last executing test programs: 5m44.883539911s ago: executing program 1 (id=2): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x4, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x7, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0xfffffffe, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x4, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xe6, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x7, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x5, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x367, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x5, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x6, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000000, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x9, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x9, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0x6, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0x8, 0x6, 0x1, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0x8, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0x3, 0x9, 0x10, 0xfffffffd, 0x3, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0x6, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x1, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0x8, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x7, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0x5, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0xa4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x400, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x3, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x6, 0x4, 0x7, 0x2, 0xfb4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x8, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x9, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0xc, 0x1, 0x7, 0x3, 0x7fffffff, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6332, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0x3838, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0xff, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x6, 0xc0, 0x3, 0x75, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x6, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0xfd5, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x4, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x4, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x3, 0x7, 0xa, 0xd, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) (async) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e33, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="040100000000000000000000070000008614"], 0x108}}], 0x2, 0x0) 5m44.590147972s ago: executing program 1 (id=6): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7fff, 0x404080) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f0000000400)={&(0x7f0000000380)=[r3, r4, r5, r6, r7, r8, r9, r10], &(0x7f00000003c0)=[0x1, 0x8, 0x77d, 0xfffffffffffffffe], 0x2, 0x8, 0x6}) 5m29.560245354s ago: executing program 32 (id=6): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7fff, 0x404080) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f0000000400)={&(0x7f0000000380)=[r3, r4, r5, r6, r7, r8, r9, r10], &(0x7f00000003c0)=[0x1, 0x8, 0x77d, 0xfffffffffffffffe], 0x2, 0x8, 0x6}) 4m21.103302186s ago: executing program 4 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x7f7401, 0x12f) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x107) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) (fail_nth: 29) 4m20.777124137s ago: executing program 4 (id=417): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) ptrace(0x10, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x8, 0x100073, 0x100000}, 0x35) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='vxfs\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000140)=0xb2, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @local}, 0x1c) recvmmsg(r6, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) ptrace(0x8, r1) recvfrom(r2, &(0x7f0000000180)=""/175, 0xaf, 0x3a803461209680f5, &(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x80) ptrace(0x420f, r1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1810039000000000bf008000000000e000a000f000000028002002d1f", 0x2e}], 0x1, 0x0, 0x0, 0x3000000}, 0x4000080) 4m20.231367782s ago: executing program 4 (id=421): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x1c1183) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x30000005}) r4 = dup(r1) getsockname$packet(r4, 0x0, &(0x7f0000001540)) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000040)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000001c0)={0x75, "d3e96f57555f5f18513ebfdd1ef90f8dfc772693e9f8e46909c8d4b62787cc4fdf615ffde1bba22c3ae4859df02af000cec5ebdef01a5c9a4dc200aeed53ee16bac1ae9108a64270077c0382f493b40ba4f79292e5adbcc6479bba03355c4e857b929c0d156014681e69e8bc73e5c283e4bc747951571ed819967907d6376af3"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x0, 0x1000000}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) 4m20.104694114s ago: executing program 4 (id=423): creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x81, 0x100c050, 0x5, 0x0, 0x0, 0x3}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) (rerun: 32) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000240)={0x0, 0x3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) poll(&(0x7f0000000100)=[{r4, 0x2058}], 0x1, 0xfffffc01) (async, rerun: 32) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (rerun: 32) accept4(r5, 0x0, 0x0, 0x0) (async) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async, rerun: 64) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) connect$inet(r6, &(0x7f0000000140)={0x2, 0x8000, @broadcast}, 0x10) setsockopt$inet_opts(r6, 0x0, 0x1, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0), 0x4) (rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r8}, 0x8) (async, rerun: 32) write$binfmt_elf32(r8, &(0x7f0000001040)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x9, 0x9, 0x7, 0x8000, 0x3, 0x3, 0x7, 0x226, 0x38, 0x2b2, 0xd, 0x46, 0x20, 0x2, 0x74b6, 0xdc8e, 0x7f}, [{0x70000000, 0x0, 0x1, 0x90000000, 0x7, 0xffffffff, 0xffffff00, 0xa33}, {0x6474e551, 0xd3, 0x9, 0x2, 0x71, 0x9, 0x0, 0x3}], "7e34416f61b4d591060195fcf3ea9b94428b532a8822010f33ac7e9e4b801a28af4bc89ec84a954eb765b729f09f6a9f213bcd97ad8fc0b798fba63e3300558db71745de69cef3f90cdf7d68ef48e2ba89060553c6eec3a41d7dead9ce6de9", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9d7) (async, rerun: 32) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000000)=""/4087, &(0x7f0000001000)=0xfffffe9a) (async) syz_emit_ethernet(0x9a, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x64, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "ce75713e1f83ac361c8b3ce671d0f6040eeeb5f3d682aa44b5baa75d0e6f30e9", "f78c045a5d3e3dd45207daba0bf8fb10", {"4633251188e45d79a220d115a0774e8a", "0c3e29a4f380cf106865a0edf7bf2a3d"}}}}}}}}, 0x0) 4m16.925161391s ago: executing program 4 (id=447): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) (fail_nth: 47) 4m16.456953674s ago: executing program 4 (id=450): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8000000, 0xffff, 0x2}) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8000000, 0xffff, 0x2}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0x1, 0x1, 0x1, {0xffffffc0, 0x2, 0x5, 0x5}}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x0, 0x101, 0x3, {0x5, 0x0, 0x0, 0x80000001}}) (async) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x0, 0x101, 0x3, {0x5, 0x0, 0x0, 0x80000001}}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000200)={0x1, 0x7, 0xe6, &(0x7f0000000100)=""/230}) r1 = socket$rds(0x15, 0x5, 0x0) connect$rds(r1, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/36, 0x24}], 0x3, &(0x7f0000000480)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xbb}, &(0x7f0000000380)=0x5, &(0x7f00000003c0)=0x3bea, 0x2000000000000, 0x9, 0xc, 0x8, 0x0, 0xdb51}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000400)=""/57, 0x39}, &(0x7f0000000440), 0x65}}], 0x88, 0x44841}, 0x200000c0) (async) sendmsg$rds(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/36, 0x24}], 0x3, &(0x7f0000000480)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xbb}, &(0x7f0000000380)=0x5, &(0x7f00000003c0)=0x3bea, 0x2000000000000, 0x9, 0xc, 0x8, 0x0, 0xdb51}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000400)=""/57, 0x39}, &(0x7f0000000440), 0x65}}], 0x88, 0x44841}, 0x200000c0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000580)) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000580)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000640)={{r0}, r2, 0x8, @inherit={0x58, &(0x7f00000005c0)={0x1, 0x2, 0x54, 0x7f, {0x4, 0x3, 0x146, 0xf5b, 0x8000000000000000}, [0x1, 0x3]}}, @name="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"}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000001640)=0x1000, 0x4) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000001640)=0x1000, 0x4) ppoll(&(0x7f0000001680)=[{r1, 0x4000}, {r0, 0x9000}, {r0, 0x9019}, {r1, 0xc}], 0x4, &(0x7f00000016c0)={0x0, 0x3938700}, &(0x7f0000001700)={[0x1]}, 0x8) r3 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r3, &(0x7f0000001740), 0x0, 0x26004801, &(0x7f0000001780)={0x2, 0x4e21, @private=0xa010100}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000017c0)={0x45, r0, 0x80002}) ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f0000001800)) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000001840)=0x80000000) (async) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000001840)=0x80000000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) ioctl$RTC_VL_CLR(r4, 0x7014) connect$inet6(r4, &(0x7f00000018c0)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x42}, 0x10001}, 0x1c) r5 = open$dir(&(0x7f0000001900)='./file0\x00', 0x644003, 0x4) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r5, &(0x7f0000001940)='./file0\x00', &(0x7f00000019c0)={{0x0, 0x2710}, {r6, r7/1000+10000}}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, 0x1409, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008041}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, 0x1409, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008041}, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, r8, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1bd}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000001c80), &(0x7f0000001cc0)=0x10) getsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000001d00)={@multicast2, @local, @loopback}, &(0x7f0000001d40)=0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001d80), 0x400000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)=@ipmr_newroute={0x54, 0x18, 0x300, 0x70bd2a, 0x25dfdbfe, {0x80, 0xf4, 0x80, 0x5, 0xfe, 0x0, 0xff, 0x4, 0x400}, [@RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0x14, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0xf, 0x2, '-}\x0f/,$+\'({\x00'}}}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_SRC={0x8, 0x2, @multicast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)=@ipmr_newroute={0x54, 0x18, 0x300, 0x70bd2a, 0x25dfdbfe, {0x80, 0xf4, 0x80, 0x5, 0xfe, 0x0, 0xff, 0x4, 0x400}, [@RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0x14, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0xf, 0x2, '-}\x0f/,$+\'({\x00'}}}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_SRC={0x8, 0x2, @multicast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 4m16.365757003s ago: executing program 33 (id=450): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8000000, 0xffff, 0x2}) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8000000, 0xffff, 0x2}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0x1, 0x1, 0x1, {0xffffffc0, 0x2, 0x5, 0x5}}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x0, 0x101, 0x3, {0x5, 0x0, 0x0, 0x80000001}}) (async) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x0, 0x101, 0x3, {0x5, 0x0, 0x0, 0x80000001}}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000200)={0x1, 0x7, 0xe6, &(0x7f0000000100)=""/230}) r1 = socket$rds(0x15, 0x5, 0x0) connect$rds(r1, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/36, 0x24}], 0x3, &(0x7f0000000480)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xbb}, &(0x7f0000000380)=0x5, &(0x7f00000003c0)=0x3bea, 0x2000000000000, 0x9, 0xc, 0x8, 0x0, 0xdb51}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000400)=""/57, 0x39}, &(0x7f0000000440), 0x65}}], 0x88, 0x44841}, 0x200000c0) (async) sendmsg$rds(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/36, 0x24}], 0x3, &(0x7f0000000480)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xbb}, &(0x7f0000000380)=0x5, &(0x7f00000003c0)=0x3bea, 0x2000000000000, 0x9, 0xc, 0x8, 0x0, 0xdb51}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000400)=""/57, 0x39}, &(0x7f0000000440), 0x65}}], 0x88, 0x44841}, 0x200000c0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000580)) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000580)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000640)={{r0}, r2, 0x8, @inherit={0x58, &(0x7f00000005c0)={0x1, 0x2, 0x54, 0x7f, {0x4, 0x3, 0x146, 0xf5b, 0x8000000000000000}, [0x1, 0x3]}}, @name="7fda92b1f9bd9b4d6c49da5060531fe7e7757b4ed8462aad056c6229d1de1b96f8bce2bc2f44f7f5479d60be5ce7eeee5fe33cf6ae84082732d3838f342d2f0b0bdd88a53d98e8714d8b7110394b6d3fb5d7bdfff63dbf1cc1df481a45e539f7a6a83027da9032a54ca4828509fa62127ad12440402366b3c2f6931dedb910cb8e2558b12a70f55fb72aa897d2832c8e5bf9553a33dd16c523c68c80e9f45e90a3b723f2bbe532089022b7de0a383799b0d96079c94ef37c3b4641def0f38353ddadfd94d911b3549600865b5384ea0380ab2137b42bd26372a13719dbe85aca76c12a9db89466ee494b710504e5fd0d7b2199c29b6e735a00ad9ded7bdeda6b60cdedafd09ba8fe065ba2f4caf96039f14e4d5b7e92d2e5419eced170ee88d827b4a6b6319276a55af6e67e2cd1703fdcceacdf006537e0468048553e370c6838c128eed677f41dce557c89a168c0705246e214e2d2630e773a57b7cda8307cc0a0d9a38819f15c9e2f6eb7cf3f5c6d5553eba1018b88403c47b229d8480a53abf1110fb2420519d826cd39c09a3f1faf7d155ba690b65651c591e889bad6a06472e8ab2cca476ce30c3280648e07d4f180222b704ab0cda3c1af3bc6072187d65277e1464adf74f65a027acf68f0f5df2cca9f7df5e7331d9fbc87520f5b7aa2c12c3852982218995732686f83fd3ff42370cb2b61422be0321c0a87b5c2ac9e26cde00a29323a72473fab832173674755f674919d67313f1f47a8cfb5eac2b2e050bbc205471a02225fb5208a98af8c959e7b4d61b225f4b80615b6649ce23ca16e5c8a50213a0dd4d4766528074819ced26f218711873881a9df91b5893f4ae4f7dbd17e20d057528ab80aed8f17f23befb2eab2c7f7c901584095ead55529370f1be6f981d0de9d060e11c7366a37e7e8c094ba6a38ec5bb50267f0a64bfc382252f38f0204e1c2d5ca33f7f98b772171dee9ebe7084c2b2778669e86ad7d22a7fcbca3effc722547b935281a9b59fa93b805acfea26a8977ef34e0337e1b38ddf41073549f5dc6378f0b7f9eb674f7fb6016695e45de25d71c5cce13a0f618152cb15e6ad34e98102642be4f7386fe9f972ffda56d80b3262f9e0674501544e9d08645f2fd31c67a9b2db9b86a6dd41804e69569b9bc3a3c3a9d7b540f70b7325610b34ffb7066bd0bfbb4711704d5630acafeab22e7aac14f5540936816067ea20bca8517e2da7574d9f2ef7b8d9740766ea464616e2523fba693c6b6cc99f22045605822eeaf7f8512062ab223d61710811dd9c75026f244461d2f6e2b5fd6be3788d7388d69e4576a2760f991de4c0525579d7a3e397aa3736474ba2b50c5faf8db488538bae3f6b7c20bdb0068c3a98845e42c44244e1f013f7cc58d6a0a46fa0ac5d7c838c3388a73ffe3fc30938484c7c9a664efaec049e11f02295ca3282a5ed6415211a63baa63a3052018448576612c0d95fdd3d62e644625c6fddfe5e20f729bc8822ef6988ffc547ddfe466c56e79109cee4ecdaa88345a2b9a0d6b9c08ae0211eea2acbd9bba4832e1825eb853df302d8c7045c1be61103dd2b56d33fd381d6a27554571c8a8dabd0d7b104072fcc5372a834529c3b4a25bdd53037cb5bf6784cddb43853f43524b6b144082f7854ddaf5c536e9aee966539233a161a258e69c249c586d4e65493dfdcff745490f10ba3749760df467abde89ba1e834628f5ccc9f18590027c66f61b03afacbfd2128790fb79e18d1735131083a9a20915c2c94a3360e637a9b3ad752a9e006543b2337e3a2a2831befb1b1e83871487cbab683ab9e2b7436c97249a3a8d141267226c798a0cda30102027c8150028665e9e32dcb709ff48009f2059b5e492e0b1dd243f7262d6cc0e178c5bd4f4d91a0ed6d6d47d594c493fa85227fa24d4fa4e8d28e80afe7ad13bb160480d33bd22262dc83eb3b3031131e70edd69e56bd96bb9d19056f44be519bd1fa7dd0155326f2d8cb2c6b1fee12e227674e23a98e56f7ba1c00879bfd94eb30a7ec125f3d1f2f6b39800c0ea5bc6ee3cb79cfd9f0cc540915e73f29800b67c4fbb9fdac2cb61f2eb30ab2268fc70f5431eff28c2e8a8961befc5971857b949ffe83c481004e1c1c106160d7f0b403b0c2b2004c77bd165e8bc8f797d16a6d51383336227d89dd11c18d5a552892b50da6824a9dfb1010ae4e3dd2d472bfd98e8ea9432685c989fdd506f41cee60c1189eb719d450d93a2c381fcb8497b0e8d092aa0b0ef58b87916e777fdd6d5b00b4820e058bca3c072c68594c73a6c4c6804f64f2582ab3ca19fce24b5621dd65ccaa5ce8495ea2fbb2b9b14e1174a36f7e5edc24bf4dd74333bff86ef84483a979c030ea370cf420c1cda7f7139333c5abc84e07f4347e78169436cc614792281958ddd7978d2011f8323dec17f4c6b04c0f125d0fbd8292f67e7a3e4bb40db7489cacbe04cbe90981d6e75d5e61d9fccd397217bde814f2c64f6334ad75caa05b41428be3f9651bcb6873d00bb697294cd3fcd81a71f626e898515fcc8e35fe3d2e27b79ab37e85808658ee39aba3509d99486a7ef07a6cdd3d5686e2fc392f3b3eb9941f23b6e1f30d8c950cfe61b20220c9514a75bcf5dedf6e1e2f0f22fbb0233c9a015330aebf85012a02f94d0cb29cba7f4e0874f29ac80674c0ba70370033f836337eacda91a29dafee6733efe24e0a6f7eaf4886297e2a5142918e957519ad2552ca5bb9972ae615cbc935fc6f270f8e8bd7ea518e09934ccba78db8e81b7a8b47a92d40f697442e7974f2b83c9a2c19b9b9e00ca5e36d6e1d2b03379e129d690a96691fac0bedbefcad4fdfa1b67cc2112bcec1c4ae31f73b6143f1540b5d1ba614efcf1ed6d6ff2242510b48476391c90318c0455b648275b8257ae4b693d6c8d6c60f3ccfd77adfc7e5faf9e72bc3d440c2ad488b488f7df0aaf7928d9bc4890989ec1bd986d81c5e90c92dcef33aa45d4fc302547e5495c0f22284c42115c9079c0b71a7c705ff997c7433e3695f079b3042703cef6652a5ae5aa334e7487a5e191330c8aadae78083feb5b9871ebc0cf8aabf98a6aa9e4f384c7e9967eec047e974ce4949aee9038a5f281f14bc2ade41fd181eaab37326c9ea8e6d2c9b48b7ef16c9d75616f3806e1df84d0dd2b60b63373de8e29a4056eabf52897275785cb5a2b657218ee2b09a81867a475cb6e1e99cdfa46ae6037056b9afe2a0a3cf055c808f7c95459a7f36efb992035150248cf66345a33836c47a6a54162f0b1ef925110283378c774c78617a0703a3845b79cc7da70e232eed8f3e9796a5209fcd5a44843fd896f147ed6821049549bcae0c502b8f0e345dd6feec1a605ad72409791b2b86347a1b2cea4ef6719c4b97cf2e7493c2f783842597b9a25bab04127620c0c8d92b1901f5f63be3fbaf6648e4caf650974f8dc720bfcf3d6f4d964262eefbb83c2db3a8f0013a7d47eaa2547d3db8442c5778be1c0f3a8264b9261f5b8cf1822938bdbcc0238c8738ec7a93cdba79eec05c26c163c77e41f073414152d604d9cb88c1017446cd0d5ce8e124b0e2df20d0b8742061560f9b33af9a17029b70c7b5ba36af397cb5e0bf712c8ba966ea9a22c960fd28281f0b342d5b0a7d65838db7641cad397cb704803fd8c50ef5caf46ff154b78a74167417701e39fd7b25c86b660ad07ecd30f50458b65c5e8f2ef2c6271408454941738e204b5e9c7d1b26f28e3086aed237337e0213da4cd9ce668008aa323097def59a5865226dce6b447b3dc75b7a108190ce2f8f44d513694c11589919bced98b97fc0386fd2c0e6cfe77f6bdc67f9dd9e3099e1f38225f1502690c3749b1295feae6da3a9e078af501b3247022a90332dfbc3b0b15f9dfd3e618f9b535b1ad6c16e8156d8bce0eb42899b33b755627d27c90f3f4e4a0d959d8076171039c0b556653ba9390e25a1186a8f9177aac08e2ebfffca78690fb38f72793d5d6913fb231d4ac9e46ab020c1f039bcf16b36206c0906d3567da4a37c6051b47397f8cf3086f5a8357aa1ac2225fed415520c0a90bb6426f0139a4aca3341698b27387d1395a827bba8ef0e9b981bc1833f24f2e386ef706feb82e050da3ab4f50119265d5289111cff6ddc41ae1c8fe6ba9211d6093decb09c2a4c12429e6cb4dab8a81845febf4c9f29a79914a859e107251e9d5ec97cd66c22fc75de2bcd32cb54043de917cdfb7c9d417784a0abe06eda19179ae9f572d8551c7247aeb67ca9d4328ec8ffd636d21066c6598a918159970ed260c4da3ba3a33182920762546724afec755f41922d35b5c1cb341f1721643e0d4107902666c679dd7fd33dad76d542e2d7d60f15f56a81dcc820260d80e59b341f87ee879ed49ee11e170b20b8d97810df4a58363c728e7ef5315328ba54f62c29782a591849d28cdaaa1f456b61974e30458b399b9451f08469e0a2f7ed192c94c223d11283892164f908e9ab4e303700d1e9edd57f1097c4e6d7fe71b82db68d3b4e2002ca624c4302c40a6ac11639561777da2bc1e2b7885d6edb820badac70fc4b1ddbce1c6dc038a09f2a58989cbdaa2809537759fef40ea27c15028782400cf20ac53b03d1703ed2ec884ddfa36ff01c534133a987a01efa308d2b7500be5844ab5a4b5c782ee2944e7ee2507e929924ad0c8a632901fdd3ca5e44b2e0866752d3c82e95ec628eb8ba39b762dc7ae4b1809f1626851fc6d5683da9f34ea698975ea3f298f35c5383712867a6f9b566609b688a17287c51de6093360141200e889233d2101ef51c518cf96fbb5b67d2a1288ec9523d0c6c11ba05f990573dfacde4394f23c479c1c759b6f30036675ea68e913345796b21ea641fdbaa393dd438679288fb80e9796a6fe730f8a4bc2570b8d1beec883b171816067561c19d7d178b64768c25f8f1d89603ff2f4354a8a7f3fcea69a47981bbdfc42d3c1f8c3e1a139c33d82429b903b3954b5fea0b6119f178a18cb1edf0258d8eaa23e8e15ca0b88d9d55ec261cd3d4e93543baff6da4e3d4f1d4711078d39b638d8fbf480f7f90cff8f04144cf30af1e5282abf84452cf7119961a8d0e7f279442cefdc6606789e5ab887e23c6337f3c7038cc3e7ccf796f1ac8f27dede4dd18273a07be8fa2043eaa0ca92fdeb63585431276a071a0b5d7f993db43142382f1377cfc62f7f917fef896d2004a09988f58dc782d3d10b35ecb2bebf49fcf483f42272fbe55d63563301463906652a34d97fc8983861a74ea10f7e0c23ca214c4dd6d221cd68e8902a44bb7324a6c8387adb3921728b6a32fc667108fe994c0732d1bb4058879ba77760bcead727b672df4544cf1762bef92accb9d1b01a7757bb2f1ed2549812cbbdaedcfb4b20a805e94d379f05926dc7a7044de3984e855e086e1c4a74a8b70a1e15f94a9c107fde3fc2a3d596018c30829f7f44ff73b45a1a5e4c2a8ea5f27fa74eb16496ffb077573f63efdd2c3a8bd8f33389d2e06b0aab170e724832829b4bb82f7e5022c53cf68a5cca0e32cbe8ea1c30ea703a9047a4823a8edf34568d46de5f66a0bce6d3a6413e7e11478982e158db698e5a2474282978300c49bc4b5f7be784f7800e7afd64bec862ee14ebf8a5890c56ed6e5d94ed91c981c284e46fa3fed0d13c99b847038c504be0f0d5254d148135404627d17f4f19cd51ceff2439ad"}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000001640)=0x1000, 