖억ꂧሢ㼚䱧蟻肈鏈ﱞƱ乍殺퀫漍ㅡ邵㠀캣窄闕䖤Ꚃ꧁ﻈ㉦ƪḽ毕䣡閆ꝛ틧寙 [ 73.857893][ T9] usb 6-1: SerialNumber: 璒⹥䧔䈤⧍齎胂ា䱶⟵ޑዤ噖낳ꨋ槚罵詊笏뫋찫䧻䵋讖 [ 74.055279][ T7123] usb 5-1: string descriptor 0 read error: -71 [ 74.296466][ T7284] __nla_validate_parse: 3 callbacks suppressed [ 74.296482][ T7284] netlink: 868 bytes leftover after parsing attributes in process `syz.4.366'. [ 74.350662][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 74.637927][ T7305] netlink: 'syz.0.371': attribute type 3 has an invalid length. [ 74.850220][ T25] usb 5-1: USB disconnect, device number 7 [ 75.091941][ T7323] binder: 7318:7323 ioctl c0306201 0 returned -14 [ 75.430001][ T7329] sp0: Synchronizing with TNC [ 75.442081][ T7329] (syz.4.378,7329,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "usrqc&+Vuota" or missing value [ 75.446906][ T7329] (syz.4.378,7329,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 75.457962][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 75.457978][ T39] audit: type=1400 audit(1732899212.842:437): avc: denied { mounton } for pid=7328 comm="syz.4.378" path="/114/file0" dev="tmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 75.522500][ T7328] [U] [ 75.818810][ T39] audit: type=1400 audit(1732899213.202:438): avc: denied { listen } for pid=7337 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 75.912718][ T7343] netlink: 'syz.0.382': attribute type 3 has an invalid length. [ 76.086672][ T5956] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 76.089894][ T5956] Bluetooth: hci3: Injecting HCI hardware error event [ 76.093042][ T5964] Bluetooth: hci3: hardware error 0x00 [ 76.172493][ T39] audit: type=1400 audit(1732899213.552:439): avc: denied { mount } for pid=7354 comm="syz.0.386" name="/" dev="autofs" ino=17149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 76.179538][ T39] audit: type=1400 audit(1732899213.552:440): avc: denied { read } for pid=7354 comm="syz.0.386" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 76.186693][ T39] audit: type=1400 audit(1732899213.552:441): avc: denied { open } for pid=7354 comm="syz.0.386" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 76.193106][ T39] audit: type=1400 audit(1732899213.552:442): avc: denied { ioctl } for pid=7354 comm="syz.0.386" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 76.201240][ T39] audit: type=1400 audit(1732899213.572:443): avc: denied { sqpoll } for pid=7354 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.332941][ T39] audit: type=1400 audit(1732899213.712:444): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 76.430055][ T9] cdc_ncm 6-1:1.0: bind() failure [ 76.435657][ T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 76.438672][ T9] cdc_ncm 6-1:1.1: bind() failure [ 76.446335][ T9] usb 6-1: USB disconnect, device number 4 [ 76.469674][ T39] audit: type=1400 audit(1732899213.852:445): avc: denied { watch } for pid=7365 comm="syz.0.389" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 76.476680][ T39] audit: type=1400 audit(1732899213.852:446): avc: denied { watch_sb watch_reads } for pid=7365 comm="syz.0.389" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 76.538444][ T7373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.392'. [ 76.542057][ T7373] Invalid ELF header type: 0 != 1 [ 76.604277][ T7380] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 76.610696][ T7380] overlayfs: missing 'lowerdir' [ 76.650571][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 76.741162][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 76.906656][ T7418] netlink: 48 bytes leftover after parsing attributes in process `syz.4.407'. [ 76.914422][ T7418] netlink: 'syz.4.407': attribute type 3 has an invalid length. [ 76.927579][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 76.977396][ T7418] xt_ipvs: protocol family 7 not supported [ 77.053101][ T7437] IPVS: Error connecting to the multicast addr [ 77.246045][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 77.405920][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 77.409063][ T25] usb 6-1: config 0 has an invalid interface number: 21 but max is 3 [ 77.411089][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.413528][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 77.415699][ T25] usb 6-1: config 0 has no interface number 0 [ 77.417433][ T25] usb 6-1: config 0 interface 21 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 77.420557][ T25] usb 6-1: config 0 interface 21 has no altsetting 0 [ 77.424647][ T25] usb 6-1: language id specifier not provided by device, defaulting to English [ 77.429093][ T25] usb 6-1: New USB device found, idVendor=1901, idProduct=0190, bcdDevice=e9.fb [ 77.431318][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.433532][ T25] usb 6-1: Product: 㠊 [ 77.434685][ T25] usb 6-1: Manufacturer: Ц [ 77.436532][ T25] usb 6-1: SerialNumber: а [ 77.444819][ T25] usb 6-1: config 0 descriptor?? [ 77.476912][ T7453] overlayfs: failed to resolve './file1': -2 [ 77.484155][ T7454] 9pnet_virtio: no channels available for device io [ 77.540855][ T7459] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 77.648365][ T7469] 9pnet_fd: Insufficient options for proto=fd [ 77.650760][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.654184][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.660170][ T25] cp210x 6-1:0.21: cp210x converter detected [ 77.664565][ T7474] IPVS: Error connecting to the multicast addr [ 77.667293][ T25] cp210x 6-1:0.21: failed to get vendor val 0x370b size 1: -71 [ 77.669201][ T25] cp210x 6-1:0.21: querying part number failed [ 77.672522][ T25] usb 6-1: cp210x converter now attached to ttyUSB0 [ 77.675704][ T25] usb 6-1: USB disconnect, device number 5 [ 77.680790][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 77.683729][ T25] cp210x 6-1:0.21: device disconnected [ 78.175921][ T5964] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 78.438000][ T7501] IPVS: Error connecting to the multicast addr [ 78.941945][ T7524] netlink: 32 bytes leftover after parsing attributes in process `syz.4.441'. [ 78.944935][ T7524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.001881][ T7524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.191134][ T7529] IPVS: Error connecting to the multicast addr [ 79.231394][ T7531] : renamed from bridge_slave_0 (while UP) [ 79.242943][ T7531] IPVS: Unknown mcast interface: rose0 [ 79.465261][ T7534] trusted_key: syz.1.445 sent an empty control message without MSG_MORE. [ 79.564419][ T7541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.570166][ T7541] bond0: (slave bond1): Enslaving as an active interface with an up link [ 79.581942][ T7541] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 79.654914][ T7558] bond1 (unregistering): Released all slaves [ 79.799413][ T7565] IPVS: Error connecting to the multicast addr [ 79.837172][ T7574] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 79.929716][ T7578] team0: No ports can be present during mode change [ 79.933006][ T7579] team0: No ports can be present during mode change [ 79.961143][ T7578] can: request_module (can-proto-5) failed. [ 80.030893][ T7589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.062996][ T7600] IPVS: Error connecting to the multicast addr [ 80.093655][ T7589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.149415][ T7589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.153203][ T7591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=7591 comm=syz.0.460 [ 80.153907][ T7608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=7608 comm=syz.0.460 [ 80.204669][ T7606] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 80.207595][ T7606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.533327][ T7626] tmpfs: Cannot change global quota limit on remount [ 80.625981][ T4520] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 80.698898][ T7630] nbd: must specify a size in bytes for the device [ 80.749018][ T7637] IPVS: Error connecting to the multicast addr [ 80.785927][ T4520] usb 8-1: Using ep0 maxpacket: 8 [ 80.792335][ T4520] usb 8-1: config 64 has an invalid interface number: 146 but max is 0 [ 80.795123][ T4520] usb 8-1: config 64 has no interface number 0 [ 80.799607][ T4520] usb 8-1: config 64 interface 146 altsetting 2 endpoint 0x5 has an invalid bInterval 128, changing to 11 [ 80.803284][ T39] kauditd_printk_skb: 30 callbacks suppressed [ 80.803296][ T39] audit: type=1400 audit(1732899218.182:477): avc: denied { ioctl } for pid=7638 comm="syz.4.475" path="/dev/ptyqd" dev="devtmpfs" ino=140 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 80.813978][ T4520] usb 8-1: