last executing test programs: 3m3.00758872s ago: executing program 32 (id=152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000002"], 0x0) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r4) (async) listen(r2, 0x3) (async) accept4(r2, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) syz_io_uring_setup(0x5a4f, &(0x7f0000000380)={0x0, 0x747, 0x10, 0x3, 0x2cd}, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r5, 0x0, 0xfffffffffffffffe) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x6, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc041}, 0x8000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2m41.761456878s ago: executing program 1 (id=542): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000001c0)='./file1\x00', 0x60) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async) r2 = fanotify_init(0x200, 0x0) r3 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000e00)={0x4ff1, 0x0, r4}) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r7}) (async) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) (async, rerun: 32) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) (async, rerun: 32) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x304, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x0, 0x6, "59accb07bbc74989eea20422aee214b24da3ce453348cfa6e57b093d49e2e6a8c4f99e0d14b3e75a3e6e3e49eedd15dbca8acdbc3e82d7d24529aa917a8ee7a1a09198e762cace9fc4356a711b4c47968ea31d342cdf6b5640073a500bb9ed6928d622341052645bcf7554472f9e7c11f86bed30fcdfdd12c821fe24182065b338212ff023f0b2f426b0bb9139c88e7b75c28fc6b0de7f855224d2b0d3a268c7177f07820b092a3d8b1311e630dd5e419d01ac04ab78ae0bcdb9b02187756319941eff450d208be2dd7bcbd0ed9707b975b10c6ac7e0d012acdf63"}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x0, 0x6, "50e6"}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) 2m41.760992003s ago: executing program 1 (id=543): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000380), 0x10}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='svcrdma_send_pullup\x00', r0, 0x0, 0xfff}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xb6, 0xfa, &(0x7f00000006c0)="cb74445b7d4c0b24676c6c71ae37efcedaf4024230b52fcca86bb6556fcd9766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e4a4cb86e73c6cfdb37c5dcd0d91978a911e51eab190f6790c82bb7b5756727733c59ff7ed562dad575b960757fdaef5caafac082dd017e542b85270791ee0b72ab9e21c77342ba027feb29f6f668af042e280e144c85", &(0x7f0000000cc0)=""/250, 0xcb95, 0x0, 0x219, 0x1c2, &(0x7f0000000e00)="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", &(0x7f0000001040)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af8225aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b2bcefd388557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514000000000000000000000000ee4935641db74144420cec0823afde0ed0e36beafef82dee14ba5214efcb718800f319bb1b1cf903f8d855e91373", 0x2, 0x0, 0x3ff}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x9ee12669c23b1cf9, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0xfffffffc}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f00004fc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r2}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b7e1984fdb38616230f5a9043b51b43f0acb34122626a50846dae222213d00841fdbe5ba2ae684e060564164890d0a6cc7bc04f6baca628d1905c86539905c04801f24ec07f72206ce26bd90e023cde62fdd2c6a9fada201422b1da8037d7aa94b6d6435d8255fc79f2a19fec6b72c06fd6bfbb70956a6f65718cb9d0754fb6900e6929563a5c73b44ee4b55126c4ad4922c9ca9a631335fc32c01bcef1198d04c9cf756714347b8", @ANYRESOCT=r2, @ANYBLOB="350e0500230000008000128008000100767469007400028008000400e000000208000400ffffffff08000600810000000800030051b40000080002000e00000008000200cad9000008000100", @ANYRES64=r2, @ANYBLOB="080003000300000008000200004000000800030011370000080006000f0000000800020001000000080002000a000000080005000a01010108001f"], 0xa8}, 0x1, 0x0, 0x0, 0x4000880}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0xa, 0xffffffff) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000001103400010000000000000000000000000a926098bc52dac84358a4fe829a400000000000070000000900010073797a300000000068000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a430000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000101480000000c0a01010000000000000000070000000900020073797a3100000000090001f372797a30000000001c0003800c00008008000340000000020c000080080003400000000214000000"], 0xf8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1a, 0x6, 0x5, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000102000085dc88965512"], 0x1c}, 0x1, 0x0, 0x0, 0x48090}, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r12, 0x1, 0x38, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYRES64=r8, @ANYRESDEC=r11, @ANYRES16=r5, @ANYRES8=r6], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x4080) 2m41.68280055s ago: executing program 1 (id=546): r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_dev$hidraw(&(0x7f0000000040), 0xfffffffffffffffd, 0xd925c647d86ab4b1) 2m41.553498794s ago: executing program 1 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000000, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unlink(&(0x7f0000000180)='./file0\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x9, 0xfcff) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb5}, "71e2f0b73a38883142e0fcfaa649d58f49c89df19957d7be947384fd0ca0d2c9c6eb2abc70d4ef537fe021b62f0eba43c012a4cfdef2343e73de39ec18440715e20d35b95c06d05d90f82690365c83ccc9061949941640c3d17eb75e8fe397f374ca0603a3380ec7ea041c8de3e5b914e0f64abb246d2b20468034fdbf8f96d643b2cb7ed1a81b20ba2f740c04daff0ffe8aadd6ddba54d5eaad2d9636719c7bc2d0de55b6df92c1747fde35341992af3f4d474884"}, 0xb9) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e33}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="0b832200e0ff25000200475400f6a13bb1000000080086dd4803e49ccdc75a8b08083e07b77a8a48bb6afba7ab5e933c413bedb842c81c", 0x37, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 2m41.453652822s ago: executing program 1 (id=552): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d53265009d7005d79b46cf80cb661bab85029b3faf44010f8049c5a9b3df7902c18070ccfa661e75ccd469952c415aaa4ae79d86c98906c090f85439ab3ed936052f3442613f300989ea623ec9f5846c12f2f26387fd183dd13023c6ee776a12b1a32c0c8b4fe8f8c7c4599feb0a7617ce11e602e184b2fdd34b29f639f1ee7e1d0c1f14f15058d0f05d7253194a277ed0bb9", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2022) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xfffffffffffffffe, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x2000, 0x0, r3, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f00000000c0)={0x3, @bcast, r3}) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x2, 0x2, 0xa, 0x330, 0x1}, &(0x7f0000000200)=0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, &(0x7f0000000240)={0x81, 0x3, 0xfffff2bb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4, r5, &(0x7f0000000080), 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13005367000000200012800b00010067656e657665000010100280060005004e20000004000600"], 0x40}}, 0x40800) 2m41.173378271s ago: executing program 1 (id=556): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000bd, &(0x7f0000000080)=[{0x20, 0x2, 0x0, 0x8002}, {0xff, 0x0, 0xc, 0x1}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000bd, &(0x7f0000000080)=[{0x20, 0x2, 0x0, 0x8002}, {0xff, 0x0, 0xc, 0x1}]}, 0x10) (async) 2m41.14434177s ago: executing program 33 (id=556): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000bd, &(0x7f0000000080)=[{0x20, 0x2, 0x0, 0x8002}, {0xff, 0x0, 0xc, 0x1}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000bd, &(0x7f0000000080)=[{0x20, 0x2, 0x0, 0x8002}, {0xff, 0x0, 0xc, 0x1}]}, 0x10) (async) 2m37.811818834s ago: executing program 5 (id=591): syz_emit_ethernet(0x1d, &(0x7f00000001c0)={@local, @dev, @void, {@x25={0x805, {0x1, 0x50, 0xf, "04d682359c0637af2baa4f5b"}}}}, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x3e) 2m37.810986039s ago: executing program 5 (id=593): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x101801, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@fallback, r0, 0x25, 0x0, 0xffffffffffffffff, @void, @value=r1}, 0x20) close_range(r1, r0, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2c) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180), 0x2) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x7, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20048058) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000480)=0x0) write$cgroup_pid(r1, &(0x7f00000004c0)=r3, 0x12) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000500)={{r1}, "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"}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000035c0), r1) signalfd4(r1, &(0x7f0000003700)={[0x9]}, 0x8, 0x800) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000001) ioctl$CDROMVOLREAD(r1, 0x5313, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) r6 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xffffffff, 0x100000, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) io_uring_enter(r6, 0x44fd, 0x3, 0x1, 0x0, 0x0) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) signalfd4(r9, &(0x7f0000000180), 0x8, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d6174636800000034000280180003000f000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r10, 0x1) 2m37.573232715s ago: executing program 5 (id=597): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6(0x2d, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x11d, 0x20, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, 0x140c, 0x1, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0xfffffffd}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x40080) 2m37.57260627s ago: executing program 5 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x10, 0xf989, "cc11bc4d140c64aae8d4491b"}]}}}}}}}}, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x80}}, 0x50) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1a38) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000140)=ANY=[], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000b80), 0x802480, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES32=r1, @ANYBLOB="2c7766646e6f3d501907d4d255774acf35ffe996409d1d6042b8e3f4d7d45741f075f8e334c8743f7ab293ef5d96ad018ff85430d8f38e2b9b1293ee249b0739f2a85cd913c6af6c0500000000000000a62bb22e632b0bfb48cdfd8ab0d39c63dc22", @ANYRESHEX=r1, @ANYBLOB="2c706f73697861636c68bff98279bbc5984421f8e86ae108c1f06c0cda954c6c27f5deaaa1c0a0197d00d8c137f036f431e2228cd725b20e0eb66810ca7ebe6a54bc28391d88b62251eeb8fb9e9ef660301d807f0716a2c1debae98b1354839f2543a52fd557", @ANYRESDEC=r2, @ANYRES16]) lseek(0xffffffffffffffff, 0x7ff, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x55af) getdents64(r1, &(0x7f0000000340)=""/8, 0x8) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000140)={r6, 0x1, {0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x16, 0x0, "040d25376faadc0e44e24dbcd0d2cbe15774ab21553e04831f8170ee0e1c642c872726156463bdedbe65b4787c9a03467f592c102ae58579b5334cf0a116e3fc", "8b5c6ef408cc782eadfc436c5f6d43f4a4a82458c9898f62976e7e2eb5e00d897bb8fbadb593d84dd29d30f06936ea056e7150a3632f1fa4585b45c518faf687", "0025a9624ea5b2812a66bd2b807d6ab251f4c3a844089494fc6252c67ed18443", [0x7, 0x2]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002680)={0x9, &(0x7f0000002600)=[{0xfffc, 0x3, 0x80, 0x4}, {0x5, 0xa, 0x88}, {0x3, 0x0, 0x0, 0x3}, {0x0, 0x2, 0x6, 0x10001}, {0x6, 0x6, 0x0, 0x4}, {0x5, 0x1, 0x7d, 0xfff}, {0xe680, 0x3, 0xff}, {0xfff7, 0x3, 0xfb, 0xca}, {0x4, 0x9, 0x1, 0xd201}]}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1c000, 0x0, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x6}}, 0x50) read$FUSE(r7, &(0x7f0000000500)={0x2020}, 0x2020) 2m37.473163896s ago: executing program 5 (id=600): memfd_create(0x0, 0x6) (async) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x61}, 0x20) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000400000000000008010000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x0, 0x4, 0x4, 0x3}}, 0x2e) (async) socket(0x26, 0x80801, 0x400001) (async) syz_open_dev$sndpcmc(0x0, 0x4, 0x48000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000700)={0x234, 0x7d, 0x1, {{0x500, 0xf3, 0x0, 0x400, {0x0, 0x0, 0x4}, 0x10000000, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x57, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbb\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\x0eG'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x234) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x7) socket(0x2b, 0x1, 0x1) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff}) (async) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITHAW(r7, 0xc0045878) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000000)='fd', 0x0, r5) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0xb}}}, 0x24}}, 0x800) 2m35.815522652s ago: executing program 5 (id=627): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x8004, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x2, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1ff, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb30, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x2, 0x400}) 2m35.766350389s ago: executing program 34 (id=627): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x8004, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x2, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1ff, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb30, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x2, 0x400}) 2m18.613862923s ago: executing program 2 (id=897): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001700010300000002ffdbdf2517"], 0x14}}, 0x0) 2m18.522984557s ago: executing program 2 (id=898): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000006800010025bd7000feffffff0a00000000000000100008800c00018008000100", @ANYRES32, @ANYBLOB="060007000300000008000500", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) r4 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000001100)={&(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xf5ff, 