0x4) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000001640)=0x1000, 0x4) ppoll(&(0x7f0000001680)=[{r1, 0x4000}, {r0, 0x9000}, {r0, 0x9019}, {r1, 0xc}], 0x4, &(0x7f00000016c0)={0x0, 0x3938700}, &(0x7f0000001700)={[0x1]}, 0x8) r3 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r3, &(0x7f0000001740), 0x0, 0x26004801, &(0x7f0000001780)={0x2, 0x4e21, @private=0xa010100}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000017c0)={0x45, r0, 0x80002}) ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f0000001800)) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000001840)=0x80000000) (async) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000001840)=0x80000000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) ioctl$RTC_VL_CLR(r4, 0x7014) connect$inet6(r4, &(0x7f00000018c0)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x42}, 0x10001}, 0x1c) r5 = open$dir(&(0x7f0000001900)='./file0\x00', 0x644003, 0x4) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r5, &(0x7f0000001940)='./file0\x00', &(0x7f00000019c0)={{0x0, 0x2710}, {r6, r7/1000+10000}}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, 0x1409, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008041}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, 0x1409, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008041}, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, r8, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1bd}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000001c80), &(0x7f0000001cc0)=0x10) getsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000001d00)={@multicast2, @local, @loopback}, &(0x7f0000001d40)=0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001d80), 0x400000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)=@ipmr_newroute={0x54, 0x18, 0x300, 0x70bd2a, 0x25dfdbfe, {0x80, 0xf4, 0x80, 0x5, 0xfe, 0x0, 0xff, 0x4, 0x400}, [@RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0x14, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0xf, 0x2, '-}\x0f/,$+\'({\x00'}}}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_SRC={0x8, 0x2, @multicast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)=@ipmr_newroute={0x54, 0x18, 0x300, 0x70bd2a, 0x25dfdbfe, {0x80, 0xf4, 0x80, 0x5, 0xfe, 0x0, 0xff, 0x4, 0x400}, [@RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0x14, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0xf, 0x2, '-}\x0f/,$+\'({\x00'}}}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_SRC={0x8, 0x2, @multicast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 2m41.953566948s ago: executing program 2 (id=1256): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xca8b, [0x0, 0x6], 0xefcf}, 0x10) 2m41.781839414s ago: executing program 2 (id=1257): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) r3 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$IPC_RMID(r3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000002680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xe}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x2081) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) readv(r5, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) 2m40.483923396s ago: executing program 2 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060009"], 0x30}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x48) write$tcp_mem(r6, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) (async) socket(0x2, 0x80805, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) syz_open_dev$hidraw(0x0, 0x0, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x10002, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9002000000f01c1f20f91ae03000000c4e1f9706b5c400f070f09b9430200000f32c4e3396e88005000009866baa100edc4c1e9e0f0b9800000c00f3235008000000f30", 0x49}], 0x1, 0x6a, 0x0, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) preadv(r9, &(0x7f0000000380)=[{&(0x7f0000000340)=""/14, 0xe}], 0x1, 0x0, 0xe) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1c) 2m39.932615469s ago: executing program 2 (id=1270): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='erofs\x00', 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 2m39.68104315s ago: executing program 2 (id=1272): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000100)="e09cd5b884a657dc0dd1471a04ecf9eb44e52883b2dea267319866ab86dd49f67b7c297ddc3af1f4a702eb583726cd1c619c1c6bea98cf62f6b40ccbff5b8e0bd2e02f1d6f47b177a30de2a926de0c780e3fa98d2d45acee07243e88a87829a72922bb6536786a77f5d6ab837b62baf1657539a622b1add212e8c3feb8257026e200361a4752acba2d6bb971d7a7642602e1cfcb2ee0948c25b18ce98964f9e8db5ba71a64cbdd1a3e62cbc414dfd1e87253492edb637933847813638ae1ec9d553efa5cbf546357e2b12c594c749fe846a73649577bbd38924d820edfe271822616c963183eaa21288fef1d") (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3fffff) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) 2m33.157990224s ago: executing program 2 (id=1280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="05003901"], 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x810) 2m33.034339721s ago: executing program 34 (id=1280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="05003901"], 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x810) 1m6.520292931s ago: executing program 6 (id=1879): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000ac0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 1m6.463735797s ago: executing program 6 (id=1881): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b23, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@expire={0x150, 0x18, 0x200, 0x70bd25, 0x25dfdbfe, {{{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x6, 0x4e22, 0x6, 0xa, 0x80, 0x0, 0x89, r1, r2}, {@in6=@loopback, 0x4d3, 0xb2c55a7e533b8ecc}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x7, 0xe5, 0x0, 0x9, 0x9, 0x0, 0xb2, 0x800}, {0xffffffffffffffcc, 0x6, 0x7, 0x7}, {0xfffffff8, 0x0, 0xd}, 0x70bd27, 0x3506, 0x2, 0x1, 0xf, 0x8}, 0x1}, [@mark={0xc, 0x15, {0x35075b, 0x6}}, @proto={0x5, 0x19, 0x32}, @replay_esn_val={0x3c, 0x17, {0x8, 0x70bd25, 0x70bd28, 0x70bd2c, 0x70bd29, 0xeb, [0x80000001, 0x7f, 0x1, 0x8, 0x4, 0x9, 0x4, 0x0]}}, @replay_thresh={0x8, 0xb, 0x5}]}, 0x150}}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="b805000000b918e40000440f20c03508000000440f22c036dbe366f2f20f350f00df66baf80cb838347388ef66bafc0c66b86e0066ef2e660f3880b70d00000066b823008ee8260fc768a60f01c2c4e25da7a5000000000f3235000100000f30", 0x60}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) (rerun: 32) 1m6.339665074s ago: executing program 6 (id=1884): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x52, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m6.168630216s ago: executing program 6 (id=1886): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r5, 0x932, 0x8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f00000001c0)='net/softnet_stat\x00') (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/time_for_children\x00') (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f00000002c0)={0xc7, 0x0, 0x1}) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x400) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$qrtrtun(r8, &(0x7f0000000080)="2386ad1c45385283c00769072764d9fe632b679db9c8bc759f82343371ad8c44ea49de4fc4ddf3c3da4876582132d62919c105baf8bc9ab25325fe625a66f52cdfed99478071758e1b5cc436e408423b48bbd5b07989014598ac91034b02a64cc0dd4320e2d2dcfa89af7e549866922dbee4930ed8c0901219", 0x79) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000240)={0x3, 0x667, 0xbda, 0x4, 0x0, 0x5}) (async) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000080)={0x80000001, 0x4, 0x6}, 0x10) (async) sendmsg$nl_generic(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001200050b"], 0x14}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m6.113683056s ago: executing program 6 (id=1887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x30, 0x2, r4, 0x0, 0x0, 0x0, 0x40, 0x1, {0x1}}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r7, 0x0, 0x5}, 0x18) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m5.666285166s ago: executing program 6 (id=1889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0xfffffffc, {0xa, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x20004810) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x24}}, 0x0) 1m5.652559618s ago: executing program 35 (id=1889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0xfffffffc, {0xa, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x20004810) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x24}}, 0x0) 54.48345964s ago: executing program 5 (id=1979): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x4) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0xe, 0x1, 0xee7, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) 53.542635976s ago: executing program 5 (id=1980): socket$caif_seqpacket(0x25, 0x5, 0x4) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000117d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 53.008482789s ago: executing program 5 (id=1988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x1000012, 0x10, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, 0x0, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000cc0)={0x7, 0x0, [{0xc, 0x1, 0x0, 0x0, @sint={0x7, 0x3ff}}, {0x5, 0x2, 0x1, 0x0, @sint={0xfffff85b, 0x2860}}, {0x8, 0x3, 0x0, 0x0, @adapter={0xffff, 0x2, 0x10, 0x8, 0x5}}, {0x7, 0x1, 0x0, 0x0, @sint={0x60, 0xde4}}, {0x7, 0x4, 0x1, 0x0, @adapter={0x8, 0x5, 0x6, 0xd, 0x80000001}}, {0x3, 0x3, 0x0, 0x0, @msi={0x2, 0xffff, 0x1, 0x83d6}}, {0x4, 0x3, 0x1, 0x0, @msi={0x3, 0xffffa068, 0x3, 0x1}}]}) 52.826947618s ago: executing program 5 (id=1989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 52.752035739s ago: executing program 5 (id=1991): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x2, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000f, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) close(r4) 52.61038028s ago: executing program 5 (id=1992): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000) write$eventfd(r3, &(0x7f0000000000), 0xfffffdef) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x2000fdfd) 52.462539388s ago: executing program 36 (id=1992): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000) write$eventfd(r3, &(0x7f0000000000), 0xfffffdef) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x2000fdfd) 5.369065103s ago: executing program 0 (id=2547): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 5.317334606s ago: executing program 0 (id=2549): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x1}, 0x18) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000003000/0x2000)=nil) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x40340, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x15, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x15, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20008000) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000280)) (async) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000280)) 5.242121375s ago: executing program 0 (id=2552): socket$caif_seqpacket(0x25, 0x5, 0x4) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001010600040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.769860809s ago: executing program 7 (id=2568): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x20000040) (async, rerun: 32) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000180)=0xfca8000, 0x4) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r2, 0x8004745a, 0x2000000c) (async) r4 = syz_io_uring_setup(0x42dd, &(0x7f00000000c0)={0x0, 0xc391, 0x200, 0x1, 0x3c4}, &(0x7f0000000000), &(0x7f0000000140)) r5 = io_uring_setup(0x46f5, &(0x7f00000001c0)={0x0, 0xd4b1, 0x20, 0x1, 0x117}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000340)={0x0, 0x38e, 0x10, 0x1, 0x224, 0x0, r5}, 0x1) init_module(&(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000038000000000000000000"], 0xaf, 0x0) 4.694732289s ago: executing program 7 (id=2569): setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}}, 0x40880) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1a", 0x1, 0xffffffffffffffff) keyctl$update(0x2, r4, &(0x7f0000001080)="83", 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r8, @ANYBLOB="0500350000070000050033000300000005003400100000"], 0x3c}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f40), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000004fc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000005000)={0x24, r11, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x20}, 0x1, 0x0, 0x0, 0x2000c04b}, 0x8000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x24000810) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r13, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r13, 0x4040534e, &(0x7f0000000740)={0x2b2}) fsetxattr$security_selinux(r13, &(0x7f00000003c0), &(0x7f0000000440)='system_u:object_r:hald_log_t:s0\x00', 0x20, 0x2) r14 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) accept4$llc(r14, 0x0, &(0x7f00000000c0), 0x800) 4.599914287s ago: executing program 7 (id=2570): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080000080"], 0x26}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x8, 0x6, 0x62, 0x0, [], [{{0x9, 0x5, 0x9, 0x1, 0x200, 0x4, 0x8, 0xf8}}]}}]}}]}}, 0x0) 3.339458141s ago: executing program 7 (id=2580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x1ff, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) accept4$unix(r1, 0x0, 0x0, 0x100000) capset(0x0, 0x0) pwritev(r1, &(0x7f0000000500), 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000, 0x10000000}, 0x700) 2.537772499s ago: executing program 0 (id=2596): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 2.537566894s ago: executing program 0 (id=2597): setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}}, 0x40880) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000740)={0x2b2, @tick=0x20000140}) 2.462021037s ago: executing program 0 (id=2599): syz_open_dev$dri(0x0, 0x20, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x1ff, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) accept4$unix(r3, 0x0, 0x0, 0x100000) capset(0x0, 0x0) pwritev(r3, &(0x7f0000000500), 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2.120333491s ago: executing program 3 (id=2600): keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000240)={0x0, 0x1, 0xffffffffffffffff}) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}}, 0x40880) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x20501) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x0, 0x8}, {}, {}, @raw32}], 0x1c) msgget$private(0x0, 0x209) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000facdfe29006b0000002300c450e8d11ae421c4c3d0fc5b46930355b5b31c287d1319a5eac85094f3a897a5a43b64200f3b0c3fe1c620437c0000000000000020e5ad7af244d90a087516d207f05e006428c4a8f5913bb00990a53f99"]) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0404"], 0xd) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000280)={0x0}) r6 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x248d02) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc03064ca, &(0x7f0000000140)={&(0x7f0000000040)=[r7], 0x0, 0x5, 0x1, 0xc}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000300)={&(0x7f00000002c0)=[r4, r5, 0x0, r7], 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x2b2, @time={0x8, 0x1fffe}, 0x0, {}, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x157, @tick=0x4, 0x5, {0x5, 0xf9}, 0x3, 0x1, 0x7}) 2.119931648s ago: executing program 3 (id=2601): add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffa) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000040)) r2 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x1, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x200008f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc038563b, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0435064b00000000006922076dba2355e741ca22fb39522b931cbb35a3424a67c1efc901f1a5a98aea7f8cd15fd005655a6bb300e2cb3bb0873b91841b415db2c350d1908c4a20fc110fce525ce6c0cfb839a9ddb241014da66b4d83bc8d5d840574343027e2f12d8dec7ba1c898979dd149e072ea49d670e694cc7d95a79507a43ee2badd7589dc9a317784df7f05146eabfcbb42444a28d39027945b81b7130c005a1582892a053013d5a2e5fc67c26f3dc848381105a1b8"], 0x9) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r11, 0x401}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2000c851}, 0x20000080) r12 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r12, 0x4018aebd, &(0x7f00000000c0)={0x3}) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044011}, 0x4040) 2.02458412s ago: executing program 3 (id=2602): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) rt_sigaction(0x15, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000740)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[], 0x104}}, 0x0) 2.024426302s ago: executing program 3 (id=2603): socket$caif_seqpacket(0x25, 0x5, 0x4) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000110000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1.960505682s ago: executing program 3 (id=2604): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d165515a933f4c5638824435180000000000000010010000010000003b000000000000000e0c28a8147574dc117034702769254a909f0f5acaf86d840a1c9983440a6b8f316ca8743d59394fa4842e934278580787d3b9fed936555ec59ef739e2759f24aeca33a539d50b0aab81fb3ac36a8662f71d9a33db2f1376aec1"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) 1.96033218s ago: executing program 3 (id=2605): socket$caif_seqpacket(0x25, 0x5, 0x4) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001001100040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 270.992448ms ago: executing program 8 (id=2627): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000c7b96ecb0010"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in6=@loopback, 0x4e24, 0xfffc, 0x4e24, 0x0, 0xa, 0x0, 0x10}, {0x100000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffff}, {0x1, 0xfffffffffffffffe, 0x0, 0x9}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x200000, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff}}, 0xe8) (async) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) write$cgroup_devices(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1b2308217f01"], 0xffdd) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c000680"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000001480)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f0000000840)={0xc00, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x764, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x260, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x32c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x168, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfb59}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8f9c341f7378a10880eb224838259aa1123373c40ad9a8d0f7b9e4ea0442b96f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6cb0f64f2fd1d10cf358ffaca1a6adc35f4477a3d18d97ab320a0df67fd63abf"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfffffced, @empty, 0x10}}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "69b69ef53a80184400aa774f5939f876adfe803636201985dc60be0577888d0e"}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffff7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PEERS={0x43c, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "07f53c7e1953f88f2431b1523329f472a3399be4286ae2fb5c0b3f8cac25e6da"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "24591744015309ba9fef1437d15b5c871a3c7bec6f3705ebbc9307beedc66581"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @private2, 0x4}}]}, {0x1ec, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1bc, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}]}, {0x104, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d1b266e4ef41942f08dd3d8e935b545c1485a4aca9a00a2410d2fb19d3ae562c"}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6b}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "063dc8c4e465ccd723c25c634f4003802f55bcf2500e3d91fae06b85fb5f10bc"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0xc00}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008040) r10 = syz_io_uring_complete(r4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x108, &(0x7f0000000480)=0x6, 0x0, 0x4) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setfsuid(0xee00) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) (async, rerun: 32) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r10, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x170, r12, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x927a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x38f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}]}, 0x170}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) write(r11, &(0x7f0000000340)="18000000010003", 0x7) 174.718031ms ago: executing program 8 (id=2628): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002, 0x0, 0xfffffff9}, &(0x7f0000000080), &(0x7f00000004c0)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000600)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 174.539722ms ago: executing program 