last executing test programs: 53.662264723s ago: executing program 2 (id=13): ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000180)={0x80}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f000001a4c0)=[{&(0x7f0000019380)=""/4096, 0x1000}], 0x1}, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0xfff8, 0x3}) mkdir(&(0x7f0000000240)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000801, 0xee01, &(0x7f0000000340)={0x3, 0x100000111, 0x3, 0x1ff, 0x8, 0x200000001, 0x8001, 0x0, 0x9}) syz_emit_ethernet(0x411, &(0x7f0000000700)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3db, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x2, 0x4, "480100000000001995319c00476aec1bc74a05aadb56011e2b83a604511ad982"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0x21d5, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0xe, "d5170000dce9674a36da018dbab862b7be1a02c226a6bce65f81ed5b8049a8acb7ae48b9de19ae3319b63ab21b524bd9a3007283fa81e9a300000000000000b8760793dd7d91d195bc89d65f9b5dfcf24306f228c43ba698093e4126e045da5fbc7071e18c2970243c6b406d57d4"}]}}}}}}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}, {@verity_require}], [], 0x2f}) 53.502200592s ago: executing program 2 (id=14): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r5 = eventfd2(0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r5}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) write$eventfd(r5, &(0x7f00000000c0)=0x33482a89, 0x8) ioctl$VT_OPENQRY(r2, 0x4bfb, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) r7 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x40) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x68, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x80, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40048d0}, 0x0) setresuid(0xee01, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0xc, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x4, 0x0, 0xfd, 0x1, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) linkat(r7, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./file0\x00', 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000080)={0xf400, 0x1}, 0xf4240}, 0x94) 53.341325523s ago: executing program 2 (id=18): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000eb0000000001000000940000930600003e5f0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000300000100001c0012800b000100027036746e6c00000c000280050006007f000000d91a98e171bfd6e7a578e40761776bc67d36e2849320bb7363187a9e7be7a53f0d67b77f1338afb14f471c805861818af1491659744d1302c030978020a02760728e83192d049396"], 0x3c}}, 0x24000840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kvm_userspace_exit\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9", 0x1}], 0x1}}], 0x1, 0x20008000) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x1, 0x5000003a, r6, 0x0) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r8, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r7, &(0x7f0000000f40)={0x2020}, 0x2020) r9 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r9, 0x0) fallocate(r9, 0x0, 0x0, 0x1000f4) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x24c0, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 53.17310343s ago: executing program 2 (id=19): syz_io_uring_setup(0x2dda, &(0x7f0000000280)={0x0, 0xa5ca, 0x2, 0x2, 0x283}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x0) 53.121246064s ago: executing program 2 (id=21): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e601bae74656e642c6163638173733d616e792c63616368653d66736361636865"]) r4 = gettid() process_vm_writev(r4, &(0x7f0000000300)=[{&(0x7f0000000940)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/227, 0xe3}], 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000000)) read$alg(r5, &(0x7f0000000280)=""/137, 0xfe7a) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180090001006c617374000000001800028008000140000000090c0002400000fbff000000050900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x91c, 0x28, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x7}, {0x2}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8ec, 0x2, [@TCA_CGROUP_POLICE={0x8e8, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xdb2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff7fffff, 0x3, 0x8001, 0x6, 0x26, {0x78, 0x2, 0x1, 0x0, 0x7, 0x3}, {0x81, 0x3, 0x0, 0x20, 0xf0, 0xffffffff}, 0x3, 0xffff, 0x63}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x8, 0x1, 0x5, 0x10, 0x6, 0xcb, 0x200, 0xd0d, 0xa, 0x6c4, 0x3, 0x2, 0x10, 0x6, 0x9, 0x1, 0x0, 0x75, 0x9, 0x4, 0xff, 0xff, 0x8, 0xfffffff7, 0x1, 0x7fffffff, 0x80, 0x739, 0x400, 0x7, 0x10, 0x80000001, 0x0, 0x7, 0x1, 0x5, 0x9, 0x4, 0x0, 0x1, 0x1, 0x4e, 0x10, 0x1, 0xfff, 0xa5, 0x9, 0x9, 0xb, 0x4, 0x6, 0x2, 0x8, 0x0, 0x8000, 0x0, 0x3, 0x3, 0x7fffffff, 0x3, 0x0, 0x7, 0x33, 0x1, 0x8, 0x1, 0x8, 0xffff5e2e, 0x7, 0x8b, 0x2, 0x1, 0x7, 0xa89, 0x4, 0x4, 0x22c6, 0x3, 0xadc, 0x0, 0xe6, 0x6, 0x4, 0x0, 0x3ff, 0x9, 0x3, 0xfffffffa, 0x9, 0x86, 0x1ff, 0x1, 0x80, 0x9, 0xd, 0x1, 0x0, 0x1, 0x6, 0x139c, 0x7, 0xa, 0x80, 0x7, 0x5, 0x1000, 0x8, 0x2, 0x7fff, 0x0, 0x8, 0x9, 0x28a8c28d, 0x3, 0x2, 0x8001, 0x9, 0xff, 0x400, 0x8, 0x7, 0xff, 0x4, 0x8, 0x5, 0x7fffffff, 0x400, 0x1, 0xf, 0x2, 0x4, 0x3, 0x6, 0xfffffff5, 0x4, 0x8cba, 0x6, 0x9, 0x7, 0x4, 0xbd, 0xe9b, 0x9, 0x4, 0x1, 0x6, 0x6, 0x4, 0x7ff, 0x9, 0x80, 0xffffff9e, 0x0, 0xff, 0xff, 0x9, 0x6, 0x2, 0x10001, 0xea8, 0x5, 0x3, 0x5, 0x0, 0x7, 0xb, 0x8, 0x0, 0x8, 0x4, 0x4, 0xd, 0x5, 0x6, 0x1, 0x8, 0x6, 0xffffffff, 0x902, 0x3, 0xd753f1f, 0x2, 0xf17c, 0x9, 0x1, 0x3, 0x7fffffff, 0x6, 0xec, 0x10001, 0xffff, 0x6, 0x10, 0xb, 0xe2, 0x7, 0x1, 0x6, 0xa25b, 0x7, 0x8, 0x80000001, 0x4, 0x6, 0x6, 0x6, 0x5, 0x80, 0x81, 0x7000000, 0x96e, 0x7, 0x0, 0xffff, 0x800, 0xffffffff, 0x80000001, 0x0, 0x7, 0x2, 0x80000000, 0x10a6dfd, 0x5c6, 0x6, 0x1000, 0xffffffff, 0x3, 0x0, 0x9, 0xc7c, 0x1, 0x7, 0xc, 0x1543fa13, 0x7f, 0x1, 0xffffffff, 0x3ad, 0x9, 0x8, 0xfff, 0xff, 0xffffffff, 0x2, 0x2, 0xfffffffe, 0xa, 0x2, 0x0, 0x4, 0xc98d, 0x7a, 0x3, 0x8000, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x6, 0x94, 0xffff, 0x8, {0xf, 0x2, 0x1, 0x2, 0x5, 0x5}, {0x2, 0x1, 0x47e7, 0x7, 0xffff, 0x7}, 0x401, 0xc, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x7ab36cff8a0a8b66, 0x79f6, 0x4, 0x7, {0x5, 0x1, 0x9, 0x7f, 0x6, 0x3}, {0x6, 0x1, 0x5, 0x6, 0x6, 0xffff7fff}, 0x8, 0x8001, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x4, 0x436, 0x5, 0x58, 0x101, 0x6, 0x4, 0xda9c, 0x1, 0x1, 0x800, 0x8a52, 0xb6, 0x6, 0x2e72, 0x0, 0xa4, 0xb, 0x5, 0x0, 0x80000001, 0x1, 0x9, 0x7ff, 0x0, 0x3bc7, 0x1, 0x10, 0x2, 0xfff, 0xff, 0xb7c6, 0x9, 0x6, 0x3, 0x5, 0x0, 0xb12, 0x0, 0x1, 0x5, 0x77b, 0x1200000, 0xf, 0x67ea, 0x2b6e5b0a, 0x3ff, 0xd, 0x3, 0x8, 0x5, 0x8, 0x3, 0x2, 0x4f, 0x4, 0xc, 0x80000001, 0x7, 0x9, 0x1ff, 0x6, 0x6f50, 0x1, 0x90, 0x0, 0x8, 0x10000, 0x9, 0x3, 0x7, 0x7, 0x3, 0xfffffff7, 0x3c1, 0xfff, 0xd, 0x8, 0x10001, 0x0, 0xc, 0xffff, 0x6, 0x0, 0xfffffffe, 0x4, 0x4, 0x9, 0x0, 0x3ff, 0xf3c, 0x6, 0xd7, 0x9, 0x212, 0x0, 0x1, 0xffffff14, 0xf, 0xfffffffa, 0x8, 0x5, 0x0, 0x7, 0x4, 0xfff, 0x2, 0x800, 0x2, 0x4, 0xffffffff, 0x5, 0x8, 0x58e, 0x80c, 0x2, 0xfffffffa, 0xfffffffd, 0xfffff801, 0x7fffffff, 0xb, 0x6, 0xd2, 0x8, 0x32cb, 0xb8b, 0x5, 0x3, 0x40, 0x3, 0x400, 0x6, 0x5, 0x8, 0x5, 0x7, 0x3, 0x101, 0x0, 0x5, 0x5, 0x5, 0x3, 0x2, 0xffff, 0xfffffffa, 0x1, 0x5087, 0x6, 0x81, 0x6d, 0x9, 0x85, 0x3, 0x2, 0x40, 0x0, 0x81, 0x10, 0x5, 0x8000, 0xc00, 0x2, 0xd7, 0x5, 0x2, 0x7ff, 0xda, 0x0, 0x6, 0x5, 0x6, 0x90000, 0x3, 0xd5, 0x8, 0x3, 0xf, 0x67b6484b, 0x40, 0x6, 0x380, 0x400, 0x0, 0x401, 0x9, 0x9, 0x2, 0x3, 0x1, 0x6, 0x8, 0x6, 0x8001, 0x600000, 0x7, 0x8008, 0xe16f, 0x7ff, 0xe, 0x1, 0x6, 0x8, 0x3e, 0x6, 0x2, 0x7, 0x40, 0x5, 0x6, 0x9, 0x4, 0xfff, 0xf57, 0xed, 0x4, 0xc, 0x3, 0x0, 0xffff, 0x9, 0x10001, 0x40, 0x7fff, 0x2, 0xb, 0xd545, 0x8001, 0x5, 0x9e, 0x5, 0x5c74, 0x4, 0x6, 0xffffff00, 0x1, 0x4, 0x5, 0x4a, 0x7, 0x0, 0x5, 0x5, 0x68, 0xcb2b, 0xe9, 0x7fffffff, 0x2, 0x100, 0x40, 0x1, 0x868b, 0x3ff, 0x5, 0x3]}]}]}}]}, 0x91c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00t', @ANYRES16=r0, @ANYBLOB="04002abd7000fcdbdf2512000000080006000200000082ff0180140002006261746164765f736c6176655f300000"], 0x34}}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x3c, r10, 0x917, 0x0, 0x1, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x860}, 0x0) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r12 = dup(r11) ioctl$PTP_EXTTS_REQUEST2(r12, 0x43403d05, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x5, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000000d40)='syzkaller\x00', 0x1, 0x4a, &(0x7f0000000d80)=""/74, 0x40f00, 0x59, '\x00', r8, 0x0, r5, 0x8, &(0x7f0000000e00)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0xf, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[r5, r5, r12, r5, r5, r5, r5], 0x0, 0x10, 0xa1d}, 0x94) 52.962457281s ago: executing program 2 (id=24): r0 = socket(0x1d, 0x2, 0x6) (async, rerun: 64) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x80000003}, 0x18) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080), 0x8) (async, rerun: 64) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) r5 = open(&(0x7f0000000140)='./file0\x00', 0x200, 0x2d72b53c5ead0b3e) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="0000000000008000280012"], 0x50}}, 0x0) r6 = socket(0x11, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (rerun: 32) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) (async, rerun: 32) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) (async, rerun: 64) sendmsg$netlink(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0xffffffffffffff27}, 0x10) (async, rerun: 64) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000180)) (async, rerun: 64) r11 = syz_open_dev$evdev(&(0x7f00000003c0), 0x2, 0x48180) (rerun: 64) ioctl$EVIOCGABS0(r11, 0x80184540, 0x0) (async) r12 = signalfd4(r3, &(0x7f0000000100)={[0xa97b]}, 0x8, 0x80000) ioctl$USBDEVFS_RESET(r12, 0x5514) (async, rerun: 32) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (rerun: 32) 48.42274073s ago: executing program 1 (id=102): openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x9], &(0x7f0000000080)=[0x3, 0x5, 0x1, 0x8, 0x0, 0xfffd, 0x6, 0xfff, 0x1], &(0x7f00000000c0)=[0x8001], &(0x7f0000000100)=[0x599, 0x1, 0xfffd, 0x8, 0x1, 0x6, 0x5, 0x6, 0x1]}) (async) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x9], &(0x7f0000000080)=[0x3, 0x5, 0x1, 0x8, 0x0, 0xfffd, 0x6, 0xfff, 0x1], &(0x7f00000000c0)=[0x8001], &(0x7f0000000100)=[0x599, 0x1, 0xfffd, 0x8, 0x1, 0x6, 0x5, 0x6, 0x1]}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x4, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x28}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xffff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x60}}, 0x80051) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') (async) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000003c0)={'wg2\x00', {0x2, 0x4e20, @broadcast}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x9, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x408c0}, 0x40040) r4 = syz_open_dev$dri(&(0x7f0000000580), 0x3dad0815, 0x2a0000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000005c0)={0x1, 0x7, 0x3}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000600), &(0x7f0000000640)=0x4) socket(0x18, 0x4, 0x8) (async) r7 = socket(0x18, 0x4, 0x8) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r5) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r8, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x73b8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r9 = syz_open_dev$dri(&(0x7f00000007c0), 0x4, 0x800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000800)={0x0, 'erspan0\x00', {}, 0x9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000940)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x7, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000009c0)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000009c0)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000d80)={&(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0], 0x7, 0x4, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000f40)={&(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[{}], &(0x7f0000000ec0)=[0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000f40)={&(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[{}], &(0x7f0000000ec0)=[0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000001040)={&(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000010c0)={0x5, 0x0, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000001180)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0], 0x4, 0x0, 0xc0c0c0c0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000001180)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0], 0x4, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000001240)={0x101, 0x3, &(0x7f0000000a40)=[r10, r11, r12], &(0x7f0000000a80)=[0x0, 0x8040, 0x0, 0x17c000, 0x8001, 0x5], &(0x7f00000011c0)=[0x0, r13, r14, r15, r16, 0x0, 0x0, r17], &(0x7f0000001200)=[0x1, 0xe7b, 0x9, 0x9, 0x9, 0x2, 0xfffffffffffffff7], 0x0, 0x7}) 48.421221906s ago: executing program 1 (id=103): creat(&(0x7f0000000280)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000080)=0x1b, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="26a757208dfd7c2e695f05eca27904afc7789197712465003a9621f6ef13b022ac2cd77c5e5ae8a304de170b9e54bf62003c0580ae9e27c53b91f70a23096a516e804dcf9b48074f4b45cab58e76826558b1df48a374ea092f13c7cfdd1c26387be3cb085135c5638d29063a0bebee88088cb70b5450c5bb265dcc2595a238ed5183fdba75006ca53c5ecf0bb12b24294d144f580c3848b3abf78718c64d6b918d17ace6c4dd09fc22e489062a2a0561cd86b9b192a963caa53ef444b5efb693a13053a25e0759ea4e6c9585f550e004e770b6a3f5e396f2412fc556c54c3d4a4282872b18b8041a372cdcb2d04994a2360b4769a5bb05", 0xffffffffffffff91, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @mcast1, 0x4}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000040)=0x4, 0x4) recvmmsg(r2, &(0x7f000000a100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002040, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae, 0x10002}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x1}, {}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) close_range(r1, r1, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4112d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x50) 48.262987208s ago: executing program 1 (id=104): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4b0, 0x1000, 0x2}, &(0x7f0000000000), &(0x7f0000000280)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc048) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140005800800024000000000080001"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x44110) 48.182221465s ago: executing program 1 (id=105): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84) mount(0x0, &(0x7f0000005880)='./file0\x00', &(0x7f00000058c0)='sysfs\x00', 0x18010, 0x0) (async) mount(0x0, &(0x7f0000005880)='./file0\x00', &(0x7f00000058c0)='sysfs\x00', 0x18010, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0xb, 0x42, 0x2, 0x42, 0xffffffffffffffff, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r3, 0x0, 0xd88d02a0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x21, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x2, 0x3, 0x1, 0x5, 0x5, 0x20, 0xfffffffffffffffc}, @ringbuf_query, @jmp={0x5, 0x0, 0xb, 0x0, 0xa, 0xfffffffffffffff0, 0x1}, @map_fd={0x18, 0xb}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @map_fd={0x18, 0x8}, @generic={0x6, 0x9, 0xb, 0xf, 0x3}, @tail_call, @call={0x85, 0x0, 0x0, 0x44}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0xd6, &(0x7f0000000600)=""/214, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r1, 0xffffffffffffffff, r2, r3], &(0x7f0000000900)=[{0x5, 0x1, 0xa, 0x6}], 0x10, 0x9}, 0x94) inotify_init() (async) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0xc00) (async) inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0xc00) umount2(&(0x7f0000000040)='./file0\x00', 0x2) (async) umount2(&(0x7f0000000040)='./file0\x00', 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r8, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x20000840) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) dup(r10) (async) r11 = dup(r10) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200"]) (async) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200"]) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e21, 0x80000001, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 47.98269152s ago: executing program 1 (id=106): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) openat(r2, &(0x7f0000000280)='./file0\x00', 0x7c302, 0x44) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) fsopen(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x84, 0x467b, 0xffff, {0x1d, 0x1}, {0x50, 0x2}, @ramp={0x0, 0xb0, {0x7, 0x405, 0x3ff, 0x57c2}}}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r7 = dup(0xffffffffffffffff) write$6lowpan_enable(r7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x94}}, 0x2004c855) write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8) sendmsg$alg(r4, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e89", 0x5}], 0x1}, 0x34000041) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x100, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="14850c", 0x3}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x9, 0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x40) 47.882863794s ago: executing program 1 (id=107): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb8825f80200a3"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) 37.641632822s ago: executing program 32 (id=24): r0 = socket(0x1d, 0x2, 0x6) (async, rerun: 64) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x80000003}, 0x18) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080), 0x8) (async, rerun: 64) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) r5 = open(&(0x7f0000000140)='./file0\x00', 0x200, 0x2d72b53c5ead0b3e) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="0000000000008000280012"], 0x50}}, 0x0) r6 = socket(0x11, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (rerun: 32) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) (async, rerun: 32) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) (async, rerun: 64) sendmsg$netlink(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0xffffffffffffff27}, 0x10) (async, rerun: 64) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000180)) (async, rerun: 64) r11 = syz_open_dev$evdev(&(0x7f00000003c0), 0x2, 0x48180) (rerun: 64) ioctl$EVIOCGABS0(r11, 0x80184540, 0x0) (async) r12 = signalfd4(r3, &(0x7f0000000100)={[0xa97b]}, 0x8, 0x80000) ioctl$USBDEVFS_RESET(r12, 0x5514) (async, rerun: 32) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (rerun: 32) 32.869445366s ago: executing program 33 (id=107): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb8825f80200a3"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) 27.752043386s ago: executing program 0 (id=327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "a2126d", 0x18, 0x2b, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, {[@dstopts={0x3a, 0x2, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x5, 0xc}}, @jumbo={0xc2, 0x4, 0xfe}]}]}}}}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='securityfs\x00', 0x11, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r1, 0x105, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}]}]}, 0x28}}, 0x0) 27.750888631s ago: executing program 0 (id=328): io_setup(0x10000, &(0x7f0000000000)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x40) (async) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x4000000000000003, 0x10}) mq_timedreceive(r1, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) (async, rerun: 32) syz_emit_ethernet(0x22, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @dev, @local}}}}}, 0x0) (async, rerun: 32) io_setup(0x8, &(0x7f00000002c0)) 27.571118378s ago: executing program 0 (id=329): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="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", 0x107}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f0000000080)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53", 0x3e}], 0x3, &(0x7f0000000380), 0x0, 0x20000080}], 0x1, 0x0) recvmsg$qrtr(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x20) 