0x1, &(0x7f0000001140)="b5"}], 0x2}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', &(0x7f00000001c0), 0x200000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') listxattr(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 2m18.34809975s ago: executing program 2 (id=899): prlimit64(0x0, 0x1, &(0x7f0000000100)={0x7fff, 0x10001}, &(0x7f0000000340)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0xa, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="f5abff16db021b", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8891}, 0x6004080) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@deltclass={0x2c, 0x29, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff3, 0x6}, {0x8, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0x7}}]}, 0x2c}}, 0xd4) (async) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x4, {0x9, 0x0, 0x0, 0x7fffffff}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) (async) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async) r5 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r5, 0x107, 0x1, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f00000001c0)) (async) add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) setrlimit(0xf, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000200)={0x110000, 0x0, [0xffffffffffff5500, 0x1, 0x800, 0x0, 0xbe85, 0x7fffffffffffffff, 0x5, 0x100000001]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000460fce232f688d025593f600000000000000020b000a20005e975adf130000000a05000000000000003800000000000000dd000000000000000204000600140000000000000000003567996ca8ab4567000000000000000000000000000000000000000000000040efd7f020e94452e71ee6b622944b08e3758a91ea414664c1b5364c1546934148493f9aba6e08abf835294d6834c6425c99824d5d7082f0556170d2edb7f2fa67248b9eba146b51c155d57d375993ddb7f535800bb1900bdda2d938cb6b8793f8b2ee2068a39be694acbb4f934a78f3c3cfeaad2679"], 0x60}}, 0x804) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2m18.34785883s ago: executing program 2 (id=900): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 2m18.346910338s ago: executing program 2 (id=901): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtclass={0x3c, 0x28, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x3, 0xffe0}, {}, {0x2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xaa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x80082, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x4}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}]}, 0x44}}, 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x748, 0xffff8000}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080) 2m18.197795522s ago: executing program 2 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x10d8020, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB]) 2m18.099575115s ago: executing program 35 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x10d8020, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB]) 1m53.92323413s ago: executing program 0 (id=1314): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e80", 0x3) write$char_usb(r1, &(0x7f0000002600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb", 0x91) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2, 0x1}}, 0x40) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m53.840729447s ago: executing program 0 (id=1316): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = syz_clone(0x42008000, &(0x7f0000000080)="5be2e16d1ddd71aa2b1189145b1986cc2986d44f431f84157f5ec62dd24de4b5a76814e5ce0f40fc3ca769cd63479f0a9e301838ffaffb03faddef2e24b214b14baa4a8e55817305e721b5f02f554b3b353c82d2f9690b6010a15703735721b6e2dcb207fa66285d38cba3a281543df3fb5967229809b57453c9f1a7269b3b4f5cb75a695e06dfda6fdb507d5f83d790b4944323ef4464dc142d21616e4a07a40f07c94b4e", 0xa5, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="3f41ddb1d6766c5411ab08a10cad53ec531d9f4585704ca353b46f08a57343d602af580ed54b90330b58a173ebd19637aef314902b01663810af17ff498eb8ad1bec6935b57dbf2f47c187090654e1adc9d3f855bb17316c9d26897dd6f8ab5b9cbdda16c24a3b2c0fd7ae7b8d9b219e1d16dd0bafe839c68fc9d936c197779ba39c6fcd3f8b06cbf8c18217d98a4b2aee494db8") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r5) add_key(&(0x7f0000000280)='trusted\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="7ab5239e8bef23a4530e10a27f94b448efcd2b325ba82e8b59dc21af424d30f3f46b887e2f2787b10c1e286d17b6b2319f6f1e8ab6a2038e53ac21bfbf2e1c7a12d4caf6ed7b15fa240c716a9e19337bc2b7f338f5af226bf8cb0b4a01b1b55c8316f36f8a1dd09e56cf6a0cf94016b58bcffee859ef4995b4e0c64dd304109eafe668e791fb58f318fa44fcfccf7703d3e837fa20b5e197a1a68804a0ad0aa5cb8dd1d96975ac6cbfb81011a62f8bf2b840a1a78012ae48baaa7b7c643159495600ce", 0xc3, r7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$cgroup_pid(r0, &(0x7f0000000240)=r1, 0x12) 1m53.582896362s ago: executing program 0 (id=1322): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000ffc000/0x2000)=nil, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m53.582464832s ago: executing program 0 (id=1323): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TCSETS(r2, 0x404c4701, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)={0x49c, 0x3f3, 0x0, 0x70bd27, 0x25dfdbfd, {0x6, 0x1, 0x2c, [0x1000, 0x5, 0xe164, 0x4, 0x3, 0x7, 0xfffffffd, 0x6, 0x10, 0x3, 0x200, 0x75e, 0x10000, 0x80000000, 0x7, 0x9, 0x8, 0x3, 0x4, 0xf, 0x16, 0x8, 0x80, 0x7, 0x3, 0x5, 0x2, 0x9, 0x92, 0x4, 0x6, 0x6, 0x1ff, 0x3ff, 0x2, 0x9, 0x5, 0x9, 0x7f, 0x1, 0x0, 0x6, 0x3ff, 0xfffffff9, 0x5, 0x2, 0x0, 0xf7, 0x4, 0x9, 0x7, 0x0, 0x5, 0x4, 0x1, 0x5, 0xe, 0x9, 0xd26, 0x6, 0x6, 0x2, 0xc23, 0x2], [0x6, 0x0, 0x8, 0x8, 0x97, 0xf54, 0x5, 0x1e, 0x9, 0x81, 0x5, 0x73e3, 0x5, 0x21, 0x7, 0x1000, 0x4, 0x6, 0x7, 0x7fe, 0x1, 0x0, 0x2, 0x0, 0x10, 0x6, 0x0, 0x5, 0x1, 0x8, 0x5, 0x4, 0x5, 0x6, 0x84, 0xcb3, 0xfffffffe, 0x1, 0x3, 0x7, 0x6, 0x80400000, 0x9, 0x8, 0x0, 0x4, 0x0, 0x4, 0x4, 0x8, 0x7ff, 0xffff5604, 0x5, 0x7, 0x7fff, 0x3, 0x7fff, 0xfffffffb, 0x8, 0xffffffff, 0xcd, 0x3, 0x7, 0x6c16], [0x4, 0x1, 0x8001, 0x9, 0x40, 0x8, 0xffff, 0x5, 0xc91, 0x5b81, 0x8, 0xd6fc4385, 0x8001, 0xfffffffa, 0x7, 0x0, 0x1c4cd546, 0x2, 0xfffffff9, 0x0, 0x8, 0x7fffffff, 0x4, 0x7, 0x200, 0x7ff, 0x9, 0x5, 0x8b, 0x1, 0x8, 0x6, 0x0, 0x4, 0x1, 0xfffffba2, 0x9, 0x1, 0x100000, 0x8, 0xfffff000, 0xe6, 0xed, 0x1, 0x9, 0xb, 0x0, 0x6, 0xfff, 0x80000000, 0xfffffff8, 0x4, 0x4, 0x80, 0x7fff, 0xffff0001, 0x100, 0xb, 0x2, 0xffffffff, 0xf8f0, 0x5, 0xc5, 0xfff], [0x7fffffff, 0x6f, 0x7fff, 0xcfe, 0xdd67, 0x1, 0x2800, 0x2, 0x7, 0x6, 0x6, 0x3b9b, 0x7, 0x5, 0x0, 0x5, 0x6, 0x10000, 0x7, 0xc6c, 0x660f7499, 0x0, 0x8000, 0x1ff, 0x5, 0x2, 0x10001, 0x10000, 0x9, 0x3, 0x1000, 0x9805, 0x5, 0x2, 0x10000, 0x8000, 0xa, 0x4, 0x9, 0xa, 0x8, 0x5, 0x0, 0xfff, 0xffff8b33, 0x3, 0x6, 0x6f84, 0x9, 0xa, 0x7fff, 0x8001, 0xa, 0x800, 0x9, 0x7, 0x3, 0xaf1, 0x5, 0x2, 0xd3, 0x200, 0x3, 0x800], 0x7b, ['!@%!.\x00', '/dev/snd/midiC#D#\x00', '\xb0\x00\x00\x00$/}\x00f\x01\x96\x0e\x02<7\x86y5}\xaf\xee\xac4(\xaaH\xfe\x83\xe1\x8f\xca\xbd\xf5X\x1b\xe4\xf6\x8f\x9b\x17\x1e\xa5\xc3\x8e\x918\xcfc\xb8\x8c\ah\xf5\x86\x13z\x87=\x96]\xbf\x9b\xb7\xeea\x96\xdf\x13!\n\xc9\xe6}H\xb0\xe2\xbc\xbd\xday\xbe\xf6\xc0\xd1\xc5}\x92\x82\x94`S\xed\x0f\xf9\a\x12\xd3\"\x1e']}, ["", "", "", "", "", ""]}, 0x49c}, 0x1, 0x0, 0x0, 0xc000}, 0x44) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000000, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x40000, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x8040) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r9, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r9, 0x0, 0x4004) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) 1m53.263411212s ago: executing program 0 (id=1324): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r2 = socket$inet(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x46) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='huge=']) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) 1m48.771529443s ago: executing program 0 (id=1376): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffff, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20001, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0xed, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffff, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20001, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0xed, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) 1m48.693207557s ago: executing program 36 (id=1376): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffff, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20001, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0xed, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffff, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20001, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0xed, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) 1m24.700462208s ago: executing program 6 (id=1512): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './cgroup\x00'}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000140)='udf\x00', 0x1214091, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f00000000c0)=@rose) (async) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f00000000c0)=@rose) 1m24.698878204s ago: executing program 6 (id=1515): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) getpeername$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) pread64(r0, &(0x7f0000000000)=""/145, 0x91, 0xed06) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, 0x0, 0x0) (async) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x5, &(0x7f0000000400)={0x2, 0xffffffff, 0x1}) (async) rt_tgsigqueueinfo(r5, r4, 0xe, &(0x7f0000001000)={0x21, 0x8, 0x900}) (async) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) (async) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000300)=0x101, 0x4) (async) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x54) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000040)=0x3ff, 0x4) (async) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000040)=0x8000000) (async) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x1, 0x103, 0x15, 0xfff9}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='dlm_lock_end\x00', r1, 0x0, 0xffffffff80000001}, 0x18) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), r10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r10, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000004c0)={0x50, r11, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe1a8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x44000) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r1) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000200014140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}, 0x1, 0x0, 0x0, 0x10008880}, 0x0) 1m24.632520176s ago: executing program 6 (id=1516): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f00001859c0)={0x0, 0x0}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f88a8", 0x12}, {&(0x7f00000001c0)="b7000000", 0x4}], 0x2) 1m24.459996468s ago: executing program 6 (id=1523): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000080)={0x8, [0x10000, 0x0, 0x1], [{}, {}, {0xf6a}, {0x6, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}, {0x3d1, 0xf788, 0x0, 0x1}, {0x8, 0x1ff, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x40, 0x1}, {0xfff, 0x3, 0x1, 0x1}, {0x986d, 0x8}, {0x8, 0x7f, 0x0, 0x0, 0x1}, {0x800, 0x2, 0x1, 0x0, 0x1}]}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa00000, 0x0) 1m24.350807603s ago: executing program 6 (id=1527): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xffffffff, 0x2}) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) r4 = dup3(r3, r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000004010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000800)={0x9c, 0x0, &(0x7f0000000640)=[@dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/212, 0xd4, 0x1, 0x28}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}, 0x40}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}], 0xfc, 0x0, &(0x7f0000000700)="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"}) syz_emit_ethernet(0xd2, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd602a1c99009c3b"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x0) 1m24.018341412s ago: executing program 6 (id=1533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xef, &(0x7f0000000000)=""/239, 0x40f00, 0x40}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0x44aadcbe) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) 1m23.923258049s ago: executing program 37 (id=1533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xef, &(0x7f0000000000)=""/239, 0x40f00, 0x40}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0x44aadcbe) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) 1m8.171738728s ago: executing program 9 (id=1815): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000cc15678f92a2e17c7f0008000300b78e17ce886498ece58f111ab3787e8c50293f96ff239a5e83713756df9bfea11e12a4703acaef83c8048d557ecd7d85e166089f08fd138b0d2f3835121c7ab7e9d28968ffa53c6e3c7db7981a90972a06d324ad3e22a7079b5caaa8d43df979c47f82a680b4c80b4359e426082c965104d673e4ada62aa5a42194bddbab20454598b7b683b4e5a63623a61f3379464fc00d1e2f0ae3820cfb48", @ANYRES32=r3, @ANYRESOCT=r0], 0x38}}, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) (async) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r4, 0xa8) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r4, 0xa8) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r6, 0xfffffffdffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x806) 1m8.090716351s ago: executing program 9 (id=1816): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = socket(0x11, 0x800000003, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r4, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000080)={{&(0x7f0000000380)={'Accelerator0\x00', {&(0x7f0000000240)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {}, {&(0x7f0000000100)=@adf_hex={@normal='NumberDcInstances\x00', {0x9}}}}}, {&(0x7f0000000300)={'GENERAL\x00'}}}}, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1m8.089156685s