8 (id=2629): setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}}, 0x40880) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000740)={0x2b2, @tick, 0x0, {}, 0x0, 0x40010020}) 172.960312ms ago: executing program 8 (id=2630): setresuid(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}}, 0x40880) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) r1 = io_uring_setup(0x497c, &(0x7f0000000300)) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5e) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fd02000200020000", 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpid() r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a01, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r9, &(0x7f0000000100)=ANY=[], 0xfce1) ioctl$TCFLSH(r7, 0x540b, 0x1) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x10207, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 57.341242ms ago: executing program 7 (id=2631): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r1, 0x5490, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "e3da62162895237d", "5e1cdd4af3bd2b0da0c5bdb1bd658200", "a98ae4df", "cd5019dfdf2f702b"}, 0x38) sendto$inet6(r4, &(0x7f0000000480)='&', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x0) getsockopt$inet6_int(r3, 0x29, 0x46, 0x0, &(0x7f0000000080)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf2501000a000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) setitimer(0x2, 0x0, &(0x7f0000000180)) 296.033µs ago: executing program 8 (id=2632): socket$caif_seqpacket(0x25, 0x5, 0x4) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000010600000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 127.603µs ago: executing program 8 (id=2633): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async) bind$x25(r0, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r1 = socket(0xb, 0x5, 0xfffffffa) r2 = socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0xf7, 0x5, @vifc_lcl_ifindex=r4, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0xf7, 0x5, @vifc_lcl_ifindex=r4, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$packet(r1, &(0x7f0000000140)="2610065df2a54f00165277180dec6c4dcc425af79b41d77bd613dbf04d4b9a46fa04c19e23cc60569e43a99248f9518c4931a3a0e9b0724296a7657af6e475623e16", 0x42, 0x80, &(0x7f00000001c0)={0x11, 0x9, r4, 0x1, 0x8b}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000100)=0x3, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 7 (id=2634): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000180), 0x401, 0x101401) write$midi(r2, &(0x7f00000001c0)="665bc74d5522537981ecb5841e65ecd75302412cfe82b85a47b71807c280a696eb34f6cd", 0x24) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x1ff, 0x30, @mcast2, @remote, 0x18, 0x80, 0x100, 0x5}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): stem_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 378.500999][T12990] block device autoloading is deprecated and will be removed. [ 378.503842][T12988] md: md2 stopped. [ 378.803661][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.920489][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.930257][T12998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.063466][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.155440][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.164966][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.168638][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.173070][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.175599][ T5954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 379.177845][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.201123][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.217243][T13003] »»»»»» speed is unknown, defaulting to 1000 [ 379.254809][T13003] »»»»»» speed is unknown, defaulting to 1000 [ 379.331128][T13003] chnl_net:caif_netlink_parms(): no params data found [ 379.335611][ T11] bridge_slave_1: left allmulticast mode [ 379.337923][ T11] bridge_slave_1: left promiscuous mode [ 379.340471][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.346650][ T11] bridge_slave_0: left allmulticast mode [ 379.349096][ T11] bridge_slave_0: left promiscuous mode [ 379.350979][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.609103][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.613038][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.616438][ T11] bond0 (unregistering): Released all slaves [ 379.696368][ T11] bond1 (unregistering): (slave bond2): Releasing backup interface [ 379.698727][ T11] bond2 (unregistering): left promiscuous mode [ 379.701310][ T11] bond1 (unregistering): Released all slaves [ 379.778512][ T11] bond2 (unregistering): Released all slaves [ 379.784193][ T11] bond3 (unregistering): Released all slaves [ 379.851176][T13003] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.853368][T13003] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.856781][T13003] bridge_slave_0: entered allmulticast mode [ 379.859628][T13003] bridge_slave_0: entered promiscuous mode [ 379.866974][T13003] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.869744][T13003] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.872503][T13003] bridge_slave_1: entered allmulticast mode [ 379.876884][T13003] bridge_slave_1: entered promiscuous mode [ 379.910616][T13003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.915767][T13003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.951339][T13003] team0: Port device team_slave_0 added [ 379.955662][T13003] team0: Port device team_slave_1 added [ 379.980039][T13003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.982903][T13003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.993300][T13003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.997956][T13003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.000107][T13003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.008955][T13003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.055885][T13003] hsr_slave_0: entered promiscuous mode [ 380.058863][T13003] hsr_slave_1: entered promiscuous mode [ 380.060841][T13003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.064441][T13003] Cannot create hsr debugfs directory [ 380.153374][ T11] hsr_slave_0: left promiscuous mode [ 380.156505][ T11] hsr_slave_1: left promiscuous mode [ 380.158637][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.160831][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.163301][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.165552][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.187720][ T11] veth1_macvtap: left promiscuous mode [ 380.189441][ T11] veth0_macvtap: left promiscuous mode [ 380.191171][ T11] veth1_vlan: left promiscuous mode [ 380.192783][ T11] veth0_vlan: left promiscuous mode [ 380.212973][ T5989] usb 5-1: USB disconnect, device number 45 [ 380.401818][ T9] usb 10-1: USB disconnect, device number 34 [ 380.913178][ T11] team0 (unregistering): Port device team_slave_1 removed [ 381.008294][ T11] team0 (unregistering): Port device team_slave_0 removed [ 381.053385][T13046] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 381.344217][ T5959] Bluetooth: hci1: command tx timeout [ 381.373487][ T5989] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 381.533824][ T5989] usb 8-1: Using ep0 maxpacket: 8 [ 381.536981][ T5989] usb 8-1: config 0 has no interfaces? [ 381.539166][ T5989] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 381.541799][ T5989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.545384][ T5989] usb 8-1: config 0 descriptor?? [ 381.655288][T13003] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 381.661173][T13003] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 381.671727][T13003] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 381.675056][T13003] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 381.686160][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 381.725724][T13003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.746468][T13053] syzkaller0: entered promiscuous mode [ 381.750366][T13053] syzkaller0: entered allmulticast mode [ 381.753514][T13003] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.757900][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.760031][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.961429][ T837] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 382.121805][ T837] usb 10-1: Using ep0 maxpacket: 8 [ 382.124544][ T837] usb 10-1: config 0 has no interfaces? [ 382.126274][ T837] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 382.128958][ T837] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.132727][ T837] usb 10-1: config 0 descriptor?? [ 382.354773][ T837] usb 10-1: USB disconnect, device number 35 [ 383.020196][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.022288][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.040984][T13003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.044238][T13003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.092340][T13080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1908'. [ 383.098116][T13084] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 383.099584][T13085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1908'. [ 383.129788][T13003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.138269][T13078] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 383.216065][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 383.216076][ T39] audit: type=1400 audit(380.632:13503): avc: denied { ioctl } for pid=13102 comm="syz.0.1910" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 383.216459][T13104] Cannot find set identified by id 65534 to match [ 383.234375][T13003] veth0_vlan: entered promiscuous mode [ 383.247196][T13003] veth1_vlan: entered promiscuous mode [ 383.264100][T13003] veth0_macvtap: entered promiscuous mode [ 383.267998][T13003] veth1_macvtap: entered promiscuous mode [ 383.275897][T13003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.281351][T13003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.284184][T13003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.287687][T13003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.290451][T13003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.293398][T13003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.296848][T13003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.316367][T13003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.319493][T13003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.322327][T13003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.325660][T13003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.329139][T13003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.332108][T13003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.335408][T13003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.338693][T13114] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1912'. [ 383.339003][T13003] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.345262][T13003] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.348480][T13003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.351779][T13003] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.393686][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'. [ 383.393722][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.398956][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.409839][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.412173][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.419864][ T39] audit: type=1400 audit(380.828:13504): avc: denied { mounton } for pid=13003 comm="syz-executor" path="/syzkaller.yNSZ18/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=44668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 383.565623][ T5959] Bluetooth: hci1: command tx timeout [ 383.650305][T13140] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1916'. [ 383.697818][ T39] audit: type=1400 audit(381.081:13505): avc: denied { bind } for pid=13144 comm="syz.5.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.712341][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1917'. [ 383.737438][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 383.822181][ T39] audit: type=1400 audit(381.193:13506): avc: denied { setattr } for pid=13159 comm="syz.7.1920" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 383.832253][ T39] audit: type=1400 audit(381.202:13507): avc: denied { write } for pid=13159 comm="syz.7.1920" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 383.918423][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 383.921179][ T9] usb 5-1: config 0 has no interfaces? [ 383.922809][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 383.925407][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.934435][ T9] usb 5-1: config 0 descriptor?? [ 383.935834][T13174] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1923'. [ 383.939853][T13174] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1923'. [ 384.228499][ T5988] usb 8-1: USB disconnect, device number 57 [ 384.311453][ T39] audit: type=1400 audit(381.651:13508): avc: denied { create } for pid=13189 comm="syz.3.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 384.627002][T13144] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 384.730707][T13198] »»»»»» speed is unknown, defaulting to 1000 [ 384.766581][T13198] »»»»»» speed is unknown, defaulting to 1000 [ 384.875635][T13208] netlink: 'syz.7.1934': attribute type 12 has an invalid length. [ 385.244089][T11413] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 385.264937][ T9] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 385.414464][T11413] usb 10-1: Using ep0 maxpacket: 8 [ 385.417233][T11413] usb 10-1: config 0 has no interfaces? [ 385.419050][T11413] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 385.421906][T11413] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.425476][ T9] usb 12-1: Using ep0 maxpacket: 32 [ 385.425877][T11413] usb 10-1: config 0 descriptor?? [ 385.428982][ T9] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 385.436105][ T9] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 385.438760][ T9] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 385.441107][ T9] usb 12-1: Product: syz [ 385.442352][ T9] usb 12-1: Manufacturer: syz [ 385.443760][ T9] usb 12-1: SerialNumber: syz [ 385.446113][ T9] usb 12-1: config 0 descriptor?? [ 385.449879][T13219] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 385.650654][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880527f8000: rx timeout, send abort [ 385.655919][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880527f8000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 385.667895][ T8] usb 12-1: USB disconnect, device number 2 [ 385.745300][T13226] kvm: user requested TSC rate below hardware speed [ 385.750057][T13226] kvm: vcpu 0: requested 8 ns lapic timer period limited to 200000 ns [ 385.788720][ T5959] Bluetooth: hci1: command tx timeout [ 386.134594][T13238] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1942'. [ 386.138002][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1942'. [ 386.444078][T13257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1948'. [ 386.494850][T11413] usb 5-1: USB disconnect, device number 46 [ 386.507144][ T39] audit: type=1400 audit(383.719:13509): avc: denied { getopt } for pid=13258 comm="syz.3.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 386.578287][T13266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1951'. [ 386.620616][T13270] use of bytesused == 0 is deprecated and will be removed in the future, [ 386.623349][T13270] use the actual size instead. [ 386.772240][ T837] usb 8-1: new full-speed USB device number 58 using dummy_hcd [ 386.932660][ T837] usb 8-1: device descriptor read/64, error -71 [ 387.199843][ T837] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 387.339011][ T837] usb 8-1: device descriptor read/64, error -71 [ 387.456648][ T837] usb usb8-port1: attempt power cycle [ 387.695329][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 387.700942][T13282] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 387.704509][ T39] audit: type=1400 audit(384.832:13510): avc: denied { connect } for pid=13281 comm="syz.0.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 387.709957][ T39] audit: type=1400 audit(384.832:13511): avc: denied { write } for pid=13281 comm="syz.0.1956" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 387.723645][ T39] audit: type=1400 audit(384.832:13512): avc: denied { write } for pid=13281 comm="syz.0.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 387.819981][ T837] usb 8-1: new full-speed USB device number 60 using dummy_hcd [ 387.841864][ T837] usb 8-1: device descriptor read/8, error -71 [ 387.880380][T13292] ata1.00: invalid multi_count 128 ignored [ 387.880578][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1958'. [ 388.012386][ T5959] Bluetooth: hci1: command tx timeout [ 388.076569][ T9] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 388.081919][T11412] usb 10-1: USB disconnect, device number 36 [ 388.097995][ T837] usb 8-1: new full-speed USB device number 61 using dummy_hcd [ 388.100723][T13307] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 388.119712][ T837] usb 8-1: device descriptor read/8, error -71 [ 388.238044][ T9] usb 5-1: config 0 has no interfaces? [ 388.238541][ T837] usb usb8-port1: unable to enumerate USB device [ 388.239644][ T9] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 388.244227][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.247723][ T9] usb 5-1: config 0 descriptor?? [ 388.290253][ T6045] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 388.450638][ T6045] usb 12-1: Using ep0 maxpacket: 8 [ 388.454029][ T6045] usb 12-1: config 0 has no interfaces? [ 388.455640][ T6045] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 388.458227][ T6045] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.461926][ T6045] usb 12-1: config 0 descriptor?? [ 388.471193][ T9] usb 5-1: USB disconnect, device number 47 [ 389.114269][T13324] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 389.172288][T13331] openvswitch: netlink: Missing key (keys=40, expected=100) [ 389.690756][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 389.785967][T13352] netlink: 'syz.3.1971': attribute type 2 has an invalid length. [ 389.788592][T13352] netlink: 'syz.3.1971': attribute type 11 has an invalid length. [ 389.790823][T13352] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1971'. [ 389.791756][T13355] dlm: Unknown command passed to DLM device : 8 [ 389.791756][T13355] [ 389.805944][ T39] audit: type=1400 audit(386.796:13513): avc: denied { remount } for pid=13353 comm="syz.5.1972" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 389.805978][T13355] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 389.805978][T13355] [ 389.872501][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 389.875235][ T9] usb 5-1: config 0 has no interfaces? [ 389.876849][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 389.879401][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.883721][ T9] usb 5-1: config 0 descriptor?? [ 390.136128][T13370] lo: entered allmulticast mode [ 391.198787][ T5988] usb 12-1: USB disconnect, device number 3 [ 391.271938][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1983'. [ 392.353218][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 392.358302][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 392.361037][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 392.364756][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 392.367163][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 392.369934][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.390490][T13438] »»»»»» speed is unknown, defaulting to 1000 [ 392.430417][T13438] »»»»»» speed is unknown, defaulting to 1000 [ 392.489057][T13438] chnl_net:caif_netlink_parms(): no params data found [ 392.540084][ T8] usb 5-1: USB disconnect, device number 48 [ 392.548551][T13438] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.550617][T13438] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.555231][T13438] bridge_slave_0: entered allmulticast mode [ 392.557872][T13438] bridge_slave_0: entered promiscuous mode [ 392.560956][T13438] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.563096][T13438] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.565266][T13438] bridge_slave_1: entered allmulticast mode [ 392.567724][T13438] bridge_slave_1: entered promiscuous mode [ 392.599939][T13438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.603772][T13438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.661863][ T39] audit: type=1400 audit(389.462:13514): avc: denied { accept } for pid=13454 comm="syz.7.