27.570622338s ago: executing program 0 (id=330): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000022e800000000000000040000185100000900000000000000000000008510000006000000851000000600000018190000", @ANYRES32, @ANYBLOB='\r\x00'/16], &(0x7f0000000280)='syzkaller\x00', 0xd52, 0xc9, &(0x7f0000000440)=""/201, 0x40f00, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xe, 0x7, 0x3}, 0x10, 0x24267, 0xffffffffffffffff, 0x7, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x2, 0x3, 0x2, 0x1}, {0x0, 0x2, 0xd, 0xb}, {0x1, 0x2, 0xf, 0xb}, {0x3, 0x3, 0xc, 0x1}, {0x4, 0x1, 0x10, 0xb}, {0x2, 0x5, 0xe, 0xb}, {0x0, 0x3, 0xf, 0x1}], 0x10, 0x6}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000080)='./file1\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5d}) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffe0, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x2000c804) sendmsg$inet(r1, &(0x7f0000000bc0)={&(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000740)="4b3555733ab8eb168baa77304276697eda22cad33b", 0x15}, {&(0x7f00000007c0)="532b13fedf4e83a7903a1e933e2d01a246f80aecddd15424ab4b66559796800eb550eaa7554f3281bc84c42de78970a9d00b51f0a1aa83a5cada6445f8dfc50b5243c33486bd3c594935bef2844eb8e212c3d827c77987ec8999c91405a1975d30c0bec18cdfd99bc596a00f18dada6902bd117d6761b4e62b9c01bc5ecb745d3ecebdb476913bfcaf35dac1d33934b52507ebb56089a659cef0f65d69f3b89627c7725c59728eaea6e01336993299f558768001e9", 0xb5}, {&(0x7f0000000880)="3cb79c762849a71c75a877f15f5b42098884481784217234ee5afdff02d9905b3124d84bd1e858a423e1cd6b25852591aef0eeefa4e1754882f3665e3b38cd6a32ca38ca8cd8", 0x46}, {&(0x7f0000000900)}, {&(0x7f0000000940)="56e612e0a504702c9c52acd3b3e3ce7f08475be4e6907b6eb18ace948823dce61701031a5416099e6a22e607bcc0a7f98ccd152a224273900866e83226cfdfb59021b8eea8460b994651ec5db70b1ad9ee701236050d6f5d03e9d9217bb87853421a1e5fe5ce335d71547559a688d972cd", 0x71}, {&(0x7f00000009c0)="6f4d8c7154cc72b2091d29d2f8e4319a563c9b2bea8fdfcabd494f8606884b096df51324713cc353dc7fa2a230d0052fea5c6c7796340df003b776aaf789617c39581bd8345b3757fd617d196a541a3f4d7b37d2de14b76a036135eda7e94cea9cc26fc7e49b16cf8b34b1e715112be22154400697df1d963403b65a5f24a3dc40f2021af090f843802c3f4346bf298eeadfde35f07bf26c8de8dafc252ee14df26b4ca765eaac0bbfe7e58fba6cb1a7d2bce92b21ac32d173b174972d703f81ba36d572963b1f8083b7abfe7371e2606077b6ae48f47d73dd9eff212bfaa09211721a47b574073f89ca09f928", 0xed}], 0x6, &(0x7f0000000b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010100, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x38, [@local, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x15, 0x3, 0x0, [{@private=0xa010101, 0x7a6}]}]}}}], 0x60}, 0x4000010) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x4a23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4) sendfile(r7, r8, 0x0, 0x2) sendfile(r7, r8, 0x0, 0x8000000008001) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005c1000/0x2000)=nil, 0x400000, 0x3, 0x2}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x1, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 27.472651673s ago: executing program 0 (id=331): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000040)="3a4a55bebe394f", &(0x7f0000000080)="9382bd681a4e0a5923724dff37eb578f47aab3b1b51c39565d0b4329e1542458afea91706328f0810a30d766a324e47a5d88b067512fa9972c8c09d3153b4ba7ee7b3739035d309c3533bba6826234c2c4d60c5f53480b7e8e74fa34b8813c53bd9f2b2a7024a2544cca4b2a831abad3e89d47b3516fa54d56671cea90a77f23a1022951bc76d92f626995e411c02f5187ac7acde3b8fdc49d3df0a74bf61d993af0858ba75a"}}, &(0x7f0000000180)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x400200, 0x0) 27.212570963s ago: executing program 0 (id=332): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb100c117080008004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x3) (async) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}]}) (async) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000001380)={0x0, 0x49, 0x8, &(0x7f0000001340)={0xd, "c8660972daadf38033035d21dcc910b0dbf5be74076dc3f2f67b364ef9ed965b13"}}) (async) mount(&(0x7f0000000000)=@filename='./cgroup/file0\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x28b0b0, 0x0) 27.193293974s ago: executing program 34 (id=332): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb100c117080008004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x3) (async) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}]}) (async) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000001380)={0x0, 0x49, 0x8, &(0x7f0000001340)={0xd, "c8660972daadf38033035d21dcc910b0dbf5be74076dc3f2f67b364ef9ed965b13"}}) (async) mount(&(0x7f0000000000)=@filename='./cgroup/file0\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x28b0b0, 0x0) 8.092048037s ago: executing program 4 (id=589): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x2, 0x4) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f00000020000000040000007365b5572ecc115739b69a37d867f357bb926e5bf6199355c1e1ab6a931386f8aca8c6bc8f48c8d1bac0d34cb339b960ff348c320d515669c98bf7037a07ee0d2ecc6ab92f558f133fa34d77314109fd7061270bb69e975266943e948d393d53a086e2b1037ed7e35e0abceaf95bb9d74ade8809a4f4560cbc58f1ecbca3b7", @ANYRES32, @ANYRES64=0x0], 0x20) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x2000000, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000180000002cbd700000000000080012000000020000000000000000000600000000000000fdffffff00000000ac1efa01000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000700000000fe8000000000000000000000000000aa000000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000004000300"], 0xc0}}, 0x0) r8 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r8, 0xee01, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x0, 0x9, 0x3, 0x5, 0x80, 0x41, 0x4, [0x8, 0x4, 0xe18, 0x972d, 0x3, 0x7, 0x6, 0x3]}}) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000080)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0x6, "5dd04d", 0x26, 0x2}) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00e5ff1000010700000000020000000a00000006000100359ca8ff"], 0x1c}}, 0x20000080) 6.911881341s ago: executing program 4 (id=597): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) fcntl$dupfd(r2, 0x0, r1) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000580)=""/24, 0x18}], 0x1) 6.627713891s ago: executing program 4 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@uuid_on}]}) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 6.56197645s ago: executing program 4 (id=611): syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x3c0, 0x26, 0x2, 0x42474752, [0x680, 0xe4], [0x7ff, 0xfeedcafe], 0x13a}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000b80), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000004b00)={0x1, @pix_mp={0x5, 0xffffc000, 0x56555959, 0x0, 0x9, [{0x1, 0x1}, {0xfffffffb, 0x3399}, {0xffe, 0x6}, {0x2, 0x8}, {0x7, 0x80000001}, {0x1, 0x6}, {0x40008000, 0xfffffff9}, {0x800, 0x200}], 0xfd, 0x0, 0x2, 0x0, 0x4}}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x52) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 2.121191815s ago: executing program 6 (id=639): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040efc01140c023e"], 0xff) socket$inet6(0xa, 0x1, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) 1.988111545s ago: executing program 6 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) mount(&(0x7f0000000080)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='smb3\x00', 0x208001, 0x0) (async) unshare(0x62040200) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0xfffd, @remote}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1}) (async, rerun: 32) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20a840, 0x0) (rerun: 32) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000140)=0x2c6) (async, rerun: 64) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="80b99d00", @ANYRES16=r1, @ANYBLOB="050726bd7000ffdbdf2501000000100002800c0001800800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) 1.521727299s ago: executing program 6 (id=650): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000240)={0x0, 0x633, 0x6, '\x00', &(0x7f0000000200)=0xc}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004044}, 0x8040) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x6, 0x0, 0x5) openat$cdrom(0xffffffffffffff9c, 0x0, 0x802, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x8080, 0xc) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x41000000}], 0x3e0000) (async) r6 = syz_io_uring_setup(0xca1, &(0x7f0000000100)={0x0, 0x8de0, 0x10310, 0xfffffffe, 0x4a, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x30, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]]}, 0x30}, 0x1, 0x0, 0x0, 0x24008005}, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x30000800) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r13, 0x10000) 1.452397198s ago: executing program 6 (id=653): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x85}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x87, 0x32}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xa18}, @NL80211_ATTR_PMKID={0x14, 0x55, "d1a78f90d8c8ac25d88e4bf72ab47e7b"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "b8686242046156e16240e2dec3f6096a"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048080}, 0x24008080) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.392202294s ago: executing program 6 (id=656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f00000000c0)={0x7}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r4, 0x0, 0x2, 0xbe, 0x5, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x8, 0x12b9b3dd, 0x8}}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getchain={0x54, 0x66, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x4, 0xfff2}, {0xfff7, 0x6}, {0xffe0, 0xb}}, [{0x8, 0xb, 0x81}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0xfffffbff}, {0x8, 0xb, 0x6ecb5362}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$TCXONC(r2, 0x80045440, 0x3) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="850b010000000000140003406d6163736563300000000000000000000a0001000180c20000010000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.312259127s ago: executing program 6 (id=658): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0xb, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000280)={0x0, 0x8, 0x5, &(0x7f0000000240)={0x1, "0f5dbf9b3c00000000c4f5f9c6974700"}}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x2, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff, 0x0, 0xc7ef], [0xfffffffe], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x20000000, 0x0, 0x5}, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) pipe2(&(0x7f0000000000), 0x880) 1.252019044s ago: executing program 3 (id=660): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80000) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000080)={0x1, 0xd1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) (async) io_uring_setup(0x715d, &(0x7f00000001c0)={0x0, 0x40000, 0x400, 0x3, 0x176}) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000640)={0x3, 0x0, &(0x7f00000006c0)=""/188, &(0x7f0000000580)=""/118, &(0x7f00000002c0)=""/46, 0xeeee0000}) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000a00)=0x27, 0x4) (async, rerun: 32) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x8, 0x1, 0x220}, 0x10) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) (async, rerun: 32) ioctl$TCFLSH(r2, 0x400455c8, 0x20000000009) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r8 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x6fbe, 0x10100, 0x0, 0x2e0}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r8, 0x81, 0x0, 0x0, 0x2, 0x1}) (async) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.251630889s ago: executing program 3 (id=662): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x8400) r1 = syz_io_uring_setup(0xbfa, &(0x7f0000000000)={0x0, 0xec25, 0x2000, 0x2, 0x27e}, &(0x7f0000000840)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6e081, 0x19d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000000a86e80a01030000000000000000010000000900010073797a3000000100"], 0x20}}, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000640)={0x0, 0x235d}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000700)={r7, 0x38, &(0x7f00000006c0)=[@in6={0xa, 0x4e21, 0xc, @mcast1, 0x80000001}, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x5}]}, &(0x7f0000000740)=0x10) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CURSOR2(r8, 0xc02464bb, &(0x7f0000000040)={0x2, r9, 0x4, 0x7, 0x5b45, 0xbb, 0x823, 0x8ae, 0xf81e}) close(r0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000007c0)={&(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x400000000000019b, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0}) r12 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r13, 0x0}) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a410000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x42, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaa170ec8cd542bb237bab6e1dd6bd60000008beef4f1000000000000000000ffff0a01cecafc00000000000000000000000000000111000000000000000dd90000"], 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000000440)={r14}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000000240)={r14, 0x5, 0xe6, 0xff, 0x0, [], [0x0, 0xf330, 0xff, 0x2], [0x9, 0x7fc, 0xffff, 0x2], [0xbeb, 0x9, 0xdaa, 0x909]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000540)={0x200, 0x5, &(0x7f0000000440)=[r9, r10, r11, r14, r16], &(0x7f0000000480)=[0x101, 0x7, 0x0, 0x184], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x7, 0xfffffffffffffff1, 0x7], 0x0, 0x1}) 1.178034714s ago: executing program 3 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000410101c0"]) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="8450", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r7, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$ax25(r7, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x88, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=any,access=client,cache=mmap']) 962.553915ms ago: executing program 3 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84) mount(0x0, &(0x7f0000005880)='./file0\x00', &(0x7f00000058c0)='sysfs\x00', 0x18010, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84) (async) mount(0x0, &(0x7f0000005880)='./file0\x00', &(0x7f00000058c0)='sysfs\x00', 0x18010, 0x0) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x8) (async) 962.24765ms ago: executing program 3 (id=669): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r2, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdb) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r6, @ANYRESDEC=r0], 0x58}, 0x1, 0x2, 0x0, 0x24008040}, 0x0) 549.031827ms ago: executing program 4 (id=670): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x40000, 0x0, 0x0, 0x200}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r2 = syz_io_uring_complete(0x0) sendmmsg$alg(r2, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x20000001}, {0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="a983b2d1d50c7f25fe7ad8a234564dcf66bbde685673032dbc0fd2a82f115c83409a8b1a0fb936be944a8f8b2845786083c26544fd0d3fe39008afae5cf7bf087740f0e33eb6409bb4689be05e268c24aae27ee971ebc3ffa6557c1f3e0204d3f1451f1b65be8c772b39487732ad69fe00c7362d980129632a0db16a4aa62a32db382b4e5bba9cd50cfc9d9effddd9b203e6a52f0e6dbe0b065adcfbe324df66d4c6eb5a7650053bbd899c9a70d35cfb12c861e4cc8a5eaa2af02b44e006506006d8a349e0b79e2619f6825c4e98892ceec51cf09f8ab48e188ec708674fcf3c5365ca86", 0xe4}, {&(0x7f0000000300)="51f04d930d29db23a30acc87c344c6b9bc224fc9e164a5121236b084bfcc79075793030301c936b477c85fc8d6c4328a992e9256523b9c108763a1667f9f01ece282ff857c9c0f8e95b11fd4fa9b37934d1b02bcc76887b793e894120b54927b9699d3d8ae6a3be354c3d02b020e656c92e615714b0603bcad3037c0e4c23524999324f7e73a4ab28b977e8c74ce64b771f274dd3b5f07e9181156807801ecf4557df38695feee78d297c538e84d2f300da82ac4b544023f03", 0xb9}], 0x2, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x1b, "7fadab2810cec3ce66c2cff9844b052b92cb7b84277f74cc65a4e0"}], 0xa8, 0x4000040}], 0x2, 0x40010) r3 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000040)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40)={[&(0x7f0000000500)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01\xe2\xb0I#\x8dZ\x8d\xf0\xa2\x97Q@\x0e^\x14\xe0\xbdv\xfd\xf2{\xda=\xfa\xca\x03\x10\xed\xd3\x96\xebUc\x88\x15\x05\xc7\x88u\x11R\x19P@z:\xc6<\xbb\x82\xa9\xcfU\x93\x85.Z#\x14 \n\xd9\xe3\xef\x15\xe8\x19\x92+\xe8\xb4[\xf8\xfb\xcfw\xbf\xab\x92\x01[\xc0\x9c\x94Q\x12\xdb\x1ai\x18\b\xd2\xd0\x8fD%\xfc\xe52\x18\x842\x19\x19V\x7f\xf8\x11I\x88\xb1\x9c\x7fl\nE}\x9d\xcbI\xdf\xa5\x90-w\x87\xbd\xc1\xa4\xaa\xfdf\xbe\xdf\xb5']}) 482.164352ms ago: executing program 4 (id=671): r0 = socket$kcm(0x10, 0x2, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000380)=0x5, 0x4) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) madvise(&(0x7f000039c000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xfffffffffffffec2}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000542f3c2e0bd1951222dfb7d41e00db85", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="0d4201f3951384e3", 0x8}], 0x1}}], 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x8, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x3, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0xc}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}]}}]}, 0x38}}, 0x4) timer_create(0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) madvise(&(0x7f0000019000/0x4000)=nil, 0x4000, 0x12) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 481.392398ms ago: executing program 5 (id=672): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_delrule={0x58, 0x21, 0xa18, 0x70bd27, 0x25dfdbfb, {0xa, 0x10, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0x10000}, [@FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0xc005}, 0x20000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000100)={0xa691, 0x0, '\x00', {0x0, @reserved}}) r2 = syz_open_dev$video(&(0x7f00000004c0), 0x9, 0x103c00) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f00000001c0)={0x3, 0x2, @raw_data=[0x10000, 0x744b, 0x9, 0x2, 0x4, 0xffff, 0xffffffff, 0xffffffff, 0xfffffffb, 0xfffffff8, 0xe8a, 0x2, 0x1, 0x80, 0x1, 0xfffffffa]}) statx(0xffffffffffffffff, &(0x7f0000002dc0)='./file0\x00', 0x6000, 0x2, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002f00)={0x60, 0x7, {0xffffffffffffffff}, {0xee00}, 0xfffffffffffffff9, 0xd}) statx(0xffffffffffffffff, &(0x7f0000002f40)='./file0\x00', 0x800, 0x40, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003500)='./file0\x00', &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x2000, &(0x7f0000003780)={&(0x7f0000000440)={0x50, 0x0, 0x1000, {0x7, 0x2b, 0x4, 0x40084010, 0xcc, 0xff, 0x7, 0x3, 0x0, 0x0, 0x1, 0x8}}, &(0x7f00000025c0)={0x18, 0xffffffffffffffda, 0x80, {0x7}}, &(0x7f0000002600)={0x18, 0x0, 0x5, {0x3}}, &(0x7f0000002640)={0x18, 0x0, 0x2, {0x1}}, &(0x7f0000002680)={0x18, 0xfffffffffffffffe, 0x6, {0x4}}, &(0x7f00000026c0)={0x28, 0x0, 0x180, {{0x0, 0xfff, 0x2}}}, &(0x7f0000002700)={0x60, 0xfffffffffffffffe, 0x834, {{0xc52b, 0x200, 0x1, 0xaadef8e, 0x2, 0xa0000000, 0x10001}}}, &(0x7f0000002780)={0x18, 0x0, 0x9, {0x2}}, &(0x7f00000027c0)={0x11, 0x0, 0xfff, {'\x00'}}, &(0x7f0000002800)={0x20, 0xffffffffffffffda, 0x306, {0x0, 0x1a}}, &(0x7f0000002900)={0x78, 0x0, 0x5, {0xb99, 0x6, 0x0, {0x2, 0x5, 0x8, 0x8000000000000000, 0x8, 0x4000000000000, 0xfffffffe, 0x7, 0x24000, 0xc000, 0x80000001, 0x0, 0x0, 0x101, 0xfff}}}, &(0x7f0000002a00)={0x90, 0x0, 0x9, {0x2, 0x3, 0x0, 0x2d8, 0x5ec7, 0x2, {0x1, 0x8, 0x80000001, 0x8000, 0x7fff, 0xffff, 0x9, 0x100, 0x7c1, 0x4000, 0x800, 0xffffffffffffffff, 0x0, 0x5, 0x5}}}, &(0x7f0000002ac0)={0x30, 0x0, 0x2, [{0x3, 0x0, 0x6, 0xb9e9, '{$(&$-'}]}, &(0x7f0000003080)={0x2a0, 0x0, 0xffffffffffffffff, [{{0x3, 0x0, 0x185, 0x5, 0x8, 0xa0, {0x6, 0x3, 0xff, 0x8, 0x9196, 0x400, 0x8, 0x7f, 0xfffe0000, 0x1000, 0x4, 0x0, 0xffffffffffffffff, 0x4, 0x4}}, {0x2, 0x1, 0xd, 0x8, '802.15.4 MAC\x00'}}, {{0x2, 0x3, 0x6, 0x9, 0x6, 0x4, {0x2, 0x0, 0x79, 0x4, 0x1, 0x6, 0x832, 0x0, 0x9, 0xa000, 0x10001, 0x0, 0x0, 0x2, 0x5}}, {0x1, 0x1, 0xa, 0x2, '/dev/vbi#\x00'}}, {{0x3, 0x3, 0x8, 0xfffffffffffffff7, 0x3, 0xfffffffe, {0x3, 0x2, 0x2d, 0x4, 0x800, 0x200, 0x760, 0x3, 0x6, 0x4000, 0x54f, 0x0, r3, 0x9, 0x3}}, {0x3, 0xfffffffffffffff8, 0x1, 0x4, '!'