ago: executing program 9 (id=1817): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x19, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x20, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1m8.032401968s ago: executing program 9 (id=1819): socket$igmp6(0xa, 0x3, 0x2) io_uring_setup(0x3411, &(0x7f0000000140)={0x0, 0x21f3, 0x842, 0x3, 0x103}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040), &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r2, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}, 0xe6}], 0x1, 0x12103, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000fc0)=@ethtool_ringparam={0x10, 0x403, 0xfffffffa, 0x8, 0xb, 0x3, 0x5, 0x0, 0x1}}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000c00)=[{&(0x7f0000000500)="2b5eea2ff419e572faef904cffd8d2e69f4bdc73288e9f3c9ccf2757b1c29047ed1e6c2d5dee3ea75be0ca96f9a795f970184d62005b70ac3eb17fa8adea73293b9831e6b8de", 0x46}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 1m7.959685419s ago: executing program 9 (id=1821): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000780)={&(0x7f0000000340)=@ipv4_newroute={0x44, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0x1c, 0x2, {0x3c, 0x2, 0x4, 0x1, 0x5, 0xe8, 0xfff, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}]}, 0x44}}, 0x0) futex_waitv(&(0x7f0000002dc0)=[{0xe, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x200, 0x0}, {0x10, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x7fff, 0x0, 0x2}, {0x100000001, 0x0, 0x2}, {0x57e6, 0x0, 0x82}, {0x8000, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0xfff, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x7, &(0x7f0000002140)=0x8, 0x2}, {0x80, &(0x7f0000002180), 0x2}, {0x9, &(0x7f00000021c0)=0xe, 0x2}, {0x3, &(0x7f0000002200)=0x7cd1de08, 0x82}, {0xb8, &(0x7f0000002240)=0x7, 0x2}, {0x9, &(0x7f0000002280)=0x9ff, 0x82}, {0x7fffffffffffffff, 0x0, 0x82}, {0xfffffffffffffffd, 0x0, 0x86}, {0x769, &(0x7f0000002380)=0xffffffffffffffff, 0x2}, {0x1, 0x0, 0x2}, {0xfffffffffffffff8, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0xfffffffffffffff9, 0x0, 0x82}, {0x2, &(0x7f00000025c0)=0x4, 0x2}, {0x5, &(0x7f0000002600)=0x4, 0x2}, {0x6c558f26, &(0x7f0000002680)=0x10001, 0x2}, {0x7, &(0x7f0000002700)=0x4, 0x82}, {0xffffffffffffffff, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x8, &(0x7f0000002840)=0xffff, 0x2}, {0x768d, 0x0, 0x2}, {0x265, 0x0, 0x2}, {0x7fffffff, &(0x7f0000002900)=0xa, 0x82}, {0x84, &(0x7f0000002940)=0xa60, 0x82}, {0x9, 0x0, 0xec5aba831a7e1e25}, {0x9, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0xdef, &(0x7f0000002b00)=0x3, 0x80}, {0x6f, &(0x7f0000002b40)=0x5}, {0x100000001, &(0x7f0000002b80)=0x5, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x1, &(0x7f0000002c40)=0x200, 0x2}, {0x6, 0x0, 0x82}], 0x36, 0x0, &(0x7f0000003680), 0x0) close_range(r0, r0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m7.742898366s ago: executing program 9 (id=1822): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000080)={0x2, 0xffff, @local}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1000420, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) listen(r1, 0x7f) sendto$inet6(r1, &(0x7f00000001c0)='\x00', 0x1, 0x8840, 0x0, 0x0) close(r1) 1m7.640693316s ago: executing program 38 (id=1822): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000080)={0x2, 0xffff, @local}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1000420, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) listen(r1, 0x7f) sendto$inet6(r1, &(0x7f00000001c0)='\x00', 0x1, 0x8840, 0x0, 0x0) close(r1) 4.48520662s ago: executing program 8 (id=2541): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) 4.39095318s ago: executing program 8 (id=2542): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2a800, 0x0) read$FUSE(r0, &(0x7f0000004b40)={0x2020}, 0x2020) 4.311486966s ago: executing program 8 (id=2543): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x0, 0xe, 0x0}) 4.21989188s ago: executing program 8 (id=2545): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)) r0 = syz_open_pts(0xffffffffffffffff, 0x101000) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000000)="66b8ff0000000f23d00f21f866353000000b0f23f80f01cf640fc76800fff40f01d1baf80c66b8b2bf008566efbafc0ced660f38821b363ef00fb19dd900660f383d9f83160fc76ff6"}], 0x1, 0x76, 0x0, 0xfffffffffffffe7f) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.23263147s ago: executing program 4 (id=2551): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000580"], 0x48) 3.232568288s ago: executing program 4 (id=2552): syz_usb_connect(0x2, 0x34, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x30, 0x50, 0xc2, 0x20, 0x3a2d, 0xcb2e, 0xdbed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x0, 0x1, 0xef, 0x4, 0x1, 0x0, [], [{{0x9, 0x5, 0xc, 0x8, 0x20, 0x2, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xffe}]}}]}}]}}]}}, 0x0) 2.808502208s ago: executing program 8 (id=2555): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xb8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) pipe2(&(0x7f00000000c0), 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x40, 0x102, 0x0, 0x10}, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, 0x40400}, 0x0, 0x0, 0x0) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000040)={{{0x3}}, 0x75, 0x2, &(0x7f0000000480)="25422fe41ba1135bd068f140de7c95d88d95b8d2e3c6716043fdf24148fb9233437f56739503550db55632832aa5ef91d5751537bd5803eba63ff86756351a7ba86db69deee1db0392221e733665bdb3bf39b56e6a1554cce98016159be853d4b73666257180f08c9684ea062212bebf320c9b2f43"}) fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) 2.03224212s ago: executing program 4 (id=2556): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x10728, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102375, 0x18fe7) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.629506738s ago: executing program 4 (id=2565): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063113200000000008510000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.629369015s ago: executing program 7 (id=2566): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1000000012002918"], 0x10}}, 0x0) 1.365179137s ago: executing program 7 (id=2567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r2, 0x0) clock_gettime(0x0, &(0x7f0000000340)) keyctl$setperm(0x5, 0x0, 0x52b242d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r4, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x3c}}, 0x40800) 1.305228467s ago: executing program 4 (id=2568): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000040)=0xc0, 0x4) 819.297823ms ago: executing program 7 (id=2570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x9}) 722.420682ms ago: executing program 3 (id=2571): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) fanotify_init(0x8, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="5d003300503cf2001a02110000010802"], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_emit_vhci(&(0x7f0000000e40)=@HCI_ACLDATA_PKT={0x2, {0xbfdce974df38c433, 0x3, 0x2, 0x23}, @l2cap_cid_signaling={{0x1f}, [@l2cap_info_rsp={{0xb, 0x1, 0x4}, {0x1d, 0x681}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x9, 0x6, 0x9}}, @l2cap_conf_rsp={{0x5, 0x9e, 0xa}, {0x401, 0x2, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x200}]}}]}}, 0x28) 722.304188ms ago: executing program 4 (id=2572): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x50) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 632.719102ms ago: executing program 3 (id=2573): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, 0x0) 352.735452ms ago: executing program 3 (id=2574): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x25dfdbfb, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x4}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xc4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x10000000}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) 292.553776ms ago: executing program 7 (id=2575): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netpci0\x00'}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, 0x2, 0xffffffffffffffff, 0x12}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x27800000000, 0x0, 0x4, 0xffffffffffffffff, 0x7}) 292.182687ms ago: executing program 8 (id=2576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000000c0)={0x3, 0x1, 'client1\x00', 0x0, "81cbf3dc07ade253", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x5, 0x800}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) tkill(0x0, 0x7) 292.06163ms ago: executing program 3 (id=2577): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 994.03µs ago: executing program 3 (id=2578): syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xc2}, @timestamp={0x44, 0x2, 0x5, 0x3}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@generic={0x4, 0xf, "d2aaafcb92ca22ff3c72b04727"}, @exp_fastopen={0xfe, 0x8, 0xf989, "0264f0d1"}, @window={0x3, 0x3, 0x2}, @window={0x3, 0x3, 0x9}]}}}}}}}, 0x0) 265.352µs ago: executing program 7 (id=2579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002"], 0x48}}, 0x4000000) 139.068µs ago: executing program 7 (id=2580): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 0s ago: executing program 3 (id=2581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000540)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000009c0), 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000500)) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40) kernel console output (not intermixed with test programs): 164.805612][ T9] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.810372][ T9] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.814898][ T9] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.818787][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.825300][T11328] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 164.831091][ T9] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.336786][ T92] smc: removing ib device syz2 [ 165.343622][ T5978] Bluetooth: hci3: command tx timeout [ 165.500411][T11283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.503304][ T61] vxcan1 speed is unknown, defaulting to 1000 [ 165.508220][ T61] syz2: Port: 1 Link DOWN [ 165.630640][ T61] usb 12-1: USB disconnect, device number 8 [ 165.673915][T11283] team0: Port device team_slave_0 added [ 165.682272][T11283] team0: Port device team_slave_1 added [ 165.761615][ T40] audit: type=1400 audit(5270421486.917:32802): avc: denied { append } for pid=11347 comm="syz.4.1554" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.835330][T11283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.838030][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.851639][T11283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.868276][T11283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.871081][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.882687][T11283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.980055][ T40] audit: type=1800 audit(5270421487.137:32803): pid=11358 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.1555" name="/newroot/351/file0" dev="tmpfs" ino=1888 res=0 errno=0 [ 166.007315][T11283] hsr_slave_0: entered promiscuous mode [ 166.009365][T11283] hsr_slave_1: entered promiscuous mode [ 166.011315][T11283] debugfs: 'hsr0' already exists in 'hsr' [ 166.012928][T11283] Cannot create hsr debugfs directory [ 166.170555][T11366] netlink: 'syz.7.1557': attribute type 3 has an invalid length. [ 166.208040][T11283] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 166.219565][T11283] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 166.254027][T11370] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 166.256252][T11283] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 166.267433][T11283] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 166.313296][T11386] vivid-004: disconnect [ 166.317679][T11386] vivid-004: reconnect [ 166.321293][T11386] gfs2: not a GFS2 filesystem [ 166.328714][T11283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.338535][T11385] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 166.349146][T11283] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.356999][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.357049][ T40] audit: type=1400 audit(5270421487.517:32804): avc: denied { view } for pid=11387 comm="syz.7.1564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 166.359408][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.378099][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.380136][ T5075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.380851][T11390] tmpfs: Bad value for 'mpol' [ 166.444191][ T40] audit: type=1400 audit(5270421487.607:32805): avc: denied { append } for pid=11393 comm="syz.4.1566" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 166.501431][T11283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.506029][T11403] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 166.508354][T11403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.642220][T11283] veth0_vlan: entered promiscuous mode [ 166.649622][T11283] veth1_vlan: entered promiscuous mode [ 166.668453][T11283] veth0_macvtap: entered promiscuous mode [ 166.672232][T11283] veth1_macvtap: entered promiscuous mode [ 166.676841][T11422] sctp: [Deprecated]: syz.7.1573 (pid 11422) Use of int in max_burst socket option. [ 166.676841][T11422] Use struct sctp_assoc_value instead [ 166.683244][T11283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.691356][T11283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.699017][ T71] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.701915][ T71] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.705636][ T71] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.708428][ T71] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.742018][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.747010][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.761078][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.764559][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.873455][ T6033] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 166.895829][T11435] bridge_slave_0: left allmulticast mode [ 166.897746][T11435] bridge_slave_0: left promiscuous mode [ 166.899982][T11435] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.905923][T11435] bridge_slave_1: left allmulticast mode [ 166.908398][T11435] bridge_slave_1: left promiscuous mode [ 166.910919][T11435] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.917680][T11435] bond0: (slave bond_slave_0): Releasing backup interface [ 166.922225][T11435] bond0: (slave bond_slave_1): Releasing backup interface [ 166.934346][T11435] team0: Port device team_slave_0 removed [ 166.942057][T11435] team0: Port device team_slave_1 removed [ 166.944878][T11435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.947220][T11435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.950821][T11435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.955417][T11435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.976275][T11437] team0: Mode changed to "random" [ 166.986730][T11435] vlan0: entered promiscuous mode [ 166.995238][T11435] team0: Port device vlan0 added [ 166.998745][T11435] tipc: Started in network mode [ 167.000281][T11435] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 167.002667][T11435] tipc: Enabled bearer , priority 0 [ 167.025137][ T6033] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 167.027791][ T6033] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.029916][T11439] overlayfs: failed to resolve './file1': -2 [ 167.031926][ T6033] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 167.037847][ T6033] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 167.040672][ T6033] usb 9-1: Manufacturer: syz [ 167.041993][ T40] audit: type=1400 audit(5270421488.207:32806): avc: denied { write } for pid=11438 comm="syz.9.