config 64 interface 146 altsetting 2 endpoint 0x6 has an invalid bInterval 247, changing to 11 [ 80.817617][ T4520] usb 8-1: config 64 interface 146 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 80.821046][ T4520] usb 8-1: config 64 interface 146 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 80.825473][ T4520] usb 8-1: config 64 interface 146 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 80.829793][ T4520] usb 8-1: config 64 interface 146 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 80.834232][ T4520] usb 8-1: config 64 interface 146 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 8 [ 80.834259][ T4520] usb 8-1: config 64 interface 146 has no altsetting 0 [ 80.836656][ T4520] usb 8-1: New USB device found, idVendor=0f0d, idProduct=e980, bcdDevice=ee.a1 [ 80.842593][ T4520] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.845382][ T4520] usb 8-1: Product: syz [ 80.847070][ T4520] usb 8-1: Manufacturer: syz [ 80.848558][ T4520] usb 8-1: SerialNumber: syz [ 80.864737][ T7622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.906942][ T39] audit: type=1400 audit(1732899218.292:478): avc: denied { map } for pid=7642 comm="syz.4.477" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.908696][ T7643] binder: BINDER_SET_CONTEXT_MGR already set [ 80.916496][ T7643] binder: 7642:7643 ioctl 4018620d 20000100 returned -16 [ 80.918432][ T7635] trusted_key: encrypted_key: master key parameter '' is invalid [ 80.946144][ T35] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 81.006991][ T7655] overlay: ./bus is not a directory [ 81.012298][ T39] audit: type=1400 audit(1732899218.392:479): avc: denied { create } for pid=7654 comm="syz.4.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 81.034328][ T7658] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 81.041829][ T7659] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 81.151605][ T7670] IPVS: Error connecting to the multicast addr [ 81.208256][ T7681] xt_hashlimit: Unknown mode mask 180, kernel too old? [ 81.211832][ T7682] xt_hashlimit: Unknown mode mask 180, kernel too old? [ 81.244512][ T7687] tc_dump_action: action bad kind [ 81.253974][ T7687] kernel profiling enabled (shift: 17) [ 81.273337][ T39] audit: type=1400 audit(1732899218.652:480): avc: denied { bind } for pid=7689 comm="syz.0.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.280354][ T39] audit: type=1400 audit(1732899218.652:481): avc: denied { setopt } for pid=7685 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.287666][ T39] audit: type=1400 audit(1732899218.652:482): avc: denied { getopt } for pid=7685 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.298138][ T56] cfg80211: failed to load regulatory.db [ 81.302681][ T39] audit: type=1400 audit(1732899218.672:483): avc: denied { bind } for pid=7692 comm="syz.4.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.310277][ T39] audit: type=1400 audit(1732899218.672:484): avc: denied { name_bind } for pid=7692 comm="syz.4.492" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 81.317187][ T39] audit: type=1400 audit(1732899218.672:485): avc: denied { node_bind } for pid=7692 comm="syz.4.492" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 81.324245][ T39] audit: type=1400 audit(1732899218.682:486): avc: denied { shutdown } for pid=7692 comm="syz.4.492" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.397496][ T7707] tipc: Started in network mode [ 81.399289][ T7707] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 81.403665][ T7707] tipc: Enabled bearer , priority 10 [ 81.431071][ T7710] IPVS: Error connecting to the multicast addr [ 81.559910][ T7726] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 81.562366][ T7726] fuse: Unknown parameter '0x00000000000000061844674407370955161500000000000000000003' [ 81.565402][ T7726] overlay: Bad value for 'workdir' [ 81.585462][ T4520] usb 8-1: USB disconnect, device number 4 [ 81.656298][ T7732] IPVS: Error connecting to the multicast addr [ 81.812431][ T7739] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 81.827835][ T6154] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 81.882230][ T7739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.885178][ T7740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.900848][ T7758] xt_hashlimit: size too large, truncated to 1048576 [ 81.975914][ T6154] usb 6-1: Using ep0 maxpacket: 8 [ 81.986160][ T6154] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 81.988690][ T6154] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.991187][ T6154] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.993584][ T6154] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.997134][ T6154] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.000870][ T6154] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.003334][ T6154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.050184][ T7760] infiniband syz2: set down [ 82.052096][ T7760] infiniband syz2: added ipvlan1 [ 82.093979][ T7760] RDS/IB: syz2: added [ 82.095404][ T7760] smc: adding ib device syz2 with port count 1 [ 82.105239][ T7760] smc: ib device syz2 port 1 has pnetid [ 82.179921][ T7768] IPVS: Error connecting to the multicast addr [ 82.212778][ T6154] usb 6-1: usb_control_msg returned -32 [ 82.214386][ T6154] usbtmc 6-1:16.0: can't read capabilities [ 82.224988][ T7770] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 82.288414][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.295575][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.299698][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.303455][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.306174][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.308593][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.346309][ T7770] process 'syz.4.519' launched '/dev/fd/3' with NULL argv: empty string added [ 82.418379][ T6014] tipc: Node number set to 4269801491 [ 82.457449][ T7779] program syz.4.520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.500083][ T7774] chnl_net:caif_netlink_parms(): no params data found [ 82.577395][ T7790] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -32 [ 82.580677][ T7791] afs: Unknown parameter 'smackfsroot' [ 82.582537][ T6014] usb 6-1: USB disconnect, device number 6 [ 82.583937][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.589049][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.590882][ T7774] bridge_slave_0: entered allmulticast mode [ 82.594097][ T7774] bridge_slave_0: entered promiscuous mode [ 82.599063][ T7791] team_slave_1: entered promiscuous mode [ 82.603562][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.605452][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.608623][ T7774] bridge_slave_1: entered allmulticast mode [ 82.610791][ T7774] bridge_slave_1: entered promiscuous mode [ 82.632142][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.636065][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.662721][ T7774] team0: Port device team_slave_0 added [ 82.667152][ T7774] team0: Port device team_slave_1 added [ 82.689595][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.691716][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.698533][ T7774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.702432][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.704220][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.710707][ T7774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.747926][ T7774] hsr_slave_0: entered promiscuous mode [ 82.750099][ T7774] hsr_slave_1: entered promiscuous mode [ 82.751970][ T7774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.753942][ T7774] Cannot create hsr debugfs directory [ 83.184003][ T7802] overlayfs: conflicting lowerdir path [ 83.330957][ T7774] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.342688][ T7774] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.357726][ T7774] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.370763][ T7808] IPVS: Error connecting to the multicast addr [ 83.377922][ T7774] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.421056][ T7774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.427933][ T7774] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.442407][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.444207][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.457883][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.459715][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.534805][ T7823] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 83.541626][ T7823] 