}}, {{0x0, 0x3, 0x733, 0x4, 0x800, 0x3, {0x5, 0x101, 0x3, 0x0, 0x8, 0x3, 0x7, 0x6, 0x2, 0xa000, 0x9, r4, r5, 0x309, 0x9}}, {0x4, 0x57, 0x3, 0x0, '#))'}}]}, &(0x7f0000003400)={0xa0, 0xfffffffffffffff5, 0x6, {{0x5, 0x0, 0xa2, 0x0, 0x8, 0x7, {0x5, 0x4, 0x23c1, 0x2, 0x6, 0x0, 0x9, 0x3ff, 0x2, 0xc000, 0x401, r7, r8, 0x1, 0x5}}}}, &(0x7f00000034c0)={0x20, 0x0, 0x1, {0x1, 0x0, 0x9d, 0x73ed}}, &(0x7f0000003640)={0x130, 0x0, 0x0, {0x5, 0x1, 0x0, '\x00', {0x100, 0x9, 0x2, 0xb, r9, r10, 0x8000, '\x00', 0x7f, 0x6, 0x2, 0xacc4, {0x3, 0x1}, {0x6, 0x9c}, {0x3, 0xf}, {0x3, 0x2}, 0x1, 0x5, 0x9, 0x9}}}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000500)=""/119, 0x77}], 0x1) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r13) sendmsg$IEEE802154_ADD_IFACE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r14, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r12) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r15, @ANYRESHEX=r15, @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x48014}, 0x4c041) 392.381262ms ago: executing program 5 (id=673): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r0) (async) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) (async) 322.258598ms ago: executing program 5 (id=674): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="66430f7ff48f6870cdd98541c03000660f3880ac4c0d0000000fc7777e3e3e470feb877c000000b9ce0800000f32b9e80b00000f32b805000000b94e0000000f01d966b8e7008ee8", 0x48}], 0x1, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@verity_on}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='./file0\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="66430f7ff48f6870cdd98541c03000660f3880ac4c0d0000000fc7777e3e3e470feb877c000000b9ce0800000f32b9e80b00000f32b805000000b94e0000000f01d966b8e7008ee8", 0x48}], 0x1, 0x20, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@verity_on}]}) (async) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='./file0\x00') (async) rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) (async) 72.414491ms ago: executing program 5 (id=675): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000500)=""/4096) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xfffffffffffffd82, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 71.902994ms ago: executing program 5 (id=676): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0903, 0x2b, '\x00', @value=0x6}}) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') (async) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0903, 0x2b, '\x00', @value=0x6}}) (async) 441.462µs ago: executing program 5 (id=677): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000007d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x127c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x1244, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1234, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x100, 0x3, "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"}, @NFTA_MATCH_INFO={0x1004, 0x3, "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"}, @NFTA_MATCH_INFO={0x60, 0x3, "5cf4d6c77dfc4657653c14723745c690bff81c9c5df5c2823ae652e6dee577d4a514c4e6b746490a641d5deab527fb77db40e83edbf69a985b838845569be5865e2167b055699c7b29fee71a5333aa796bbe86cddf6a71788b811a38"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0xaf, 0x3, "e91ba70cd60d99fe81b5743dab5568c5d975368c7a00ed7a0adb008efce9ce7149bc3a7f953134cf48cf31bb7e96816e34b2f2266d2fdf1255e5ba623d7c798ede579e59479554de09689bf20d063aa3b4899bc8fe785d6152eea383ee420c6ca94776170e532df3d100270253d2f6b551628dbc24c270f49a4e53c1bb7d7b65ba6504aea1894e8977862e54c3cdf970a78ba35362fa55e24c2c0be426a696e1febb98930034c8e56a9bca"}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x12a4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x7e, &(0x7f0000007c40)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6d6196b2af4c00481101fe880000000000000000000000000101fe8000000000000000000000000000aa4e244e200048907803000000000000001634a8ccea30783d48ea69d3f705181c93b9d3cd4cda3f7d7417ab23cc9d84fc206e1e59bb2042f4ce5fb8e9adeb5b8d76d00f0000228d796865ff7b0c7d855bfc8706e06f58a404ed61607d3cefb6a3d0da0c363d6c5dcc3791bdc725f6d9d893806d69506b4fd9a24989ffcc6bf83abfd40acafd1c1e925879236662f0f5847e2e5cd2"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x44050) recvmmsg(r4, &(0x7f00000079c0)=[{{&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000380)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f00000000c0)=""/171, 0xab}, {&(0x7f0000000300)=""/126, 0x7e}], 0x4}, 0x8001}, {{&(0x7f00000003c0)=@rc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000440)=""/113, 0x71}, {&(0x7f00000004c0)=""/133, 0x85}, {&(0x7f0000000640)=""/254, 0xfe}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/243, 0xf3}, {&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000000980)=""/102, 0x66}, {&(0x7f0000000a00)=""/146, 0x92}, {&(0x7f0000000740)}], 0xa, &(0x7f0000000c00)=""/40, 0x28}, 0x3}, {{&(0x7f0000000c40)=@sco, 0x80, &(0x7f0000004140)=[{&(0x7f0000000cc0)=""/122, 0x7a}, {&(0x7f0000000d40)=""/224, 0xe0}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/225, 0xe1}, {&(0x7f0000003f80)=""/161, 0xa1}, {&(0x7f0000004040)=""/210, 0xd2}], 0x6}}, {{&(0x7f00000041c0)=@hci, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004240)=""/28, 0x1c}, {&(0x7f0000004280)=""/59, 0x3b}, {&(0x7f00000042c0)=""/197, 0xc5}], 0x3, &(0x7f0000004400)=""/22, 0x16}, 0x81}, {{&(0x7f0000004440)=@qipcrtr, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)=""/149, 0x95}], 0x1, &(0x7f00000045c0)=""/229, 0xe5}, 0xfffffff7}, {{&(0x7f00000046c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004740)=""/138, 0x8a}], 0x1, &(0x7f0000004840)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000005840)=""/253, 0xfd}, {&(0x7f0000005940)=""/207, 0xcf}, {&(0x7f0000005a40)=""/204, 0xcc}, {&(0x7f0000005b40)=""/23, 0x17}], 0x4, &(0x7f0000005bc0)=""/194, 0xc2}, 0x8}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000005cc0)=""/130, 0x82}, {&(0x7f0000005d80)=""/36, 0x24}, {&(0x7f0000005dc0)=""/196, 0xc4}, {&(0x7f0000005ec0)=""/1, 0x1}, {&(0x7f0000005f00)=""/104, 0x68}, {&(0x7f0000005f80)=""/168, 0xa8}], 0x6, &(0x7f00000060c0)=""/140, 0x8c}, 0x8}, {{&(0x7f0000006180)=@xdp, 0x80, &(0x7f0000007880)=[{&(0x7f0000006200)=""/158, 0x9e}, {&(0x7f00000062c0)=""/212, 0xd4}, {&(0x7f00000063c0)=""/93, 0x5d}, {&(0x7f0000006440)=""/206, 0xce}, {&(0x7f0000006540)=""/167, 0xa7}, {&(0x7f0000006600)=""/219, 0xdb}, {&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000007700)=""/255, 0xff}, {&(0x7f0000007800)=""/97, 0x61}], 0x9, &(0x7f0000007940)=""/105, 0x69}, 0x8}], 0x9, 0x10002, &(0x7f0000007c00)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x3, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x60000000, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7}) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0xc6b7, 0x3}, 0x0, &(0x7f00000001c0)={0x7ff, 0x8, 0x9, 0x7, 0x7, 0x0, 0x10000000005, 0x7}, 0x0, 0x0) close_range(r0, r7, 0x0) 0s ago: executing program 3 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast1, 0xb}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) kernel console output (not intermixed with test programs): .984878][ T6364] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 60.004186][ T6364] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.056639][ T6371] netlink: 'syz.1.101': attribute type 3 has an invalid length. [ 60.059095][ T6371] netlink: 'syz.1.101': attribute type 1 has an invalid length. [ 60.209431][ T6383] bridge1: entered promiscuous mode [ 60.244238][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.263327][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 60.265609][ T29] usb 8-1: too many configurations: 223, using maximum allowed: 8 [ 60.269090][ T29] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 60.271492][ T29] usb 8-1: can't read configurations, error -61 [ 60.310894][ T6385] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 60.423052][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 60.444300][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 60.446400][ T29] usb 8-1: too many configurations: 223, using maximum allowed: 8 [ 60.450023][ T29] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 60.452488][ T29] usb 8-1: can't read configurations, error -61 [ 60.454578][ T29] usb usb8-port1: unable to enumerate USB device [ 60.975509][ T6400] Cannot find set identified by id 3 to match [ 61.165030][ T40] kauditd_printk_skb: 90 callbacks suppressed [ 61.165040][ T40] audit: type=1400 audit(1752637732.859:288): avc: denied { ioctl } for pid=6418 comm="syz.0.112" path="socket:[11514]" dev="sockfs" ino=11514 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.204406][ T40] audit: type=1400 audit(1752637732.899:289): avc: denied { write } for pid=6418 comm="syz.0.112" path="socket:[9093]" dev="sockfs" ino=9093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.204450][ T6419] Bluetooth: MGMT ver 1.23 [ 61.293710][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 61.296155][ T1113] ata1: failed to read log page 10h (errno=-5) [ 61.298069][ T1113] ata1.00: exception Emask 0x1 SAct 0x10000 SErr 0x0 action 0x0 [ 61.300421][ T1113] ata1.00: irq_stat 0x40000008 [ 61.301916][ T1113] ata1.00: failed command: WRITE FPDMA QUEUED [ 61.304071][ T1113] ata1.00: cmd 61/08:80:46:05:00/00:00:00:00:00/40 tag 16 ncq dma 4096 out [ 61.304071][ T1113] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 61.304320][ T6425] __nla_validate_parse: 7 callbacks suppressed [ 61.304330][ T6425] netlink: 44 bytes leftover after parsing attributes in process `syz.0.113'. [ 61.309246][ T1113] ata1.00: status: { DRDY } [ 61.311458][ T6425] netlink: 43 bytes leftover after parsing attributes in process `syz.0.113'. [ 61.314276][ T1113] ata1.00: error: { ABRT } [ 61.315870][ T6425] validate_nla: 2 callbacks suppressed [ 61.315878][ T6425] netlink: 'syz.0.113': attribute type 5 has an invalid length. [ 61.320463][ T1113] ata1.00: configured for UDMA/100 [ 61.321923][ T6425] netlink: 43 bytes leftover after parsing attributes in process `syz.0.113'. [ 61.324566][ T1113] ata1: EH complete [ 61.352042][ T40] audit: type=1400 audit(1752637733.039:290): avc: denied { mount } for pid=6427 comm="syz.0.114" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.420085][ T40] audit: type=1400 audit(1752637733.109:291): avc: denied { unmount } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.465373][ T40] audit: type=1400 audit(1752637733.159:292): avc: denied { connect } for pid=6432 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.472074][ T40] audit: type=1400 audit(1752637733.159:293): avc: denied { create } for pid=6432 comm="syz.0.115" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.478550][ T40] audit: type=1400 audit(1752637733.159:294): avc: denied { write } for pid=6432 comm="syz.0.115" name="file0" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.486984][ T40] audit: type=1400 audit(1752637733.159:295): avc: denied { open } for pid=6432 comm="syz.0.115" path="/26/file0" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.493893][ T40] audit: type=1400 audit(1752637733.159:296): avc: denied { ioctl } for pid=6432 comm="syz.0.115" path="/26/file0" dev="tmpfs" ino=166 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.501150][ T40] audit: type=1400 audit(1752637733.179:297): avc: denied { remount } for pid=6432 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.623430][ T6437] capability: warning: `syz.0.116' uses deprecated v2 capabilities in a way that may be insecure [ 61.759375][ T6446] netlink: 'syz.0.117': attribute type 10 has an invalid length. [ 61.768222][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.772000][ T6446] team0: Failed to send port change of device bond0 via netlink (err -105) [ 61.775221][ T6446] team0: Failed to send options change via netlink (err -105) [ 61.777590][ T6446] team0: Port device bond0 added [ 62.679787][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 63.074715][ T6485] @: renamed from vlan0 (while UP) [ 63.156316][ T6489] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 63.160579][ T6489] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 64.272671][ T5311] Bluetooth: hci3: command 0x0405 tx timeout [ 64.381496][ T6511] overlayfs: cannot append lower layer [ 64.503678][ T6519] kvm: MONITOR instruction emulated as NOP! [ 65.340824][ T6529] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 65.565247][ T6539] overlayfs: failed to resolve './file0': -2 [ 65.814294][ T6552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6552 comm=syz.0.149 [ 65.818571][ T6552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6552 comm=syz.0.149 [ 65.863355][ T6560] bridge0: entered allmulticast mode [ 65.870830][ T6560] pim6reg: entered allmulticast mode [ 65.876506][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 65.880118][ T6560] bridge_slave_1: left allmulticast mode [ 65.882538][ T6560] bridge_slave_1: left promiscuous mode [ 65.886288][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.894293][ T6560] bridge_slave_0: left allmulticast mode [ 65.896594][ T6560] bridge_slave_0: left promiscuous mode [ 65.898966][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.917703][ T6560] bridge0 (unregistering): left allmulticast mode [ 65.917793][ T6558] netlink: 'syz.3.150': attribute type 2 has an invalid length. [ 66.090416][ T6569] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 66.096975][ T6572] random: crng reseeded on system resumption [ 66.118570][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 66.181213][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 66.181231][ T40] audit: type=1400 audit(1752637737.869:346): avc: denied { add_name } for pid=6574 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.192753][ T40] audit: type=1400 audit(1752637737.869:347): avc: denied { create } for pid=6574 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.201387][ T40] audit: type=1400 audit(1752637737.869:348): avc: denied { write } for pid=6574 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wlan2.link" dev="tmpfs" ino=2758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.213883][ T40] audit: type=1400 audit(1752637737.869:349): avc: denied { append } for pid=6574 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" dev="tmpfs" ino=2758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.229762][ T40] audit: type=1400 audit(1752637737.919:350): avc: denied { remove_name } for pid=6577 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=2758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.239266][ T40] audit: type=1400 audit(1752637737.919:351): avc: denied { unlink } for pid=6577 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=2758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.731162][ T40] audit: type=1400 audit(1752637738.419:352): avc: denied { checkpoint_restore } for pid=6579 comm="syz.3.156" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.739396][ T40] audit: type=1400 audit(1752637738.429:353): avc: denied { ioctl } for pid=6579 comm="syz.3.156" path="socket:[13371]" dev="sockfs" ino=13371 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 66.765606][ T6583] ipt_ECN: cannot use operation on non-tcp rule [ 66.768122][ T6583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'. [ 66.770904][ T6583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'. [ 67.064960][ T40] audit: type=1400 audit(1752637738.759:354): avc: denied { read } for pid=6590 comm="syz.0.158" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.164471][ T40] audit: type=1400 audit(1752637738.859:355): avc: denied { read } for pid=6600 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.193895][ T5960] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 67.368442][ T6618] /dev/nullb0: Can't open blockdev [ 67.392137][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 67.397289][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 67.398450][ T6621] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 67.452497][ T6625] 9pnet_virtio: no channels available for device syz [ 67.535748][ T6626] block device autoloading is deprecated and will be removed. [ 68.436156][ T6641] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 68.438584][ T6641] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 68.440956][ T6641] netlink: 610 bytes leftover after parsing attributes in process `syz.3.174'. [ 68.492596][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 68.647647][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.652011][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 68.656490][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 68.659962][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.673897][ T10] usb 5-1: config 0 descriptor?? [ 68.676507][ T6635] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 68.884186][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 68.886203][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 68.893264][ T10] usb 5-1: USB disconnect, device number 2 [ 68.922106][ T6662] netlink: 'syz.3.181': attribute type 23 has an invalid length. [ 69.267237][ T6674] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.176975][ T6678] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 70.179371][ T6678] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.184992][ T6678] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.188778][ T6678] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.190861][ T6678] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.195771][ T6678] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.199288][ T6678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.201416][ T6678] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.204810][ T6678] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.208016][ T6678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.210077][ T6678] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.212717][ T6678] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.245682][ T6683] 9pnet_virtio: no channels available for device syz [ 70.250170][ T6683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6683 comm=syz.3.188 [ 70.453536][ T6014] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.522481][ T6015] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 70.613363][ T6014] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 70.624099][ T6014] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 70.626941][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 70.629426][ T6014] usb 5-1: Product: syz [ 70.630986][ T6014] usb 5-1: Manufacturer: syz [ 70.632596][ T6014] usb 5-1: SerialNumber: syz [ 70.637038][ T6014] usb 5-1: config 0 descriptor?? [ 70.703773][ T6015] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.706934][ T6015] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 70.709676][ T6015] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 70.713305][ T6015] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 70.716665][ T6015] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 70.720009][ T6015] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 70.722820][ T6015] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.731472][ T6685] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 70.735317][ T6015] hub 8-1:1.0: bad descriptor, ignoring hub [ 70.737564][ T6015] hub 8-1:1.0: probe with driver hub failed with error -5 [ 70.739949][ T6015] cdc_wdm 8-1:1.0: skipping garbage [ 70.741562][ T6015] cdc_wdm 8-1:1.0: skipping garbage [ 70.746982][ T6015] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 70.748917][ T6015] cdc_wdm 8-1:1.0: Unknown control protocol [ 70.854676][ T10] usb 5-1: USB disconnect, device number 3 [ 70.998306][ T5311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.002516][ T5311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.006119][ T5311] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.009695][ T5311] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.012893][ T5311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.075174][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.077710][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.128853][ T6693] chnl_net:caif_netlink_parms(): no params data found [ 71.192172][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.195583][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.198665][ T6693] bridge_slave_0: entered allmulticast mode [ 71.202597][ T6693] bridge_slave_0: entered promiscuous mode [ 71.207753][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.210783][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.214015][ T6693] bridge_slave_1: entered allmulticast mode [ 71.217849][ T6693] bridge_slave_1: entered promiscuous mode [ 71.266654][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.271083][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.311897][ T6693] team0: Port device team_slave_0 added [ 71.317446][ T6693] team0: Port device team_slave_1 added [ 71.351571][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.354227][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.361818][ T6693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.365928][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.368000][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.376530][ T6693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.415392][ T6693] hsr_slave_0: entered promiscuous mode [ 71.417575][ T6693] hsr_slave_1: entered promiscuous mode [ 71.419620][ T6693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.421961][ T6693] Cannot create hsr debugfs directory [ 71.472467][ T5311] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.495126][ T6685] usb 8-1: reset low-speed USB device number 6 using dummy_hcd [ 71.526959][ T6693] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.531074][ T6693] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.535780][ T6693] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.540012][ T6693] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.558144][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.561540][ T6693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.564744][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.567616][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.612216][ T6693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.623754][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.626941][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.637278][ T6693] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.643625][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.646201][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.652023][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.654986][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.769387][ T6712] syz.0.192: attempt to access beyond end of device [ 71.769387][ T6712] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 71.775452][ T6712] XFS (loop0): SB validate failed with error -5. [ 71.792914][ T6685] usb 8-1: device firmware changed [ 71.795646][ T6685] cdc_wdm 8-1:1.0: Error autopm - -16 [ 71.796969][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.799643][ T837] usb 8-1: USB disconnect, device number 6 [ 71.830086][ T6723] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.840296][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 71.840304][ T40] audit: type=1400 audit(1752637743.529:380): avc: denied { create } for pid=6720 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.849924][ T6723] overlayfs: failed to resolve './file1': -2 [ 71.853339][ T6723] overlayfs: failed to resolve './file1': -2 [ 71.893258][ T40] audit: type=1400 audit(1752637743.579:381): avc: denied { write } for pid=6729 comm="syz.0.194" name="hidraw0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.945593][ T6693] veth0_vlan: entered promiscuous mode [ 71.951866][ T6693] veth1_vlan: entered promiscuous mode [ 71.952699][ T837] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 71.973695][ T6693] veth0_macvtap: entered promiscuous mode [ 71.978799][ T6693] veth1_macvtap: entered promiscuous mode [ 71.991831][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.001790][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.007296][ T6693] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.009964][ T6693] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.015454][ T6693] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.018978][ T6693] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.057345][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.059698][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.074990][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.077308][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.084093][ T40] audit: type=1400 audit(1752637743.779:382): avc: denied { mounton } for pid=6693 comm="syz-executor" path="/syzkaller.crzohI/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.090904][ T40] audit: type=1400 audit(1752637743.779:383): avc: denied { mounton } for pid=6693 comm="syz-executor" path="/syzkaller.crzohI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.106309][ T837] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.109329][ T837] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.112159][ T837] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.117269][ T837] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 72.120025][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.126538][ T6694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.132769][ T837] hub 8-1:1.0: bad descriptor, ignoring hub [ 72.135624][ T837] hub 8-1:1.0: probe with driver hub failed with error -5 [ 72.138889][ T837] cdc_wdm 8-1:1.0: skipping garbage [ 72.141067][ T837] cdc_wdm 8-1:1.0: skipping garbage [ 72.143613][ T837] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 72.168047][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 72.192642][ T5311] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.200373][ T40] audit: type=1400 audit(1752637743.889:384): avc: denied { bind } for pid=6740 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.206390][ T40] audit: type=1400 audit(1752637743.889:385): avc: denied { getopt } for pid=6740 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.249481][ T40] audit: type=1400 audit(1752637743.939:386): avc: denied { connect } for pid=6742 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.259863][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 72.268284][ T6743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=6743 comm=syz.4.197 [ 72.272612][ T5960] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.272753][ T5311] Bluetooth: hci3: command 0x0405 tx timeout [ 72.274225][ T6743] netlink: 'syz.4.197': attribute type 13 has an invalid length. [ 72.274262][ T6743] macvtap0: entered promiscuous mode [ 72.282144][ T6743] macvtap0: refused to change device tx_queue_len [ 72.330941][ T6685] devpts: Bad value for 'max' [ 72.380134][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.383524][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.387647][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.390864][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.393915][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.396707][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.442567][ T54] usb 8-1: USB disconnect, device number 7 [ 72.612574][ T6306] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 72.775604][ T6306] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 72.778324][ T6306] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.780679][ T6306] usb 9-1: Product: syz [ 72.782146][ T6306] usb 9-1: Manufacturer: syz [ 72.784315][ T6306] usb 9-1: SerialNumber: syz [ 72.790511][ T6306] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 72.806753][ T40] audit: type=1400 audit(1752637744.499:387): avc: denied { firmware_load } for pid=54 comm="kworker/1:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 72.814700][ T54] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 72.879113][ T40] audit: type=1400 audit(1752637744.569:388): avc: denied { mounton } for pid=6748 comm="syz.3.199" path="mnt:[4026532879]" dev="nsfs" ino=4026532879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.881856][ T6750] 9pnet_virtio: no channels available for device syz [ 72.889393][ T6750] netlink: 92 bytes leftover after parsing attributes in process `syz.0.200'. [ 72.901136][ T6751] netlink: 60 bytes leftover after parsing attributes in process `syz.3.199'. [ 72.905396][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.199'. [ 72.940762][ T6758] netlink: 6 bytes leftover after parsing attributes in process `syz.0.201'. [ 72.960085][ T6754] xt_socket: unknown flags 0x50 [ 72.991583][ T6761] misc userio: The device must be registered before sending interrupts [ 73.039406][ T6763] can: request_module (can-proto-0) failed. [ 73.063733][ T6306] usb 9-1: USB disconnect, device number 2 [ 73.073658][ T5311] Bluetooth: hci4: command tx timeout [ 73.402557][ T839] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 73.532521][ T839] usb 8-1: device descriptor read/64, error -71 [ 73.552731][ T5311] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.658435][ T6786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3778 sclass=netlink_route_socket pid=6786 comm=syz.4.211 [ 73.664139][ T6786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3778 sclass=netlink_route_socket pid=6786 comm=syz.4.211 [ 73.668559][ T6786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3778 sclass=netlink_route_socket pid=6786 comm=syz.4.211 [ 73.673051][ T6786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3778 sclass=netlink_route_socket pid=6786 comm=syz.4.211 [ 73.677387][ T6786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3778 sclass=netlink_route_socket pid=6786 comm=syz.4.211 [ 73.681654][ T6786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3778 sclass=netlink_route_socket pid=6786 comm=syz.4.211 [ 73.686251][ T6786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3778 sclass=netlink_route_socket pid=6786 comm=syz.4.211 [ 73.690693][ T6786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3778 sclass=netlink_route_socket pid=6786 comm=syz.4.211 [ 73.695364][ T6786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3778 sclass=netlink_route_socket pid=6786 comm=syz.4.211 [ 73.703656][ T6786] netlink: 48 bytes leftover after parsing attributes in process `syz.4.211'. [ 73.705500][ T40] audit: type=1400 audit(1752637745.399:389): avc: denied { getopt } for pid=6784 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.770474][ T6789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.782704][ T839] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 73.872832][ T54] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 73.876122][ T54] ath9k_htc: Failed to initialize the device [ 73.880757][ T6306] usb 9-1: ath9k_htc: USB layer deinitialized [ 73.883224][ T6791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.895243][ T6791] sctp: [Deprecated]: syz.4.213 (pid 6791) Use of int in max_burst socket option deprecated. [ 73.895243][ T6791] Use struct sctp_assoc_value instead [ 73.923338][ T839] usb 8-1: device descriptor read/64, error -71 [ 73.932413][ T6757] comedi comedi3: reset error (fatal) [ 74.032852][ T839] usb usb8-port1: attempt power cycle [ 74.282783][ T5311] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.342592][ T6306] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 74.362619][ T5311] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.362896][ T5960] Bluetooth: hci3: command 0x0405 tx timeout [ 74.392448][ T839] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 74.423256][ T839] usb 8-1: device descriptor read/8, error -71 [ 74.508355][ T6306] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 74.511242][ T6306] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.513870][ T6306] usb 9-1: Product: syz [ 74.515441][ T6306] usb 9-1: Manufacturer: syz [ 74.516903][ T6306] usb 9-1: SerialNumber: syz [ 74.521781][ T6306] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 74.534960][ T6800] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 74.590166][ T6802] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20000 [ 74.632482][ T6804] netlink: 64 bytes leftover after parsing attributes in process `syz.0.219'. [ 74.637173][ T5960] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 74.692509][ T839] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 74.713400][ T839] usb 8-1: device descriptor read/8, error -71 [ 74.832715][ T839] usb usb8-port1: unable to enumerate USB device [ 74.931838][ T6824] 9pnet_virtio: no channels available for device syz [ 74.960373][ T837] usb 9-1: USB disconnect, device number 3 [ 75.119130][ T6831] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 75.121537][ T6831] netlink: 40 bytes leftover after parsing attributes in process `syz.0.227'. [ 75.124702][ T6831] netlink: 52 bytes leftover after parsing attributes in process `syz.0.227'. [ 75.152519][ T5960] Bluetooth: hci4: command tx timeout [ 75.166441][ T6834] QAT: Invalid ioctl -2144835806 [ 75.441180][ T6841] netlink: 'syz.0.231': attribute type 2 has an invalid length. [ 75.443769][ T6841] nbd: must specify a device to reconfigure [ 75.585691][ T6845] /dev/sr0: Can't open blockdev [ 75.632538][ T5960] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.792630][ T6800] usb 9-1: Service connection timeout for: 256 [ 75.794528][ T6800] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 75.797686][ T6800] ath9k_htc: Failed to initialize the device [ 75.802749][ T837] usb 9-1: ath9k_htc: USB layer deinitialized [ 75.838765][ T5311] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.843844][ T5311] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.847193][ T5311] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.850896][ T5311] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.854370][ T5311] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.871602][ T6871] netlink: 'syz.4.241': attribute type 7 has an invalid length. [ 75.886519][ T6871] : entered promiscuous mode [ 75.962493][ T99] bond0: (slave bond_slave_0): interface is now down [ 75.965073][ T99] bond0: (slave bond_slave_1): interface is now down [ 75.968824][ T99] bond0: now running without any active interface! [ 76.004771][ T6868] chnl_net:caif_netlink_parms(): no params data found [ 76.077747][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.079965][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.082105][ T6868] bridge_slave_0: entered allmulticast mode [ 76.085560][ T6868] bridge_slave_0: entered promiscuous mode [ 76.090515][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.092973][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.095234][ T6868] bridge_slave_1: entered allmulticast mode [ 76.097734][ T6868] bridge_slave_1: entered promiscuous mode [ 76.141200][ T6868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.146096][ T6868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.147636][ T6891] 9pnet_virtio: no channels available for device syz [ 76.207810][ T6868] team0: Port device team_slave_0 added [ 76.212038][ T6868] team0: Port device team_slave_1 added [ 76.251409][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.253898][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.261952][ T6868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.280832][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.284079][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.291805][ T6868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.347114][ T6868] hsr_slave_0: entered promiscuous mode [ 76.349352][ T6868] hsr_slave_1: entered promiscuous mode [ 76.351432][ T6868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.354096][ T6868] Cannot create hsr debugfs directory [ 76.432490][ T5311] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.442483][ T5311] Bluetooth: hci3: command 0x0405 tx timeout [ 76.474047][ T6868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.478172][ T6868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.482005][ T6868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.486741][ T6868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.501196][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.503415][ T6868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.505676][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.507843][ T6868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.540189][ T6868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.550528][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.560713][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.568958][ T6868] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.590625][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.593057][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.598161][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.600486][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.723967][ T6868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.885805][ T6868] veth0_vlan: entered promiscuous mode [ 76.890871][ T6868] veth1_vlan: entered promiscuous mode [ 76.913675][ T6868] veth0_macvtap: entered promiscuous mode [ 76.917622][ T6868] veth1_macvtap: entered promiscuous mode [ 76.928281][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.937492][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.942498][ T6868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.945641][ T6868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.948630][ T6868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.951300][ T6868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.988779][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.991963][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.007583][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.009991][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.074559][ T6945] batman_adv: batadv0: Adding interface: dummy0 [ 77.076957][ T6945] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.085321][ T6945] batman_adv: batadv0: Interface activated: dummy0 [ 77.088611][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 77.088620][ T40] audit: type=1400 audit(1752637748.779:410): avc: denied { ioctl } for pid=6943 comm="syz.5.238" path="socket:[16430]" dev="sockfs" ino=16430 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.099554][ T6945] vlan0: mtu less than device minimum [ 77.233810][ T5311] Bluetooth: hci4: command tx timeout [ 77.256844][ T6969] futex_wake_op: syz.5.259 tries to shift op by -1; fix this program [ 77.273826][ T6961] xt_hashlimit: size too large, truncated to 1048576 [ 77.485768][ T5960] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 77.587646][ T40] audit: type=1400 audit(1752637749.279:411): avc: denied { setopt } for pid=6993 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.595131][ T40] audit: type=1400 audit(1752637749.279:412): avc: denied { ioctl } for pid=6993 comm="syz.4.270" path="socket:[15505]" dev="sockfs" ino=15505 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.605735][ T40] audit: type=1400 audit(1752637749.289:413): avc: denied { create } for pid=6986 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.611667][ T40] audit: type=1400 audit(1752637749.289:414): avc: denied { ioctl } for pid=6986 comm="syz.3.268" path="socket:[14852]" dev="sockfs" ino=14852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.659735][ T6992] /dev/sr0: Can't open blockdev [ 77.872561][ T5960] Bluetooth: hci5: command tx timeout [ 78.383139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.404056][ T40] audit: type=1400 audit(1752637750.099:415): avc: denied { setattr } for pid=7015 comm="syz.3.275" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.471685][ T5960] Bluetooth: hci2: unexpected event for opcode 0x080f [ 78.651355][ T40] audit: type=1400 audit(1752637750.339:416): avc: denied { connect } for pid=7043 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.716877][ T40] audit: type=1400 audit(1752637750.399:417): avc: denied { bind } for pid=7047 