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.665812][T13438] team0: Port device team_slave_0 added [ 392.688738][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.698217][T13438] team0: Port device team_slave_1 added [ 392.715834][T13438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.717990][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.725207][T13438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.729046][T13438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.731060][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.738446][T13438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.763742][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.777352][T13438] hsr_slave_0: entered promiscuous mode [ 392.779499][T13438] hsr_slave_1: entered promiscuous mode [ 392.781888][T13438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.784106][T13438] Cannot create hsr debugfs directory [ 392.828866][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.878043][T13438] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 392.881805][T13438] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 392.884969][T13438] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 392.888300][T13438] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 392.898763][T13438] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.900732][T13438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.902866][T13438] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.904888][T13438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.943695][T13438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.951880][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.955551][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.968473][T13438] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.979475][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.981586][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.985900][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.988093][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.994491][ T6044] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 393.019338][ T11] bridge_slave_1: left allmulticast mode [ 393.021059][ T11] bridge_slave_1: left promiscuous mode [ 393.023249][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.027326][ T11] bridge_slave_0: left allmulticast mode [ 393.028966][ T11] bridge_slave_0: left promiscuous mode [ 393.030841][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.054523][ T39] audit: type=1400 audit(389.836:13515): avc: denied { setattr } for pid=13462 comm="syz.3.2001" name="DCCPv6" dev="sockfs" ino=47927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 393.165376][ T6044] usb 12-1: Using ep0 maxpacket: 8 [ 393.168644][ T6044] usb 12-1: config 0 has no interfaces? [ 393.172587][ T6044] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 393.175245][ T6044] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.176591][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 393.179446][ T6044] usb 12-1: config 0 descriptor?? [ 393.232335][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.322940][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.329975][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.333358][ T11] bond0 (unregistering): Released all slaves [ 393.337720][ T11] bond1 (unregistering): Released all slaves [ 393.467673][T13438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.475899][ T5989] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 393.586060][T13438] veth0_vlan: entered promiscuous mode [ 393.592354][T13438] veth1_vlan: entered promiscuous mode [ 393.614191][ T5989] usb 5-1: device descriptor read/64, error -71 [ 393.620226][T13438] veth0_macvtap: entered promiscuous mode [ 393.626220][T13438] veth1_macvtap: entered promiscuous mode [ 393.636946][T13438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.640551][T13438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.643315][T13438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.650165][T13438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.653743][T13438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.659720][T13438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.663416][T13438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.667298][T13438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.673875][T13438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.679474][ T11] hsr_slave_0: left promiscuous mode [ 393.682164][ T11] hsr_slave_1: left promiscuous mode [ 393.684656][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.687469][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.691087][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.693838][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.720421][ T11] veth1_to_batadv: left promiscuous mode [ 393.722885][ T11] veth1_macvtap: left promiscuous mode [ 393.724795][ T11] veth0_macvtap: left promiscuous mode [ 393.726876][ T11] veth1_vlan: left promiscuous mode [ 393.728758][ T11] veth0_vlan: left promiscuous mode [ 393.764004][ T58] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 393.872874][ T5989] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 393.934899][ T58] usb 8-1: Using ep0 maxpacket: 8 [ 393.938326][ T58] usb 8-1: config 0 has no interfaces? [ 393.939969][ T58] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 393.942756][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.947517][ T58] usb 8-1: config 0 descriptor?? [ 394.009785][ T5989] usb 5-1: device descriptor read/64, error -71 [ 394.127485][ T5989] usb usb5-port1: attempt power cycle [ 394.173676][ T835] usb 8-1: USB disconnect, device number 62 [ 394.459962][ T11] team0 (unregistering): Port device team_slave_1 removed [ 394.490806][ T5989] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 394.514284][ T5989] usb 5-1: device descriptor read/8, error -71 [ 394.547880][ T11] team0 (unregistering): Port device team_slave_0 removed [ 394.600679][ T5959] Bluetooth: hci2: command tx timeout [ 394.771573][ T5989] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 394.793423][ T5989] usb 5-1: device descriptor read/8, error -71 [ 394.910177][ T5989] usb usb5-port1: unable to enumerate USB device [ 395.080647][ T11] lo (unregistering): left allmulticast mode [ 395.096282][T13438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.099284][T13438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.103590][T13438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.106608][T13438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.109392][T13438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.112423][T13438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.115792][T13438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.121879][T13438] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.124439][T13438] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.126919][T13438] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.129384][T13438] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.134108][ T837] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 395.193153][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.195429][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.209448][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.211832][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.335585][ T837] usb 8-1: Using ep0 maxpacket: 8 [ 395.339393][ T837] usb 8-1: config 0 has no interfaces? [ 395.341042][ T837] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 395.343778][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.353789][ T837] usb 8-1: config 0 descriptor?? [ 395.360681][ T5959] Bluetooth: hci2: Unable to find connection for big 0x00 [ 395.456976][ T11] IPVS: stop unused estimator thread 0... [ 395.841851][ T6044] usb 12-1: string descriptor 0 read error: -71 [ 395.844721][ T6044] usb 12-1: USB disconnect, device number 4 [ 396.077126][ T39] audit: type=1400 audit(392.661:13516): avc: denied { relabelfrom } for pid=13583 comm="syz.7.2012" name="" dev="pipefs" ino=48670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 396.084660][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2012'. [ 396.088063][T13584] netlink: 'syz.7.2012': attribute type 22 has an invalid length. [ 396.090961][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2012'. [ 396.155677][T13597] overlayfs: failed to resolve './file1': -2 [ 396.162981][ T39] audit: type=1400 audit(392.745:13517): avc: denied { bind } for pid=13594 comm="syz.7.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 396.230999][T13607] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 396.436506][ T39] audit: type=1400 audit(392.998:13518): avc: denied { append } for pid=13620 comm="syz.0.2019" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 396.457898][ T837] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 396.543522][T11413] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 396.639651][ T837] usb 13-1: Using ep0 maxpacket: 8 [ 396.642512][ T837] usb 13-1: config index 0 descriptor too short (expected 74, got 45) [ 396.644943][ T837] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 396.648164][ T837] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 396.651599][ T837] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 396.654524][ T837] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.658447][ T837] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.661092][ T837] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.703767][T11413] usb 12-1: Using ep0 maxpacket: 8 [ 396.711028][T11413] usb 12-1: config 0 has no interfaces? [ 396.712728][T11413] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 396.715586][T11413] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.720344][T11413] usb 12-1: config 0 descriptor?? [ 396.821361][ T5959] Bluetooth: hci2: command tx timeout [ 396.884679][ T837] usb 13-1: usb_control_msg returned -32 [ 396.886480][ T837] usbtmc 13-1:16.0: can't read capabilities [ 397.095779][ T39] audit: type=1400 audit(393.615:13519): avc: denied { map } for pid=13655 comm="syz.0.2023" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 397.191570][T13656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2023'. [ 397.197598][T13656] tmpfs: Cannot change global quota limit on remount [ 397.249309][T13662] overlayfs: failed to resolve './file1': -2 [ 397.266220][ C3] usbtmc 13-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 397.269257][T13664] usbtmc 13-1:16.0: Unable to send data, error -71 [ 397.362986][T13679] syz.0.2026: attempt to access beyond end of device [ 397.362986][T13679] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 397.367122][T13679] efs: cannot read volume header [ 397.393378][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2027'. [ 397.470499][T13701] netlink: 'syz.0.2030': attribute type 10 has an invalid length. [ 397.477214][T13701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.479874][T13701] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 397.957036][ T25] usb 8-1: USB disconnect, device number 63 [ 398.075751][T13733] overlayfs: failed to resolve './file1': -2 [ 398.107602][T13735] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2035'. [ 398.110745][T13735] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2035'. [ 398.275975][T13748] input: syz1 as /devices/virtual/input/input20 [ 398.292746][T13748] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 398.298678][T13747] rtc_cmos 00:05: Alarms can be up to one day in the future [ 398.347141][ T58] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 398.510666][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 398.514808][ T58] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 398.517195][ T58] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 398.519882][ T58] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 398.522554][ T58] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 398.525611][ T58] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 398.529234][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 43899, setting to 1024 [ 398.533071][ T58] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 398.536823][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 398.542077][ T58] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 398.545135][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.547480][ T58] usb 5-1: Product: syz [ 398.549208][ T58] usb 5-1: Manufacturer: ᢩ귕꽰Ṻ멌렆戮ç¥èŠ©ï˜´î±¾é±‘à»Šà¯’ê…€ë‘‚ì½³é”¸îŽ‰á–£ì±é­™í”·ïµ˜ë‡¥Ã™î…”⊌Ὦ鴬ƌ迭稲藦䨿︘깕ꌛ勥輔ᖺë®ë Œç»«ê”¥ã­ à§˜ãˆ³ç¢€â½â–›ê‡¹ë†Ÿê¤‰êŒ‘ä™ïº°ëƒ…à¬æ¾¸éž’冶윘霖藟鲼㡜榔ꄱ䂜溃䋓䦜츠⇢꽛æ„䎄Ⰹï”å å§í‰£î–€á°ºå€œì°Žë—斴↥గ엊簜䬳壞츺橘ã’䦅鉥놑븴涔å¥ì„£é’Šê¤­ê™¯áƒ [ 398.558979][ T58] usb 5-1: SerialNumber: syz [ 398.561584][ T58] usb 5-1: config 0 descriptor?? [ 398.563574][T13732] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 398.566223][ T58] hub 5-1:0.0: bad descriptor, ignoring hub [ 398.567977][ T58] hub 5-1:0.0: probe with driver hub failed with error -5 [ 398.785855][ T39] audit: type=1400 audit(395.196:13520): avc: denied { write } for pid=13730 comm="syz.0.2033" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 398.794140][ T58] rtc_cmos 00:05: Alarms can be up to one day in the future [ 398.797189][ T58] rtc_cmos 00:05: Alarms can be up to one day in the future [ 398.802326][ T58] rtc_cmos 00:05: Alarms can be up to one day in the future [ 398.805120][ T58] rtc_cmos 00:05: Alarms can be up to one day in the future [ 398.807336][ T58] rtc rtc0: __rtc_set_alarm: err=-22 [ 398.841031][T13763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.844157][T13763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.884641][ T5990] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 398.970280][ T58] usb 5-1: USB disconnect, device number 53 [ 399.045056][ T5959] Bluetooth: hci2: command tx timeout [ 399.045734][ T5990] usb 8-1: Using ep0 maxpacket: 8 [ 399.050091][ T5990] usb 8-1: config 0 has no interfaces? [ 399.051739][ T5990] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 399.054364][ T5990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.057690][ T5990] usb 8-1: config 0 descriptor?? [ 399.460128][ T58] usb 12-1: USB disconnect, device number 5 [ 399.464033][ T5990] usb 13-1: USB disconnect, device number 2 [ 399.466026][T13772] overlayfs: failed to resolve './file0': -2 [ 399.542455][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2045'. [ 399.549068][ T39] audit: type=1400 audit(395.916:13521): avc: denied { mounton } for pid=13773 comm="syz.8.2045" path="/9/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 399.556402][T13788] »»»»»» speed is unknown, defaulting to 1000 [ 399.562533][T13790] sctp: [Deprecated]: syz.0.2050 (pid 13790) Use of int in max_burst socket option deprecated. [ 399.562533][T13790] Use struct sctp_assoc_value instead [ 399.598361][T13788] »»»»»» speed is unknown, defaulting to 1000 [ 399.603781][T13797] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20001 [ 399.648864][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 399.652261][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 400.103558][ T5990] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 400.135182][T13814] overlayfs: failed to resolve './file0': -2 [ 400.175325][ T39] audit: type=1400 audit(396.496:13522): avc: denied { read } for pid=13815 comm="syz.7.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 400.274570][ T5990] usb 5-1: Using ep0 maxpacket: 8 [ 400.283645][ T5990] usb 5-1: config 0 has no interfaces? [ 400.286523][ T5990] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 400.290118][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.295675][ T5990] usb 5-1: config 0 descriptor?? [ 400.315130][T13824] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2060'. [ 400.320212][T13824] erspan0: entered promiscuous mode [ 400.322430][T13824] batadv_slave_1: entered promiscuous mode [ 400.414398][T13828] kAFS: Can only specify source 'none' with -o dyn [ 400.440579][T13830] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.443479][T13830] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.511803][T13840] overlayfs: failed to resolve './file0': -2 [ 400.517320][ T39] audit: type=1400 audit(396.814:13523): avc: denied { getopt } for pid=13809 comm="syz.0.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 400.574295][T13845] netlink: 'syz.8.2068': attribute type 27 has an invalid length. [ 400.642099][T13845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.647611][T13845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.684155][T13845] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.686837][T13845] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.689496][T13845] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.692169][T13845] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.007512][T13865] IPVS: set_ctl: invalid protocol: 44550 224.0.0.1:20000 [ 401.017756][T13868] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 401.061684][T13874] overlayfs: failed to resolve './file0': -2 [ 401.153381][ T39] audit: type=1400 audit(397.413:13524): avc: denied { nlmsg_write } for pid=13879 comm="syz.7.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 401.246017][T13890] vxcan1 speed is unknown, defaulting to 1000 [ 401.248809][T13890] vxcan1 speed is unknown, defaulting to 1000 [ 401.252577][T13890] vxcan1 speed is unknown, defaulting to 1000 [ 401.269489][ T5959] Bluetooth: hci2: command tx timeout [ 401.287015][T13890] infiniband syz1: set active [ 401.288474][T11411] vxcan1 speed is unknown, defaulting to 1000 [ 401.291439][T13890] infiniband syz1: added vxcan1 [ 401.314125][T13890] RDS/IB: syz1: added [ 401.315634][T13890] smc: adding ib device syz1 with port count 1 [ 401.318511][T13890] smc: ib device syz1 port 1 has pnetid [ 401.320331][T13751] vxcan1 speed is unknown, defaulting to 1000 [ 401.325288][T13890] vxcan1 speed is unknown, defaulting to 1000 [ 401.363517][T13890] vxcan1 speed is unknown, defaulting to 1000 [ 401.399602][T13890] vxcan1 speed is unknown, defaulting to 1000 [ 401.436257][T13890] vxcan1 speed is unknown, defaulting to 1000 [ 401.724923][T13751] usb 8-1: USB disconnect, device number 64 [ 401.812055][ T39] audit: type=1400 audit(398.021:13525): avc: denied { create } for pid=13897 comm="syz.3.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 401.821116][ T39] audit: type=1400 audit(398.021:13526): avc: denied { write } for pid=13897 comm="syz.3.2083" path="socket:[49884]" dev="sockfs" ino=49884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 401.828266][ T39] audit: type=1400 audit(398.021:13527): avc: denied { ioctl } for pid=13897 comm="syz.3.2083" path="socket:[49884]" dev="sockfs" ino=49884 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 402.094772][T13924] overlayfs: failed to resolve './file0': -2 [ 402.122055][T13929] __nla_validate_parse: 5 callbacks suppressed [ 402.122065][T13929] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2087'. [ 402.128622][ T39] audit: type=1400 audit(398.320:13528): avc: denied { create } for pid=13928 comm="syz.7.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.128875][ T39] audit: type=1400 audit(398.320:13529): avc: denied { bind } for pid=13928 comm="syz.7.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.129047][ T39] audit: type=1400 audit(398.320:13530): avc: denied { setopt } for pid=13928 comm="syz.7.2088" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.129139][ T39] audit: type=1400 audit(398.320:13531): avc: denied { listen } for pid=13928 comm="syz.7.2088" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.129365][ T39] audit: type=1400 audit(398.320:13532): avc: denied { write } for pid=13928 comm="syz.7.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.129785][ T39] audit: type=1400 audit(398.320:13533): avc: denied { connect } for pid=13928 comm="syz.7.