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 167.045086][ T6033] usb 9-1: config 0 descriptor?? [ 167.076032][T11442] nfs4: Unknown parameter 'usrquota' [ 167.078365][T11442] tipc: Started in network mode [ 167.080036][T11442] tipc: Node identity 3ee6b7921cf6, cluster identity 4711 [ 167.082650][T11442] tipc: Enabled bearer , priority 0 [ 167.089827][T11441] tipc: Disabling bearer [ 167.093622][ T6033] rc_core: IR keymap rc-hauppauge not found [ 167.095940][ T6033] Registered IR keymap rc-empty [ 167.098475][ T6033] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 167.102992][ T6033] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input28 [ 167.234533][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 167.237042][ T1114] ata1: failed to read log page 10h (errno=-5) [ 167.239380][ T1114] ata1.00: exception Emask 0x1 SAct 0x1000 SErr 0x0 action 0x0 [ 167.242186][ T1114] ata1.00: irq_stat 0x40000000 [ 167.244278][ T1114] ata1.00: failed command: WRITE FPDMA QUEUED [ 167.246640][ T1114] ata1.00: cmd 61/60:60:b6:0b:10/00:00:00:00:00/40 tag 12 ncq dma 49152 out [ 167.246640][ T1114] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 167.252600][ T1114] ata1.00: status: { DRDY } [ 167.256908][ T1114] ata1.00: configured for UDMA/100 [ 167.259276][ T1114] ata1: EH complete [ 167.263197][T11451] __nla_validate_parse: 13 callbacks suppressed [ 167.263206][T11451] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1582'. [ 167.269291][T11453] usb usb8: usbfs: process 11453 (syz.9.1582) did not claim interface 0 before use [ 167.320006][T11457] trusted_key: encrypted_key: insufficient parameters specified [ 167.325353][T11457] trusted_key: encrypted_key: insufficient parameters specified [ 167.328766][T11450] trusted_key: encrypted_key: insufficient parameters specified [ 167.336433][T11456] No control pipe specified [ 167.417407][ T5978] Bluetooth: hci3: command tx timeout [ 167.455260][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1584'. [ 167.519708][T11467] netlink: 'syz.7.1585': attribute type 39 has an invalid length. [ 167.542466][ T40] audit: type=1400 audit(5270421488.697:32807): avc: denied { write } for pid=11468 comm="syz.9.1586" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.738183][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1593'. [ 167.794511][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1595'. [ 167.803486][ T6032] usb 14-1: new full-speed USB device number 2 using dummy_hcd [ 167.955082][ T6032] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 167.958574][ T6032] usb 14-1: config 0 has no interface number 0 [ 167.961204][ T6032] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.966336][ T6032] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 167.971121][ T6032] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 167.975968][ T6032] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 167.980355][ T6032] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.985838][ T6032] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 167.989028][ T6032] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.992923][ T6032] usb 14-1: config 0 descriptor?? [ 167.996673][ T840] tipc: Node number set to 11578026 [ 167.999621][T11473] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 168.004847][ T6032] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 168.207657][T11473] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 168.209973][T11473] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.212512][T11473] vhci_hcd vhci_hcd.0: Device attached [ 168.215333][T11506] vhci_hcd: cannot find the pending unlink 255 [ 168.393555][ T10] vhci_hcd: vhci_device speed not set [ 168.457667][ T10] usb 55-1: new full-speed USB device number 2 using vhci_hcd [ 169.149708][T11500] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 169.151668][T11500] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 169.153792][T11500] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 169.157425][T11500] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 169.160216][T11503] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 169.162076][T11473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.167570][T11473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.170203][T11506] vhci_hcd: connection reset by peer [ 169.170595][ T6604] usb 14-1: USB disconnect, device number 2 [ 169.177709][ T6604] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 169.178892][ T5075] vhci_hcd: stop threads [ 169.181188][ T5075] vhci_hcd: release socket [ 169.182592][ T5075] vhci_hcd: disconnect device [ 169.184653][T11511] trusted_key: encrypted_key: insufficient parameters specified [ 169.264409][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1598'. [ 169.399741][ T40] audit: type=1400 audit(5270421490.557:32808): avc: denied { mount } for pid=11512 comm="syz.7.1597" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 169.400885][T11513] overlayfs: failed to resolve './file1': -2 [ 169.432081][ T40] audit: type=1400 audit(5270421490.587:32809): avc: denied { unmount } for pid=9182 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 169.497648][T11526] team0 (unregistering): Port device team_slave_0 removed [ 169.504110][T11531] selinux_netlink_send: 3 callbacks suppressed [ 169.504120][T11531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=11531 comm=syz.7.1601 [ 169.504845][T11526] team0 (unregistering): Port device team_slave_1 removed [ 169.506000][T11531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=11531 comm=syz.7.1601 [ 169.506015][T11531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=11531 comm=syz.7.1601 [ 169.506027][T11531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=11531 comm=syz.7.1601 [ 169.506039][T11531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=11531 comm=syz.7.1601 [ 169.506744][T11531] netlink: 'syz.7.1601': attribute type 1 has an invalid length. [ 169.593616][ T3566] usb 9-1: USB disconnect, device number 20 [ 169.710096][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1603'. [ 169.710657][ T40] audit: type=1326 audit(5270421490.867:32810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11536 comm="syz.4.1602" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fdc31785ba7 code=0x0 [ 169.850558][T11552] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1608'. [ 169.885006][T11555] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.1609'. [ 169.893497][ T5978] Bluetooth: hci0: command 0x0419 tx timeout [ 169.929067][ T40] audit: type=1400 audit(5270421491.087:32811): avc: denied { write } for pid=11556 comm="syz.9.1610" path="socket:[47257]" dev="sockfs" ino=47257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 170.120870][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1614'. [ 170.129565][ T40] audit: type=1400 audit(5270421491.297:32812): avc: denied { accept } for pid=11567 comm="syz.9.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 170.140055][ T40] audit: type=1400 audit(5270421491.297:32813): avc: denied { ioctl } for pid=11567 comm="syz.9.1614" path="socket:[47264]" dev="sockfs" ino=47264 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 170.191946][T11582] binder: 11581:11582 ioctl c018620c 200000000000 returned -22 [ 170.217663][T11586] new mount options do not match the existing superblock, will be ignored [ 170.545483][T11618] tmpfs: Unknown parameter 'huge' [ 170.633526][T11636] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(1) [ 170.635726][T11636] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 170.638324][T11636] vhci_hcd vhci_hcd.0: Device attached [ 170.640464][T11639] usbip_core: unknown command [ 170.642253][T11639] vhci_hcd: unknown pdu 421515382 [ 170.645810][T11639] usbip_core: unknown command [ 170.647512][ T1236] vhci_hcd: stop threads [ 170.649222][ T1236] vhci_hcd: release socket [ 170.650801][ T1236] vhci_hcd: disconnect device [ 170.696652][ T40] audit: type=1400 audit(5270421491.857:32814): avc: denied { bind } for pid=11608 comm="syz.7.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.853416][ T1466] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 171.003571][ T1466] usb 9-1: Using ep0 maxpacket: 16 [ 171.011838][ T1466] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.017461][ T1466] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.021352][ T1466] usb 9-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 171.024549][ T1466] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.029846][ T1466] usb 9-1: config 0 descriptor?? [ 171.117045][ T6032] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 171.173521][ T5978] Bluetooth: hci3: command 0x0419 tx timeout [ 171.232998][T11655] openvswitch: netlink: IP tunnel dst address not specified [ 171.274923][ T6032] usb 14-1: Using ep0 maxpacket: 8 [ 171.278303][ T6032] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.281055][ T6032] usb 14-1: config 0 has no interface number 0 [ 171.284728][ T6032] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.288234][ T6032] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.291886][ T6032] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.326675][ T6032] usb 14-1: config 0 descriptor?? [ 171.331399][ T6032] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 171.398663][T11665] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1645'. [ 171.446539][ T1466] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5012.0009/input/input29 [ 171.507890][ T1466] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5012.0009/input/input30 [ 171.550247][ T9] usb 14-1: USB disconnect, device number 3 [ 171.568097][ T1466] kye 0003:0458:5012.0009: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 171.640682][T11689] overlayfs: workdir and upperdir must reside under the same mount [ 171.645818][ T3566] usb 9-1: USB disconnect, device number 21 [ 171.766941][T11685] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 171.851669][ T40] audit: type=1326 audit(5270421493.007:32815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.7.1653" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25ccd8ebe9 code=0x0 [ 171.870298][T11708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=11708 comm=syz.9.1656 [ 171.890102][T11708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.982751][T11719] netlink: 'syz.9.1659': attribute type 5 has an invalid length. [ 172.226319][T11746] 9pnet_virtio: no channels available for device syz [ 172.229643][ T40] audit: type=1400 audit(5270421493.387:32816): avc: denied { mounton } for pid=11744 comm="syz.9.1668" path="/39/file0" dev="9p" ino=35913812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.301276][T11750] netlink: 'syz.7.1667': attribute type 4 has an invalid length. [ 172.325127][ T5978] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 172.347830][T11759] __nla_validate_parse: 6 callbacks suppressed [ 172.347841][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1671'. [ 172.405690][T11770] syzkaller1: entered promiscuous mode [ 172.407946][T11770] syzkaller1: entered allmulticast mode [ 172.434592][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1676'. [ 172.476896][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1677'. [ 172.503279][T11768] kvm: kvm [11767]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 172.506658][T11768] kvm: kvm [11767]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 172.635249][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 172.635264][ T40] audit: type=1400 audit(5270421493.797:32822): avc: denied { associate } for pid=11779 comm="syz.8.1678" name="blkio.bfq.io_wait_time" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 172.655312][T11781] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 172.686163][T11789] binder: 11788:11789 ioctl c0306201 200000000040 returned -22 [ 172.745567][ T40] audit: type=1400 audit(5270421493.907:32823): avc: denied { read write } for pid=11787 comm="syz.7.1681" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 172.753930][ T40] audit: type=1400 audit(5270421493.907:32824): avc: denied { open } for pid=11787 comm="syz.7.1681" path="/178/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 172.761204][T11796] netlink: 'syz.8.1683': attribute type 1 has an invalid length. [ 172.780720][ T40] audit: type=1400 audit(5270421493.937:32825): avc: denied { name_bind } for pid=11792 comm="syz.9.1682" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 172.781405][T11796] bond1: (slave geneve3): making interface the new active one [ 172.789618][T11796] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 172.792364][ T71] netdevsim netdevsim8 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 172.794559][T11800] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1684'. [ 172.798856][ T92] netdevsim netdevsim8 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 172.802281][ T92] netdevsim netdevsim8 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 172.806366][ T92] netdevsim netdevsim8 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 172.819679][T11798] delete_channel: no stack [ 172.820852][ T40] audit: type=1804 audit(5270421493.977:32826): pid=11805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.1686" name="/newroot/73/file0" dev="tmpfs" ino=400 res=1 errno=0 [ 172.821334][T11798] delete_channel: no stack [ 172.848882][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1687'. [ 172.891707][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1690'. [ 172.931557][T11824] sctp: [Deprecated]: syz.8.1692 (pid 11824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.931557][T11824] Use struct sctp_sack_info instead [ 173.002264][ T40] audit: type=1404 audit(5270421494.157:32827): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 173.011965][ T40] audit: type=1404 audit(5270421494.167:32828): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 173.023507][ T40] audit: type=1400 audit(5270421494.177:32829): avc: denied { read write } for pid=11283 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.035870][ T5978] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 173.038842][ T40] audit: type=1400 audit(5270421494.177:32830): avc: denied { open } for pid=11283 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.050961][ T40] audit: type=1400 audit(5270421494.177:32831): avc: denied { ioctl } for pid=11283 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.088065][T11855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1701'. [ 173.101786][T11858] SELinux: Context /usr/sbin/cups-browsed is not valid (left unmapped). [ 173.110523][T11852] netlink: 212892 bytes leftover after parsing attributes in process `syz.9.1700'. [ 173.140872][T11865] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1704'. [ 173.253443][ T5978] Bluetooth: hci3: command 0x0419 tx timeout [ 173.308110][T11887] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1710'. [ 173.322762][T11879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11879 comm=syz.8.1708 [ 173.351402][T11889] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 173.393446][ T9] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 173.557248][ T9] usb 14-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.560967][ T9] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.564186][ T10] vhci_hcd: vhci_device speed not set [ 173.566057][ T9] usb 14-1: Product: syz [ 173.567444][ T9] usb 14-1: Manufacturer: syz [ 173.568998][ T9] usb 14-1: SerialNumber: syz [ 173.574555][ T9] usb 14-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.587352][ T9] usb 14-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 174.013128][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.044225][T11928] netlink: 'syz.4.1723': attribute type 1 has an invalid length. [ 174.303503][ T9226] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 174.341205][T11866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.344363][T11866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.473587][ T9226] usb 12-1: Using ep0 maxpacket: 32 [ 174.477840][ T9226] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 174.480711][ T9226] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 174.484286][ T9226] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 174.488375][ T9226] usb 12-1: config 0 interface 0 has no altsetting 0 [ 174.492343][ T9226] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 174.496016][ T9226] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 174.498624][ T9226] usb 12-1: Product: syz [ 174.500003][ T9226] usb 12-1: Manufacturer: syz [ 174.501517][ T9226] usb 12-1: SerialNumber: syz [ 174.505091][ T9226] usb 12-1: config 0 descriptor?? [ 174.508589][ T9226] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 174.512759][ T9226] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 174.544928][T11955] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 174.560478][T11967] netlink: 'syz.4.1738': attribute type 7 has an invalid length. [ 174.613857][ T9] ath9k_htc 14-1:1.0: ath9k_htc: Target is unresponsive [ 174.616241][ T9] ath9k_htc: Failed to initialize the device [ 174.636230][ T9] usb 14-1: ath9k_htc: USB layer deinitialized [ 174.651415][T11973] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.669849][T11976] delete_channel: no stack [ 174.702562][T11978] Bluetooth: hci0: service_discovery: too big uuid_count value 30195 [ 174.719473][ T6032] usb 12-1: USB disconnect, device number 9 [ 174.722632][ T6032] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 174.810152][ T6007] libceph: connect (1)[c::]:6789 error -1 [ 174.812709][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 174.833617][ T9226] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 174.860133][ T3566] libceph: connect (1)[c::]:6789 error -1 [ 174.861984][ T3566] libceph: mon0 (1)[c::]:6789 connect error [ 174.973399][ T9226] usb 13-1: device descriptor read/64, error -71 [ 175.076948][ T6033] libceph: connect (1)[c::]:6789 error -1 [ 175.079547][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 175.123914][ T3566] libceph: connect (1)[c::]:6789 error -1 [ 175.126538][ T3566] libceph: mon0 (1)[c::]:6789 connect error [ 175.214032][ T9226] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 175.323890][T11992] tmpfs: Unknown parameter ' ' [ 175.333637][ T5981] Bluetooth: hci3: command 0x0419 tx timeout [ 175.343546][ T9226] usb 13-1: device descriptor read/64, error -71 [ 175.347898][ T9] usb 14-1: USB disconnect, device number 4 [ 175.396298][T11999] lo: entered allmulticast mode [ 175.457875][T11999] geneve2: entered promiscuous mode [ 175.459675][T11999] geneve2: entered allmulticast mode [ 175.463957][ T9226] usb usb13-port1: attempt power cycle [ 175.512994][T12002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12002 comm=syz.9.1750 [ 175.562460][T11998] lo: left allmulticast mode [ 175.604136][ T6033] libceph: connect (1)[c::]:6789 error -1 [ 175.606787][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 175.631396][T11980] ceph: No mds server is up or the cluster is laggy [ 175.632035][T11983] ceph: No mds server is up or the cluster is laggy [ 175.635432][ T3566] libceph: connect (1)[c::]:6789 error -1 [ 175.638908][ T3566] libceph: mon0 (1)[c::]:6789 connect error [ 175.805165][ T9226] usb 13-1: new full-speed USB device number 5 using dummy_hcd [ 175.806048][T12025] kvm: user requested TSC rate below hardware speed [ 175.810209][T12046] 9p filesystem being mounted at /382/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 175.826056][ T9226] usb 13-1: device descriptor read/8, error -71 [ 175.969598][T12060] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 176.007370][T12064] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 176.021175][T12064] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 176.063839][ T9226] usb 13-1: new full-speed USB device number 6 using dummy_hcd [ 176.085494][ T9226] usb 13-1: device descriptor read/8, error -71 [ 176.203817][ T9226] usb usb13-port1: unable to enumerate USB device [ 176.602495][T12098] program syz.4.1777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.772776][T12112] netlink: 'syz.9.1782': attribute type 3 has an invalid length. [ 176.779173][T12112] netlink: 'syz.9.1782': attribute type 1 has an invalid length. [ 176.782529][T12112] NCSI netlink: No device for ifindex 33022 [ 176.853448][ T5330] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 176.853603][ T5978] Bluetooth: hci0: command 0x0419 tx timeout [ 177.193641][ T6033] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 177.355389][ T6033] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 177.358786][ T6033] usb 9-1: config 0 has no interface number 0 [ 177.361431][ T6033] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.366277][ T6033] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 177.370630][ T6033] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 177.375175][ T6033] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 177.379244][ T6033] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 177.383215][ T6033] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.388609][ T6033] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 177.392259][ T6033] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.396888][ T6033] usb 9-1: config 0 descriptor?? [ 177.400108][T12129] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.405972][ T6033] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 177.413782][ T5978] Bluetooth: hci3: command 0x0419 tx timeout [ 177.622576][ T6007] usb 9-1: USB disconnect, device number 22 [ 177.628288][ T6007] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 177.650871][ T40] kauditd_printk_skb: 170 callbacks suppressed [ 177.650888][ T40] audit: type=1400 audit(5270421498.807:33002): avc: denied { ioctl } for pid=12134 comm="syz.4.1788" path="socket:[49484]" dev="sockfs" ino=49484 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 177.714589][ T40] audit: type=1400 audit(5270421498.877:33003): avc: denied { connect } for pid=12131 comm="syz.8.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 177.752232][ T40] audit: type=1400 audit(5270421498.907:33004): avc: denied { read write } for pid=12140 comm="syz.4.1791" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.762530][ T40] audit: type=1400 audit(5270421498.907:33005): avc: denied { open } for pid=12140 comm="syz.4.1791" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.805237][T12144] __nla_validate_parse: 16 callbacks suppressed [ 177.805249][T12144] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1792'. [ 177.809733][T12145] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1792'. [ 177.866176][ T40] audit: type=1400 audit(5270421499.027:33006): avc: denied { create } for pid=12148 comm="syz.4.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.874122][ T40] audit: type=1400 audit(5270421499.037:33007): avc: denied { write } for pid=12148 comm="syz.4.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.880889][ T40] audit: type=1400 audit(5270421499.037:33008): avc: denied { listen } for pid=12131 comm="syz.8.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 177.890753][ T40] audit: type=1400 audit(5270421499.057:33009): avc: denied { accept } for pid=12131 comm="syz.8.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 178.115491][ T40] audit: type=1400 audit(5270421499.277:33010): avc: denied { create } for pid=12164 comm="syz.4.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.126296][ T40] audit: type=1400 audit(5270421499.287:33011): avc: denied { read write } for pid=12164 comm="syz.4.1795" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 178.145691][T12165] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 178.489846][T12184] vxcan1: tx drop: invalid da for name 0x0000000000000016 [ 178.577166][T12195] veth1_macvtap: entered allmulticast mode [ 178.622656][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.628458][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.629599][T12206] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1803'. [ 178.631062][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.636454][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.639038][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.641564][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.645514][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.648407][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.651047][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.653964][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.656371][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.658439][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.660801][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.662903][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.665283][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.667544][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.669730][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.672084][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.674503][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.677065][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.679590][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.682223][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.685873][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.688331][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.690859][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.698495][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.700959][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.703181][T12216] overlayfs: empty lowerdir [ 178.704234][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.707845][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.710840][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.710892][T12216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1810'. [ 178.713510][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.719492][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.719723][T12218] syz.9.1811: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 