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.736549][ T7057] __nla_validate_parse: 4 callbacks suppressed [ 78.736559][ T7057] netlink: 16 bytes leftover after parsing attributes in process `syz.5.287'. [ 78.748565][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.289'. [ 78.790644][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 78.794464][ T7065] dlm: no locking on control device [ 78.873267][ T40] audit: type=1400 audit(1752637750.569:418): avc: denied { setopt } for pid=7070 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.933052][ T40] audit: type=1400 audit(1752637750.629:419): avc: denied { ioctl } for pid=7077 comm="syz.4.293" path="socket:[14911]" dev="sockfs" ino=14911 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.005245][ T7093] loop6: detected capacity change from 0 to 524287999 [ 79.018027][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.020809][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.024156][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.026743][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.029246][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.032965][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.036343][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.039586][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.045437][ T5959] ldm_validate_partition_table(): Disk read failed. [ 79.048255][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.051365][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.054795][ T5959] Dev loop6: unable to read RDB block 0 [ 79.057348][ T5959] loop6: unable to read partition table [ 79.063774][ T7093] ldm_validate_partition_table(): Disk read failed. [ 79.066926][ T7093] Dev loop6: unable to read RDB block 0 [ 79.069520][ T7093] loop6: unable to read partition table [ 79.071928][ T7093] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 79.312621][ T5960] Bluetooth: hci4: command tx timeout [ 79.472670][ T5311] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 79.523065][ T7117] 9pnet_virtio: no channels available for device syz [ 79.654508][ T7125] 9pnet_virtio: no channels available for device syz [ 79.684878][ T7128] ======================================================= [ 79.684878][ T7128] WARNING: The mand mount option has been deprecated and [ 79.684878][ T7128] and is ignored by this kernel. Remove the mand [ 79.684878][ T7128] option from the mount to silence this warning. [ 79.684878][ T7128] ======================================================= [ 79.699306][ T7128] overlay: Unknown parameter 'appraise' [ 79.906702][ T7138] netlink: 64 bytes leftover after parsing attributes in process `syz.4.316'. [ 79.910311][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 79.913317][ T7138] netlink: 'syz.4.316': attribute type 21 has an invalid length. [ 79.915881][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.317'. [ 79.919450][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.317'. [ 79.935283][ T7140] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 79.938551][ T7140] team0: Port device batadv1 added [ 79.945484][ T7141] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 79.949377][ T7141] team0: Port device batadv2 added [ 79.970431][ T5311] Bluetooth: hci5: command tx timeout [ 80.013325][ T7147] syz.0.319: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 80.018724][ T7147] CPU: 3 UID: 0 PID: 7147 Comm: syz.0.319 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 80.018739][ T7147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.018745][ T7147] Call Trace: [ 80.018749][ T7147] [ 80.018753][ T7147] dump_stack_lvl+0x16c/0x1f0 [ 80.018787][ T7147] warn_alloc+0x248/0x3a0 [ 80.018802][ T7147] ? __pfx_warn_alloc+0x10/0x10 [ 80.018822][ T7147] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 80.018834][ T7147] ? __vmalloc_node_noprof+0xad/0xf0 [ 80.018848][ T7147] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 80.018865][ T7147] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 80.018879][ T7147] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 80.018896][ T7147] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 80.018907][ T7147] vmalloc_user_noprof+0x9e/0xe0 [ 80.018919][ T7147] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 80.018930][ T7147] vb2_vmalloc_alloc+0x135/0x3f0 [ 80.018942][ T7147] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 80.018953][ T7147] __vb2_queue_alloc+0x8c6/0x1280 [ 80.018978][ T7147] vb2_core_reqbufs+0xa90/0xfe0 [ 80.018991][ T7147] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 80.019002][ T7147] ? __pfx___mutex_trylock_common+0x10/0x10 [ 80.019014][ T7147] ? __pfx___might_resched+0x10/0x10 [ 80.019031][ T7147] ? trace_contention_end+0xdd/0x130 [ 80.019042][ T7147] ? __mutex_lock+0x1ca/0xb90 [ 80.019059][ T7147] vb2_reqbufs+0x1a3/0x1f0 [ 80.019075][ T7147] ? __pfx_vb2_reqbufs+0x10/0x10 [ 80.019089][ T7147] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 80.019109][ T7147] ? kasan_quarantine_put+0x10a/0x240 [ 80.019123][ T7147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.019138][ T7147] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 80.019156][ T7147] v4l_reqbufs+0x14f/0x1e0 [ 80.019170][ T7147] __video_do_ioctl+0xb40/0xfc0 [ 80.019186][ T7147] ? __might_fault+0xe3/0x190 [ 80.019201][ T7147] ? __pfx___video_do_ioctl+0x10/0x10 [ 80.019220][ T7147] video_usercopy+0x4d0/0x1720 [ 80.019235][ T7147] ? __pfx___video_do_ioctl+0x10/0x10 [ 80.019249][ T7147] ? selinux_kernel_read_file+0x110/0x130 [ 80.019264][ T7147] ? __pfx_video_usercopy+0x10/0x10 [ 80.019289][ T7147] v4l2_ioctl+0x1ba/0x250 [ 80.019302][ T7147] ? __pfx_v4l2_ioctl+0x10/0x10 [ 80.019316][ T7147] __x64_sys_ioctl+0x18e/0x210 [ 80.019330][ T7147] do_syscall_64+0xcd/0x4c0 [ 80.019347][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.019358][ T7147] RIP: 0033:0x7fec1cb8e929 [ 80.019367][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.019377][ T7147] RSP: 002b:00007fec1d9e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.019387][ T7147] RAX: ffffffffffffffda RBX: 00007fec1cdb5fa0 RCX: 00007fec1cb8e929 [ 80.019394][ T7147] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000007 [ 80.019400][ T7147] RBP: 00007fec1cc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 80.019406][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.019412][ T7147] R13: 0000000000000000 R14: 00007fec1cdb5fa0 R15: 00007ffc785e8bb8 [ 80.019425][ T7147] [ 80.019429][ T7147] Mem-Info: [ 80.123293][ T7147] active_anon:8633 inactive_anon:0 isolated_anon:59 [ 80.123293][ T7147] active_file:13589 inactive_file:40592 isolated_file:30 [ 80.123293][ T7147] unevictable:1768 dirty:51 writeback:0 [ 80.123293][ T7147] slab_reclaimable:11910 slab_unreclaimable:77323 [ 80.123293][ T7147] mapped:29654 shmem:2400 pagetables:1241 [ 80.123293][ T7147] sec_pagetables:304 bounce:0 [ 80.123293][ T7147] kernel_misc_reclaimable:0 [ 80.123293][ T7147] free:423835 free_pcp:25695 free_cma:0 [ 80.137964][ T7147] Node 0 active_anon:34532kB inactive_anon:0kB active_file:54356kB inactive_file:162164kB unevictable:3536kB isolated(anon):236kB isolated(file):120kB mapped:118616kB dirty:192kB writeback:0kB shmem:6064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13488kB pagetables:4756kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB [ 80.148472][ T7147] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 80.158332][ T7147] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 80.167000][ T7147] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 80.168753][ T7147] Node 0 DMA32 free:73888kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34532kB inactive_anon:0kB active_file:54356kB inactive_file:162164kB unevictable:3536kB writepending:192kB present:2080628kB managed:1264184kB mlocked:0kB bounce:0kB free_pcp:88404kB local_pcp:10244kB free_cma:0kB [ 80.178633][ T7147] lowmem_reserve[]: 0 0 0 0 0 [ 80.180153][ T7147] Node 1 Normal free:1606092kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:12kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:14368kB local_pcp:3696kB free_cma:0kB [ 80.190775][ T7147] lowmem_reserve[]: 0 0 0 0 0 [ 80.192218][ T7147] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 80.196207][ T7147] Node 0 DMA32: 918*4kB (UM) 112*8kB (UME) 77*16kB (UM) 148*32kB (UM) 74*64kB (ME) 59*128kB (UME) 31*256kB (UM) 30*512kB (UM) 19*1024kB (UM) 2*2048kB (M) 1*4096kB (M) = 73768kB [ 80.201404][ T7147] Node 1 Normal: 3*4kB (UME) 4*8kB (UME) 8*16kB (ME) 13*32kB (ME) 12*64kB (ME) 5*128kB (ME) 2*256kB (UE) 4*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 390*4096kB (M) = 1606092kB [ 80.208098][ T7147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.211223][ T7147] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.214114][ T7147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.216912][ T7147] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.219637][ T7147] 56607 total pagecache pages [ 80.221058][ T7147] 0 pages in swap cache [ 80.222311][ T7147] Free swap = 124996kB [ 80.223823][ T7147] Total swap = 124996kB [ 80.225130][ T7147] 1048443 pages RAM [ 80.226337][ T7147] 0 pages HighMem/MovableOnly [ 80.227931][ T7147] 283068 pages reserved [ 80.229201][ T7147] 0 pages cma reserved [ 80.252580][ T6015] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 80.272491][ T53] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 80.284354][ T7154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.417179][ T6015] usb 9-1: config 1 has an invalid interface number: 140 but max is 0 [ 80.420098][ T6015] usb 9-1: config 1 has no interface number 0 [ 80.422363][ T6015] usb 9-1: config 1 interface 140 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 80.426814][ T6015] usb 9-1: config 1 interface 140 altsetting 1 endpoint 0x6 has invalid maxpacket 2047, setting to 64 [ 80.430915][ T6015] usb 9-1: config 1 interface 140 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 80.436411][ T6015] usb 9-1: config 1 interface 140 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 80.440775][ T53] usb 10-1: Using ep0 maxpacket: 16 [ 80.443878][ T6015] usb 9-1: config 1 interface 140 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 80.448229][ T6015] usb 9-1: config 1 interface 140 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 80.452746][ T6015] usb 9-1: config 1 interface 140 altsetting 1 bulk endpoint 0x7 has invalid maxpacket 1023 [ 80.457228][ T6015] usb 9-1: config 1 interface 140 has no altsetting 0 [ 80.462106][ T53] usb 10-1: config 2 has an invalid interface number: 155 but max is 3 [ 80.465308][ T53] usb 10-1: config 2 has an invalid interface number: 213 but max is 3 [ 80.468040][ T53] usb 10-1: config 2 has an invalid interface number: 41 but max is 3 [ 80.471239][ T53] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 80.474650][ T53] usb 10-1: config 2 has 3 interfaces, different from the descriptor's value: 4 [ 80.478183][ T6015] usb 9-1: New USB device found, idVendor=0fcf, idProduct=1003, bcdDevice=34.68 [ 80.481220][ T6015] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.483969][ T53] usb 10-1: config 2 has no interface number 0 [ 80.485815][ T53] usb 10-1: config 2 has no interface number 1 [ 80.487735][ T53] usb 10-1: config 2 has no interface number 2 [ 80.489880][ T53] usb 10-1: config 2 interface 155 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 80.493758][ T6015] usb 9-1: Product: â Š [ 80.495266][ T6015] usb 9-1: Manufacturer: 屳똊ï»ëŸ¾í곉â¸æ®‰å‰ î‡ì¥”ìšäµ€ë°°ã‰”뽱圪橠촰挙즆ﰿ︀췗璒㭻桩ꔹ筬뗚ꋥ尣ˎ¬ä¼ìšå¶£é‹‰ç·†ïž˜í‚טּ諨춽낕㬢å¶ë¥‘ç”è•ã¾³çš‚셾둽ǒã“ç³ç‘¬ï¯Œâ´“ã‚勵穜î‡ì᜖얉碆娰ëºéŸé…°ì’»ì†…㎱뢣౷沤íµîµ¤â‹‘à¿Œæ‚⹮姭ᵻ쓢ꒇê§é—藾ꀼ㘬ꡬﶺ娜졥᰻갵ﱆ렖츀ㄠ楘㵧䆃燴꼰⯈축膘徘笧 [ 80.506553][ T53] usb 10-1: config 2 interface 155 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 80.509924][ T53] usb 10-1: config 2 interface 213 altsetting 32 has a duplicate endpoint with address 0xF, skipping [ 80.514401][ T53] usb 10-1: config 2 interface 213 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 80.517662][ T53] usb 10-1: config 2 interface 213 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 80.521017][ T53] usb 10-1: config 2 interface 213 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 80.525254][ T53] usb 10-1: config 2 interface 213 altsetting 32 has a duplicate endpoint with address 0x6, skipping [ 80.528798][ T53] usb 10-1: config 2 interface 213 altsetting 32 has a duplicate endpoint with address 0x6, skipping [ 80.529268][ T7143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 80.532169][ T53] usb 10-1: config 2 interface 213 altsetting 32 has a duplicate endpoint with address 0x9, skipping [ 80.538985][ T53] usb 10-1: config 2 interface 213 altsetting 32 bulk endpoint 0x7 has invalid maxpacket 1023 [ 80.542170][ T53] usb 10-1: config 2 interface 213 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 80.545669][ T53] usb 10-1: config 2 interface 213 altsetting 32 has an endpoint descriptor with address 0x49, changing to 0x9 [ 80.549320][ T53] usb 10-1: config 2 interface 213 altsetting 32 has a duplicate endpoint with address 0x9, skipping [ 80.552738][ T53] usb 10-1: config 2 interface 213 altsetting 32 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 80.557258][ T53] usb 10-1: config 2 interface 41 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.557509][ T7164] geneve2: entered allmulticast mode [ 80.561469][ T53] usb 10-1: config 2 interface 41 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.567687][ T53] usb 10-1: config 2 interface 155 has no altsetting 0 [ 80.570407][ T53] usb 10-1: config 2 interface 213 has no altsetting 0 [ 80.574931][ T53] usb 10-1: New USB device found, idVendor=0af0, idProduct=8900, bcdDevice=d5.5b [ 80.577814][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.580365][ T53] usb 10-1: Product: syz [ 80.582084][ T53] usb 10-1: Manufacturer: ã¡à®½ï–ªî²¤å‚‚邊惟⓭í‹í†„茫眘跡뎒ê㸇挢稭阵謌齾층ꀬå‡î«€ï¬œà«™äƒ—ଞ묂璘 [ 80.586356][ T53] usb 10-1: SerialNumber: syz [ 80.595041][ T7166] netlink: 'syz.3.326': attribute type 2 has an invalid length. [ 80.615884][ T7166] Bluetooth: hci1: Frame reassembly failed (-84) [ 80.619743][ T60] Bluetooth: hci1: Frame reassembly failed (-84) [ 80.800100][ T7146] xt_ecn: cannot match TCP bits for non-tcp packets [ 80.809573][ T53] hso 10-1:2.155: Not our interface [ 80.816268][ T53] hso 10-1:2.213: Not our interface [ 80.827025][ T53] hso 10-1:2.41: Not our interface [ 80.834521][ T53] usb 10-1: USB disconnect, device number 2 [ 80.845590][ T6015] cp210x 9-1:1.140: cp210x converter detected [ 80.847857][ T6015] cp210x 9-1:1.140: failed to get vendor val 0x370b size 1: -71 [ 80.850195][ T6015] cp210x 9-1:1.140: querying part number failed [ 80.857877][ T6015] usb 9-1: cp210x converter now attached to ttyUSB0 [ 80.866883][ T6015] usb 9-1: USB disconnect, device number 4 [ 80.875030][ T6015] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 80.877759][ T6015] cp210x 9-1:1.140: device disconnected [ 80.978442][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.330'. [ 81.315244][ T61] cfg80211: failed to load regulatory.db [ 81.445341][ T7192] tipc: Enabling of bearer rejected, failed to enable media [ 81.484874][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.489313][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.492078][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.495593][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.499674][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.504199][ T7192] bond1: entered promiscuous mode [ 81.624837][ T7195] chnl_net:caif_netlink_parms(): no params data found [ 81.718100][ T7217] syz.5.342 (7217) used greatest stack depth: 20008 bytes left [ 81.740447][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.743553][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.745820][ T7195] bridge_slave_0: entered allmulticast mode [ 81.748502][ T7195] bridge_slave_0: entered promiscuous mode [ 81.751697][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.755200][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.757593][ T7195] bridge_slave_1: entered allmulticast mode [ 81.760258][ T7195] bridge_slave_1: entered promiscuous mode [ 81.795563][ T7195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.800303][ T7195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.846279][ T7195] team0: Port device team_slave_0 added [ 81.850175][ T7195] team0: Port device team_slave_1 added [ 81.889015][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.891225][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.899569][ T7195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.905668][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.908517][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.919159][ T7195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.973115][ T7195] hsr_slave_0: entered promiscuous mode [ 81.975352][ T7195] hsr_slave_1: entered promiscuous mode [ 81.978130][ T7195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.980528][ T7195] Cannot create hsr debugfs directory [ 82.033266][ T5960] Bluetooth: hci5: command tx timeout [ 82.094044][ T7241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.105561][ T7241] netlink: 172 bytes leftover after parsing attributes in process `syz.5.347'. [ 82.123446][ T7195] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 82.128319][ T7195] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 82.132188][ T7195] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 82.136709][ T7195] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 82.183066][ T7195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.194179][ T7195] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.199292][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.201453][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.207183][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.209407][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.321832][ T7195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.372597][ T5988] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 82.458025][ T7195] veth0_vlan: entered promiscuous mode [ 82.465214][ T7195] veth1_vlan: entered promiscuous mode [ 82.482267][ T7195] veth0_macvtap: entered promiscuous mode [ 82.488314][ T7195] veth1_macvtap: entered promiscuous mode [ 82.498106][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.505635][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.511142][ T7195] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.515813][ T7195] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.519185][ T7195] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.522739][ T7195] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.523682][ T5960] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 82.529180][ T5960] Bluetooth: hci2: Injecting HCI hardware error event [ 82.532337][ T5960] Bluetooth: hci2: hardware error 0x00 [ 82.554582][ T5988] usb 10-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 82.559153][ T5988] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.562491][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.565955][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.567327][ T5988] usb 10-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 82.571977][ T5988] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.575684][ T5988] usb 10-1: Product: syz [ 82.577455][ T5988] usb 10-1: Manufacturer: syz [ 82.579327][ T5988] usb 10-1: SerialNumber: syz [ 82.581128][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.584507][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.584624][ T5988] usb 10-1: config 0 descriptor?? [ 82.672680][ T5311] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 82.738701][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 82.803702][ T7279] fuse: Bad value for 'fd' [ 82.807337][ T5988] usb 10-1: USB disconnect, device number 3 [ 83.006865][ T7299] 9pnet_virtio: no channels available for device syz [ 83.022849][ T7303] selinux_netlink_send: 25 callbacks suppressed [ 83.022859][ T7303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7303 comm=syz.6.358 [ 83.171038][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 83.171053][ T40] audit: type=1400 audit(1752637754.859:446): avc: denied { read } for pid=7304 comm="syz.4.359" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 83.180779][ T40] audit: type=1400 audit(1752637754.859:447): avc: denied { open } for pid=7304 comm="syz.4.359" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 83.277849][ T40] audit: type=1400 audit(1752637754.969:448): avc: denied { getopt } for pid=7304 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 83.283220][ T7307] tmpfs: Unknown parameter '~—î2‹_<q|XÈͶá7ÉÖb–Ó§–¢O›fu#EhË“ÿÿ¼71sÑ“ŒXã$k„ÂW`š4Vùå'NH« [ 83.283220][ T7307] º`áÃÃuŽ`)¥TçÈMÓ»µöl£H ZÃÂB¿¹Æôß´@§ µ*n£éÝEuâäî‹UAÁöÅÍ5Z—Ž)ÉYÚÕío÷ÕhãZ/#ª#߀‹º²²Ei1€¹Ôr‘ŽµßÀâ­ ¿Í°]Üð!