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.181933][T13931] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 402.263854][ T39] audit: type=1400 audit(398.451:13534): avc: denied { ioctl } for pid=13944 comm="syz.3.2089" path="socket:[49013]" dev="sockfs" ino=49013 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 402.302669][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.304971][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.307498][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.309880][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.312236][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.315993][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.320090][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.322341][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.324082][T13954] 9pnet_fd: Insufficient options for proto=fd [ 402.324456][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.328440][T13954] netlink: 'syz.7.2092': attribute type 1 has an invalid length. [ 402.332361][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.334587][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.336739][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.341099][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.343271][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.345492][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.347641][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.351067][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.353248][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.355363][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.357529][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.359973][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.362084][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.364210][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.366342][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.368506][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.370912][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.373040][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.375144][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.377263][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.379431][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.381963][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.384133][ T5989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 402.388599][ T5989] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 402.669177][T11411] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 402.692503][T13975] overlayfs: failed to resolve './file0': -2 [ 402.829514][T11411] usb 13-1: Using ep0 maxpacket: 8 [ 402.833023][T11411] usb 13-1: config 0 has no interfaces? [ 402.835245][T11411] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 402.838979][T11411] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.843820][T11411] usb 13-1: config 0 descriptor?? [ 402.951588][ T5989] usb 5-1: USB disconnect, device number 54 [ 402.993453][T13990] FAT-fs (nullb0): bogus number of reserved sectors [ 402.995145][T13987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2100'. [ 402.995615][T13990] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 403.106895][T13995] netlink: 'syz.3.2102': attribute type 2 has an invalid length. [ 403.246206][T14023] overlayfs: failed to resolve './file1': -2 [ 404.252439][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 404.255069][T14038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2110'. [ 404.406072][T14050] ipvlan2: entered promiscuous mode [ 404.581950][T14058] overlayfs: failed to resolve './file1': -2 [ 404.711619][T14067] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2120'. [ 404.711620][T14068] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2120'. [ 404.713377][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2120'. [ 404.778990][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2119'. [ 405.064300][T14030] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 405.170759][ T5989] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 405.341915][ T5989] usb 12-1: Using ep0 maxpacket: 8 [ 405.346615][ T5989] usb 12-1: config 0 has no interfaces? [ 405.348237][ T5989] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 405.350821][ T5989] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.354644][ T5989] usb 12-1: config 0 descriptor?? [ 405.496686][T14094] overlayfs: failed to resolve './file1': -2 [ 405.527334][ T9] usb 13-1: USB disconnect, device number 3 [ 405.548765][T14099] netlink: 'syz.8.2129': attribute type 1 has an invalid length. [ 405.566728][T14099] bond1: entered promiscuous mode [ 405.568270][T14099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.579152][T14099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.581371][T14099] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 405.584332][T14099] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 405.590044][T14099] bond1: (slave ip6gre1): making interface the new active one [ 405.592295][T14099] ip6gre1: entered promiscuous mode [ 405.594324][T14099] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 405.599267][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2129'. [ 405.602614][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2129'. [ 406.421539][ T5989] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 406.594035][ T5989] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 406.597208][ T5989] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 406.599988][ T5989] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 406.602583][ T5989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.607322][T14121] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 406.612178][ T5989] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 406.656352][T11411] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 406.828434][T11411] usb 13-1: Using ep0 maxpacket: 8 [ 406.829711][ T5989] usb 8-1: USB disconnect, device number 65 [ 406.831777][T11411] usb 13-1: config 0 has no interfaces? [ 406.833419][T11411] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 406.836018][T11411] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.841810][T11411] usb 13-1: config 0 descriptor?? [ 407.069448][T14121] VFS: could not find a valid V7 on nullb0. [ 407.420941][T14165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.424487][T14165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.672857][T11411] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 407.700693][T14178] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 407.806777][T14193] __nla_validate_parse: 1 callbacks suppressed [ 407.806788][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 407.811215][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 407.844288][T11411] usb 5-1: Using ep0 maxpacket: 8 [ 407.847516][T11411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 407.850669][T11411] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 407.853282][T11411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.857852][T11411] usb 5-1: config 0 descriptor?? [ 407.880889][T14204] xt_hashlimit: size too large, truncated to 1048576 [ 407.966249][ T5989] usb 12-1: USB disconnect, device number 6 [ 408.192226][T11411] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 408.283220][T14165] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2146'. [ 408.294366][T14166] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2146'. [ 408.308223][ T5990] usb 5-1: USB disconnect, device number 55 [ 408.400588][T14192] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 408.484218][T14228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2152'. [ 408.488761][T14227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2152'. [ 408.521227][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 408.521238][ T39] audit: type=1400 audit(404.307:13539): avc: denied { create } for pid=14231 comm="syz.0.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 408.577203][T14239] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2155'. [ 408.580079][T14239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2155'. [ 408.598117][T14244] netlink: 'syz.7.2156': attribute type 1 has an invalid length. [ 408.600411][T14244] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2156'. [ 408.626263][ T39] audit: type=1326 audit(404.400:13540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14238 comm="syz.0.2155" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5bd985d29 code=0x0 [ 409.031713][T11411] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 409.033874][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805605b400: rx timeout, send abort [ 409.034020][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056059000: rx timeout, send abort [ 409.040017][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805605b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 409.044201][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056059000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 409.149191][T14270] affs: No valid root block on device nullb0 [ 409.201512][T11411] usb 12-1: Using ep0 maxpacket: 8 [ 409.205531][T11411] usb 12-1: config 0 has no interfaces? [ 409.207136][T11411] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 409.209740][T11411] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.216293][T11411] usb 12-1: config 0 descriptor?? [ 409.504866][T11411] usb 13-1: USB disconnect, device number 4 [ 409.976328][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2169'. [ 410.427178][ T39] audit: type=1400 audit(406.084:13541): avc: denied { shutdown } for pid=14370 comm="syz.0.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.476966][ T39] audit: type=1400 audit(406.131:13542): avc: denied { bind } for pid=14373 comm="syz.0.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 410.481861][ T39] audit: type=1400 audit(406.131:13543): avc: denied { listen } for pid=14373 comm="syz.0.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 410.487257][ T39] audit: type=1400 audit(406.131:13544): avc: denied { accept } for pid=14373 comm="syz.0.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 410.521478][T14376] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.574351][T14387] netdevsim netdevsim0: Direct firmware load for ÿ failed with error -2 [ 410.577000][T14387] netdevsim netdevsim0: Falling back to sysfs fallback for: ÿ [ 411.490662][T14395] xt_cgroup: invalid path, errno=-2 [ 411.702931][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 411.705628][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 411.929801][ T25] usb 12-1: USB disconnect, device number 7 [ 411.961092][T14423] unknown channel width for channel at 909000KHz? [ 411.963122][T14423] unknown channel width for channel at 909000KHz? [ 411.965048][T14423] unknown channel width for channel at 909000KHz? [ 412.119648][T13751] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 412.179599][ T39] audit: type=1400 audit(407.721:13545): avc: denied { mount } for pid=14425 comm="syz.7.2187" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 412.184383][T14426] overlayfs: failed to resolve './file2': -2 [ 412.185040][ T39] audit: type=1400 audit(407.721:13546): avc: denied { mounton } for pid=14425 comm="syz.7.2187" path="/89/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 412.194032][T14426] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 412.228451][ T39] audit: type=1400 audit(407.777:13547): avc: denied { unmount } for pid=13003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 412.280965][T13751] usb 13-1: Using ep0 maxpacket: 8 [ 412.284011][T13751] usb 13-1: config 0 has no interfaces? [ 412.285703][T13751] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 412.288436][T13751] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.292235][T13751] usb 13-1: config 0 descriptor?? [ 412.476128][T14437] autofs4:pid:14437:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2863311530.2147592874), cmd(0xc0189374) [ 412.480491][T14437] autofs4:pid:14437:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 412.535657][T14444] bad cache= option: none [ 412.535657][T14444] [ 412.537887][T14444] CIFS: VFS: bad cache= option: none [ 412.728138][T14460] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 412.735897][T14460] CIFS: Unable to determine destination address [ 413.028384][T13751] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 413.188695][T13751] usb 5-1: Using ep0 maxpacket: 8 [ 413.191422][T13751] usb 5-1: config 0 has no interfaces? [ 413.192990][T13751] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 413.195534][T13751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.198896][T13751] usb 5-1: config 0 descriptor?? [ 413.530967][T14477] block nbd3: shutting down sockets [ 413.642771][T14488] __nla_validate_parse: 5 callbacks suppressed [ 413.642787][T14488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2204'. [ 413.692214][T14491] netlink: 'syz.3.2207': attribute type 1 has an invalid length. [ 413.743753][T14505] 9pnet_virtio: no channels available for device [ 413.877245][ T39] audit: type=1400 audit(409.311:13548): avc: denied { setattr } for pid=14516 comm="iou-wrk-14519" name="" dev="pipefs" ino=45307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 414.351806][ T39] audit: type=1400 audit(409.751:13549): avc: denied { setopt } for pid=14531 comm="syz.7.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 414.384093][ T39] audit: type=1400 audit(409.788:13550): avc: denied { bind } for pid=14531 comm="syz.7.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 414.429411][T14532] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 414.464443][T14541] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2219'. [ 414.467067][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2219'. [ 414.469760][T14541] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2219'. [ 414.473494][T14541] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20002 [ 414.476458][T14539] erofs (device erofs): cannot read erofs superblock [ 414.476820][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2219'. [ 414.888788][T11411] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 414.980350][ T58] usb 13-1: USB disconnect, device number 5 [ 415.059666][T11411] usb 8-1: Using ep0 maxpacket: 8 [ 415.063179][T11411] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 415.066357][T11411] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 415.069211][T11411] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.071985][T11411] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.075540][T11411] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.078016][T11411] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.246459][ T39] audit: type=1400 audit(410.593:13551): avc: denied { getopt } for pid=14568 comm="syz.7.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 415.296215][T11411] usb 8-1: GET_CAPABILITIES returned 0 [ 415.297873][T11411] usbtmc 8-1:16.0: can't read capabilities [ 415.305634][T14577] »»»»»» speed is unknown, defaulting to 1000 [ 415.325610][T14583] overlayfs: missing 'lowerdir' [ 415.348645][T14577] »»»»»» speed is unknown, defaulting to 1000 [ 415.351000][T14577] vxcan1 speed is unknown, defaulting to 1000 [ 415.356596][T14585] netlink: 'syz.7.2233': attribute type 25 has an invalid length. [ 415.511261][ T8] usb 8-1: USB disconnect, device number 66 [ 415.754503][ T58] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 415.757696][ T8] usb 5-1: USB disconnect, device number 56 [ 415.925699][ T58] usb 12-1: Using ep0 maxpacket: 8 [ 415.928704][ T58] usb 12-1: config 0 has no interfaces? [ 415.930457][ T58] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 415.933242][ T58] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.940175][ T39] audit: type=1400 audit(411.247:13552): avc: denied { getopt } for pid=14608 comm="syz.8.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 415.940881][ T58] usb 12-1: config 0 descriptor?? [ 416.028421][ T39] audit: type=1400 audit(411.322:13553): avc: denied { create } for pid=14610 comm="syz.8.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 416.081351][T14615] overlayfs: missing 'lowerdir' [ 416.116268][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2243'. [ 416.218822][T14622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2245'. [ 416.616150][ T5954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.619925][ T5954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.625319][ T5954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.628211][ T5954] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.630555][ T5954] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 416.632824][ T5954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.658942][ T9374] bond0: (slave syz_tun): Releasing backup interface [ 416.663235][ T58] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 416.679280][T14633] »»»»»» speed is unknown, defaulting to 1000 [ 416.715561][T14633] »»»»»» speed is unknown, defaulting to 1000 [ 416.717977][T14633] vxcan1 speed is unknown, defaulting to 1000 [ 416.818460][T14633] chnl_net:caif_netlink_parms(): no params data found [ 416.834308][ T58] usb 8-1: Using ep0 maxpacket: 8 [ 416.836975][ T58] usb 8-1: config 0 has no interfaces? [ 416.838609][ T58] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 416.841343][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.844684][ T58] usb 8-1: config 0 descriptor?? [ 416.902840][T14633] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.904954][T14633] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.907020][T14633] bridge_slave_0: entered allmulticast mode [ 416.910544][T14633] bridge_slave_0: entered promiscuous mode [ 416.913185][T14633] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.915248][T14633] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.917298][T14633] bridge_slave_1: entered allmulticast mode [ 416.919486][T14633] bridge_slave_1: entered promiscuous mode [ 416.937748][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2250'. [ 416.940387][T14642] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2250'. [ 416.946517][T14633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.950998][T14633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.997743][T14633] team0: Port device team_slave_0 added [ 416.999583][T14649] overlayfs: missing 'lowerdir' [ 417.000496][T14633] team0: Port device team_slave_1 added [ 417.025116][T14633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.027480][T14633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.034787][T14633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.040453][T14633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.042827][T14633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.050697][T14633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.086399][T14633] hsr_slave_0: entered promiscuous mode [ 417.089015][T14633] hsr_slave_1: entered promiscuous mode [ 417.105322][ T5959] Bluetooth: hci2: unknown advertising packet type: 0x76 [ 417.105347][ T5959] Bluetooth: hci2: unknown advertising packet type: 0xb0 [ 417.107437][ T5959] Bluetooth: hci2: unknown advertising packet type: 0x7d [ 417.109713][ T5959] Bluetooth: hci2: unknown advertising packet type: 0x87 [ 417.173519][T14633] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.279326][T14633] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.381572][T14633] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.494422][T14633] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.615873][T14633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 417.620330][T14633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 417.624889][T14633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.629532][T14633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.643192][T14633] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.645828][T14633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.648731][T14633] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.651393][T14633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.696397][T14633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.706868][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.710968][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.728346][T14633] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.738473][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.740619][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.746552][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.748675][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.834524][T14633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.852953][T14633] veth0_vlan: entered promiscuous mode [ 417.857601][T14633] veth1_vlan: entered promiscuous mode [ 417.867493][T14633] veth0_macvtap: entered promiscuous mode [ 417.870610][T14633] veth1_macvtap: entered promiscuous mode [ 417.877412][T14633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.880317][T14633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.884129][T14633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.886993][T14633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.889667][T14633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.892633][T14633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.895995][T14633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.900230][T14633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.903283][T14633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.906062][T14633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.909022][T14633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.911787][T14633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.915679][T14633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.919012][T14633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.923262][T14633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.926173][T14633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.928659][T14633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.931128][T14633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.961194][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.963492][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.974316][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.977401][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.991462][T14660] 9pnet_fd: p9_fd_create_tcp (14660): problem connecting socket to 127.0.0.1 [ 418.056384][ T39] audit: type=1800 audit(413.221:13554): pid=14666 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.2249" name="/newroot/0/file0" dev="tmpfs" ino=17 res=0 errno=0 [ 418.153538][T14666] Unknown options in mask 5 [ 418.307880][T14684] overlayfs: missing 'lowerdir' [ 418.414626][T14687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2262'. [ 418.658401][T13751] usb 12-1: USB disconnect, device number 8 [ 418.890290][T14697] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 418.897984][ T5959] Bluetooth: hci4: command tx timeout [ 418.913709][T14697] kvm: pic: non byte read [ 418.917607][T14697] kvm: pic: level sensitive irq not supported [ 418.918033][T14697] kvm: pic: non byte read [ 418.924685][T14697] kvm: pic: level sensitive irq not supported [ 418.925250][T14697] kvm: pic: non byte read [ 418.930676][T14697] kvm: pic: level sensitive irq not supported [ 418.931087][T14697] kvm: pic: non byte read [ 418.936466][T14697] kvm: pic: level sensitive irq not supported [ 418.936877][T14697] kvm: pic: non byte read [ 418.943116][T14697] kvm: pic: level sensitive irq not supported [ 418.943439][T14697] kvm: pic: non byte read [ 418.947433][T14697] kvm: pic: level sensitive irq not supported [ 418.947684][T14697] kvm: pic: non byte read [ 418.952137][T14697] kvm: pic: level sensitive irq not supported [ 418.952395][T14697] kvm: pic: non byte read [ 418.956451][T14697] kvm: pic: level sensitive irq not supported [ 418.956705][T14697] kvm: pic: non byte read [ 418.960840][T14697] kvm: pic: level sensitive irq not supported [ 418.961249][T14697] kvm: pic: non byte read [ 418.965417][T14697] kvm: pic: level sensitive irq not supported [ 419.079251][T13751] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 419.250270][T13751] usb 12-1: Using ep0 maxpacket: 8 [ 419.253221][T13751] usb 12-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 419.255710][T13751] usb 12-1: config 246 descriptor has 1 excess byte, ignoring [ 419.257827][T13751] usb 12-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 419.270633][T13751] usb 12-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 419.273971][T13751] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 419.277126][T13751] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 419.280206][T13751] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 419.284149][T13751] usb 12-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 419.286626][T13751] usb 12-1: config 246 descriptor has 1 excess byte, ignoring [ 419.288729][T13751] usb 12-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 419.291308][T13751] usb 12-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 419.297076][T13751] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 419.300243][T13751] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 419.303469][T13751] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 419.307041][T13751] usb 12-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 419.309473][T13751] usb 12-1: config 246 descriptor has 1 excess byte, ignoring [ 419.311564][T13751] usb 12-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 419.314100][T13751] usb 12-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 419.318127][T13751] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 419.321285][T13751] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 419.324371][T13751] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 419.330527][T13751] usb 12-1: string descriptor 0 read error: -22 [ 419.332344][T13751] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 419.334842][T13751] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.340561][T13751] adutux 12-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 419.347146][T14714] overlayfs: missing 'lowerdir' [ 419.506366][T11411] usb 8-1: USB disconnect, device number 67 [ 419.564322][T13751] hid (null): unknown global tag 0xc [ 419.571270][T13751] hid-generic 0005:16C0:00ED.0007: unknown global tag 0xc [ 419.573458][T13751] hid-generic 0005:16C0:00ED.0007: item 0 0 1 12 parsing failed [ 419.575984][T13751] hid-generic 0005:16C0:00ED.0007: probe with driver hid-generic failed with error -22 [ 419.585063][T14695] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2265'. [ 419.592902][ T25] usb 12-1: USB disconnect, device number 9 [ 420.020331][T11411] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 420.116379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 420.191159][T11411] usb 8-1: Using ep0 maxpacket: 8 [ 420.195857][T11411] usb 8-1: config 0 has no interfaces? [ 420.196571][T14745] overlayfs: missing 'lowerdir' [ 420.201804][T11411] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 420.211279][T11411] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.220245][T11411] usb 8-1: config 0 descriptor?? [ 420.296079][T14758] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2281'. [ 420.509486][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 420.512694][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2288'. [ 420.520332][T14778] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 420.620592][T14785] overlayfs: missing 'workdir' [ 420.722325][T14797] binder: 14796:14797 ioctl c0306201 20000600 returned -14 [ 420.727399][T14797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2296'. [ 420.729866][T14797] netlink: 'syz.0.2296': attribute type 7 has an invalid length. [ 420.732021][T14797] netlink: 'syz.0.2296': attribute type 8 has an invalid length. [ 420.734141][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2296'. [ 420.935389][T14815] overlayfs: missing 'workdir' [ 421.041348][T14823] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 14823 comm: syz.0.2305) [ 421.045702][ T39] audit: type=1800 audit(416.018:13555): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2305" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=54604 res=0 errno=0 [ 421.078414][ T25] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 421.207266][ T6045] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 421.238865][ T25] usb 13-1: Using ep0 maxpacket: 8 [ 421.247076][ T25] usb 13-1: config 0 has no interfaces? [ 421.249227][ T25] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 421.253397][ T25] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.260173][ T25] usb 13-1: config 0 descriptor?? [ 421.388390][ T6045] usb 12-1: Using ep0 maxpacket: 16 [ 421.391252][ T6045] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 421.394715][ T6045] usb 12-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 421.397329][ T6045] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.404702][ T6045] usb 12-1: config 0 descriptor?? [ 421.410469][ T6045] input: bcm5974 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input22 [ 421.624673][ T5333] bcm5974 12-1:0.0: could not read from device [ 421.637324][ T5333] bcm5974 12-1:0.0: could not read from device [ 421.640169][ T6045] usb 12-1: USB disconnect, device number 10 [ 421.643266][ T5333] bcm5974 12-1:0.0: could not read from device [ 421.646112][ T5333] bcm5974 12-1:0.0: could not read from device [ 421.815234][T14841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2311'. [ 421.819661][T14841] openvswitch: netlink: Flow key attr not present in new flow. [ 421.855233][T14844] overlayfs: missing 'workdir' [ 422.782132][ T754] usb 8-1: USB disconnect, device number 68 [ 422.977160][T14868] 9pnet_virtio: no channels available for device syz [ 423.032373][T14872] overlayfs: missing 'lowerdir' [ 423.325076][T14884] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2326'. [ 423.453174][ T39] audit: type=1326 audit(418.272:13556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14891 comm="syz.3.2329" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd996585d29 code=0x0 [ 423.473456][ T754] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 423.632030][T14902] overlayfs: missing 'lowerdir' [ 423.634030][ T754] usb 12-1: Using ep0 maxpacket: 8 [ 423.639484][ T754] usb 12-1: config 0 has no interfaces? [ 423.641149][ T754] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 423.643740][ T754] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.653655][ T754] usb 12-1: config 0 descriptor?? [ 423.945443][ T25] usb 13-1: USB disconnect, device number 6 [ 424.361670][ T5959] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 424.365117][ T5959] Bluetooth: hci4: Injecting HCI hardware error event [ 424.368995][ T5959] Bluetooth: hci4: hardware error 0x00 [ 424.490608][T14934] overlayfs: missing 'lowerdir' [ 424.497875][ T39] audit: type=1400 audit(419.245:13557): avc: denied { append } for pid=14935 comm="syz.0.2344" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 424.644080][T14943] syz.0.2346: attempt to access beyond end of device [ 424.644080][T14943] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 424.648939][T14943] befs: (nbd0): unable to read superblock [ 425.376873][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2351'. [ 425.379510][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2351'. [ 425.382032][T14957] netlink: 'syz.8.2351': attribute type 12 has an invalid length. [ 425.432408][T14960] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 425.486458][T14965] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 425.488073][ T39] audit: type=1400 audit(420.171:13558): avc: denied { watch } for pid=14966 comm="syz.8.2355" path="/sys/power/pm_trace" dev="sysfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 425.489164][T14965] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 425.495908][ T39] audit: type=1400 audit(420.171:13559): avc: denied { watch_sb watch_reads } for pid=14966 comm="syz.8.2355" path="/sys/power/pm_trace" dev="sysfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 425.785611][ T39] audit: type=1400 audit(420.452:13560): avc: denied { read } for pid=14994 comm="syz.3.2362" dev="sockfs" ino=53225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 425.879945][T15000] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2364'. [ 426.123243][T15008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 426.126060][T15008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 426.157092][T15010] veth0: entered promiscuous mode [ 426.234516][T15009] veth0: left promiscuous mode [ 426.296081][T11410] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 426.382292][ T754] usb 12-1: USB disconnect, device number 11 [ 426.427836][T15021] sch_fq: defrate 0 ignored. [ 426.443286][ T5934] IPVS: starting estimator thread 0... [ 426.456367][T11410] usb 8-1: Using ep0 maxpacket: 8 [ 426.459355][T11410] usb 8-1: config 0 has no interfaces? [ 426.461063][T11410] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 426.463812][T11410] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.467651][T11410] usb 8-1: config 0 descriptor?? [ 426.541471][T15024] IPVS: using max 43 ests per chain, 103200 per kthread [ 426.559972][ T5954] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 426.584729][ T5959] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 426.665352][T15035] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 426.667837][T15035] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 426.685976][ T39] audit: type=1400 audit(421.294:13561): avc: denied { read } for pid=15036 comm="syz.8.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 426.692494][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2377'. [ 426.695016][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2377'. [ 426.697575][T15037] netlink: 'syz.8.2377': attribute type 25 has an invalid length. [ 426.785920][T15046] netlink: 'syz.8.2381': attribute type 1 has an invalid length. [ 426.797853][T15046] bond2: entered promiscuous mode [ 426.799489][T15046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.062055][T15062] Bluetooth: (null): Invalid header checksum [ 427.076063][T11411] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 427.186205][ T11] Bluetooth: (null): Invalid header checksum [ 427.188049][ T105] Bluetooth: (null): Invalid header checksum [ 427.236865][T11411] usb 5-1: Using ep0 maxpacket: 8 [ 427.240319][T11411] usb 5-1: config 0 has no interfaces? [ 427.242460][T11411] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 427.245830][T11411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.250973][T11411] usb 5-1: config 0 descriptor?? [ 427.311347][ T74] Bluetooth: (null): Invalid header checksum [ 427.430023][ T74] Bluetooth: (null): Invalid header checksum [ 427.560309][ T74] Bluetooth: (null): Invalid header checksum [ 427.674651][ T74] Bluetooth: (null): Invalid header checksum [ 427.792218][ T45] Bluetooth: (null): Invalid header checksum [ 427.922157][ T65] Bluetooth: (null): Invalid header checksum [ 429.130101][ T5989] usb 8-1: USB disconnect, device number 69 [ 429.178792][ T39] audit: type=1400 audit(423.623:13562): avc: denied { bind } for pid=15157 comm="syz.3.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 429.228671][T15160] xt_SECMARK: invalid mode: 0 [ 429.231290][ T39] audit: type=1400 audit(423.679:13563): avc: denied { getopt } for pid=15159 comm="syz.3.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 429.283322][T15162] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 429.285088][ T39] audit: type=1400 audit(423.726:13564): avc: denied { accept } for pid=15128 comm="syz.8.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 429.291715][ T39] audit: type=1400 audit(423.735:13565): avc: denied { append } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 429.301855][ T39] audit: type=1400 audit(423.744:13566): avc: denied { read write } for pid=5953 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.308603][ T39] audit: type=1400 audit(423.744:13567): avc: denied { open } for pid=5953 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.316354][ T39] audit: type=1400 audit(423.744:13568): avc: denied { ioctl } for pid=5953 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.348133][ T39] audit: type=1400 audit(423.782:13569): avc: denied { mounton } for pid=15168 comm="syz.3.2425" path="/585/bus" dev="tmpfs" ino=3435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 429.355371][ T39] audit: type=1400 audit(423.782:13570): avc: denied { unlink } for pid=15168 comm="syz.3.2425" name="#121" dev="tmpfs" ino=3439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 429.392703][T15172] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2426'. [ 429.458261][T15180] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2428'. [ 429.639654][T15186] rtc_cmos 00:05: Alarms can be up to one day in the future [ 429.793630][T15198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.801488][T15198] bond0: (slave rose0): Enslaving as an active interface with an up link [ 429.908955][ T6045] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 429.979899][T11411] usb 5-1: USB disconnect, device number 57 [ 430.019064][T15219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2437'. [ 430.038116][T11410] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 430.059933][T15226] futex_wake_op: syz.0.2439 tries to shift op by 32; fix this program [ 430.094038][ T6045] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.096965][ T6045] usb 13-1: config 0 has no interfaces? [ 430.098975][ T6045] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.101921][ T6045] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.111271][ T6045] usb 13-1: config 0 descriptor?? [ 430.180759][T15241] CUSE: unknown device info "ts_offset" [ 430.183098][T15241] CUSE: DEVNAME unspecified [ 430.208447][T11410] usb 8-1: Using ep0 maxpacket: 8 [ 430.212139][T11410] usb 8-1: config 0 has no interfaces? [ 430.214281][T11410] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 430.217758][T11410] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.223401][T11410] usb 8-1: config 0 descriptor?? [ 430.330334][T15188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.333125][T15188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.340641][T11410] usb 13-1: USB disconnect, device number 7 [ 430.614417][ T6045] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 430.758490][T15251] overlayfs: failed to resolve './file0': -2 [ 430.774756][ T6045] usb 5-1: Using ep0 maxpacket: 8 [ 430.777822][ T6045] usb 5-1: config 0 has no interfaces? [ 430.779435][ T6045] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 430.782019][ T6045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.785327][ T6045] usb 5-1: config 0 descriptor?? [ 430.961241][T15260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15260 comm=syz.8.2449 [ 431.394032][T15288] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 431.443034][T15294] openvswitch: netlink: Invalid VLAN frame [ 431.560352][T15298] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.637455][T15298] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.740460][T15298] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.831171][T15298] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.845841][T15300] Process accounting resumed [ 431.909143][T15298] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.921856][T15298] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.934472][T15298] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.943906][T15298] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.040071][ T39] kauditd_printk_skb: 114 callbacks suppressed [ 432.040082][ T39] audit: type=1400 audit(426.307:13685): avc: denied { connect } for pid=15320 comm="syz.7.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 432.077972][T15326] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2468'. [ 432.081526][ T39] audit: type=1400 audit(426.345:13686): avc: denied { module_load } for pid=15325 comm="syz.7.2468" path="/178/bus" dev="tmpfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 432.091385][ T39] audit: type=1400 audit(426.345:13687): avc: denied { mount } for pid=15328 comm="syz.8.2469" name="/" dev="autofs" ino=58437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 432.099590][ T39] audit: type=1400 audit(426.354:13688): avc: denied { unmount } for pid=13438 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 432.154391][T15325] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 432.190859][ T39] audit: type=1400 audit(426.448:13689): avc: denied { create } for pid=15334 comm="syz.7.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 432.198580][ T39] audit: type=1400 audit(426.448:13690): avc: denied { write } for pid=15334 comm="syz.7.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 432.206137][ T39] audit: type=1400 audit(426.448:13691): avc: denied { ioctl } for pid=15334 comm="syz.7.2471" path="socket:[58443]" dev="sockfs" ino=58443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 432.225336][ T39] audit: type=1400 audit(426.476:13692): avc: denied { create } for pid=15334 comm="syz.7.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 432.233214][ T39] audit: type=1400 audit(426.476:13693): avc: denied { bind } for pid=15334 comm="syz.7.