9pnet_fd: Insufficient options for proto=fd [ 83.551598][ T7774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.586772][ T7829] Cannot find del_set index 85 as target [ 83.664894][ T7774] veth0_vlan: entered promiscuous mode [ 83.671142][ T7774] veth1_vlan: entered promiscuous mode [ 83.684546][ T7774] veth0_macvtap: entered promiscuous mode [ 83.688731][ T7774] veth1_macvtap: entered promiscuous mode [ 83.694425][ T7774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.697922][ T7774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.700689][ T7774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.703470][ T7774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.706415][ T7774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.708996][ T7774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.711425][ T7774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.714182][ T7774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.720480][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.724979][ T7774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.728964][ T7774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.731385][ T7774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.734065][ T7774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.737810][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.742326][ T7774] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.744813][ T7774] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.748280][ T7774] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.750498][ T7774] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.788162][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.790242][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.807572][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.810255][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.947545][ T7854] IPVS: Error connecting to the multicast addr [ 84.030809][ T7859] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 84.035552][ T7859] qnx6: wrong signature (magic) in superblock #1. [ 84.038959][ T7859] qnx6: unable to read the first superblock [ 84.299982][ T7877] kvm: MONITOR instruction emulated as NOP! [ 84.325981][ T5964] Bluetooth: hci3: command tx timeout [ 84.342887][ T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.444508][ T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.516588][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.519974][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.522916][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.528348][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.532165][ T5956] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.534253][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.570886][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.679215][ T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.871721][ T7884] chnl_net:caif_netlink_parms(): no params data found [ 84.923184][ T69] bridge_slave_1: left allmulticast mode [ 84.925292][ T69] bridge_slave_1: left promiscuous mode [ 84.928063][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.932265][ T69] : left allmulticast mode [ 84.933851][ T69] : left promiscuous mode [ 84.936561][ T69] bridge0: port 1() entered disabled state [ 85.016845][ T7918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4128 sclass=netlink_route_socket pid=7918 comm=syz.0.555 [ 85.020482][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 85.055131][ T69] batman_adv: batadv0: Removing interface: erspan1 [ 85.304376][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.308438][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.311847][ T69] bond0 (unregistering): Released all slaves [ 85.341559][ T7918] geneve2: entered promiscuous mode [ 85.343266][ T7918] geneve2: entered allmulticast mode [ 85.459783][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.461749][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.463776][ T7884] bridge_slave_0: entered allmulticast mode [ 85.466617][ T7884] bridge_slave_0: entered promiscuous mode [ 85.469428][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.471474][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.473665][ T7884] bridge_slave_1: entered allmulticast mode [ 85.477393][ T7884] bridge_slave_1: entered promiscuous mode [ 85.514358][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.519638][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.611155][ T7884] team0: Port device team_slave_0 added [ 85.629838][ T7884] team0: Port device team_slave_1 added [ 85.698108][ T7939] program syz.4.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.703132][ T7939] netlink: 288 bytes leftover after parsing attributes in process `syz.4.558'. [ 85.737342][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.739044][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.745651][ T7942] sg_read: process 516 (syz.4.559) changed security contexts after opening file descriptor, this is not allowed. [ 85.750490][ T7884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.751713][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.759661][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.765157][ T7884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.895845][ T69] hsr_slave_0: left promiscuous mode [ 85.898884][ T69] hsr_slave_1: left promiscuous mode [ 85.901778][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.905038][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.909888][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.912429][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.946979][ T69] veth1_macvtap: left promiscuous mode [ 85.949060][ T69] veth0_macvtap: left promiscuous mode [ 85.951162][ T69] veth1_vlan: left promiscuous mode [ 85.953394][ T69] veth0_vlan: left promiscuous mode [ 86.060547][ T7957] netlink: 'syz.4.563': attribute type 10 has an invalid length. [ 86.167346][ T6014] IPVS: starting estimator thread 0... [ 86.266021][ T7962] IPVS: using max 27 ests per chain, 64800 per kthread [ 86.416377][ T5956] Bluetooth: hci3: command tx timeout [ 86.568797][ T5956] Bluetooth: hci0: command tx timeout [ 86.710111][ T39] kauditd_printk_skb: 36 callbacks suppressed [ 86.710132][ T39] audit: type=1400 audit(1732899224.092:523): avc: denied { listen } for pid=7963 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.718885][ T39] audit: type=1400 audit(1732899224.092:524): avc: denied { accept } for pid=7963 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.073372][ T69] team0 (unregistering): Port device team_slave_1 removed [ 87.213623][ T69] team0 (unregistering): Port device team_slave_0 removed [ 88.095203][ T7884] hsr_slave_0: entered promiscuous mode [ 88.098294][ T7884] hsr_slave_1: entered promiscuous mode [ 88.100919][ T7884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.103950][ T7884] Cannot create hsr debugfs directory [ 88.123455][ T7957] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 88.269108][ T7976] tipc: Enabled bearer , priority 10 [ 88.324284][ T7996] trusted_key: encrypted_key: insufficient parameters specified [ 88.357577][ T8001] mmap: syz.0.572 (8001) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.469899][ T39] audit: type=1400 audit(1732899225.852:525): avc: denied { setattr } for pid=8014 comm="syz.4.574" path="pipe:[21319]" dev="pipefs" ino=21319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 88.486217][ T5956] Bluetooth: hci3: command tx timeout [ 88.521640][ T39] audit: type=1400 audit(1732899225.902:526): avc: denied { bind } for pid=8011 comm="syz.5.