—Õ¦ö¤Ýf)Íž4ì}ô'èÔs 1j¾ûŠÉäCºÎIT“Y¦ÆÀ¾fŒùqâsÖVÔnÙˆ‚ö¾oF¾nÊ‹2šó?Lö;`÷D [ 83.283220][ T7307] ÅÒNq„ vXíp' [ 83.292495][ T6015] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 83.355904][ T40] audit: type=1400 audit(1752637755.049:449): avc: denied { mount } for pid=7304 comm="syz.4.359" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 83.413536][ T7307] ptrace attach of "/syz-executor exec"[6693] was attempted by "/syz-executor exec"[7307] [ 83.428897][ T40] audit: type=1400 audit(1752637755.119:450): avc: denied { lock } for pid=7310 comm="syz.5.361" path="socket:[18535]" dev="sockfs" ino=18535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 83.442493][ T6015] usb 11-1: Using ep0 maxpacket: 8 [ 83.445491][ T6015] usb 11-1: config 0 has an invalid interface number: 186 but max is 0 [ 83.448136][ T6015] usb 11-1: config 0 has no interface number 0 [ 83.450095][ T6015] usb 11-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.453987][ T6015] usb 11-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 83.456309][ T6306] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 83.457605][ T6015] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 83.457626][ T6015] usb 11-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.459447][ T6015] usb 11-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 83.475965][ T6015] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.478449][ T6015] usb 11-1: Product: syz [ 83.479796][ T6015] usb 11-1: Manufacturer: syz [ 83.481291][ T6015] usb 11-1: SerialNumber: syz [ 83.485457][ T6015] usb 11-1: config 0 descriptor?? [ 83.553070][ T5311] Bluetooth: hci3: command tx timeout [ 83.691607][ T6015] iowarrior 11-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 83.861828][ T7332] netlink: 'syz.3.367': attribute type 5 has an invalid length. [ 83.909214][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.911992][ T6015] usb 11-1: USB disconnect, device number 2 [ 83.914908][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.935576][ T7324] /dev/sr0: Can't open blockdev [ 83.978058][ T7324] Invalid/unusable pipe [ 84.004422][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.007670][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.091586][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.095029][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.112983][ T5311] Bluetooth: hci5: command tx timeout [ 84.165665][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.168898][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.420947][ T75] team0: Port device bond0 removed [ 84.429889][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.436315][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.443954][ T75] bond0 (unregistering): Released all slaves [ 84.467333][ T7339] program syz.3.370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.473524][ T7339] __nla_validate_parse: 2 callbacks suppressed [ 84.473538][ T7339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.370'. [ 84.502100][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.6.371'. [ 84.515644][ T40] audit: type=1400 audit(1752637756.199:451): avc: denied { mount } for pid=7337 comm="syz.6.371" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 84.525132][ T40] audit: type=1400 audit(1752637756.209:452): avc: denied { remount } for pid=7337 comm="syz.6.371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 84.541726][ T40] audit: type=1400 audit(1752637756.229:453): avc: denied { unmount } for pid=7195 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 84.567556][ T40] audit: type=1400 audit(1752637756.259:454): avc: denied { setopt } for pid=7350 comm="syz.6.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.575738][ T40] audit: type=1400 audit(1752637756.259:455): avc: denied { write } for pid=7350 comm="syz.6.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.593626][ T5960] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 84.679062][ T7359] netlink: 28 bytes leftover after parsing attributes in process `syz.6.375'. [ 84.687805][ T7359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7359 comm=syz.6.375 [ 84.702655][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 84.724330][ T75] hsr_slave_0: left promiscuous mode [ 84.727129][ T75] hsr_slave_1: left promiscuous mode [ 84.729814][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.732713][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.736221][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.738544][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.763167][ T75] veth1_macvtap: left promiscuous mode [ 84.764986][ T75] veth0_macvtap: left promiscuous mode [ 84.766906][ T75] veth1_vlan: left promiscuous mode [ 84.769110][ T75] veth0_vlan: left promiscuous mode [ 84.838276][ T75] pim6reg (unregistering): left allmulticast mode [ 84.852456][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 84.866151][ T10] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 84.869285][ T10] usb 9-1: config 0 has no interface number 0 [ 84.871216][ T10] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.875583][ T10] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 84.884473][ T10] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.888984][ T10] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.896891][ T10] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 84.900739][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.906373][ T10] usb 9-1: config 0 descriptor?? [ 84.924759][ T10] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 85.118920][ T61] usb 9-1: USB disconnect, device number 5 [ 85.120433][ T7341] ldusb 9-1:0.55: Couldn't submit interrupt_in_urb -19 [ 85.127070][ T61] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 85.324814][ T7376] usb usb8: usbfs: process 7376 (syz.4.369) did not claim interface 0 before use [ 85.352032][ T75] team0 (unregistering): Port device team_slave_1 removed [ 85.413104][ T75] team0 (unregistering): Port device team_slave_0 removed [ 85.420952][ T7380] 9pnet_fd: Insufficient options for proto=fd [ 85.425796][ T7380] qrtr: Invalid version 0 [ 85.632766][ T5960] Bluetooth: hci3: command tx timeout [ 85.964478][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.966968][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.010968][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.019236][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.058708][ T7383] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.061496][ T7383] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.066086][ T7383] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.068846][ T7383] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.198201][ T7390] ISOFS: Unable to identify CD-ROM format. [ 86.370047][ T7409] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 86.420467][ T7414] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 86.420941][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 86.482837][ T7404] netlink: 'syz.4.385': attribute type 32 has an invalid length. [ 86.513832][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.389'. [ 86.652828][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.385'. [ 86.728759][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 86.731902][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 86.791814][ T7454] netlink: 'syz.6.395': attribute type 21 has an invalid length. [ 86.794813][ T7454] netlink: 156 bytes leftover after parsing attributes in process `syz.6.395'. [ 86.906272][ T61] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 87.052546][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 87.056459][ T61] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.059314][ T61] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 87.063598][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.069050][ T61] usb 8-1: config 0 descriptor?? [ 87.485604][ T61] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 87.579048][ T7454] overlayfs: failed to resolve './file0/file0': -107 [ 87.681256][ T7444] netlink: 72 bytes leftover after parsing attributes in process `syz.3.392'. [ 87.688759][ T6034] usb 8-1: USB disconnect, device number 12 [ 87.723358][ T5960] Bluetooth: hci3: command tx timeout [ 87.832484][ T61] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 87.912650][ T53] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 87.988668][ T61] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.993488][ T61] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 87.998259][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 88.002813][ T61] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.010085][ T61] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 88.013959][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.017283][ T61] usb 9-1: Product: syz [ 88.019043][ T61] usb 9-1: Manufacturer: syz [ 88.021003][ T61] usb 9-1: SerialNumber: syz [ 88.025521][ T61] usb 9-1: config 0 descriptor?? [ 88.037594][ T61] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input7 [ 88.082517][ T53] usb 10-1: Using ep0 maxpacket: 16 [ 88.085325][ T53] usb 10-1: too many configurations: 123, using maximum allowed: 8 [ 88.090493][ T53] usb 10-1: config 0 has no interfaces? [ 88.095616][ T53] usb 10-1: config 0 has no interfaces? [ 88.099153][ T53] usb 10-1: config 0 has no interfaces? [ 88.108189][ T53] usb 10-1: config 0 has no interfaces? [ 88.110846][ T53] usb 10-1: config 0 has no interfaces? [ 88.115030][ T53] usb 10-1: config 0 has no interfaces? [ 88.120019][ T53] usb 10-1: config 0 has no interfaces? [ 88.124456][ T53] usb 10-1: config 0 has no interfaces? [ 88.129561][ T53] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 88.134504][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 88.137870][ T53] usb 10-1: SerialNumber: syz [ 88.142337][ T53] usb 10-1: config 0 descriptor?? [ 88.234423][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 88.234438][ T40] audit: type=1400 audit(1752637759.929:470): avc: denied { read } for pid=7481 comm="syz.4.396" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 88.248818][ T40] audit: type=1400 audit(1752637759.929:471): avc: denied { open } for pid=7481 comm="syz.4.396" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 88.295737][ T7520] netlink: 'syz.3.406': attribute type 4 has an invalid length. [ 88.295777][ T7521] netlink: 'syz.3.406': attribute type 4 has an invalid length. [ 88.310811][ T6306] usb 9-1: USB disconnect, device number 6 [ 88.349122][ T7490] Bluetooth: hci0: load_link_keys: too big key_count value 44048 [ 88.366628][ T6015] usb 10-1: USB disconnect, device number 4 [ 88.484736][ T7533] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 89.007424][ T40] audit: type=1400 audit(1752637760.699:472): avc: denied { create } for pid=7542 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.016544][ T40] audit: type=1400 audit(1752637760.709:473): avc: denied { listen } for pid=7542 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.024624][ T40] audit: type=1400 audit(1752637760.709:474): avc: denied { accept } for pid=7542 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.346290][ T7578] jfs: Unknown parameter 'usrquotaô' [ 89.356077][ T40] audit: type=1400 audit(1752637761.049:475): avc: denied { read write } for pid=7580 comm="syz.5.421" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.358761][ T7578] vlan2: entered promiscuous mode [ 89.365363][ T40] audit: type=1400 audit(1752637761.049:476): avc: denied { open } for pid=7580 comm="syz.5.421" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.385162][ T7578] bridge0: entered promiscuous mode [ 89.494854][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.499337][ T7601] batadv_slave_0: entered promiscuous mode [ 89.647671][ T40] audit: type=1400 audit(1752637761.339:477): avc: denied { execmem } for pid=7604 comm="syz.5.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 89.792649][ T5960] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 89.793564][ T5311] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.794387][ T63] Bluetooth: hci3: command tx timeout [ 89.955247][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.426'. [ 90.261211][ T40] audit: type=1400 audit(1752637761.949:478): avc: denied { shutdown } for pid=7628 comm="syz.5.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.301968][ T7636] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.432'. [ 90.306499][ T40] audit: type=1400 audit(1752637761.999:479): avc: denied { link } for pid=7631 comm="syz.6.431" name="#13" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.311098][ T7633] overlay: ./file0 is not a directory [ 90.358789][ T7641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7641 comm=syz.5.434 [ 90.411699][ T7645] 9pnet_virtio: no channels available for device syz [ 90.415316][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.434'. [ 90.421300][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.436'. [ 90.455715][ T7650] xt_hashlimit: size too large, truncated to 1048576 [ 90.462744][ T5311] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 90.471809][ T7646] vlan0: entered allmulticast mode [ 90.478513][ T7646] bond2: entered allmulticast mode [ 90.570626][ T7650] pimreg3: entered allmulticast mode [ 90.619394][ T7655] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 90.621652][ T7655] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.626197][ T7655] vhci_hcd vhci_hcd.0: Device attached [ 90.630652][ T7655] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 90.633054][ T7655] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.636386][ T7655] vhci_hcd vhci_hcd.0: Device attached [ 90.640876][ T7655] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(19) [ 90.643476][ T7655] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.646423][ T7655] vhci_hcd vhci_hcd.0: Device attached [ 90.649263][ T7655] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.655326][ T7656] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(23) [ 90.658006][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.660742][ T7655] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(26) [ 90.662806][ T7655] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.665297][ T7655] vhci_hcd vhci_hcd.0: Device attached [ 90.665588][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 90.670147][ T7656] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(25) [ 90.672215][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 90.674635][ T7655] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(30) [ 90.677318][ T7655] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 90.680468][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 90.680497][ T7655] vhci_hcd vhci_hcd.0: Device attached [ 90.686971][ T7656] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.688325][ T7673] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.698217][ T7655] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.709214][ T7666] vhci_hcd: connection closed [ 90.709537][ T7659] vhci_hcd: connection closed [ 90.710268][ T7669] vhci_hcd: connection closed [ 90.710726][ T7665] vhci_hcd: connection closed [ 90.713236][ T7663] vhci_hcd: connection closed [ 90.716852][ T60] vhci_hcd: stop threads [ 90.717498][ T7657] vhci_hcd: connection closed [ 90.718861][ T60] vhci_hcd: release socket [ 90.722998][ T60] vhci_hcd: disconnect device [ 90.724603][ T60] vhci_hcd: stop threads [ 90.725899][ T60] vhci_hcd: release socket [ 90.727433][ T60] vhci_hcd: disconnect device [ 90.729048][ T60] vhci_hcd: stop threads [ 90.730592][ T60] vhci_hcd: release socket [ 90.732351][ T60] vhci_hcd: disconnect device [ 90.734932][ T60] vhci_hcd: stop threads [ 90.736313][ T60] vhci_hcd: release socket [ 90.737827][ T60] vhci_hcd: disconnect device [ 90.739418][ T60] vhci_hcd: stop threads [ 90.740837][ T60] vhci_hcd: release socket [ 90.745168][ T60] vhci_hcd: disconnect device [ 90.746778][ T60] vhci_hcd: stop threads [ 90.748269][ T60] vhci_hcd: release socket [ 90.749682][ T60] vhci_hcd: disconnect device [ 90.814546][ T9] vhci_hcd: vhci_device speed not set [ 90.896322][ T6306] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 91.053994][ T6306] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 91.057222][ T6306] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.060122][ T6306] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.063874][ T6306] usb 10-1: config 0 interface 0 has no altsetting 0 [ 91.066727][ T6306] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.069664][ T6306] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.073168][ T6306] usb 10-1: config 0 interface 0 has no altsetting 0 [ 91.076141][ T6306] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.078934][ T6306] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.082255][ T6306] usb 10-1: config 0 interface 0 has no altsetting 0 [ 91.085244][ T6306] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.088071][ T6306] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.091423][ T6306] usb 10-1: config 0 interface 0 has no altsetting 0 [ 91.094372][ T6306] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.097174][ T6306] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.100547][ T6306] usb 10-1: config 0 interface 0 has no altsetting 0 [ 91.103431][ T6306] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.106205][ T6306] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.109597][ T6306] usb 10-1: config 0 interface 0 has no altsetting 0 [ 91.113126][ T6306] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.116012][ T6306] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.119414][ T6306] usb 10-1: config 0 interface 0 has no altsetting 0 [ 91.122573][ T6306] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.125403][ T6306] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.128739][ T6306] usb 10-1: config 0 interface 0 has no altsetting 0 [ 91.132300][ T6306] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 91.135397][ T6306] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 91.138102][ T6306] usb 10-1: Product: syz [ 91.139604][ T6306] usb 10-1: Manufacturer: syz [ 91.141116][ T6306] usb 10-1: SerialNumber: syz [ 91.144891][ T6306] usb 10-1: config 0 descriptor?? [ 91.153738][ T6306] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 91.172460][ T54] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 91.228360][ T7671] vhci_hcd: connection closed [ 91.228583][ T7592] vhci_hcd: stop threads [ 91.231616][ T7592] vhci_hcd: release socket [ 91.235520][ T7592] vhci_hcd: disconnect device [ 91.249210][ T7678] vcan2: entered allmulticast mode [ 91.332544][ T54] usb 9-1: Using ep0 maxpacket: 8 [ 91.335821][ T54] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 91.339077][ T54] usb 9-1: config 0 has no interface number 0 [ 91.341137][ T54] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.344631][ T54] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 91.348283][ T54] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 91.351774][ T54] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.357728][ T54] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 91.360566][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.363459][ T54] usb 9-1: Product: syz [ 91.364810][ T54] usb 9-1: Manufacturer: syz [ 91.366306][ T54] usb 9-1: SerialNumber: syz [ 91.370095][ T54] usb 9-1: config 0 descriptor?? [ 91.577159][ T54] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 91.916663][ T54] usb 9-1: USB disconnect, device number 7 [ 92.097280][ T7700] IPVS: set_ctl: invalid protocol: 51 172.20.20.41:20002 [ 92.114099][ T6800] usb usb44-port2: attempt power cycle [ 92.421919][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.451'. [ 92.674289][ T7741] xt_hashlimit: size too large, truncated to 1048576 [ 92.694185][ T6800] usb usb44-port2: unable to enumerate USB device [ 92.742953][ T7747] xt_hashlimit: invalid interval [ 93.022081][ T7763] gfs2: not a GFS2 filesystem [ 93.263753][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 93.263763][ T40] audit: type=1400 audit(1752637764.959:490): avc: denied { setopt } for pid=7777 comm="syz.6.