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 432.338873][ T39] audit: type=1400 audit(426.588:13694): avc: denied { read write } for pid=15339 comm="syz.7.2473" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 432.848335][ T836] usb 8-1: USB disconnect, device number 70 [ 432.892772][T15363] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 432.895505][T15363] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 432.898694][T15365] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 432.901421][T15365] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 433.014237][T15375] x_tables: duplicate underflow at hook 2 [ 433.098389][T15386] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.2489'. [ 433.101136][T15386] openvswitch: netlink: Flow actions attr not present in new flow. [ 433.509162][ T30] usb 5-1: USB disconnect, device number 58 [ 433.511690][ T6044] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 433.674442][ T6044] usb 8-1: Using ep0 maxpacket: 8 [ 433.678710][ T6044] usb 8-1: config 0 has no interfaces? [ 433.680309][ T6044] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 433.683348][ T6044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.689074][ T6044] usb 8-1: config 0 descriptor?? [ 434.334761][ T30] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 434.495100][ T30] usb 13-1: Using ep0 maxpacket: 8 [ 434.497825][ T30] usb 13-1: config 0 has no interfaces? [ 434.499461][ T30] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 434.502102][ T30] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.505297][ T30] usb 13-1: config 0 descriptor?? [ 436.348433][ T754] usb 8-1: USB disconnect, device number 71 [ 436.499111][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2506'. [ 436.548862][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.555815][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 436.560987][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 436.564867][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 436.567307][ T5954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 436.571694][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 436.588807][T15445] »»»»»» speed is unknown, defaulting to 1000 [ 436.625722][T15445] »»»»»» speed is unknown, defaulting to 1000 [ 436.627872][T15445] vxcan1 speed is unknown, defaulting to 1000 [ 436.719640][T15445] chnl_net:caif_netlink_parms(): no params data found [ 436.773374][T15445] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.775523][T15445] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.777604][T15445] bridge_slave_0: entered allmulticast mode [ 436.779854][T15445] bridge_slave_0: entered promiscuous mode [ 436.783041][T15445] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.785212][T15445] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.787315][T15445] bridge_slave_1: entered allmulticast mode [ 436.789509][T15445] bridge_slave_1: entered promiscuous mode [ 436.811425][T15445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.816083][T15445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.839498][T15445] team0: Port device team_slave_0 added [ 436.842344][T15445] team0: Port device team_slave_1 added [ 436.862593][T15445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.864648][T15445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.873334][T15445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.877207][T15445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.881131][T15445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.888510][T15445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.924699][T15445] hsr_slave_0: entered promiscuous mode [ 436.926975][T15445] hsr_slave_1: entered promiscuous mode [ 436.929116][T15445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.929896][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'. [ 436.931380][T15445] Cannot create hsr debugfs directory [ 437.000570][T15445] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.065568][T15445] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.138628][T15445] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.184587][T15445] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.193044][T13751] usb 13-1: USB disconnect, device number 8 [ 437.231895][ T6044] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 437.302976][T15445] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 437.319900][T15445] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 437.331724][T15445] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 437.335261][T15445] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 437.370814][T15445] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.373117][T15445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.375279][T15445] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.377319][T15445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.403133][ T6044] usb 5-1: Using ep0 maxpacket: 8 [ 437.405218][T15445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.412235][ T6044] usb 5-1: config 0 has no interfaces? [ 437.414871][ T6044] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 437.418084][ T6044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.423070][ T6044] usb 5-1: config 0 descriptor?? [ 437.431677][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.435923][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.461859][T15445] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.464895][ T39] kauditd_printk_skb: 49 callbacks suppressed [ 437.464960][ T39] audit: type=1400 audit(431.377:13744): avc: denied { mounton } for pid=15491 comm="syz.8.2521" path=2F3130362FE91F7189591E9233614B dev="tmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 437.465139][T15492] 9pnet_fd: p9_fd_create_unix (15492): problem connecting socket: éq‰Y’3aK: -111 [ 437.482230][ T39] audit: type=1400 audit(431.396:13745): avc: denied { setopt } for pid=15491 comm="syz.8.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 437.486973][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.492601][ T9884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.492727][ T39] audit: type=1400 audit(431.405:13746): avc: denied { validate_trans } for pid=15491 comm="syz.8.2521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 437.493340][T15492] netlink: 'syz.8.2521': attribute type 1 has an invalid length. [ 437.513065][T15492] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.516473][ T9884] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.518535][ T9884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.529658][T15492] bond3: (slave gretap1): making interface the new active one [ 437.536105][T15492] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 437.640811][ T6044] usb 5-1: string descriptor 0 read error: -71 [ 437.644694][ T6044] usb 5-1: USB disconnect, device number 59 [ 437.663801][T15445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.681624][T15445] veth0_vlan: entered promiscuous mode [ 437.685837][T15445] veth1_vlan: entered promiscuous mode [ 437.704765][T15445] veth0_macvtap: entered promiscuous mode [ 437.707911][T15445] veth1_macvtap: entered promiscuous mode [ 437.716107][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.719105][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.721911][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.725305][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.728211][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.731150][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.733967][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.738411][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.742119][T15445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.748179][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.751233][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.754075][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.758097][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.760867][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.763811][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.766956][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.769926][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.773520][T15445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.778782][T15445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.781290][T15445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.783777][T15445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.786261][T15445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.821581][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.823878][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.836169][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.838575][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.846983][ T39] audit: type=1400 audit(431.733:13747): avc: denied { mounton } for pid=15445 comm="syz-executor" path="/syzkaller.IKKgC4/syz-tmp" dev="sda1" ino=1948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 437.862687][ T39] audit: type=1400 audit(431.733:13748): avc: denied { mount } for pid=15445 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 437.881519][ T39] audit: type=1400 audit(431.733:13749): avc: denied { mount } for pid=15445 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 437.889964][ T39] audit: type=1400 audit(431.733:13750): avc: denied { mounton } for pid=15445 comm="syz-executor" path="/syzkaller.IKKgC4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 437.900150][ T39] audit: type=1400 audit(431.733:13751): avc: denied { mounton } for pid=15445 comm="syz-executor" path="/syzkaller.IKKgC4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=58928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 437.909741][ T39] audit: type=1400 audit(431.742:13752): avc: denied { mounton } for pid=15445 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 437.917254][ T39] audit: type=1400 audit(431.742:13753): avc: denied { mount } for pid=15445 comm="syz-executor" name="/" dev="gadgetfs" ino=10363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 438.066037][ T9] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 438.200958][T15529] random: crng reseeded on system resumption [ 438.227274][ T9] usb 13-1: Using ep0 maxpacket: 8 [ 438.229991][ T9] usb 13-1: config 0 has no interfaces? [ 438.231687][ T9] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 438.234303][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.238108][ T9] usb 13-1: config 0 descriptor?? [ 438.411649][T15537] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 438.508888][T15545] team0: No ports can be present during mode change [ 438.728672][ T5959] Bluetooth: hci0: command tx timeout [ 438.878275][ T6009] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 439.049283][ T6009] usb 8-1: Using ep0 maxpacket: 8 [ 439.052192][ T6009] usb 8-1: config 0 has no interfaces? [ 439.053749][ T6009] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 439.056579][ T6009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.060092][ T6009] usb 8-1: config 0 descriptor?? [ 439.241900][T15564] input: syz0 as /devices/virtual/input/input23 [ 439.362654][T15577] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.608436][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2559'. [ 439.615372][T15606] fuse: Bad value for 'user_id' [ 439.619497][T15606] fuse: Bad value for 'user_id' [ 439.761731][T15619] tmpfs: Unknown parameter 'usrquotaÓÈ' [ 439.794272][T15622] FAULT_INJECTION: forcing a failure. [ 439.794272][T15622] name failslab, interval 1, probability 0, space 0, times 0 [ 439.798353][T15622] CPU: 2 UID: 0 PID: 15622 Comm: syz.7.2565 Not tainted 6.13.0-rc7-syzkaller #0 [ 439.800909][T15622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 439.803978][T15622] Call Trace: [ 439.804950][T15622] [ 439.805805][T15622] dump_stack_lvl+0x16c/0x1f0 [ 439.807204][T15622] should_fail_ex+0x497/0x5b0 [ 439.808583][T15622] ? fs_reclaim_acquire+0xae/0x150 [ 439.810052][T15622] should_failslab+0xc2/0x120 [ 439.811418][T15622] __kmalloc_noprof+0xcb/0x510 [ 439.812807][T15622] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 439.814450][T15622] tomoyo_realpath_from_path+0xb9/0x720 [ 439.816072][T15622] ? tomoyo_path_number_perm+0x235/0x590 [ 439.817688][T15622] ? tomoyo_path_number_perm+0x235/0x590 [ 439.819320][T15622] tomoyo_path_number_perm+0x248/0x590 [ 439.820894][T15622] ? tomoyo_path_number_perm+0x235/0x590 [ 439.822517][T15622] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 439.824258][T15622] ? __pfx_lock_release+0x10/0x10 [ 439.825727][T15622] ? trace_lock_acquire+0x14e/0x1f0 [ 439.827235][T15622] ? lock_acquire+0x2f/0xb0 [ 439.828545][T15622] ? __fget_files+0x40/0x3a0 [ 439.829886][T15622] ? __fget_files+0x206/0x3a0 [ 439.831254][T15622] security_file_ioctl+0x9b/0x240 [ 439.832708][T15622] __x64_sys_ioctl+0xb7/0x200 [ 439.834075][T15622] do_syscall_64+0xcd/0x250 [ 439.835405][T15622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.837110][T15622] RIP: 0033:0x7f96ac785d29 [ 439.838406][T15622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.844075][T15622] RSP: 002b:00007f96ad522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.846460][T15622] RAX: ffffffffffffffda RBX: 00007f96ac975fa0 RCX: 00007f96ac785d29 [ 439.848726][T15622] RDX: 0000000020000740 RSI: 000000004040534e RDI: 0000000000000003 [ 439.850979][T15622] RBP: 00007f96ad522090 R08: 0000000000000000 R09: 0000000000000000 [ 439.853243][T15622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.855508][T15622] R13: 0000000000000000 R14: 00007f96ac975fa0 R15: 00007fffe73cbe48 [ 439.857774][T15622] [ 439.859089][T15622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 440.030299][T15633] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 440.310912][T11410] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 440.471305][T11410] usb 12-1: Using ep0 maxpacket: 8 [ 440.474056][T11410] usb 12-1: config 2 interface 0 has no altsetting 0 [ 440.477756][T11410] usb 12-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 440.480557][T11410] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.483494][T11410] usb 12-1: Product: syz [ 440.484815][T11410] usb 12-1: Manufacturer: syz [ 440.486273][T11410] usb 12-1: SerialNumber: syz [ 440.707554][T11410] usb 12-1: USB disconnect, device number 12 [ 440.910138][ T5990] usb 13-1: USB disconnect, device number 9 [ 440.963949][ T5959] Bluetooth: hci0: command tx timeout [ 441.128020][T15651] FAULT_INJECTION: forcing a failure. [ 441.128020][T15651] name failslab, interval 1, probability 0, space 0, times 0 [ 441.132560][T15651] CPU: 0 UID: 0 PID: 15651 Comm: syz.8.2575 Not tainted 6.13.0-rc7-syzkaller #0 [ 441.135901][T15651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 441.139865][T15651] Call Trace: [ 441.141122][T15651] [ 441.142246][T15651] dump_stack_lvl+0x16c/0x1f0 [ 441.144042][T15651] should_fail_ex+0x497/0x5b0 [ 441.145851][T15651] ? fs_reclaim_acquire+0xae/0x150 [ 441.147801][T15651] should_failslab+0xc2/0x120 [ 441.149592][T15651] __kmalloc_noprof+0xcb/0x510 [ 441.151424][T15651] ? d_absolute_path+0x137/0x1b0 [ 441.152993][T15651] ? rcu_is_watching+0x12/0xc0 [ 441.154390][T15651] tomoyo_encode2+0x100/0x3e0 [ 441.155805][T15651] tomoyo_encode+0x29/0x50 [ 441.157106][T15651] tomoyo_realpath_from_path+0x19d/0x720 [ 441.158724][T15651] tomoyo_path_number_perm+0x248/0x590 [ 441.160312][T15651] ? tomoyo_path_number_perm+0x235/0x590 [ 441.161942][T15651] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 441.163694][T15651] ? __pfx_lock_release+0x10/0x10 [ 441.165163][T15651] ? trace_lock_acquire+0x14e/0x1f0 [ 441.166675][T15651] ? lock_acquire+0x2f/0xb0 [ 441.168023][T15651] ? __fget_files+0x40/0x3a0 [ 441.169443][T15651] ? __fget_files+0x206/0x3a0 [ 441.170937][T15651] security_file_ioctl+0x9b/0x240 [ 441.172465][T15651] __x64_sys_ioctl+0xb7/0x200 [ 441.173847][T15651] do_syscall_64+0xcd/0x250 [ 441.175229][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.176962][T15651] RIP: 0033:0x7f3e8cd85d29 [ 441.178294][T15651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.183888][T15651] RSP: 002b:00007f3e8dbe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.186301][T15651] RAX: ffffffffffffffda RBX: 00007f3e8cf75fa0 RCX: 00007f3e8cd85d29 [ 441.188594][T15651] RDX: 0000000020000740 RSI: 000000004040534e RDI: 0000000000000003 [ 441.190874][T15651] RBP: 00007f3e8dbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 441.193326][T15651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.195743][T15651] R13: 0000000000000000 R14: 00007f3e8cf75fa0 R15: 00007ffe28225a88 [ 441.198008][T15651] [ 441.199767][T15651] ERROR: Out of memory at tomoyo_realpath_from_path. [ 441.580479][T15682] FAULT_INJECTION: forcing a failure. [ 441.580479][T15682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.584437][T15682] CPU: 2 UID: 0 PID: 15682 Comm: syz.8.2585 Not tainted 6.13.0-rc7-syzkaller #0 [ 441.587028][T15682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 441.590089][T15682] Call Trace: [ 441.591056][T15682] [ 441.591942][T15682] dump_stack_lvl+0x16c/0x1f0 [ 441.593451][T15682] should_fail_ex+0x497/0x5b0 [ 441.594900][T15682] _copy_from_user+0x2e/0xd0 [ 441.596270][T15682] snd_seq_ioctl+0x1c0/0x3f0 [ 441.597615][T15682] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 441.599099][T15682] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 441.601101][T15682] ? selinux_file_ioctl+0x180/0x270 [ 441.602617][T15682] ? selinux_file_ioctl+0xb4/0x270 [ 441.604150][T15682] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 441.606154][T15682] __x64_sys_ioctl+0x190/0x200 [ 441.607666][T15682] do_syscall_64+0xcd/0x250 [ 441.608986][T15682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.610688][T15682] RIP: 0033:0x7f3e8cd85d29 [ 441.612007][T15682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.617621][T15682] RSP: 002b:00007f3e8dbe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.620026][T15682] RAX: ffffffffffffffda RBX: 00007f3e8cf75fa0 RCX: 00007f3e8cd85d29 [ 441.622306][T15682] RDX: 0000000020000740 RSI: 000000004040534e RDI: 0000000000000003 [ 441.624582][T15682] RBP: 00007f3e8dbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 441.627306][T15682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.629631][T15682] R13: 0000000000000000 R14: 00007f3e8cf75fa0 R15: 00007ffe28225a88 [ 441.631913][T15682] [ 441.682802][T11410] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 441.825265][T15690] netfs: Couldn't get user pages (rc=-14) [ 441.832244][T13751] usb 8-1: USB disconnect, device number 72 [ 441.850239][T11410] usb 12-1: Using ep0 maxpacket: 8 [ 441.855614][T11410] usb 12-1: config 0 has no interfaces? [ 441.858552][T11410] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 441.861378][T11410] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.866932][T11410] usb 12-1: config 0 descriptor?? [ 441.995323][T15705] ipvlan2: entered allmulticast mode [ 441.997293][T15705] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 442.000568][T15705] batman_adv: batadv0: Adding interface: ipvlan2 [ 442.002402][T15705] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.011458][T15705] batman_adv: batadv0: Interface activated: ipvlan2 [ 442.080234][T15712] xt_hashlimit: size too large, truncated to 1048576 [ 442.095178][T15714] FAULT_INJECTION: forcing a failure. [ 442.095178][T15714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.109361][T15714] CPU: 3 UID: 0 PID: 15714 Comm: syz.3.2595 Not tainted 6.13.0-rc7-syzkaller #0 [ 442.112028][T15714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 442.115222][T15714] Call Trace: [ 442.116202][T15714] [ 442.117080][T15714] dump_stack_lvl+0x16c/0x1f0 [ 442.118452][T15714] should_fail_ex+0x497/0x5b0 [ 442.119883][T15714] _copy_to_user+0x32/0xd0 [ 442.121405][T15714] simple_read_from_buffer+0xd0/0x160 [ 442.122991][T15714] proc_fail_nth_read+0x198/0x270 [ 442.124490][T15714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.126108][T15714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.127723][T15714] vfs_read+0x1df/0xbe0 [ 442.128981][T15714] ? __fget_files+0x1fc/0x3a0 [ 442.130350][T15714] ? __pfx___mutex_lock+0x10/0x10 [ 442.131816][T15714] ? __pfx_vfs_read+0x10/0x10 [ 442.133194][T15714] ? __fget_files+0x206/0x3a0 [ 442.134551][T15714] ksys_read+0x12b/0x250 [ 442.135787][T15714] ? __pfx_ksys_read+0x10/0x10 [ 442.137173][T15714] do_syscall_64+0xcd/0x250 [ 442.138492][T15714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.140549][T15714] RIP: 0033:0x7f099758473c [ 442.141878][T15714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 442.147410][T15714] RSP: 002b:00007f099831d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 442.149833][T15714] RAX: ffffffffffffffda RBX: 00007f0997775fa0 RCX: 00007f099758473c [ 442.152112][T15714] RDX: 000000000000000f RSI: 00007f099831d0a0 RDI: 0000000000000004 [ 442.154379][T15714] RBP: 00007f099831d090 R08: 0000000000000000 R09: 0000000000000000 [ 442.156682][T15714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.158987][T15714] R13: 0000000000000000 R14: 00007f0997775fa0 R15: 00007fff22e2ecc8 [ 442.161459][T15714] [ 442.203481][T15722] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2598'. [ 442.541626][ T5959] Bluetooth: unknown link type 10 [ 442.543541][ T5959] Bluetooth: hci0: connection err: -111 [ 442.580409][T15736] Bluetooth: MGMT ver 1.23 [ 443.176199][ T5959] Bluetooth: hci0: command tx timeout [ 443.233498][ T39] kauditd_printk_skb: 61 callbacks suppressed [ 443.233514][ T39] audit: type=1400 audit(2996.776:13815): avc: denied { mount } for pid=15755 comm="syz.8.2608" name="/" dev="hugetlbfs" ino=59124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 443.249432][ T39] audit: type=1400 audit(2996.786:13816): avc: denied { unmount } for pid=13438 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 443.360569][ T39] audit: type=1400 audit(2996.898:13817): avc: denied { read } for pid=15765 comm="syz.8.