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.562198][ T69] IPVS: stop unused estimator thread 0... [ 88.603797][ T8029] tipc: Bearer : already 2 bearers with priority 10 [ 88.610890][ T8029] tipc: Bearer : trying with adjusted priority [ 88.612655][ T8029] netlink: 64 bytes leftover after parsing attributes in process `syz.0.577'. [ 88.615214][ T8029] tipc: Invalid UDP bearer configuration [ 88.615235][ T8029] tipc: Enabling of bearer rejected, failed to enable media [ 88.646190][ T5956] Bluetooth: hci0: command tx timeout [ 88.653375][ T39] audit: type=1400 audit(1732899226.032:527): avc: denied { write } for pid=8036 comm="syz.4.579" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.660172][ T8037] binder: 8036:8037 ioctl 4018620d 20000040 returned -22 [ 88.732655][ T39] audit: type=1400 audit(1732899226.112:528): avc: denied { ioctl } for pid=8043 comm="syz.5.583" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 88.741881][ T8044] (syz.0.582,8044,2):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 88.746455][ T8044] (syz.0.582,8044,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 88.971263][ T39] audit: type=1400 audit(1732899226.352:529): avc: denied { map } for pid=8065 comm="syz.0.587" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 89.054322][ T7884] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.071179][ T7884] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.079491][ T7884] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.092407][ T7884] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.096693][ T25] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 89.162051][ T39] audit: type=1400 audit(1732899226.542:530): avc: denied { ioctl } for pid=8072 comm="syz.0.588" path="socket:[22473]" dev="sockfs" ino=22473 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.174513][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.194659][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.202177][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.204180][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.210470][ T39] audit: type=1400 audit(1732899226.592:531): avc: denied { getopt } for pid=8076 comm="syz.5.589" lport=43164 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 89.211983][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.221363][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.246577][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 89.249417][ T25] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 89.251861][ T25] usb 9-1: config 0 has no interface number 0 [ 89.253846][ T25] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 89.257928][ T25] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 89.263307][ T25] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 89.266603][ T25] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 89.268931][ T25] usb 9-1: Product: syz [ 89.270102][ T25] usb 9-1: SerialNumber: syz [ 89.272718][ T25] usb 9-1: config 0 descriptor?? [ 89.277824][ T25] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 89.281119][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input9 [ 89.370368][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.406974][ T7884] veth0_vlan: entered promiscuous mode [ 89.411462][ T7884] veth1_vlan: entered promiscuous mode [ 89.439671][ T7884] veth0_macvtap: entered promiscuous mode [ 89.443742][ T7884] veth1_macvtap: entered promiscuous mode [ 89.455079][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.458706][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.461125][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.464057][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.466800][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.472043][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.475396][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.479207][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.482363][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.482825][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 89.487651][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.490503][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.493054][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.496991][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.501309][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.503636][ T39] audit: type=1400 audit(1732899226.882:532): avc: denied { watch watch_reads } for pid=8101 comm="syz.0.591" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.515386][ T7884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.518087][ T7884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.520400][ T7884] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.522949][ T7884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.559964][ T8105] ALSA: mixer_oss: invalid OSS volume 'u' [ 89.567434][ T8105] ebt_limit: overflow, try lower: 570423552/2483027968 [ 89.574371][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.582156][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.597211][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.599849][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.712469][ T8056] hsr0: entered promiscuous mode [ 89.719428][ T8106] usb 9-1: USB disconnect, device number 12 [ 89.719442][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 89.723449][ C2] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 89.737089][ T8106] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 90.220021][ T8135] overlayfs: failed to resolve './file0': -2 [ 90.324152][ T8141] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 90.371724][ T5956] Bluetooth: min 0 < 6 [ 90.375894][ T8145] netlink: 596 bytes leftover after parsing attributes in process `syz.0.604'. [ 90.462476][ T8156] gre1: entered promiscuous mode [ 90.465025][ T8156] team0: Device gre1 is of different type [ 90.566027][ T5956] Bluetooth: hci3: command tx timeout [ 90.787895][ T8175] nfs: Unknown parameter 'ccm@)hӮl' [ 91.721218][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 91.721230][ T39] audit: type=1400 audit(1732899229.102:544): avc: denied { mount } for pid=8195 comm="syz.4.616" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 91.729886][ T39] audit: type=1400 audit(1732899229.102:545): avc: denied { remount } for pid=8195 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 91.748404][ T8196] fuseblk: Bad value for 'fd' [ 91.748405][ T39] audit: type=1400 audit(1732899229.132:546): avc: denied { mounton } for pid=8194 comm="syz.5.617" path="/19/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 91.766122][ T39] audit: type=1400 audit(1732899229.158:547): avc: denied { map } for pid=8194 comm="syz.5.617" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.778802][ T39] audit: type=1400 audit(1732899229.168:548): avc: denied { unmount } for pid=6139 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 91.819146][ T8204] input: syz0 as /devices/virtual/input/input10 [ 91.868103][ T8207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.875038][ T39] audit: type=1400 audit(1732899229.258:549): avc: denied { create } for pid=8206 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 91.882936][ T39] audit: type=1400 audit(1732899229.268:550): avc: denied { bind } for pid=8206 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 91.899319][ T39] audit: type=1400 audit(1732899229.288:551): avc: denied { write } for pid=8208 comm="syz.4.621" path="socket:[24826]" dev="sockfs" ino=24826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 91.909703][ T39] audit: type=1400 audit(1732899229.298:552): avc: denied { nlmsg_read } for pid=8208 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 91.926906][ T8214] ip6t_srh: unknown srh invflags 7D00 [ 91.988029][ T8219] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 92.019434][ T39] audit: type=1400 audit(1732899229.408:553): avc: denied { listen } for pid=8199 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.060297][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.262294][ T5964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.266963][ T5964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.271110][ T5964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.274982][ T5964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.277263][ T5964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.279082][ T5964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.316811][ T8232] usb usb8: usbfs: process 8232 (syz.4.626) did not claim interface 0 before use [ 92.415978][ T5956] Bluetooth: hci1: command tx timeout [ 92.431871][ T8224] chnl_net:caif_netlink_parms(): no params data found [ 92.511108][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.513759][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.516356][ T8224] bridge_slave_0: entered allmulticast mode [ 92.519386][ T8224] bridge_slave_0: entered promiscuous mode [ 92.523185][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.525663][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.528379][ T8224] bridge_slave_1: entered allmulticast mode [ 92.531237][ T8224] bridge_slave_1: entered promiscuous mode [ 92.567711][ T8224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.569236][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.629'. [ 92.572837][ T8224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.583420][ T8248] bond1: entered promiscuous mode [ 92.599919][ T8248] gretap1: entered promiscuous mode [ 92.602003][ T8248] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 92.613087][ T8248] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 92.616786][ T8248] gretap1: left promiscuous mode [ 92.619549][ T8248] bond1 (unregistering): Released all slaves [ 92.641586][ T8224] team0: Port device team_slave_0 added [ 92.646135][ T8224] team0: Port device team_slave_1 added [ 92.672313][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.674088][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.682109][ T8224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.693149][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.695992][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.704551][ T8224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.766572][ T8224] hsr_slave_0: entered promiscuous mode [ 92.769228][ T8224] hsr_slave_1: entered promiscuous mode [ 92.771592][ T8224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.774110][ T8224] Cannot create hsr debugfs directory [ 92.824070][ T8219] syz.5.624 (8219) used greatest stack depth: 20880 bytes left [ 92.922946][ T8263] ubi0: attaching mtd0 [ 92.925268][ T8263] ubi0: scanning is finished [ 92.927515][ T8263] ubi0: empty MTD device detected [ 92.934715][ T8264] ERROR: device name not specified. [ 93.026915][ T8263] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 93.029502][ T8263] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 93.031913][ T8263] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 93.034122][ T8263] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 93.037472][ T8263] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 93.039687][ T8263] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 93.042779][ T8263] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2024025755 [ 93.046861][ T8263] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 93.050259][ T8270] ubi0: background thread "ubi_bgt0d" started, PID 8270 [ 93.050915][ T8265] ubi0: detaching mtd0 [ 93.067176][ T8265] ubi0: mtd0 is detached [ 93.102288][ T8272] fuse: Bad value for 'fd' [ 93.182718][ T8286] pimreg4: entered allmulticast mode [ 93.285367][ T8291] IPVS: length: 184 != 24 [ 93.340426][ T8294] pim6reg: entered allmulticast mode [ 93.343837][ T8294] pim6reg: left allmulticast mode [ 93.363562][ T8296] qrtr: Invalid version 0 [ 93.745924][ T35] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 93.793460][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.899065][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.905981][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 93.908960][ T35] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 93.911674][ T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.914830][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.918294][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.920788][ T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.924098][ T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.926963][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.962920][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.124089][ T12] bridge_slave_1: left allmulticast mode [ 94.125677][ T12] bridge_slave_1: left promiscuous mode [ 94.128648][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.132362][ T12] bridge_slave_0: left allmulticast mode [ 94.134787][ T12] bridge_slave_0: left promiscuous mode [ 94.135180][ T35] usb 5-1: usb_control_msg returned -32 [ 94.137257][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.138965][ T35] usbtmc 5-1:16.0: can't read capabilities [ 94.326214][ T5956] Bluetooth: hci0: command tx timeout [ 94.491265][ T8343] netlink: 'syz.4.655': attribute type 1 has an invalid length. [ 94.493726][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 94.501586][ T8344] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 94.547923][ T8106] usb 5-1: USB disconnect, device number 9 [ 94.572068][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.574430][ T35] hid-generic 0005:046D:0058.0005: item fetching failed at offset 0/1 [ 94.579300][ T35] hid-generic 0005:046D:0058.0005: probe with driver hid-generic failed with error -22 [ 94.582710][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.586464][ T12] bond0 (unregistering): Released all slaves [ 94.695406][ T8353] nfs: Unknown parameter 'comm' [ 94.697499][ T8352] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 94.702184][ T8352] PKCS7: Only support pkcs7_signedData type [ 94.754274][ T8352] netlink: 'syz.5.658': attribute type 25 has an invalid length. [ 94.759329][ T8352] netlink: 'syz.5.658': attribute type 8 has an invalid length. [ 94.779348][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.785743][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 94.785883][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 94.880224][ T8364] bridge_slave_1 (unregistering): left allmulticast mode [ 94.882816][ T8364] bridge_slave_1 (unregistering): left promiscuous mode [ 94.885275][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.989092][ T8368] dvmrp8: entered allmulticast mode [ 94.991960][ T8367] dvmrp8: left allmulticast mode [ 95.047185][ T8371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.194479][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.663'. [ 95.198381][ T12] hsr_slave_0: left promiscuous mode [ 95.200977][ T12] hsr_slave_1: left promiscuous mode [ 95.203548][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.206525][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.210246][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.212759][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.264618][ T12] veth1_macvtap: left promiscuous mode [ 95.267403][ T12] veth0_macvtap: left promiscuous mode [ 95.269461][ T12] veth1_vlan: left promiscuous mode [ 95.271292][ T12] veth0_vlan: left promiscuous mode [ 96.363973][ T12] team0 (unregistering): Port device team_slave_1 removed [ 96.405934][ T5956] Bluetooth: hci0: command tx timeout [ 96.460906][ T12] team0 (unregistering): Port device team_slave_0 removed [ 97.252440][ T8224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.263936][ T8224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.297821][ T8224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.307632][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 97.307643][ T39] audit: type=1400 audit(1732899234.698:564): avc: denied { call } for pid=8406 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 97.308775][ T8224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.390098][ T8224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.412947][ T8224] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.419292][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.422079][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.428733][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.430648][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.445491][ T8224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.448901][ T8224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.536466][ T8224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.559956][ T8224] veth0_vlan: entered promiscuous mode [ 97.565534][ T8224] veth1_vlan: entered promiscuous mode [ 97.584562][ T8224] veth0_macvtap: entered promiscuous mode [ 97.591117][ T8224] veth1_macvtap: entered promiscuous mode [ 97.597669][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.605978][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.610889][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.614079][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.614436][ T8428] delete_channel: no stack [ 97.617250][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.622434][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.626116][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.629849][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.634641][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.647050][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.649811][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.652850][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.655660][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.659726][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.663851][ T8224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.666595][ T8224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.668903][ T8224] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.671186][ T8224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.706641][ T4520] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 