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.299759][ T40] audit: type=1400 audit(1752637764.989:491): avc: denied { append } for pid=7779 comm="syz.6.467" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.300024][ T7780] binder: 7779:7780 ioctl c0306201 0 returned -14 [ 93.448092][ T7787] overlay: filesystem on ./bus is read-only [ 93.450091][ T40] audit: type=1400 audit(1752637765.139:492): avc: denied { mounton } for pid=7786 comm="syz.6.469" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 93.532522][ T54] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 93.655007][ T5988] usb 10-1: USB disconnect, device number 5 [ 93.659746][ T40] audit: type=1400 audit(1752637765.349:493): avc: denied { write } for pid=7796 comm="syz.4.470" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.664869][ T5988] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 93.669248][ T40] audit: type=1326 audit(1752637765.359:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.4.470" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fad8e929 code=0x7ffc0000 [ 93.676860][ T40] audit: type=1326 audit(1752637765.359:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.4.470" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fad8e929 code=0x7ffc0000 [ 93.683020][ T7799] netlink: 'syz.5.471': attribute type 1 has an invalid length. [ 93.683028][ T7800] netlink: 'syz.5.471': attribute type 1 has an invalid length. [ 93.684844][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 93.687873][ T40] audit: type=1326 audit(1752637765.359:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.4.470" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29fad8e929 code=0x7ffc0000 [ 93.689033][ T54] usb 8-1: config 2 has an invalid interface number: 57 but max is 0 [ 93.689054][ T54] usb 8-1: config 2 has no interface number 0 [ 93.689084][ T54] usb 8-1: config 2 interface 57 altsetting 72 endpoint 0x5 has an invalid bInterval 128, changing to 11 [ 93.689107][ T54] usb 8-1: config 2 interface 57 altsetting 72 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 93.689128][ T54] usb 8-1: config 2 interface 57 altsetting 72 has a duplicate endpoint with address 0xE, skipping [ 93.689142][ T54] usb 8-1: config 2 interface 57 altsetting 72 has a duplicate endpoint with address 0x4, skipping [ 93.689161][ T54] usb 8-1: config 2 interface 57 has no altsetting 0 [ 93.691270][ T54] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=aa.ac [ 93.692496][ T40] audit: type=1326 audit(1752637765.359:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.4.470" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fad8e929 code=0x7ffc0000 [ 93.692537][ T40] audit: type=1326 audit(1752637765.359:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.4.470" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fad8e929 code=0x7ffc0000 [ 93.692573][ T40] audit: type=1326 audit(1752637765.359:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.4.470" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29fad8e929 code=0x7ffc0000 [ 93.701099][ T7800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.701260][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.761556][ T54] usb 8-1: Product: з [ 93.763294][ T54] usb 8-1: Manufacturer: 踣蓙㹶᷸é‘垘锷멤㧳ٛå“鰰뾠㘋摕羮渹ë€à¤¤æ †ï§«è¼’ë’‚ä ªî€æ£¢æ­œì½çŸ¾á‚¤áºŽè¶°î“跷墷贶㓹ồﮂꞭ죸ጳ蠣簂氕붥䀅䰼鳊뷃å¸â©¸é¸ˆêš§â¯¬Ú§à´‹ [ 93.768714][ T7799] bond3: (slave geneve2): making interface the new active one [ 93.770636][ T54] usb 8-1: SerialNumber: ﰧ⿳ä²ï£ä­ëº“甤èžèŽœî‡‹ì¦ã©®èƒ ê˜€ç¯ å…¤ß°ã·¹à³æ»´ä·ˆæ…ã„Èç—泄뜬挌؉뇽鵣슰瞬◨뜳紪钜è»ëˆ€ï‹“멇䆷í‹æ¹ã¤¯ç¨£ [ 93.776778][ T7799] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 93.813672][ T7776] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.849039][ T7807] binder: 7806:7807 ioctl 4018620d 0 returned -22 [ 93.906406][ T7813] tipc: Started in network mode [ 93.908105][ T7813] tipc: Node identity 3c, cluster identity 4711 [ 93.910753][ T7813] tipc: Node number set to 60 [ 93.915545][ T7813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.185730][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 94.223046][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.6.480'. [ 94.241672][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.481'. [ 94.245396][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.481'. [ 94.285233][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 94.531947][ T7865] nfs4: Bad value for 'source' [ 94.534985][ T7865] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 94.565359][ T54] ch9200 8-1:2.57: probe with driver ch9200 failed with error -22 [ 94.574350][ T54] usb 8-1: USB disconnect, device number 13 [ 94.864448][ T7888] 8021q: adding VLAN 0 to HW filter on device bond4 [ 94.868242][ T7888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.868377][ T7890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.913680][ T7895] overlay: Bad value for 'workdir' [ 95.045549][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.499'. [ 95.048733][ T7900] netlink: 'syz.5.499': attribute type 5 has an invalid length. [ 95.058833][ T7900] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.061733][ T7900] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.064660][ T7900] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.067474][ T7900] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.071300][ T7900] vxlan0: entered promiscuous mode [ 95.165282][ T7902] macvtap1: entered allmulticast mode [ 95.167235][ T7902] veth0_macvtap: entered allmulticast mode [ 95.287179][ T7914] netlink: 16 bytes leftover after parsing attributes in process `syz.6.504'. [ 95.297226][ T7914] affs: No valid root block on device nullb0 [ 95.390164][ T7917] program syz.6.505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.399499][ T7917] netlink: 'syz.6.505': attribute type 10 has an invalid length. [ 95.422925][ T7917] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.010352][ T7931] nfs: Unknown parameter '' [ 96.487829][ T7944] IPv4: Oversized IP packet from 127.202.26.0 [ 96.827664][ T7965] syzkaller0: entered promiscuous mode [ 96.829524][ T7965] syzkaller0: entered allmulticast mode [ 96.845436][ T7967] fuse: Bad value for 'fd' [ 97.042107][ T7982] syz.5.526: attempt to access beyond end of device [ 97.042107][ T7982] loop5: rw=0, sector=1, nr_sectors = 1 limit=0 [ 97.048192][ T7982] qnx4: unable to read the superblock [ 97.120704][ T7999] netlink: 'syz.5.528': attribute type 1 has an invalid length. [ 97.129121][ T7999] netlink: 44 bytes leftover after parsing attributes in process `syz.5.528'. [ 97.174989][ T8001] comedi comedi1: comedi_config --init_data is deprecated [ 97.360459][ T8016] trusted_key: syz.6.533 sent an empty control message without MSG_MORE. [ 97.451204][ T8024] x_tables: duplicate underflow at hook 1 [ 97.505797][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.537'. [ 97.511222][ T8033] xfrm1: entered promiscuous mode [ 97.514518][ T8033] xfrm1: entered allmulticast mode [ 97.581823][ T8031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.890973][ T8051] netlink: 'syz.4.540': attribute type 7 has an invalid length. [ 97.893544][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 98.049820][ T8058] netlink: 292 bytes leftover after parsing attributes in process `syz.4.542'. [ 98.165261][ T8064] netlink: 666 bytes leftover after parsing attributes in process `syz.4.545'. [ 98.383025][ T8078] netlink: 'syz.4.549': attribute type 1 has an invalid length. [ 98.393995][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.548'. [ 98.397896][ T8078] macvlan2: entered promiscuous mode [ 98.399606][ T8078] macvlan2: entered allmulticast mode [ 98.401727][ T8078] bond1: entered promiscuous mode [ 98.405416][ T8078] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.410933][ T8078] bond1: left promiscuous mode [ 98.693585][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.6.553'. [ 98.916468][ T8114] Bluetooth: MGMT ver 1.23 [ 98.921022][ T8114] netlink: 'syz.4.556': attribute type 4 has an invalid length. [ 99.040924][ T7993] Bluetooth: (null): Invalid header checksum [ 99.044756][ T7993] Bluetooth: (null): Invalid header checksum [ 99.089935][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 99.089951][ T40] audit: type=1400 audit(1752637770.779:549): avc: denied { write } for pid=8132 comm="syz.6.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.108625][ T40] audit: type=1400 audit(1752637770.799:550): avc: denied { append } for pid=8134 comm="syz.5.561" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 99.136972][ T1143] Bluetooth: (null): Invalid header checksum [ 99.143070][ T8138] input: syz1 as /devices/virtual/input/input8 [ 99.185573][ T8145] fuse: Unknown parameter '18446744073709551615' [ 99.243698][ T7590] Bluetooth: (null): Invalid header checksum [ 99.354135][ T7992] Bluetooth: (null): Invalid header checksum [ 99.473159][ T99] Bluetooth: (null): Invalid header checksum [ 99.492507][ T6014] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 99.546027][ T8170] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 99.584887][ T7992] Bluetooth: (null): Invalid header checksum [ 99.662591][ T6014] usb 10-1: Using ep0 maxpacket: 32 [ 99.666959][ T6014] usb 10-1: config 192 has an invalid interface number: 219 but max is 1 [ 99.669554][ T6014] usb 10-1: config 192 contains an unexpected descriptor of type 0x1, skipping [ 99.672337][ T6014] usb 10-1: config 192 contains an unexpected descriptor of type 0x1, skipping [ 99.676064][ T6014] usb 10-1: config 192 has an invalid interface number: 26 but max is 1 [ 99.678558][ T6014] usb 10-1: config 192 has an invalid interface number: 114 but max is 1 [ 99.681143][ T6014] usb 10-1: config 192 has 3 interfaces, different from the descriptor's value: 2 [ 99.684361][ T6014] usb 10-1: config 192 has no interface number 0 [ 99.686456][ T6014] usb 10-1: config 192 has no interface number 1 [ 99.688429][ T6014] usb 10-1: config 192 has no interface number 2 [ 99.690412][ T6014] usb 10-1: config 192 interface 219 altsetting 133 has an invalid descriptor for endpoint zero, skipping [ 99.695492][ T6014] usb 10-1: config 192 interface 219 altsetting 133 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 99.699044][ T6014] usb 10-1: config 192 interface 219 altsetting 133 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 99.703291][ T6014] usb 10-1: config 192 interface 219 altsetting 133 endpoint 0x88 has an invalid bInterval 175, changing to 7 [ 99.706870][ T6014] usb 10-1: config 192 interface 219 altsetting 133 endpoint 0x88 has invalid maxpacket 50298, setting to 1024 [ 99.710440][ T6014] usb 10-1: config 192 interface 219 altsetting 133 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 99.711108][ T8181] tls_set_device_offload: netdev not found [ 99.714516][ T6014] usb 10-1: config 192 interface 219 altsetting 133 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 99.719590][ T6014] usb 10-1: config 192 interface 219 altsetting 133 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.722980][ T6014] usb 10-1: config 192 interface 219 altsetting 133 has an invalid descriptor for endpoint zero, skipping [ 99.726420][ T6014] usb 10-1: config 192 interface 219 altsetting 133 has an invalid descriptor for endpoint zero, skipping [ 99.730414][ T6014] usb 10-1: config 192 interface 219 altsetting 133 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 99.734209][ T6014] usb 10-1: config 192 interface 219 altsetting 133 bulk endpoint 0x3 has invalid maxpacket 8 [ 99.737384][ T6014] usb 10-1: config 192 interface 219 altsetting 133 has a duplicate endpoint with address 0x2, skipping [ 99.740783][ T6014] usb 10-1: config 192 interface 219 altsetting 133 has a duplicate endpoint with address 0xE, skipping [ 99.744324][ T6014] usb 10-1: config 192 interface 219 altsetting 133 has an invalid descriptor for endpoint zero, skipping [ 99.747781][ T6014] usb 10-1: config 192 interface 219 altsetting 133 has an invalid descriptor for endpoint zero, skipping [ 99.751453][ T6014] usb 10-1: config 192 interface 219 altsetting 133 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 99.755904][ T6014] usb 10-1: config 192 interface 26 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 99.759929][ T6014] usb 10-1: too many endpoints for config 192 interface 114 altsetting 34: 213, using maximum allowed: 30 [ 99.763652][ T6014] usb 10-1: config 192 interface 114 altsetting 34 has a duplicate endpoint with address 0x9, skipping [ 99.767032][ T6014] usb 10-1: config 192 interface 114 altsetting 34 has an invalid descriptor for endpoint zero, skipping [ 99.770398][ T6014] usb 10-1: config 192 interface 114 altsetting 34 has a duplicate endpoint with address 0xF, skipping [ 99.773050][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 99.774079][ T6014] usb 10-1: config 192 interface 114 altsetting 34 has a duplicate endpoint with address 0x3, skipping [ 99.780220][ T6014] usb 10-1: config 192 interface 114 altsetting 34 has a duplicate endpoint with address 0x7, skipping [ 99.784184][ T6014] usb 10-1: config 192 interface 114 altsetting 34 has 5 endpoint descriptors, different from the interface descriptor's value: 213 [ 99.788353][ T6014] usb 10-1: config 192 interface 219 has no altsetting 0 [ 99.790491][ T6014] usb 10-1: config 192 interface 26 has no altsetting 0 [ 99.792900][ T6014] usb 10-1: config 192 interface 114 has no altsetting 0 [ 99.797565][ T6014] usb 10-1: New USB device found, idVendor=2cb7, idProduct=0001, bcdDevice=8b.99 [ 99.800362][ T6014] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.803302][ T6014] usb 10-1: Product: syz [ 99.804669][ T6014] usb 10-1: Manufacturer: syz [ 99.806232][ T6014] usb 10-1: SerialNumber: syz [ 99.810112][ T8153] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 99.971701][ T40] audit: type=1400 audit(1752637771.659:551): avc: denied { append } for pid=8205 comm="syz.6.578" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.979159][ T40] audit: type=1400 audit(1752637771.669:552): avc: denied { ioctl } for pid=8205 comm="syz.6.578" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.070106][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 100.075474][ T8214] netlink: 'syz.4.580': attribute type 10 has an invalid length. [ 100.078449][ T8214] netlink: 40 bytes leftover after parsing attributes in process `syz.4.580'. [ 100.081303][ T8214] bridge0: port 3(dummy0) entered blocking state [ 100.083612][ T8214] bridge0: port 3(dummy0) entered disabled state [ 100.085702][ T8214] dummy0: entered allmulticast mode [ 100.088312][ T8214] dummy0: entered promiscuous mode [ 100.090289][ T8214] bridge0: port 3(dummy0) entered blocking state [ 100.092295][ T8214] bridge0: port 3(dummy0) entered forwarding state [ 100.216071][ T6014] option 10-1:192.219: GSM modem (1-port) converter detected [ 100.226449][ T6014] usb 10-1: USB disconnect, device number 6 [ 100.236212][ T6014] option 10-1:192.219: device disconnected [ 100.422189][ T8235] netlink: 48 bytes leftover after parsing attributes in process `syz.6.587'. [ 100.515562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.628719][ T8240] Invalid option length (1048180) for dns_resolver key [ 100.789090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.842778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.846859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.878006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.891530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.132747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.152854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 101.156601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.169527][ T8250] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 101.171614][ T8250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.176083][ T8250] vhci_hcd vhci_hcd.0: Device attached [ 101.178278][ T8255] vhci_hcd: cannot find the pending unlink 1023 [ 101.190113][ T8255] vhci_hcd: connection closed [ 101.190870][ T1143] vhci_hcd: stop threads [ 101.194102][ T1143] vhci_hcd: release socket [ 101.202592][ T1143] vhci_hcd: disconnect device [ 101.215844][ T40] audit: type=1400 audit(1752637772.909:553): avc: denied { create } for pid=8257 comm="syz.5.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 101.225356][ T40] audit: type=1400 audit(1752637772.909:554): avc: denied { sys_admin } for pid=8257 comm="syz.5.592" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 101.357911][ T8260] lo: entered promiscuous mode [ 101.359875][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.594'. [ 101.366081][ T8260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.480693][ T40] audit: type=1400 audit(1752637773.169:555): avc: denied { write } for pid=8265 comm="syz.6.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.543435][ T8270] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 101.700904][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.599'. [ 101.706489][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.599'. [ 101.709985][ T8278] netlink: 'syz.5.599': attribute type 7 has an invalid length. [ 101.782066][ T8287] 9pnet_virtio: no channels available for device syz [ 101.789707][ T8291] netlink: 124 bytes leftover after parsing attributes in process `syz.5.603'. [ 101.793891][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.603'. [ 101.827622][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 101.855785][ T8295] 9pnet_virtio: no channels available for device syz [ 101.856215][ T8296] 9pnet_virtio: no channels available for device syz [ 101.886724][ T40] audit: type=1400 audit(1752637773.579:556): avc: denied { execute } for pid=8298 comm="syz.3.606" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.943961][ T8307] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 101.947605][ T8307] overlayfs: missing 'lowerdir' [ 101.950662][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.607'. [ 102.371606][ T40] audit: type=1400 audit(1752637774.059:557): avc: denied { ioctl } for pid=8328 comm="syz.3.614" path="mnt:[4026532879]" dev="nsfs" ino=4026532879 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 102.712079][ T8348] openvswitch: netlink: IP tunnel dst address not specified [ 103.129187][ T8356] zonefs (nbd3) ERROR: Not a zoned block device [ 103.142320][ T8358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=8358 comm=syz.5.623 [ 103.176317][ T40] audit: type=1400 audit(1752637774.869:558): avc: denied { listen } for pid=8359 comm="syz.6.