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 443.547753][T15772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.555876][T15772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=410 sclass=netlink_route_socket pid=15772 comm=syz.8.2613 [ 443.590017][T15774] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 443.592297][T15774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.725889][T15780] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2615'. [ 443.729226][T15780] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2615'. [ 443.942824][ T39] audit: type=1400 audit(2997.431:13818): avc: denied { execute_no_trans } for pid=15783 comm="syz.8.2617" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 444.301622][T15806] netlink: 448 bytes leftover after parsing attributes in process `syz.8.2624'. [ 444.304904][T15806] unsupported nla_type 14345 [ 444.307177][ T39] audit: type=1400 audit(2997.777:13819): avc: denied { ioctl } for pid=15805 comm="syz.8.2624" path="socket:[59246]" dev="sockfs" ino=59246 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 444.395933][T15813] Cannot find del_set index 4 as target [ 444.559747][ T39] audit: type=1400 audit(2998.011:13820): avc: denied { write } for pid=15821 comm="syz.8.2630" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 444.571184][T11411] usb 12-1: USB disconnect, device number 13 [ 444.577056][ T39] audit: type=1400 audit(2998.011:13821): avc: denied { ioctl } for pid=15821 comm="syz.8.2630" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 444.606086][ T39] audit: type=1400 audit(2998.058:13822): avc: denied { mount } for pid=15824 comm="syz.7.2631" name="/" dev="configfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 444.613190][ T39] audit: type=1400 audit(2998.067:13823): avc: denied { search } for pid=15824 comm="syz.7.2631" name="/" dev="configfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 444.619612][ T39] audit: type=1400 audit(2998.067:13824): avc: denied { read } for pid=15824 comm="syz.7.2631" name="/" dev="configfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 444.664203][T15825] nbd: socks must be embedded in a SOCK_ITEM attr [ 444.668766][T15829] syz.7.2631 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 444.700866][T15330] [ 444.701540][T15330] ====================================================== [ 444.703357][T15330] WARNING: possible circular locking dependency detected [ 444.705157][T15330] 6.13.0-rc7-syzkaller #0 Not tainted [ 444.706596][T15330] ------------------------------------------------------ [ 444.710067][T15831] dvmrp1: entered allmulticast mode [ 444.710495][T15330] kworker/u32:15/15330 is trying to acquire lock: [ 444.713817][T15330] ffff888107342cf8 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_unregister_queue+0x125/0x2e0 [ 444.716291][T15330] [ 444.716291][T15330] but task is already holding lock: [ 444.718181][T15330] ffff888107342d88 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_unregister_queue+0xdb/0x2e0 [ 444.721083][T15330] [ 444.721083][T15330] which lock already depends on the new lock. [ 444.721083][T15330] [ 444.723763][T15330] [ 444.723763][T15330] the existing dependency chain (in reverse order) is: [ 444.726075][T15330] [ 444.726075][T15330] -> #5 (&q->sysfs_dir_lock){+.+.}-{4:4}: [ 444.728118][T15330] __mutex_lock+0x19b/0xa60 [ 444.729432][T15330] blk_mq_sysfs_unregister_hctxs+0x92/0x2d0 [ 444.731599][T15330] __blk_mq_update_nr_hw_queues+0x93f/0x14e0 [ 444.733617][T15330] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 444.735329][T15330] nbd_start_device+0x15b/0xd70 [ 444.736724][T15330] nbd_ioctl+0x21a/0xfd0 [ 444.737972][T15330] blkdev_ioctl+0x276/0x6d0 [ 444.739309][T15330] __x64_sys_ioctl+0x190/0x200 [ 444.740708][T15330] do_syscall_64+0xcd/0x250 [ 444.742075][T15330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.743751][T15330] [ 444.743751][T15330] -> #4 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 444.746015][T15330] blk_mq_submit_bio+0x1fb6/0x24c0 [ 444.747492][T15330] __submit_bio+0x384/0x540 [ 444.748806][T15330] submit_bio_noacct_nocheck+0x698/0xd70 [ 444.750633][T15330] submit_bio_noacct+0x93a/0x1e20 [ 444.752638][T15330] block_read_full_folio+0x812/0xa50 [ 444.754221][T15330] filemap_read_folio+0xc6/0x2a0 [ 444.755651][T15330] filemap_get_pages+0x155f/0x1be0 [ 444.757108][T15330] filemap_read+0x3ca/0xd70 [ 444.758397][T15330] blkdev_read_iter+0x187/0x480 [ 444.759743][T15330] vfs_read+0x87f/0xbe0 [ 444.761252][T15330] ksys_read+0x12b/0x250 [ 444.762503][T15330] do_syscall_64+0xcd/0x250 [ 444.763843][T15330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.765526][T15330] [ 444.765526][T15330] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 444.767705][T15330] down_read+0x9a/0x330 [ 444.768931][T15330] filemap_fault+0x2e0/0x2820 [ 444.770455][T15330] __do_fault+0x10a/0x490 [ 444.772222][T15330] do_pte_missing+0xebd/0x3e00 [ 444.773773][T15330] __handle_mm_fault+0x103c/0x2a40 [ 444.775249][T15330] handle_mm_fault+0x3fa/0xaa0 [ 444.776610][T15330] __get_user_pages+0x8d9/0x3b50 [ 444.778013][T15330] populate_vma_page_range+0x27f/0x3a0 [ 444.779571][T15330] __mm_populate+0x1d6/0x380 [ 444.780909][T15330] vm_mmap_pgoff+0x293/0x360 [ 444.782255][T15330] ksys_mmap_pgoff+0x32c/0x5c0 [ 444.783666][T15330] __x64_sys_mmap+0x125/0x190 [ 444.785017][T15330] do_syscall_64+0xcd/0x250 [ 444.786322][T15330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.788079][T15330] [ 444.788079][T15330] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 444.790111][T15330] __might_fault+0x11b/0x190 [ 444.792141][T15330] _copy_from_user+0x29/0xd0 [ 444.793711][T15330] __blk_trace_setup+0xa8/0x180 [ 444.795151][T15330] blk_trace_ioctl+0x163/0x290 [ 444.796520][T15330] blkdev_ioctl+0x109/0x6d0 [ 444.797825][T15330] __x64_sys_ioctl+0x190/0x200 [ 444.799200][T15330] do_syscall_64+0xcd/0x250 [ 444.800497][T15330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.802148][T15330] [ 444.802148][T15330] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 444.804206][T15330] __mutex_lock+0x19b/0xa60 [ 444.805519][T15330] blk_register_queue+0x13c/0x4f0 [ 444.806945][T15330] add_disk_fwnode+0x785/0x1300 [ 444.808340][T15330] brd_alloc.isra.0+0x5a2/0x840 [ 444.809729][T15330] brd_init+0x12b/0x1d0 [ 444.811410][T15330] do_one_initcall+0x128/0x700 [ 444.813142][T15330] kernel_init_freeable+0x5c7/0x900 [ 444.814636][T15330] kernel_init+0x1c/0x2b0 [ 444.815922][T15330] ret_from_fork+0x45/0x80 [ 444.817199][T15330] ret_from_fork_asm+0x1a/0x30 [ 444.818552][T15330] [ 444.818552][T15330] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 444.820590][T15330] __lock_acquire+0x249e/0x3c40 [ 444.821992][T15330] lock_acquire.part.0+0x11b/0x380 [ 444.823455][T15330] __mutex_lock+0x19b/0xa60 [ 444.824805][T15330] blk_unregister_queue+0x125/0x2e0 [ 444.826278][T15330] del_gendisk+0x2de/0xb20 [ 444.827558][T15330] nbd_dev_remove+0x3b/0xe0 [ 444.828856][T15330] process_one_work+0x9c5/0x1ba0 [ 444.830393][T15330] worker_thread+0x6c8/0xf00 [ 444.832216][T15330] kthread+0x2c1/0x3a0 [ 444.833866][T15330] ret_from_fork+0x45/0x80 [ 444.835394][T15330] ret_from_fork_asm+0x1a/0x30 [ 444.836769][T15330] [ 444.836769][T15330] other info that might help us debug this: [ 444.836769][T15330] [ 444.839468][T15330] Chain exists of: [ 444.839468][T15330] &q->sysfs_lock --> &q->q_usage_counter(io)#54 --> &q->sysfs_dir_lock [ 444.839468][T15330] [ 444.843029][T15330] Possible unsafe locking scenario: [ 444.843029][T15330] [ 444.844954][T15330] CPU0 CPU1 [ 444.846327][T15330] ---- ---- [ 444.847694][T15330] lock(&q->sysfs_dir_lock); [ 444.848904][T15330] lock(&q->q_usage_counter(io)#54); [ 444.850942][T15330] lock(&q->sysfs_dir_lock); [ 444.852784][T15330] lock(&q->sysfs_lock); [ 444.853889][T15330] [ 444.853889][T15330] *** DEADLOCK *** [ 444.853889][T15330] [ 444.856010][T15330] 3 locks held by kworker/u32:15/15330: [ 444.857428][T15330] #0: ffff888025986148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 444.860076][T15330] #1: ffffc90003a37d80 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 444.862963][T15330] #2: ffff888107342d88 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_unregister_queue+0xdb/0x2e0 [ 444.865606][T15330] [ 444.865606][T15330] stack backtrace: [ 444.867126][T15330] CPU: 1 UID: 0 PID: 15330 Comm: kworker/u32:15 Not tainted 6.13.0-rc7-syzkaller #0 [ 444.869497][T15330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 444.872530][T15330] Workqueue: nbd-del nbd_dev_remove_work [ 444.873977][T15330] Call Trace: [ 444.874842][T15330] [ 444.875656][T15330] dump_stack_lvl+0x116/0x1f0 [ 444.876870][T15330] print_circular_bug+0x419/0x5d0 [ 444.878161][T15330] check_noncircular+0x31a/0x400 [ 444.879435][T15330] ? __pfx_check_noncircular+0x10/0x10 [ 444.880831][T15330] ? stack_depot_save_flags+0x38f/0x9c0 [ 444.882264][T15330] ? lockdep_lock+0xc6/0x200 [ 444.883468][T15330] ? __pfx_lockdep_lock+0x10/0x10 [ 444.884759][T15330] ? __call_rcu_common.constprop.0+0x99/0x7a0 [ 444.886345][T15330] ? kernfs_put+0x47/0x50 [ 444.887480][T15330] __lock_acquire+0x249e/0x3c40 [ 444.888740][T15330] ? __pfx___lock_acquire+0x10/0x10 [ 444.890072][T15330] lock_acquire.part.0+0x11b/0x380 [ 444.891388][T15330] ? blk_unregister_queue+0x125/0x2e0 [ 444.892771][T15330] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 444.894202][T15330] ? rcu_is_watching+0x12/0xc0 [ 444.895506][T15330] ? trace_lock_acquire+0x14e/0x1f0 [ 444.896849][T15330] ? lockdep_hardirqs_on+0x7c/0x110 [ 444.898187][T15330] ? blk_unregister_queue+0x125/0x2e0 [ 444.899570][T15330] ? lock_acquire+0x2f/0xb0 [ 444.900834][T15330] ? blk_unregister_queue+0x125/0x2e0 [ 444.902216][T15330] __mutex_lock+0x19b/0xa60 [ 444.903392][T15330] ? blk_unregister_queue+0x125/0x2e0 [ 444.904768][T15330] ? kobj_kset_leave+0x12/0x200 [ 444.906073][T15330] ? blk_unregister_queue+0x125/0x2e0 [ 444.907446][T15330] ? kobject_put+0xab/0x5a0 [ 444.908611][T15330] ? __pfx___mutex_lock+0x10/0x10 [ 444.909898][T15330] ? kobject_del+0x47/0x60 [ 444.911046][T15330] ? __pfx_blk_mq_sysfs_unregister+0x10/0x10 [ 444.912579][T15330] ? blk_unregister_queue+0x125/0x2e0 [ 444.913913][T15330] blk_unregister_queue+0x125/0x2e0 [ 444.915262][T15330] del_gendisk+0x2de/0xb20 [ 444.916446][T15330] ? __pfx_del_gendisk+0x10/0x10 [ 444.917726][T15330] ? trace_lock_acquire+0x14e/0x1f0 [ 444.919064][T15330] ? process_one_work+0x921/0x1ba0 [ 444.920505][T15330] nbd_dev_remove+0x3b/0xe0 [ 444.921688][T15330] process_one_work+0x9c5/0x1ba0 [ 444.922957][T15330] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 444.924405][T15330] ? __pfx_process_one_work+0x10/0x10 [ 444.925860][T15330] ? rcu_is_watching+0x12/0xc0 [ 444.927112][T15330] ? assign_work+0x1a0/0x250 [ 444.928329][T15330] worker_thread+0x6c8/0xf00 [ 444.929520][T15330] ? __kthread_parkme+0x148/0x220 [ 444.930822][T15330] ? __pfx_worker_thread+0x10/0x10 [ 444.932145][T15330] kthread+0x2c1/0x3a0 [ 444.933202][T15330] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.934536][T15330] ? __pfx_kthread+0x10/0x10 [ 444.935778][T15330] ret_from_fork+0x45/0x80 [ 444.936951][T15330] ? __pfx_kthread+0x10/0x10 [ 444.938145][T15330] ret_from_fork_asm+0x1a/0x30 [ 444.939468][T15330] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 444.963501][T15838] program syz.7.2636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.594048][T15330] bridge_slave_1: left allmulticast mode [ 445.595822][T15330] bridge_slave_1: left promiscuous mode [ 445.597418][T15330] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.599798][T15330] bridge_slave_0: left allmulticast mode [ 445.601327][T15330] bridge_slave_0: left promiscuous mode [ 445.602992][T15330] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.621016][T15330] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 445.623337][T15330] ip6gre1 (unregistering): left promiscuous mode [ 445.670143][T15330] bond3 (unregistering): (slave gretap1): Releasing active interface [ 445.685214][T15330] dvmrp1 (unregistering): left allmulticast mode [ 445.881840][T15330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.884842][T15330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.887549][T15330] bond0 (unregistering): Released all slaves [ 445.973419][T15330] bond1 (unregistering): Released all slaves [ 446.057620][T15330] bond2 (unregistering): Released all slaves [ 446.144073][T15330] bond3 (unregistering): Released all slaves [ 446.336900][T15330] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 446.344503][T15330] batman_adv: batadv0: Removing interface: ipvlan2 [ 446.430380][T15330] hsr_slave_0: left promiscuous mode [ 446.432273][T15330] hsr_slave_1: left promiscuous mode [ 446.434127][T15330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.436707][T15330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.107507][T15330] team0 (unregistering): Port device team_slave_1 removed [ 447.189487][T15330] team0 (unregistering): Port device team_slave_0 removed [ 448.164261][T15330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.225008][T15330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.289952][T15330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.364622][T15330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.456444][T15330] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.522785][T15330] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.592952][T15330] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.661758][T15330] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.735379][T15330] bridge_slave_1: left allmulticast mode [ 448.736841][T15330] bridge_slave_1: left promiscuous mode [ 448.738293][T15330] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.740592][T15330] bridge_slave_0: left allmulticast mode [ 448.742014][T15330] bridge_slave_0: left promiscuous mode [ 448.743425][T15330] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.746395][T15330] bridge_slave_1: left allmulticast mode [ 448.747850][T15330] bridge_slave_1: left promiscuous mode [ 448.749339][T15330] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.752223][T15330] bridge_slave_0: left allmulticast mode [ 448.753688][T15330] bridge_slave_0: left promiscuous mode [ 448.755207][T15330] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.801298][T15330] erspan0 (unregistering): left promiscuous mode [ 449.090131][T15330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.093381][T15330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.096385][T15330] bond0 (unregistering): Released all slaves [ 449.102941][T15330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.106160][T15330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.109215][T15330] bond0 (unregistering): Released all slaves [ 449.640895][T15330] hsr_slave_0: left promiscuous mode [ 449.642860][T15330] hsr_slave_1: left promiscuous mode [ 449.654865][T15330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.657028][T15330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.659527][T15330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.661656][T15330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.664096][T15330] batadv_slave_1: left promiscuous mode [ 449.669521][T15330] hsr_slave_0: left promiscuous mode [ 449.671578][T15330] hsr_slave_1: left promiscuous mode [ 449.673492][T15330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.676081][T15330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.679640][T15330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.681745][T15330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.686000][T15330] veth1_macvtap: left promiscuous mode [ 449.687671][T15330] veth0_macvtap: left promiscuous mode [ 449.689301][T15330] veth1_vlan: left promiscuous mode [ 449.690811][T15330] veth0_vlan: left promiscuous mode [ 449.692718][T15330] veth1_macvtap: left promiscuous mode [ 449.694282][T15330] veth0_macvtap: left promiscuous mode [ 449.695903][T15330] veth1_vlan: left promiscuous mode [ 449.697657][T15330] veth0_vlan: left promiscuous mode [ 449.731141][T15330] infiniband syz1: set down [ 449.910738][T15330] team0 (unregistering): Port device team_slave_1 removed [ 449.957214][T15330] team0 (unregistering): Port device team_slave_0 removed [ 450.458167][T15330] team0 (unregistering): Port device team_slave_1 removed [ 450.504144][T15330] team0 (unregistering): Port device team_slave_0 removed [ 450.678638][T15324] smc: removing ib device syz1 [ 450.719053][T11409] vxcan1 speed is unknown, defaulting to 1000 [ 451.298656][T15330] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 14:14:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000847f84 RBX=0000000000000000 RCX=ffffffff8b29f7c9 RDX=ffffed100d4c6fee RSI=ffffffff8bd1ede0 RDI=ffffffff81709679 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f4810 R15=0000000000000000 RIP=ffffffff8b2a0baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002b01a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000000d8 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96ac802a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96ac802aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96ac802aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96ac802ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96ac802b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96ac802c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96ac94b488 00007f96ac94b480 00007f96ac94b478 00007f96ac94b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96ad4ad100 00007f96ac94b440 00007f96ac94b458 00007f96ac94b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96ac94b498 00007f96ac94b490 00007f96ac94b488 00007f96ac94b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bf265 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc90003a371c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff851bf200 R15=0000000000000000 RIP=ffffffff851bf28f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3e8cf77bac CR3=00000000237fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555948559e4 0000555594855030 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555947e7ae6 00005555947e7800 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01a8100016900306 0014aa0000000000 0000000000000000 80fe000200140000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 020806060154a620 80080001e0030010 0001d00300100001 c00302100001b003 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040d80030d800420 03000800100303ff ffffff0400030280 1000018004010000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 014c940008006003 0010005003001000 4003021000300301 a010000d90030580 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100008808080 80808087e4100000 0401000000080608 0144f80010000004 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01080006014c9400 0800600300100050 0300100040030210 00300301a010000d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 90030580040d8003 0d80042003000800 100303ffffffff04 0003028010000180 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401000002080606 0154a62080080001 e00300100001d003 00100001c0030210 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000067c88c RBX=0000000000000002 RCX=ffffffff8b29f7c9 RDX=ffffed100d506fee RSI=ffffffff8bd1ede0 RDI=ffffffff81709679 RBP=ffffed1003ad4000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff905f4810 R15=0000000000000000 RIP=ffffffff8b2a0baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555bf4b808 CR3=0000000045972000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179dc02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179dc02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179dc02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179dc02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179dc02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179dc02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179dd4b488 00007f179dd4b480 00007f179dd4b478 00007f179dd4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179e8ad100 00007f179dd4b440 00007f179dd40004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179dd4b498 00007f179dd4b490 00007f179dd4b488 00007f179dd4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 951ff45ebed70279 dc1fb56706289ab9 5521f4790c5fc1fb 97a96dacda7be36c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e22acf3f5ca08578 1f317cd6bc42330a e541ca3af3d176d9 b9126dceb91bbb6c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 76aea67b97cc8291 9b92795a1e112ef6 4844f93b7b4ccac3 a27c1e48ec98141f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 951ff45ebed70279 dc1fb56706289ab9 5521f4790c5fc1fb 97a96dacda7be36c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000001000000 00000000b0000cc6 7ed00298e754a405 9871e7b738ab67f3 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000001 RBX=0000000057e21363 RCX=ffff88816cc13630 RDX=000000006d496346 RSI=000000007f45be2d RDI=00000000e826dc79 RBP=0000000000000000 RSP=ffffc900055bf080 R8 =0000000000000000 R9 =ffff88816cc13630 R10=ffffffff905f4817 R11=00000000000a4001 R12=0000000000000000 R13=ffffc900055bf0e0 R14=0000000000000017 R15=0000000000000017 RIP=ffffffff84cf95d3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3e8dbe66c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f96ac977bac CR3=000000002a78e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e8ce02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e8ce02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e8ce02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e8ce02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e8ce02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e8ce02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e8cf4b488 00007f3e8cf4b480 00007f3e8cf4b478 00007f3e8cf4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e8daad100 00007f3e8cf4b440 00007f3e8cf4b458 00007f3e8cf4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e8cf4b498 00007f3e8cf4b490 00007f3e8cf4b488 00007f3e8cf4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 378098f170ff7d20 4e33965e799ada54 f3a4b384864f13e9 c4fdcc21bee2ed9a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 12f9d74e74b9cda7 61bb7cccfdb1f1a8 abbb7c355fc496ac 330847433c76fe77 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 234f262724a6d54c d6104c0e27a0a9c9 af6ea7488afbd4a6 dfa1ba6b273d60c4 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000