97.762924][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.766585][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.796029][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.683'. [ 97.797835][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.801028][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.881996][ T4520] usb 5-1: config 49 has an invalid interface number: 223 but max is 1 [ 97.884111][ T4520] usb 5-1: config 49 has an invalid interface number: 18 but max is 1 [ 97.892697][ T4520] usb 5-1: config 49 has no interface number 0 [ 97.894295][ T4520] usb 5-1: config 49 has no interface number 1 [ 97.895946][ T4520] usb 5-1: config 49 interface 223 altsetting 2 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 97.899537][ T4520] usb 5-1: config 49 interface 223 altsetting 2 has an endpoint descriptor with address 0x16, changing to 0x6 [ 97.906033][ T4520] usb 5-1: config 49 interface 223 altsetting 2 endpoint 0x6 is Bulk; changing to Interrupt [ 97.908587][ T4520] usb 5-1: config 49 interface 223 altsetting 2 endpoint 0xF has invalid maxpacket 64, setting to 8 [ 97.913289][ T4520] usb 5-1: config 49 interface 223 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 97.925825][ T4520] usb 5-1: config 49 interface 223 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 8 [ 97.928650][ T4520] usb 5-1: config 49 interface 223 altsetting 2 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 97.931593][ T4520] usb 5-1: config 49 interface 223 altsetting 2 endpoint 0x5 has invalid maxpacket 128, setting to 8 [ 97.943643][ T4520] usb 5-1: config 49 interface 223 altsetting 2 endpoint 0xB has invalid maxpacket 32, setting to 8 [ 97.946855][ T4520] usb 5-1: config 49 interface 223 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 97.950254][ T4520] usb 5-1: config 49 interface 223 altsetting 2 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 97.953248][ T4520] usb 5-1: config 49 interface 223 altsetting 2 endpoint 0x87 has invalid maxpacket 16, setting to 8 [ 97.956474][ T4520] usb 5-1: config 49 interface 223 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 97.959439][ T4520] usb 5-1: config 49 interface 223 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 97.962977][ T4520] usb 5-1: config 49 interface 18 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 97.970977][ T4520] usb 5-1: config 49 interface 18 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 97.974893][ T4520] usb 5-1: config 49 interface 18 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 97.980024][ T4520] usb 5-1: config 49 interface 18 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 97.984370][ T4520] usb 5-1: config 49 interface 18 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 97.989296][ T4520] usb 5-1: config 49 interface 18 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 97.993095][ T4520] usb 5-1: config 49 interface 18 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 97.997962][ T4520] usb 5-1: config 49 interface 18 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 98.001526][ T4520] usb 5-1: config 49 interface 18 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 98.004429][ T4520] usb 5-1: config 49 interface 223 has no altsetting 0 [ 98.007813][ T4520] usb 5-1: config 49 interface 18 has no altsetting 0 [ 98.012349][ T4520] usb 5-1: New USB device found, idVendor=08ca, idProduct=2042, bcdDevice=fa.06 [ 98.014930][ T4520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.017795][ T4520] usb 5-1: Product: 䀊 [ 98.019212][ T4520] usb 5-1: Manufacturer: ї [ 98.020576][ T4520] usb 5-1: SerialNumber: й [ 98.023769][ T8418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.027348][ T8418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.030043][ T8418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.051191][ T8450] overlayfs: failed to resolve './file1': -2 [ 98.064991][ T8450] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.069196][ T8450] overlayfs: missing 'lowerdir' [ 98.072705][ T8451] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.075848][ T8451] overlayfs: missing 'lowerdir' [ 98.101141][ T39] audit: type=1400 audit(1732899235.488:565): avc: denied { mount } for pid=8454 comm="syz.4.688" name="/" dev="rpc_pipefs" ino=25530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 98.112766][ T39] audit: type=1400 audit(1732899235.498:566): avc: denied { watch } for pid=8454 comm="syz.4.688" path="/215/file0" dev="rpc_pipefs" ino=25530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 98.130780][ T39] audit: type=1400 audit(1732899235.498:567): avc: denied { unmount } for pid=8454 comm="syz.4.688" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 98.177328][ T8459] delete_channel: no stack [ 98.248036][ T4520] usb 5-1: USB disconnect, device number 10 [ 98.261372][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 98.368071][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.692'. [ 98.535291][ T8477] netlink: 'syz.4.696': attribute type 10 has an invalid length. [ 98.542580][ T8477] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.545635][ T8477] bond0: (slave team0): Enslaving as an active interface with an up link [ 98.609419][ T8477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.696'. [ 98.634715][ T8479] overlay: ./file0 is not a directory [ 98.912624][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 98.922458][ T8502] delete_channel: no stack [ 99.016715][ T8106] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 99.167775][ T8106] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.173439][ T8106] usb 5-1: config 0 has no interfaces? [ 99.177476][ T8106] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.180437][ T8106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.185501][ T8106] usb 5-1: config 0 descriptor?? [ 99.245926][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 99.275633][ T39] audit: type=1400 audit(1732899236.658:568): avc: denied { getopt } for pid=8528 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.282231][ T39] audit: type=1400 audit(1732899236.668:569): avc: denied { ioctl } for pid=8528 comm="syz.4.715" path="socket:[26128]" dev="sockfs" ino=26128 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.289604][ T39] audit: type=1400 audit(1732899236.668:570): avc: denied { getopt } for pid=8528 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.320067][ T8530] delete_channel: no stack [ 99.351390][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 99.387973][ T8535] 9pnet_fd: p9_fd_create_tcp (8535): problem connecting socket to 127.0.0.1 [ 99.392980][ T8493] smc: removing ib device syz2 [ 99.436909][ T5941] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 99.615990][ T5941] usb 10-1: Using ep0 maxpacket: 8 [ 99.620906][ T5941] usb 10-1: config 4 has an invalid interface number: 244 but max is 0 [ 99.623286][ T5941] usb 10-1: config 4 has no interface number 0 [ 99.625040][ T5941] usb 10-1: config 4 interface 244 has no altsetting 0 [ 99.641736][ T5941] usb 10-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 99.644056][ T5941] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.646176][ T5941] usb 10-1: Product: syz [ 99.647269][ T5941] usb 10-1: Manufacturer: syz [ 99.648478][ T5941] usb 10-1: SerialNumber: syz [ 99.763676][ T105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.780408][ T8546] FAULT_INJECTION: forcing a failure. [ 99.780408][ T8546] name failslab, interval 1, probability 0, space 0, times 0 [ 99.785858][ T8546] CPU: 2 UID: 0 PID: 8546 Comm: syz.4.721 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 99.788638][ T8546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.791498][ T8546] Call Trace: [ 99.792380][ T8546] [ 99.793169][ T8546] dump_stack_lvl+0x16c/0x1f0 [ 99.794445][ T8546] should_fail_ex+0x497/0x5b0 [ 99.795715][ T8546] ? fs_reclaim_acquire+0xae/0x150 [ 99.797086][ T8546] should_failslab+0xc2/0x120 [ 99.798334][ T8546] __kmalloc_noprof+0xcb/0x510 [ 99.799600][ T8546] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 99.801079][ T8546] tomoyo_realpath_from_path+0xb9/0x720 [ 99.802222][ T63] usb 5-1: USB disconnect, device number 11 [ 99.802528][ T8546] ? tomoyo_path_number_perm+0x235/0x590 [ 99.802557][ T8546] ? tomoyo_path_number_perm+0x235/0x590 [ 99.807195][ T8546] tomoyo_path_number_perm+0x248/0x590 [ 99.808636][ T8546] ? tomoyo_path_number_perm+0x235/0x590 [ 99.810121][ T8546] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 99.811713][ T8546] ? __pfx_lock_release+0x10/0x10 [ 99.813052][ T8546] ? trace_lock_acquire+0x14e/0x1f0 [ 99.814505][ T8546] ? lock_acquire+0x2f/0xb0 [ 99.815729][ T8546] ? __fget_files+0x40/0x3a0 [ 99.816957][ T8546] ? __fget_files+0x206/0x3a0 [ 99.818199][ T8546] security_file_ioctl+0x9b/0x240 [ 99.819533][ T8546] __x64_sys_ioctl+0xb7/0x200 [ 99.820760][ T8546] do_syscall_64+0xcd/0x250 [ 99.821976][ T8546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.823532][ T8546] RIP: 0033:0x7f2c8e180849 [ 99.824707][ T8546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.829708][ T8546] RSP: 002b:00007f2c8efb0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.831877][ T8546] RAX: ffffffffffffffda RBX: 00007f2c8e345fa0 RCX: 00007f2c8e180849 [ 99.834047][ T8546] RDX: 0000000020000500 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 99.836174][ T8546] RBP: 00007f2c8efb00a0 R08: 0000000000000000 R09: 0000000000000000 [ 99.838369][ T8546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.840743][ T8546] R13: 0000000000000000 R14: 00007f2c8e345fa0 R15: 00007fffe9b015e8 [ 99.842831][ T8546] [ 99.844688][ T8546] ERROR: Out of memory at tomoyo_realpath_from_path. [ 99.846972][ T39] audit: type=1400 audit(1732899237.228:571): avc: denied { write } for pid=5351 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.852664][ T39] audit: type=1400 audit(1732899237.228:572): avc: denied { remove_name } for pid=5351 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.859342][ T39] audit: type=1400 audit(1732899237.228:573): avc: denied { add_name } for pid=5351 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.919670][ T5964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.925743][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 99.927709][ T5964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.932571][ T5964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.935432][ T5964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.938805][ T5964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.940930][ T5964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.007890][ T8549] chnl_net:caif_netlink_parms(): no params data found [ 100.027070][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 100.059932][ T8549] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.061819][ T8549] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.063944][ T8549] bridge_slave_0: entered allmulticast mode [ 100.068931][ T8549] bridge_slave_0: entered promiscuous mode [ 100.074442][ T8549] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.076700][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.078653][ T8549] bridge_slave_1: entered allmulticast mode [ 100.080754][ T8549] bridge_slave_1: entered promiscuous mode [ 100.101866][ T8549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.105401][ T8549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.127150][ T8549] team0: Port device team_slave_0 added [ 100.131133][ T8549] team0: Port device team_slave_1 added [ 100.150620][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.152535][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.159596][ T8549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.164569][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.167351][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.174225][ T8549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.199288][ T8549] hsr_slave_0: entered promiscuous mode [ 100.201598][ T8549] hsr_slave_1: entered promiscuous mode [ 100.203705][ T8549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.206771][ T8549] Cannot create hsr debugfs directory [ 100.360808][ T8566] delete_channel: no stack [ 100.514122][ T8578] syzkaller1: entered promiscuous mode [ 100.515721][ T8578] syzkaller1: entered allmulticast mode [ 100.979110][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 101.232390][ T8596] delete_channel: no stack [ 101.273556][ T8601] binder: Unknown parameter 'subj_role' [ 101.393608][ T105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.452283][ T105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.515896][ T5996] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 101.561897][ T105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.646303][ T5996] usb 5-1: device descriptor read/64, error -71 [ 101.658249][ T105] bridge_slave_1: left allmulticast mode [ 101.660153][ T105] bridge_slave_1: left promiscuous mode [ 101.662128][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.671142][ T105] bridge_slave_0: left allmulticast mode [ 101.673058][ T105] bridge_slave_0: left promiscuous mode [ 101.674973][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.896050][ T5996] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 102.008950][ T5964] Bluetooth: hci0: command tx timeout [ 102.013409][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.019128][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.023702][ T105] bond0 (unregistering): Released all slaves [ 102.039758][ T5996] usb 5-1: device descriptor read/64, error -71 [ 102.156272][ T5996] usb usb5-port1: attempt power cycle [ 102.229860][ T5941] ipheth 10-1:4.244: Unable to find endpoints [ 102.239482][ T5941] usb 10-1: USB disconnect, device number 2 [ 102.389823][ T105] hsr_slave_0: left promiscuous mode [ 102.392987][ T105] hsr_slave_1: left promiscuous mode [ 102.397396][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.399373][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.406427][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.408752][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.430087][ T8625] FAULT_INJECTION: forcing a failure. [ 102.430087][ T8625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.435045][ T8625] CPU: 2 UID: 0 PID: 8625 Comm: syz.5.744 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 102.438506][ T8625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.442157][ T8625] Call Trace: [ 102.443297][ T8625] [ 102.444303][ T8625] dump_stack_lvl+0x16c/0x1f0 [ 102.445917][ T8625] should_fail_ex+0x497/0x5b0 [ 102.446762][ T105] veth1_macvtap: left promiscuous mode [ 102.447504][ T8625] _copy_from_user+0x2e/0xd0 [ 102.449295][ T105] veth0_macvtap: left promiscuous mode [ 102.451065][ T8625] userfaultfd_ioctl+0x2302/0x3830 [ 102.452794][ T105] veth1_vlan: left promiscuous mode [ 102.454554][ T8625] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 102.456344][ T105] veth0_vlan: left promiscuous mode [ 102.458106][ T8625] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 102.461880][ T8625] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 102.464067][ T8625] ? __pfx_lock_release+0x10/0x10 [ 102.466062][ T8625] ? selinux_file_ioctl+0x180/0x270 [ 102.468334][ T8625] ? selinux_file_ioctl+0xb4/0x270 [ 102.470234][ T8625] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 102.472320][ T8625] ? __x64_sys_ioctl+0x190/0x200 [ 102.475052][ T8625] __x64_sys_ioctl+0x190/0x200 [ 102.477137][ T8625] do_syscall_64+0xcd/0x250 [ 102.478524][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.480134][ T8625] RIP: 0033:0x7fd648d80849 [ 102.481376][ T8625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.486605][ T8625] RSP: 002b:00007fd649c22058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.488848][ T8625] RAX: ffffffffffffffda RBX: 00007fd648f45fa0 RCX: 00007fd648d80849 [ 102.490942][ T8625] RDX: 0000000020000500 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 102.493070][ T8625] RBP: 00007fd649c220a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.495120][ T8625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.497515][ T8625] R13: 0000000000000000 R14: 00007fd648f45fa0 R15: 00007fff4a9ab9a8 [ 102.500138][ T8625] [ 102.516103][ T5996] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 102.537103][ T5996] usb 5-1: device descriptor read/8, error -71 [ 102.611891][ T8640] delete_channel: no stack [ 102.796104][ T5996] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 102.836700][ T5996] usb 5-1: device descriptor read/8, error -71 [ 102.956140][ T5996] usb usb5-port1: unable to enumerate USB device [ 103.120250][ T94] ------------[ cut here ]------------ [ 103.121905][ T94] WARNING: CPU: 1 PID: 94 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x24c/0x2c0 [ 103.124810][ T94] Modules linked in: [ 103.126293][ T94] CPU: 1 UID: 0 PID: 94 Comm: kworker/u32:5 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 103.131822][ T94] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 103.136073][ T94] Workqueue: events_unbound cfg80211_wiphy_work [ 103.138841][ T94] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 103.141135][ T94] Code: 