178.722113][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.726941][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.728816][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.731060][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.732993][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.736703][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.738736][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.740910][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.746064][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.748593][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.750109][T12220] nftables ruleset with unbound set [ 178.751158][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.757580][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.760252][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.762246][T12204] hugetlbfs: Unknown parameter 'inode32' [ 178.766917][T12222] netlink: 'syz.4.1813': attribute type 10 has an invalid length. [ 178.775603][T12222] hsr_slave_0: left promiscuous mode [ 178.779630][T12222] hsr_slave_1: left promiscuous mode [ 178.867477][T12231] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1817'. [ 179.103469][ T6032] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 179.173450][ T840] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 179.263651][ T6032] usb 12-1: Using ep0 maxpacket: 8 [ 179.267514][ T6032] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 179.270877][ T6032] usb 12-1: config 0 has no interface number 0 [ 179.274131][ T6032] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 179.278578][ T6032] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 179.283216][ T6032] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.287682][ T6032] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 179.292911][ T6032] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 179.296698][ T6032] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.301889][ T6032] usb 12-1: config 0 descriptor?? [ 179.308527][ T6032] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 179.326913][ T840] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 179.330739][ T840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.335627][ T840] usb 9-1: Product: syz [ 179.337436][ T840] usb 9-1: Manufacturer: syz [ 179.339266][ T840] usb 9-1: SerialNumber: syz [ 179.345443][ T840] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 179.360081][ T840] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 179.472540][ T5330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.478211][ T5330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.481811][ T5330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.486503][ T5330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.489500][ T5330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.511683][ T6033] usb 12-1: USB disconnect, device number 10 [ 179.520135][ T6033] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 179.652889][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1826'. [ 179.656403][T12243] chnl_net:caif_netlink_parms(): no params data found [ 179.731696][T12243] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.734233][T12243] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.736556][T12243] bridge_slave_0: entered allmulticast mode [ 179.739207][T12243] bridge_slave_0: entered promiscuous mode [ 179.742782][T12243] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.745791][T12243] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.748286][T12243] bridge_slave_1: entered allmulticast mode [ 179.750881][T12243] bridge_slave_1: entered promiscuous mode [ 179.786578][T12243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.791639][T12243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.821938][T12243] team0: Port device team_slave_0 added [ 179.826221][T12243] team0: Port device team_slave_1 added [ 179.860046][T12243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.862312][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.870641][T12243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.877344][T12243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.880105][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.890155][T12243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.930240][T12243] hsr_slave_0: entered promiscuous mode [ 179.932817][T12243] hsr_slave_1: entered promiscuous mode [ 180.127076][T12260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.130296][T12260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.134812][T12260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.138794][T12260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.373881][ T840] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 180.376361][ T840] ath9k_htc: Failed to initialize the device [ 180.420201][ T840] usb 9-1: ath9k_htc: USB layer deinitialized [ 180.426587][ T9226] usb 9-1: USB disconnect, device number 23 [ 180.484726][T12243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 180.489425][T12243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.493764][T12243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.501179][T12243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.514129][T12298] PM: Enabling pm_trace changes system date and time during resume. [ 180.514129][T12298] PM: Correct system time has to be restored manually after resume. [ 180.558834][T12243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.567758][T12243] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.576171][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.578628][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.585017][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.587394][ T5075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.632466][T12303] 9pnet_virtio: no channels available for device ./file0 [ 180.652266][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1833'. [ 180.781051][T12243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.803117][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1834'. [ 180.833435][T12243] veth0_vlan: entered promiscuous mode [ 180.841645][T12243] veth1_vlan: entered promiscuous mode [ 180.893991][T12243] veth0_macvtap: entered promiscuous mode [ 180.903289][T12243] veth1_macvtap: entered promiscuous mode [ 180.904854][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1836'. [ 180.922627][T12243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.932619][T12243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.942103][ T5075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.947186][ T92] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.007366][ T1155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.011194][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.069420][T12361] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1840'. [ 181.088687][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.091876][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.117155][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.120198][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.225587][T12391] pimreg: entered allmulticast mode [ 181.262114][T12383] kvm: emulating exchange as write [ 181.526745][T12442] vxcan1: tx address claim with dlc 0 [ 181.537733][T12425] netlink: 'syz.3.1849': attribute type 1 has an invalid length. [ 181.573591][ T5978] Bluetooth: hci3: command tx timeout [ 181.786371][T12465] netlink: 'syz.4.1854': attribute type 4 has an invalid length. [ 182.150793][T12500] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.347296][T12513] bridge1: entered promiscuous mode [ 182.356879][T12513] bridge2: entered promiscuous mode [ 182.367654][T12513] bridge3: entered promiscuous mode [ 182.374366][T12513] bridge4: entered promiscuous mode [ 182.385633][T12513] bridge5: entered promiscuous mode [ 182.392237][T12513] bridge6: entered promiscuous mode [ 182.400502][T12513] bridge7: entered promiscuous mode [ 182.407441][T12513] bridge8: entered promiscuous mode [ 182.413935][T12513] bridge9: entered promiscuous mode [ 182.422532][T12513] bridge10: entered promiscuous mode [ 182.429504][T12513] bridge11: entered promiscuous mode [ 182.436280][T12513] bridge12: entered promiscuous mode [ 182.445122][T12513] bridge13: entered promiscuous mode [ 182.456055][T12513] bridge14: entered promiscuous mode [ 182.463078][T12513] bridge15: entered promiscuous mode [ 182.471504][T12513] bridge16: entered promiscuous mode [ 182.479661][T12513] bridge17: entered promiscuous mode [ 182.487878][T12513] bridge18: entered promiscuous mode [ 182.490144][T12518] netlink: 'syz.7.1869': attribute type 1 has an invalid length. [ 182.495016][T12513] bridge19: entered promiscuous mode [ 182.514481][T12513] bridge20: entered promiscuous mode [ 182.521812][T12513] bridge21: entered promiscuous mode [ 182.529713][T12513] bridge22: entered promiscuous mode [ 182.537165][T12513] bridge23: entered promiscuous mode [ 182.547729][T12513] bridge24: entered promiscuous mode [ 182.558171][T12513] bridge25: entered promiscuous mode [ 182.568454][T12513] bridge26: entered promiscuous mode [ 182.577670][T12513] bridge27: entered promiscuous mode [ 182.585364][T12513] bridge28: entered promiscuous mode [ 182.591975][T12513] bridge29: entered promiscuous mode [ 182.599677][T12513] bridge30: entered promiscuous mode [ 182.606688][T12513] bridge31: entered promiscuous mode [ 182.616519][T12513] bridge32: entered promiscuous mode [ 182.624608][T12513] bridge33: entered promiscuous mode [ 182.632042][T12513] bridge34: entered promiscuous mode [ 182.640777][T12513] bridge35: entered promiscuous mode [ 182.648630][T12513] bridge36: entered promiscuous mode [ 182.660161][T12513] bridge37: entered promiscuous mode [ 182.672217][T12513] bridge38: entered promiscuous mode [ 182.684924][T12513] bridge39: entered promiscuous mode [ 182.692522][T12513] bridge40: entered promiscuous mode [ 182.700040][T12513] bridge41: entered promiscuous mode [ 182.709340][T12513] bridge42: entered promiscuous mode [ 182.718910][T12513] bridge43: entered promiscuous mode [ 182.734290][T12513] bridge44: entered promiscuous mode [ 182.745121][T12513] bridge45: entered promiscuous mode [ 182.752495][T12513] bridge46: entered promiscuous mode [ 182.760001][T12513] bridge47: entered promiscuous mode [ 182.769134][T12513] bridge48: entered promiscuous mode [ 182.777218][T12513] bridge49: entered promiscuous mode [ 182.784630][T12513] bridge50: entered promiscuous mode [ 182.795097][T12513] bridge51: entered promiscuous mode [ 182.807853][T12513] bridge52: entered promiscuous mode [ 182.821834][T12513] bridge53: entered promiscuous mode [ 182.830726][T12513] bridge54: entered promiscuous mode [ 182.838959][T12513] bridge55: entered promiscuous mode [ 182.846072][T12513] bridge56: entered promiscuous mode [ 182.855187][T12513] bridge57: entered promiscuous mode [ 182.862121][T12513] bridge58: entered promiscuous mode [ 182.868896][T12513] bridge59: entered promiscuous mode [ 182.879448][T12513] bridge60: entered promiscuous mode [ 182.890579][T12513] bridge61: entered promiscuous mode [ 182.901239][T12513] bridge62: entered promiscuous mode [ 182.914416][T12513] bridge63: entered promiscuous mode [ 182.925796][T12513] bridge64: entered promiscuous mode [ 182.939974][T12513] bridge65: entered promiscuous mode [ 182.978779][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 182.978800][ T40] audit: type=1400 audit(5270421504.137:33108): avc: denied { append } for pid=12528 comm="syz.4.1873" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.990562][ T40] audit: type=1400 audit(5270421504.137:33109): avc: denied { ioctl } for pid=12528 comm="syz.4.1873" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.001453][T12529] fuse: Bad value for 'user_id' [ 183.005414][T12529] fuse: Bad value for 'user_id' [ 183.007660][ T40] audit: type=1400 audit(5270421504.157:33110): avc: denied { set_context_mgr } for pid=12531 comm="syz.3.