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.184969][ T5311] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 103.189244][ T5311] CPU: 1 UID: 0 PID: 5311 Comm: kworker/u33:1 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 103.189272][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.189292][ T5311] Workqueue: hci3 hci_rx_work [ 103.189353][ T5311] Call Trace: [ 103.189360][ T5311] [ 103.189374][ T5311] dump_stack_lvl+0x16c/0x1f0 [ 103.189443][ T5311] sysfs_warn_dup+0x7f/0xa0 [ 103.189484][ T5311] sysfs_create_dir_ns+0x24b/0x2b0 [ 103.189530][ T5311] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 103.189560][ T5311] ? find_held_lock+0x2b/0x80 [ 103.189595][ T5311] ? do_raw_spin_unlock+0x172/0x230 [ 103.189623][ T5311] kobject_add_internal+0x2c4/0x9b0 [ 103.189659][ T5311] kobject_add+0x16e/0x240 [ 103.189688][ T5311] ? __pfx_kobject_add+0x10/0x10 [ 103.189730][ T5311] ? do_raw_spin_unlock+0x172/0x230 [ 103.189759][ T5311] ? kobject_put+0xab/0x5a0 [ 103.189802][ T5311] device_add+0x288/0x1a70 [ 103.189823][ T5311] ? __pfx_dev_set_name+0x10/0x10 [ 103.189850][ T5311] ? __pfx_device_add+0x10/0x10 [ 103.189868][ T5311] ? mgmt_send_event_skb+0x2fb/0x460 [ 103.189902][ T5311] hci_conn_add_sysfs+0x17e/0x230 [ 103.189933][ T5311] le_conn_complete_evt+0x1075/0x1d70 [ 103.189968][ T5311] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 103.190000][ T5311] ? hci_event_packet+0x459/0x11c0 [ 103.190043][ T5311] hci_le_conn_complete_evt+0x23c/0x370 [ 103.190080][ T5311] hci_le_meta_evt+0x357/0x5e0 [ 103.190113][ T5311] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 103.190143][ T5311] hci_event_packet+0x685/0x11c0 [ 103.190168][ T5311] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 103.190197][ T5311] ? __pfx_hci_event_packet+0x10/0x10 [ 103.190225][ T5311] ? kcov_remote_start+0x3c9/0x6d0 [ 103.190245][ T5311] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.190277][ T5311] hci_rx_work+0x2c5/0x16b0 [ 103.190305][ T5311] ? rcu_is_watching+0x12/0xc0 [ 103.190332][ T5311] process_one_work+0x9cf/0x1b70 [ 103.190363][ T5311] ? __pfx_process_one_work+0x10/0x10 [ 103.190392][ T5311] ? assign_work+0x1a0/0x250 [ 103.190414][ T5311] worker_thread+0x6c8/0xf10 [ 103.190491][ T5311] ? __kthread_parkme+0x19e/0x250 [ 103.190526][ T5311] ? __pfx_worker_thread+0x10/0x10 [ 103.190553][ T5311] kthread+0x3c5/0x780 [ 103.190579][ T5311] ? __pfx_kthread+0x10/0x10 [ 103.190606][ T5311] ? rcu_is_watching+0x12/0xc0 [ 103.190639][ T5311] ? __pfx_kthread+0x10/0x10 [ 103.190659][ T5311] ret_from_fork+0x5d7/0x6f0 [ 103.190697][ T5311] ? __pfx_kthread+0x10/0x10 [ 103.190717][ T5311] ret_from_fork_asm+0x1a/0x30 [ 103.190762][ T5311] [ 103.190787][ T5311] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 103.294738][ T5311] Bluetooth: hci3: failed to register connection device [ 105.392653][ T5960] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.392688][ T8360] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 106.178770][ T8360] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 106.181254][ T8360] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 106.191723][ T8360] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 106.196685][ T8360] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 106.199411][ T8360] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 106.204269][ T8360] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 106.209718][ T8360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.211953][ T8360] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.215251][ T8360] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.218715][ T8360] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.276420][ T8391] 9pnet_virtio: no channels available for device syz [ 106.279342][ T8391] netlink: 'syz.5.633': attribute type 10 has an invalid length. [ 106.282709][ T8391] __nla_validate_parse: 2 callbacks suppressed [ 106.282720][ T8391] netlink: 40 bytes leftover after parsing attributes in process `syz.5.633'. [ 106.292159][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 106.292172][ T40] audit: type=1400 audit(1752637777.979:560): avc: denied { getopt } for pid=8394 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.323775][ T8391] team0: Port device geneve0 added [ 106.395958][ T8407] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 106.436796][ T8410] Process accounting resumed [ 106.447151][ T5960] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 106.488229][ T8418] netlink: 20 bytes leftover after parsing attributes in process `syz.5.641'. [ 106.587337][ T8432] Malformed UNC in devname [ 106.587337][ T8432] [ 106.590137][ T8432] CIFS: VFS: Malformed UNC in devname [ 107.006135][ T8460] No memory to map [ 107.067183][ T8467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8467 comm=syz.6.653 [ 107.385630][ T40] audit: type=1400 audit(1752637779.079:561): avc: denied { bind } for pid=8503 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 107.391754][ T40] audit: type=1400 audit(1752637779.079:562): avc: denied { connect } for pid=8503 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 107.405628][ T40] audit: type=1400 audit(1752637779.099:563): avc: denied { create } for pid=8507 comm="syz.5.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 107.463276][ T53] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 107.478323][ T5960] Bluetooth: hci4: command 0x0c1a tx timeout [ 107.484413][ T8513] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.488486][ T8513] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.577967][ T8513] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.581804][ T8513] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.610635][ T40] audit: type=1326 audit(1752637779.299:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8518 comm="syz.3.669" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79ec98e929 code=0x0 [ 107.633113][ T53] usb 11-1: Using ep0 maxpacket: 8 [ 107.634163][ T8513] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.636188][ T53] usb 11-1: config 0 interface 0 has no altsetting 0 [ 107.639092][ T8513] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.644941][ T53] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 107.647837][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.652967][ T53] usb 11-1: config 0 descriptor?? [ 107.699940][ T8513] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.704947][ T8513] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.718139][ T8520] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 107.722041][ T8520] Bluetooth: Invalid esc byte 0x40 [ 107.761597][ T40] audit: type=1400 audit(1752637779.459:565): avc: denied { create } for pid=8518 comm="syz.3.669" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 107.761906][ T40] audit: type=1400 audit(1752637779.459:566): avc: denied { associate } for pid=8518 comm="syz.3.669" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 107.789509][ C2] vkms_vblank_simulate: vblank timer overrun [ 107.819260][ T40] audit: type=1400 audit(1752637779.469:567): avc: denied { mounton } for pid=8518 comm="syz.3.669" path="/185/bus" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 107.819562][ T40] audit: type=1400 audit(1752637779.469:568): avc: denied { add_name } for pid=8518 comm="syz.3.669" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 107.847455][ T40] audit: type=1400 audit(1752637779.469:569): avc: denied { setattr } for pid=8518 comm="syz.3.669" name="work" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 107.848362][ T7588] Bluetooth: (null): Invalid header checksum [ 107.875290][ C2] vkms_vblank_simulate: vblank timer overrun [ 107.917809][ T7588] Bluetooth: (null): Invalid header checksum [ 107.933934][ T7993] Bluetooth: (null): Invalid header checksum [ 107.949449][ T8513] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.954447][ T8513] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.963472][ T8513] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.966057][ T8513] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.974360][ T8513] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.978175][ T8513] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.994087][ T8513] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.997463][ T8513] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.042942][ T99] Bluetooth: (null): Invalid header checksum [ 108.074375][ T8526] mmap: syz.5.672 (8526) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.081132][ T53] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 108.152844][ T7992] Bluetooth: (null): Invalid header checksum [ 108.238916][ T8534] overlayfs: failed to resolve './file0': -2 [ 108.263401][ T7992] Bluetooth: (null): Invalid header checksum [ 108.273209][ T5960] Bluetooth: hci5: command 0x0c1a tx timeout [ 108.285417][ T8482] ALSA: seq fatal error: cannot create timer (-22) [ 108.372868][ T7588] Bluetooth: (null): Invalid header checksum [ 108.452735][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.675'. [ 108.456476][ T6034] usb 11-1: USB disconnect, device number 3 [ 108.565754][ T8549] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2249738109 (287966477952 ns) > initial count (248453880064 ns). Using initial count to start timer. [ 108.599527][ T8549] ------------[ cut here ]------------ [ 108.601368][ T8549] WARNING: CPU: 0 PID: 8549 at arch/x86/kvm/../../../virt/kvm/kvm_main.c:3459 kvm_read_guest_offset_cached+0x3f5/0x4b0 [ 108.605597][ T8549] Modules linked in: [ 108.607140][ T8549] CPU: 0 UID: 0 PID: 8549 Comm: syz.3.678 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 108.612557][ T8549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.615985][ T8549] RIP: 0010:kvm_read_guest_offset_cached+0x3f5/0x4b0 [ 108.618078][ T8549] Code: 0f 01 e8 3e 6c 61 00 e9 9b fc ff ff e8 14 25 85 00 48 8b 3c 24 31 d2 48 89 ee e8 16 bf fa 00 e9 2e fe ff ff e8 fc 24 85 00 90 <0f> 0b 90 bb ea ff ff ff e9 4d fe ff ff e8 e9 24 85 00 48 8b 74 24 [ 108.624270][ T8549] RSP: 0018:ffffc90004df7960 EFLAGS: 00010287 [ 108.626182][ T8549] RAX: 00000000000040b8 RBX: ffff888054376b18 RCX: ffffc90005751000 [ 108.628663][ T8549] RDX: 0000000000080000 RSI: ffffffff8136cd84 RDI: 0000000000000006 [ 108.631290][ T8549] RBP: 0000000000000004 R08: 0000000000000006 R09: 0000000000000008 [ 108.633910][ T8549] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 108.636389][ T8549] R13: ffffc90005fab000 R14: 0000000000000000 R15: ffffc90005fab5a0 [ 108.638804][ T8549] FS: 00007f79ed76c6c0(0000) GS:ffff8880d6713000(0000) knlGS:0000000000000000 [ 108.641627][ T8549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.643903][ T8549] CR2: 0000000000000000 CR3: 0000000060acb000 CR4: 0000000000352ef0 [ 108.646436][ T8549] Call Trace: [ 108.647523][ T8549] [ 108.648496][ T8549] kvm_arch_can_dequeue_async_page_present+0x172/0x310 [ 108.650862][ T8549] ? __pfx_kvm_arch_can_dequeue_async_page_present+0x10/0x10 [ 108.653048][ T8549] kvm_check_async_pf_completion+0x61/0x440 [ 108.654743][ T8549] vcpu_run+0x48c2/0x5500 [ 108.656119][ T8549] ? kvm_mmu_post_init_vm+0x269/0x370 [ 108.657818][ T8549] ? __pfx_vcpu_run+0x10/0x10 [ 108.659327][ T8549] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 108.661342][ T8549] ? __local_bh_enable_ip+0xa4/0x120 [ 108.663327][ T8549] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 108.665152][ T8549] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 108.666910][ T8549] kvm_vcpu_ioctl+0x5eb/0x1690 [ 108.668433][ T8549] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.670083][ T8549] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 108.672176][ T8549] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 108.674840][ T8549] ? hook_file_ioctl_common+0x145/0x410 [ 108.676581][ T8549] ? selinux_file_ioctl+0x180/0x270 [ 108.678586][ T8549] ? selinux_file_ioctl+0xb4/0x270 [ 108.680223][ T8549] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.682206][ T8549] __x64_sys_ioctl+0x18e/0x210 [ 108.683866][ T8549] do_syscall_64+0xcd/0x4c0 [ 108.685310][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.687333][ T8549] RIP: 0033:0x7f79ec98e929 [ 108.688831][ T8549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.694885][ T8549] RSP: 002b:00007f79ed76c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.697480][ T8549] RAX: ffffffffffffffda RBX: 00007f79ecbb5fa0 RCX: 00007f79ec98e929 [ 108.700127][ T8549] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 108.703379][ T8549] RBP: 00007f79eca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 108.706519][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.709598][ T8549] R13: 0000000000000000 R14: 00007f79ecbb5fa0 R15: 00007ffc41eeaa38 [ 108.712816][ T8549] [ 108.713991][ T8549] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.716293][ T8549] CPU: 0 UID: 0 PID: 8549 Comm: syz.3.678 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 108.720071][ T8549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.723534][ T8549] Call Trace: [ 108.724698][ T8549] [ 108.725785][ T8549] dump_stack_lvl+0x3d/0x1f0 [ 108.727447][ T8549] panic+0x71c/0x800 [ 108.728667][ T8549] ? __pfx_panic+0x10/0x10 [ 108.730089][ T8549] ? show_trace_log_lvl+0x29b/0x3e0 [ 108.731892][ T8549] ? kvm_read_guest_offset_cached+0x3f5/0x4b0 [ 108.733990][ T8549] check_panic_on_warn+0xab/0xb0 [ 108.735713][ T8549] __warn+0xf6/0x3c0 [ 108.737079][ T8549] ? kvm_read_guest_offset_cached+0x3f5/0x4b0 [ 108.739453][ T8549] report_bug+0x3c3/0x580 [ 108.740848][ T8549] ? kvm_read_guest_offset_cached+0x3f5/0x4b0 [ 108.742917][ T8549] handle_bug+0x184/0x210 [ 108.744525][ T8549] exc_invalid_op+0x17/0x50 [ 108.746029][ T8549] asm_exc_invalid_op+0x1a/0x20 [ 108.747584][ T8549] RIP: 0010:kvm_read_guest_offset_cached+0x3f5/0x4b0 [ 108.749682][ T8549] Code: 0f 01 e8 3e 6c 61 00 e9 9b fc ff ff e8 14 25 85 00 48 8b 3c 24 31 d2 48 89 ee e8 16 bf fa 00 e9 2e fe ff ff e8 fc 24 85 00 90 <0f> 0b 90 bb ea ff ff ff e9 4d fe ff ff e8 e9 24 85 00 48 8b 74 24 [ 108.755680][ T8549] RSP: 0018:ffffc90004df7960 EFLAGS: 00010287 [ 108.757604][ T8549] RAX: 00000000000040b8 RBX: ffff888054376b18 RCX: ffffc90005751000 [ 108.759976][ T8549] RDX: 0000000000080000 RSI: ffffffff8136cd84 RDI: 0000000000000006 [ 108.762603][ T8549] RBP: 0000000000000004 R08: 0000000000000006 R09: 0000000000000008 [ 108.765167][ T8549] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 108.767633][ T8549] R13: ffffc90005fab000 R14: 0000000000000000 R15: ffffc90005fab5a0 [ 108.770113][ T8549] ? kvm_read_guest_offset_cached+0x3f4/0x4b0 [ 108.772070][ T8549] kvm_arch_can_dequeue_async_page_present+0x172/0x310 [ 108.774225][ T8549] ? __pfx_kvm_arch_can_dequeue_async_page_present+0x10/0x10 [ 108.776618][ T8549] kvm_check_async_pf_completion+0x61/0x440 [ 108.778504][ T8549] vcpu_run+0x48c2/0x5500 [ 108.779831][ T8549] ? kvm_mmu_post_init_vm+0x269/0x370 [ 108.781594][ T8549] ? __pfx_vcpu_run+0x10/0x10 [ 108.783093][ T8549] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 108.784812][ T8549] ? __local_bh_enable_ip+0xa4/0x120 [ 108.786471][ T8549] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 108.788275][ T8549] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 108.790023][ T8549] kvm_vcpu_ioctl+0x5eb/0x1690 [ 108.791583][ T8549] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.793227][ T8549] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 108.795351][ T8549] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 108.797483][ T8549] ? hook_file_ioctl_common+0x145/0x410 [ 108.799250][ T8549] ? selinux_file_ioctl+0x180/0x270 [ 108.800984][ T8549] ? selinux_file_ioctl+0xb4/0x270 [ 108.802734][ T8549] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.804387][ T8549] __x64_sys_ioctl+0x18e/0x210 [ 108.805889][ T8549] do_syscall_64+0xcd/0x4c0 [ 108.807286][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.809050][ T8549] RIP: 0033:0x7f79ec98e929 [ 108.810453][ T8549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.816223][ T8549] RSP: 002b:00007f79ed76c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.818840][ T8549] RAX: ffffffffffffffda RBX: 00007f79ecbb5fa0 RCX: 00007f79ec98e929 [ 108.821483][ T8549] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 108.824089][ T8549] RBP: 00007f79eca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 108.826587][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.829061][ T8549] R13: 0000000000000000 R14: 00007f79ecbb5fa0 R15: 00007ffc41eeaa38 [ 108.831811][ T8549] [ 108.833904][ T8549] Kernel Offset: disabled [ 108.835728][ T8549] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:45:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc90004df72d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0c7260 R15=ffffffff855bce70 RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f79ed76c6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6713000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000060acb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6ec11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6ec11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6ec11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6ec11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6ec11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6ec11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff888039650000 RCX=ffffc90003237604 RDX=0000000000000000 RSI=ffffffff8b5744fd RDI=ffff888039650444 RBP=ffff888039650000 RSP=ffffc90003237628 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000012294 R12=ffffffff81a78dc0 R13=ffffc900032376b0 R14=0000000000000000 R15=ffff888039650000 RIP=ffffffff81a154f7 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000fa000 CR3=0000000033af2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=000000000007ffff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558df6d970 000055558df6d880 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558df7b684 000055558df7b400 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04920303fe020004 9003080488000488 0302b8c804840004 8403140400048003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004980312080004 9003020800048803 0008000480030182 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0190035608000188 0309d8a486080001 800301800404b003 00080004a0030108 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080606012afc00 0200070c08000198 030000000001ffff fffffffffffff708 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01048004188282d9 9008000100000008 0606012afc000200 070c080001980300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001ffffffff fffffffff7080190 0356080001880309 d8a4860800018003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01800404b0030008 0004a00301080004 9803120800049003 0208000488030008 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000480030182c080 0400100040801000 01c08010000ffd80 80040a0142ae0002 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000cefa5 RBX=0000000000000002 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=ffffed1003c53910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801e29c880 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39a015 CR3=000000004a6c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3085c430 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6ec11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6ec11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6ec11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6ec11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6ec11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6ec11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=0000000000000012 RCX=ffffffff84e2ccfd RDX=ffff888044b8a440 RSI=ffffffff84e2c8d8 RDI=0000000000000005 RBP=ffffffff8f17e59a RSP=ffffc900036e6778 R8 =0000000000000005 R9 =0000000000000019 R10=0000000000000012 R11=ffff888060b80030 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffff888060b80000 RIP=ffffffff81bbf290 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f29fbbfc6c0 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faf6f9a5f98 CR3=0000000044412000 CR4=00352ef0 DR0=0000000000004e53 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc41eeab60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79eca11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79eca11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79eca11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79eca11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79eca11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79eca11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320780004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58207314fcc9c322 1152f6e6a9c3852d 52089a7e11146512 06dbab22fba53e3e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6bb93cd9f1a32784 9a3cdd04d7f08542 71c2ddec58207314 fcc9c3221152f6e6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a9c3852d52089a7e 1114651206dbab22 fba53e3e662ee15f 7f256e01906781f2 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 22020ad285fccbc1 1c4e8539833f086d 6bfdbfcca01e2cd6 6c367630e17df634 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 813736266761cbe4 7a3a61c835af39df 88cbf5016840c9f8 359062c639e3c161 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000