7b 40 e8 f7 be dc ff 48 83 c4 10 5b 5d e9 6c f9 f4 f6 e8 67 f9 f4 f6 48 89 df e8 4f 5f ff ff e9 40 ff ff ff e8 55 f9 f4 f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 f4 d7 60 90 e8 50 e1 57 f7 e9 db [ 103.148908][ T94] RSP: 0018:ffffc900016efad0 EFLAGS: 00010293 [ 103.151311][ T94] RAX: 0000000000000000 RBX: ffff888050bf8e40 RCX: ffffffff8a99cab6 [ 103.154163][ T94] RDX: ffff888021d1a440 RSI: ffffffff8a99cbeb RDI: 0000000000000001 [ 103.157438][ T94] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 103.160207][ T94] R10: 0000000000000001 R11: 0000000000000003 R12: 0000000000000001 [ 103.163139][ T94] R13: ffff888050bfa8c8 R14: ffff888050bf8e40 R15: dffffc0000000000 [ 103.166655][ T94] FS: 0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 103.170820][ T94] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.172625][ T94] CR2: 00007fd649bdffb8 CR3: 00000000530f6000 CR4: 0000000000352ef0 [ 103.174802][ T94] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.177618][ T94] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 103.179771][ T94] Call Trace: [ 103.180652][ T94] [ 103.181480][ T94] ? __warn+0xea/0x3c0 [ 103.182872][ T94] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 103.184432][ T94] ? report_bug+0x3c0/0x580 [ 103.185699][ T94] ? handle_bug+0x54/0xa0 [ 103.187556][ T94] ? exc_invalid_op+0x17/0x50 [ 103.189118][ T94] ? asm_exc_invalid_op+0x1a/0x20 [ 103.190583][ T94] ? ieee80211_start_next_roc+0x116/0x2c0 [ 103.192196][ T94] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 103.193764][ T94] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 103.195280][ T94] __ieee80211_scan_completed+0x4fe/0xe60 [ 103.197060][ T94] ieee80211_scan_work+0x440/0x2080 [ 103.200083][ T94] ? cfg80211_wiphy_work+0x3a8/0x560 [ 103.201679][ T94] ? __pfx_lock_release+0x10/0x10 [ 103.203118][ T94] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 103.204859][ T94] ? mark_held_locks+0x9f/0xe0 [ 103.206644][ T94] ? rcu_is_watching+0x12/0xc0 [ 103.208409][ T94] cfg80211_wiphy_work+0x3de/0x560 [ 103.210286][ T94] process_one_work+0x9c5/0x1ba0 [ 103.212110][ T94] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 103.214148][ T94] ? __pfx_process_one_work+0x10/0x10 [ 103.216224][ T94] ? rcu_is_watching+0x12/0xc0 [ 103.217784][ T94] ? assign_work+0x1a0/0x250 [ 103.218995][ T94] worker_thread+0x6c8/0xf00 [ 103.220209][ T94] ? __kthread_parkme+0x148/0x220 [ 103.221652][ T94] ? __pfx_worker_thread+0x10/0x10 [ 103.223099][ T94] kthread+0x2c1/0x3a0 [ 103.224297][ T94] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.225886][ T94] ? __pfx_kthread+0x10/0x10 [ 103.227396][ T94] ret_from_fork+0x45/0x80 [ 103.228563][ T94] ? __pfx_kthread+0x10/0x10 [ 103.229742][ T94] ret_from_fork_asm+0x1a/0x30 [ 103.230977][ T94] [ 103.231775][ T94] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.233621][ T94] CPU: 1 UID: 0 PID: 94 Comm: kworker/u32:5 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 103.236427][ T94] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.239480][ T94] Workqueue: events_unbound cfg80211_wiphy_work [ 103.241125][ T94] Call Trace: [ 103.241958][ T94] [ 103.242714][ T94] dump_stack_lvl+0x3d/0x1f0 [ 103.243991][ T94] panic+0x71d/0x800 [ 103.245132][ T94] ? __pfx_panic+0x10/0x10 [ 103.246503][ T94] ? show_trace_log_lvl+0x29d/0x3d0 [ 103.248012][ T94] ? check_panic_on_warn+0x1f/0xb0 [ 103.249452][ T94] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 103.250944][ T94] check_panic_on_warn+0xab/0xb0 [ 103.252253][ T94] __warn+0xf6/0x3c0 [ 103.253312][ T94] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 103.255056][ T94] report_bug+0x3c0/0x580 [ 103.256343][ T94] handle_bug+0x54/0xa0 [ 103.257478][ T94] exc_invalid_op+0x17/0x50 [ 103.258694][ T94] asm_exc_invalid_op+0x1a/0x20 [ 103.259995][ T94] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 103.261687][ T94] Code: 7b 40 e8 f7 be dc ff 48 83 c4 10 5b 5d e9 6c f9 f4 f6 e8 67 f9 f4 f6 48 89 df e8 4f 5f ff ff e9 40 ff ff ff e8 55 f9 f4 f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 f4 d7 60 90 e8 50 e1 57 f7 e9 db [ 103.267164][ T94] RSP: 0018:ffffc900016efad0 EFLAGS: 00010293 [ 103.268944][ T94] RAX: 0000000000000000 RBX: ffff888050bf8e40 RCX: ffffffff8a99cab6 [ 103.271131][ T94] RDX: ffff888021d1a440 RSI: ffffffff8a99cbeb RDI: 0000000000000001 [ 103.273215][ T94] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 103.275300][ T94] R10: 0000000000000001 R11: 0000000000000003 R12: 0000000000000001 [ 103.277414][ T94] R13: ffff888050bfa8c8 R14: ffff888050bf8e40 R15: dffffc0000000000 [ 103.279484][ T94] ? ieee80211_start_next_roc+0x116/0x2c0 [ 103.281036][ T94] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 103.282559][ T94] __ieee80211_scan_completed+0x4fe/0xe60 [ 103.284080][ T94] ieee80211_scan_work+0x440/0x2080 [ 103.285486][ T94] ? cfg80211_wiphy_work+0x3a8/0x560 [ 103.286952][ T94] ? __pfx_lock_release+0x10/0x10 [ 103.288278][ T94] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 103.289773][ T94] ? mark_held_locks+0x9f/0xe0 [ 103.291085][ T94] ? rcu_is_watching+0x12/0xc0 [ 103.292414][ T94] cfg80211_wiphy_work+0x3de/0x560 [ 103.293808][ T94] process_one_work+0x9c5/0x1ba0 [ 103.295207][ T94] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 103.296840][ T94] ? __pfx_process_one_work+0x10/0x10 [ 103.298350][ T94] ? rcu_is_watching+0x12/0xc0 [ 103.299667][ T94] ? assign_work+0x1a0/0x250 [ 103.300861][ T94] worker_thread+0x6c8/0xf00 [ 103.302043][ T94] ? __kthread_parkme+0x148/0x220 [ 103.303322][ T94] ? __pfx_worker_thread+0x10/0x10 [ 103.304650][ T94] kthread+0x2c1/0x3a0 [ 103.305703][ T94] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.307123][ T94] ? __pfx_kthread+0x10/0x10 [ 103.308293][ T94] ret_from_fork+0x45/0x80 [ 103.309451][ T94] ? __pfx_kthread+0x10/0x10 [ 103.310654][ T94] ret_from_fork_asm+0x1a/0x30 [ 103.311841][ T94] [ 103.313219][ T94] Kernel Offset: disabled [ 103.314407][ T94] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:54:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000134285 RBX=0000000000000000 RCX=ffffffff8b2fbc99 RDX=0000000000000000 RSI=ffffffff8b6ce000 RDI=ffffffff8bd1e5c0 RBP=fffffbfff1bd2f00 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97800 R14=ffffffff9060a4d0 R15=0000000000000000 RIP=ffffffff8b2fd07f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001480 CR3=00000000344d4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851139a5 RDI=ffffffff9ab41ba0 RBP=ffffffff9ab41b60 RSP=ffffc900016ef438 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=0000000000000034 R14=ffffffff85113940 R15=0000000000000000 RIP=ffffffff851139cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd649bdffb8 CR3=00000000530f6000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffe000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4a9abd30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd648df48bd ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd648df48ca ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd648df48c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd648df48d8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd648df495e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd648df4a3c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000d8c45 RBX=0000000000000002 RCX=ffffffff8b2fbc99 RDX=0000000000000000 RSI=ffffffff8b6ce000 RDI=ffffffff8bd1e5c0 RBP=ffffed1003ad4000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff9060a4d0 R15=0000000000000000 RIP=ffffffff8b2fd07f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd648d66300 CR3=000000003647e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000007 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda22702f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ce09f48bd ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ce09f48ca ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ce09f48c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ce09f48d8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ce09f495e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ce09f4a3c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000007c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000007c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000a4ab3 RBX=0000000000000003 RCX=ffffffff8b2fbc99 RDX=0000000000000000 RSI=ffffffff8b6ce000 RDI=ffffffff8bd1e5c0 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff9060a4d0 R15=0000000000000000 RIP=ffffffff8b2fd07f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff4a9aafc0 CR3=00000000344d4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000