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 183.124434][ T40] audit: type=1400 audit(5270421504.287:33111): avc: denied { execute_no_trans } for pid=12545 comm="syz.3.1879" path="/7/file2" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.134900][T12548] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 183.140256][ T40] audit: type=1400 audit(5270421504.297:33112): avc: denied { associate } for pid=12546 comm="syz.4.1878" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 183.176859][T12550] __nla_validate_parse: 7 callbacks suppressed [ 183.176875][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1880'. [ 183.187693][T12550] netlink: 'syz.3.1880': attribute type 1 has an invalid length. [ 183.191049][T12550] netlink: 'syz.3.1880': attribute type 2 has an invalid length. [ 183.233060][ T40] audit: type=1400 audit(5270421504.387:33113): avc: denied { read write } for pid=12556 comm="syz.3.1882" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 183.246249][ T40] audit: type=1400 audit(5270421504.387:33114): avc: denied { open } for pid=12556 comm="syz.3.1882" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 183.279067][ T40] audit: type=1400 audit(5270421504.437:33115): avc: denied { name_bind } for pid=12558 comm="syz.4.1883" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 183.518464][ T40] audit: type=1400 audit(5270421504.677:33116): avc: denied { write } for pid=12569 comm="syz.3.1887" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 183.525254][T12570] Can't find a SQUASHFS superblock on nullb0 [ 183.561932][ T40] audit: type=1400 audit(5270421504.717:33117): avc: denied { ioctl } for pid=12573 comm="syz.3.1889" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x510a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 183.653894][ T5978] Bluetooth: hci3: command tx timeout [ 183.699406][T12591] kernel read not supported for file /policy (pid: 12591 comm: syz.4.1894) [ 183.793565][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'. [ 184.062374][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 184.949547][T12632] ceph: No source [ 185.052763][T12638] netlink: 'syz.3.1907': attribute type 1 has an invalid length. [ 185.111986][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1907'. [ 185.115091][T12639] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 185.117426][T12639] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 185.166721][T12643] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1908'. [ 185.230368][T12657] syzkaller0: entered promiscuous mode [ 185.232539][T12657] syzkaller0: entered allmulticast mode [ 185.259319][T12659] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1912'. [ 185.285929][T12655] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.289273][T12655] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.292371][T12655] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 185.408424][T12655] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.412645][T12655] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.418360][T12655] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 185.421768][ T3566] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 185.488876][T12655] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.491913][T12655] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.495288][T12655] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 185.599441][T12655] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.603773][ T3566] usb 9-1: Using ep0 maxpacket: 8 [ 185.603780][T12655] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.607418][ T3566] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 185.609113][T12655] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 185.618046][ T3566] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 185.622244][ T3566] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.626935][ T3566] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.632146][ T3566] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.636071][ T3566] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.733420][ T5075] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 185.737183][ T5075] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.740074][ T5075] netdevsim netdevsim8 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 185.745848][ T5978] Bluetooth: hci3: command tx timeout [ 185.753967][ T5075] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 185.756572][ T5075] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.759046][ T5075] netdevsim netdevsim8 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 185.774042][ T71] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 185.776768][ T71] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.779356][ T71] netdevsim netdevsim8 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 185.789227][ T71] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 185.792078][ T71] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.794764][ T71] netdevsim netdevsim8 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 185.837510][T12665] netlink: 'syz.8.1916': attribute type 2 has an invalid length. [ 185.839903][T12665] netlink: 1184 bytes leftover after parsing attributes in process `syz.8.1916'. [ 185.841983][ T3566] usb 9-1: usb_control_msg returned -32 [ 185.846850][ T3566] usbtmc 9-1:16.0: can't read capabilities [ 186.060601][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.064304][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.151322][T12687] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 186.153870][T12687] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 186.157249][T12689] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 186.160078][T12689] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 186.338794][T12715] netlink: 'syz.7.1931': attribute type 2 has an invalid length. [ 186.340730][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1930'. [ 186.341209][T12715] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1931'. [ 186.346849][T12713] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 186.486595][T12736] erofs (device nbd8): cannot find valid erofs superblock [ 186.539460][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1937'. [ 186.595105][T12746] block nbd8: Attempted send on invalid socket [ 186.597854][T12746] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.601447][T12746] vxfs: unable to read disk superblock at 1 [ 186.605068][T12746] block nbd8: Attempted send on invalid socket [ 186.609087][T12746] I/O error, dev nbd8, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.613065][T12746] vxfs: unable to read disk superblock at 8 [ 186.616903][T12746] vxfs: can't find superblock. [ 186.744147][T12749] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 186.791500][T12756] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 186.891734][T12760] ipvlan2: entered promiscuous mode [ 186.894212][T12760] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 187.281504][T12785] fuseblk: Bad value for 'group_id' [ 187.284515][T12785] fuseblk: Bad value for 'group_id' [ 187.287308][T12785] 9pnet_virtio: no channels available for device 127.0.0.1 [ 187.550949][T12794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.813523][ T5978] Bluetooth: hci3: command tx timeout [ 187.873475][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 188.025350][ T24] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 188.029475][ T24] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 188.036867][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.040501][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.043830][ T24] usb 8-1: Product: ဌ [ 188.045544][ T24] usb 8-1: Manufacturer: 不艌钛ￓ삾꾛纳ቘï’싊炪ë·å…†è‡»êY [ 188.048450][ T24] usb 8-1: SerialNumber: 㠚駳譧楘ì†ì†½î¾‡ç¨¹ç²˜è¥¨ç‰ãŒ•é¢¨à­®â‚µæ™„ᵡ秣à¼á¾šâ“¸â™ƒïŠ§ì…闘Ŏ숎닣垤થಪᭂ⤘긨镓烓묷紖ï¼íˆºä ¦åšæ¼—쓞㹘毌멅í±ç¤¼è¥¨ç¹‚鿈섞煳껎볧簬芊å¬â¾«Ë‘浈çžìµì“•ìƒæ¾í±âˆŸá‹á‘žì¦ªçŒ«á’²ä‘‹ï‹˜ì™«á¡ˆ [ 188.126633][T12799] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.239255][ T61] usb 9-1: USB disconnect, device number 24 [ 188.263796][T12797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.267580][T12797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.271587][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 188.271598][ T40] audit: type=1400 audit(5270421509.427:33143): avc: denied { create } for pid=12795 comm="syz.3.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.281532][ T40] audit: type=1400 audit(5270421509.427:33144): avc: denied { ioctl } for pid=12795 comm="syz.3.1957" path="socket:[53581]" dev="sockfs" ino=53581 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.356842][T12810] syzkaller0: entered promiscuous mode [ 188.358610][T12810] syzkaller0: entered allmulticast mode [ 188.384191][ T40] audit: type=1400 audit(5270421509.547:33145): avc: denied { ioctl } for pid=12811 comm="syz.8.1961" path="socket:[54474]" dev="sockfs" ino=54474 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 188.385698][T12815] openvswitch: netlink: Missing valid actions attribute. [ 188.397813][T12815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.789672][ T24] cdc_ncm 8-1:1.0: bind() failure [ 188.802087][ T24] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 188.804419][ T24] cdc_ncm 8-1:1.1: bind() failure [ 188.808495][ T24] usb 8-1: USB disconnect, device number 2 [ 188.857735][T12829] __nla_validate_parse: 3 callbacks suppressed [ 188.857747][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 189.788729][T12834] netlink: 'syz.7.1967': attribute type 4 has an invalid length. [ 189.792055][T12834] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1967'. [ 189.816179][T12818] infiniband syz!: set down [ 189.817822][T12818] infiniband syz!: added team_slave_0 [ 189.822223][T12818] syz!: rxe_create_cq: returned err = -12 [ 189.824304][T12818] infiniband syz!: Couldn't create ib_mad CQ [ 189.826413][T12818] infiniband syz!: Couldn't open port 1 [ 189.831677][T12836] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=12836 comm=syz.7.1968 [ 189.832756][T12837] tipc: New replicast peer: 255.255.255.255 [ 189.837682][T12836] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=12836 comm=syz.7.1968 [ 189.838141][T12837] tipc: Enabled bearer , priority 10 [ 189.841663][T12836] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=12836 comm=syz.7.1968 [ 189.847715][T12818] RDS/IB: syz!: added [ 189.848951][T12836] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=12836 comm=syz.7.1968 [ 189.850561][T12818] smc: adding ib device syz! with port count 1 [ 189.855454][T12836] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=12836 comm=syz.7.1968 [ 189.857118][T12818] smc: ib device syz! port 1 has pnetid [ 189.862904][T12836] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=12836 comm=syz.7.1968 [ 189.867290][T12836] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=12836 comm=syz.7.1968 [ 189.871116][T12836] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=12836 comm=syz.7.1968 [ 189.876073][T12836] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=12836 comm=syz.7.1968 [ 189.879979][T12836] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=12836 comm=syz.7.1968 [ 189.926255][ T40] audit: type=1400 audit(5270421511.097:33146): avc: denied { read } for pid=5365 comm="acpid" name="event4" dev="devtmpfs" ino=3048 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 189.935471][ T40] audit: type=1400 audit(5270421511.097:33147): avc: denied { open } for pid=5365 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3048 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 189.945832][ T40] audit: type=1400 audit(5270421511.097:33148): avc: denied { ioctl } for pid=5365 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3048 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 189.954036][ T40] audit: type=1400 audit(5270421511.097:33149): avc: denied { read } for pid=12844 comm="syz.4.1970" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 189.961363][ T40] audit: type=1400 audit(5270421511.097:33150): avc: denied { open } for pid=12844 comm="syz.4.1970" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 190.050207][T12856] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 190.050207][T12856] The task syz.7.1971 (12856) triggered the difference, watch for misbehavior. [ 190.284382][T12853] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 190.321531][T12861] vlan2: entered promiscuous mode [ 190.323953][T12861] bridge0: entered promiscuous mode [ 190.367173][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1974'. [ 190.499873][T12868] bridge_slave_0: left allmulticast mode [ 190.501624][T12868] bridge_slave_0: left promiscuous mode [ 190.503868][T12868] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.508240][T12868] bridge_slave_1: left allmulticast mode [ 190.509962][T12868] bridge_slave_1: left promiscuous mode [ 190.511751][T12868] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.517619][T12868] bond0: (slave bond_slave_0): Releasing backup interface [ 190.522341][T12868] bond0: (slave bond_slave_1): Releasing backup interface [ 190.533891][T12868] team0: Port device team_slave_0 removed [ 190.541806][T12868] team0: Port device team_slave_1 removed [ 190.545361][T12868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.548696][T12868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.560459][T12868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.563934][T12868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.611314][T12868] netlink: 'syz.3.1976': attribute type 1 has an invalid length. [ 190.612108][T12867] veth0: entered promiscuous mode [ 190.612931][T12871] netlink: 'syz.3.1976': attribute type 1 has an invalid length. [ 190.622308][T12867] netlink: 'syz.3.1976': attribute type 10 has an invalid length. [ 190.635650][T12867] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 190.639643][T12866] veth0: left promiscuous mode [ 190.639782][T12877] netlink: 'syz.8.1979': attribute type 2 has an invalid length. [ 190.645706][T12877] netlink: 'syz.8.1979': attribute type 1 has an invalid length. [ 190.649061][T12877] netlink: 'syz.8.1979': attribute type 1 has an invalid length. [ 190.722985][T12885] kvm: pic: non byte read [ 190.725413][T12885] kvm: pic: non byte read [ 190.727627][T12885] kvm: pic: non byte read [ 190.729831][T12885] kvm: pic: non byte read [ 190.732050][T12885] kvm: pic: non byte read [ 190.734763][T12885] kvm: pic: non byte read [ 190.737015][T12885] kvm: pic: non byte read [ 190.739288][T12885] kvm: pic: non byte read [ 190.741238][T12885] kvm: pic: non byte read [ 190.744217][T12885] kvm: pic: non byte read [ 190.791974][ T40] audit: type=1400 audit(5270421511.947:33151): avc: denied { read } for pid=12886 comm="syz.8.1982" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 190.956588][ T61] tipc: Node number set to 571520914 [ 191.066520][ T10] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 191.236516][ T10] usb 12-1: config 1 has an invalid interface number: 7 but max is 0 [ 191.239915][ T10] usb 12-1: config 1 has no interface number 0 [ 191.242548][ T10] usb 12-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 191.247592][ T10] usb 12-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 191.251542][ T10] usb 12-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.257549][ T10] usb 12-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 191.260422][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.262974][ T10] usb 12-1: Product: syz [ 191.264442][ T10] usb 12-1: Manufacturer: syz [ 191.266253][ T10] usb 12-1: SerialNumber: syz [ 191.273136][T12892] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 191.363732][ T40] audit: type=1400 audit(5270421512.517:33152): avc: denied { create } for pid=12907 comm="syz.8.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 191.482364][ T10] usb 12-1: Error in usbnet_get_endpoints (-71) [ 191.487025][ T10] usb 12-1: USB disconnect, device number 11 [ 191.505588][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1990'. [ 191.571887][T12926] loop6: detected capacity change from 0 to 2560 [ 191.575022][T12926] buffer_io_error: 11 callbacks suppressed [ 191.575032][T12926] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.579710][T12926] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.582194][T12926] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.584821][T12926] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.587281][T12926] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.589772][T12926] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.592281][T12926] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.594980][T12926] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.597554][T12926] ldm_validate_partition_table(): Disk read failed. [ 191.599628][T12926] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.602116][T12926] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.605817][T12926] Dev loop6: unable to read RDB block 0 [ 191.608645][T12926] loop6: unable to read partition table [ 191.611179][T12926] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 191.641818][T12928] netlink: 'syz.8.1993': attribute type 1 has an invalid length. [ 191.658675][T12928] gretap2: entered promiscuous mode [ 191.662061][T12928] bond6: (slave gretap2): making interface the new active one [ 191.665672][T12928] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 191.673203][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1993'. [ 191.682824][T12928] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.805869][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1996'. [ 192.045616][T12955] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.053262][T12955] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.060045][T12955] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 192.075693][T12955] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 192.080573][T12954] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 192.121542][T12963] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.140087][T12961] netlink: 1456 bytes leftover after parsing attributes in process `syz.4.2003'. [ 192.299455][T12984] afs: Unknown parameter 'dyn¸W' [ 193.235923][T13002] QAT: Invalid ioctl -2144835806 [ 193.237694][T13002] openvswitch: netlink: Flow key attribute not present in set flow. [ 193.288840][T13018] netlink: 'syz.4.2019': attribute type 1 has an invalid length. [ 193.305660][T13018] bond16: entered promiscuous mode [ 193.308225][T13018] 8021q: adding VLAN 0 to HW filter on device bond16 [ 193.322236][T13018] 8021q: adding VLAN 0 to HW filter on device bond16 [ 193.327130][T13018] bond16: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 193.330472][T13018] bond16: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 193.335376][T13018] bond16: (slave ip6gre2): making interface the new active one [ 193.337709][T13018] ip6gre2: entered promiscuous mode [ 193.340343][T13018] bond16: (slave ip6gre2): Enslaving as an active interface with an up link [ 193.351360][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 193.351375][ T40] audit: type=1400 audit(5270421514.507:33178): avc: denied { call } for pid=13025 comm="syz.3.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 193.420619][T13034] program syz.3.2022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.553411][ T3566] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 193.621430][ T40] audit: type=1400 audit(5270421514.777:33179): avc: denied { bind } for pid=13050 comm="syz.8.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.628772][ T40] audit: type=1400 audit(5270421514.787:33180): avc: denied { write } for pid=13050 comm="syz.8.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.680834][ T40] audit: type=1400 audit(5270421514.837:33181): avc: denied { name_connect } for pid=13049 comm="syz.4.2027" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 193.687763][ T3566] usb 12-1: device descriptor read/64, error -71 [ 193.736049][T13056] veth1_to_batadv: entered promiscuous mode [ 193.778802][T13058] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2030'. [ 193.782519][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2030'. [ 193.858039][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2031'. [ 193.953400][ T3566] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 194.047131][ T40] audit: type=1400 audit(5270421515.207:33182): avc: denied { write } for pid=13075 comm="syz.8.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.081635][ T40] audit: type=1400 audit(5270421515.237:33183): avc: denied { map } for pid=13077 comm="syz.8.2036" path="socket:[53230]" dev="sockfs" ino=53230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 194.089339][ T3566] usb 12-1: device descriptor read/64, error -71 [ 194.091902][ T40] audit: type=1400 audit(5270421515.237:33184): avc: denied { read accept } for pid=13077 comm="syz.8.2036" path="socket:[53230]" dev="sockfs" ino=53230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 194.108176][T13080] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 194.196554][ T3566] usb usb12-port1: attempt power cycle [ 194.484779][ T40] audit: type=1400 audit(5270421515.647:33185): avc: denied { append } for pid=13091 comm="syz.4.2041" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 194.543106][ T40] audit: type=1400 audit(5270421515.697:33186): avc: denied { listen } for pid=13097 comm="syz.4.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 194.551259][ T40] audit: type=1400 audit(5270421515.697:33187): avc: denied { listen } for pid=13097 comm="syz.4.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 194.559234][ T3566] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 194.583789][ T3566] usb 12-1: device descriptor read/8, error -71 [ 194.753638][T12271] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 194.823577][ T3566] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 194.854417][ T3566] usb 12-1: device descriptor read/8, error -71 [ 194.924233][ T29] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 194.928856][T12271] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 194.932495][T12271] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.936289][T12271] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.940544][T12271] usb 8-1: config 0 interface 0 has no altsetting 0 [ 194.944383][T12271] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.948113][T12271] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.952575][T12271] usb 8-1: config 0 interface 0 has no altsetting 0 [ 194.957022][T12271] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.960673][T12271] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.963987][ T3566] usb usb12-port1: unable to enumerate USB device [ 194.965169][T12271] usb 8-1: config 0 interface 0 has no altsetting 0 [ 194.971174][T12271] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.974855][T12271] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.979191][T12271] usb 8-1: config 0 interface 0 has no altsetting 0 [ 194.982962][T12271] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.987294][T12271] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.991682][T12271] usb 8-1: config 0 interface 0 has no altsetting 0 [ 194.995902][T12271] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.999532][T12271] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.004041][T12271] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.008602][T12271] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.012739][T12271] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.017740][T12271] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.021554][T12271] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.025357][T12271] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.029713][T12271] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.034295][T12271] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 195.037926][T12271] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 195.040853][T12271] usb 8-1: Product: syz [ 195.042194][T12271] usb 8-1: Manufacturer: syz [ 195.044091][T12271] usb 8-1: SerialNumber: syz [ 195.047049][T12271] usb 8-1: config 0 descriptor?? [ 195.051681][T12271] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 195.054120][ T29] usb 9-1: device descriptor read/64, error -71 [ 195.147935][T13110] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 195.261190][ T9] usb 8-1: USB disconnect, device number 3 [ 195.269047][ T9] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 195.293873][ T29] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 195.423537][ T29] usb 9-1: device descriptor read/64, error -71 [ 195.457689][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2050'. [ 195.488965][T13118] [U] ^G [ 195.533689][ T29] usb usb9-port1: attempt power cycle [ 195.873535][ T29] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 195.893843][ T29] usb 9-1: device descriptor read/8, error -71 [ 195.904138][T13142] misc userio: Begin command sent, but we're already running [ 196.022848][ T5330] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 196.143426][ T29] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 196.149166][T13155] block nbd3: Attempted send on invalid socket [ 196.152655][T13155] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.157872][T13155] vxfs: unable to read disk superblock at 1 [ 196.160389][T13155] block nbd3: Attempted send on invalid socket [ 196.163672][T13155] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.164494][ T29] usb 9-1: device descriptor read/8, error -71 [ 196.167023][T13155] vxfs: unable to read disk superblock at 8 [ 196.171016][T13155] vxfs: can't find superblock. [ 196.179427][T13155] program syz.3.2060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.186352][T13155] binder: BINDER_SET_CONTEXT_MGR already set [ 196.188320][T13155] binder: 13154:13155 ioctl 4018620d 200000004a80 returned -16 [ 196.276931][ T29] usb usb9-port1: unable to enumerate USB device [ 196.396735][T13166] geneve1: entered allmulticast mode [ 196.497121][T13171] SELinux: policydb version 8 does not match my version range 15-35 [ 196.500378][T13171] SELinux: failed to load policy [ 196.702563][T13145] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2056'. [ 196.710849][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 197.100060][T13211] netlink: 'syz.3.2077': attribute type 10 has an invalid length. [ 197.104550][T13211] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2077'. [ 197.108295][T13211] team0: entered promiscuous mode [ 197.110728][T13211] bridge0: port 1(team0) entered blocking state [ 197.113955][T13211] bridge0: port 1(team0) entered disabled state [ 197.116893][T13211] team0: entered allmulticast mode [ 197.153761][T13207] netlink: 'syz.8.2076': attribute type 2 has an invalid length. [ 197.156873][T13207] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2076'. [ 197.158418][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'. [ 197.266151][T13226] bridge: RTM_NEWNEIGH with invalid ether address [ 197.298912][T13229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2083'. [ 197.619681][T13240] netlink: 'syz.7.2087': attribute type 1 has an invalid length. [ 197.700459][T13243] 8021q: adding VLAN 0 to HW filter on device bond13 [ 197.822186][T13255] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 197.925586][T13261] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2093'. [ 197.967253][T13268] batadv_slave_1: entered promiscuous mode [ 197.971226][T13264] netlink: 'syz.4.2094': attribute type 29 has an invalid length. [ 197.985760][T13264] netlink: 'syz.4.2094': attribute type 29 has an invalid length. [ 197.988642][T13264] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2094'. [ 198.026222][T13266] batadv_slave_1: left promiscuous mode [ 198.041246][T13273] comedi comedi3: comedi_config --init_data is deprecated [ 198.048235][T13274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2094'. [ 198.088007][T13281] program syz.8.2099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.091803][T13281] ata1.00: non-matching transfer count (1591995653/2304) [ 198.221161][T13302] netlink: 'syz.8.2102': attribute type 11 has an invalid length. [ 198.673617][ T61] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 198.823409][ T61] usb 12-1: Using ep0 maxpacket: 16 [ 198.826250][ T61] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.830536][ T61] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.834163][ T61] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.837995][ T61] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 198.840710][ T61] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.846550][ T61] usb 12-1: config 0 descriptor?? [ 199.000715][T13334] selinux_netlink_send: 16 callbacks suppressed [ 199.000726][T13334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13334 comm=syz.4.2107 [ 199.213279][T13346] tipc: Enabling of bearer rejected, failed to enable media [ 199.216656][T13346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=13346 comm=syz.3.2113 [ 199.255077][ T61] HID 045e:07da: Invalid code 65791 type 1 [ 199.259427][ T61] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:045E:07DA.000A/input/input32 [ 199.264833][ T61] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 199.368225][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 199.368241][ T40] audit: type=1400 audit(5270421520.527:33204): avc: denied { shutdown } for pid=13362 comm="syz.3.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 199.380621][ T40] audit: type=1400 audit(5270421520.537:33205): avc: denied { read } for pid=13362 comm="syz.3.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 199.392814][ T40] audit: type=1400 audit(5270421520.547:33206): avc: denied { ioctl } for pid=13368 comm="syz.4.2120" path="socket:[55831]" dev="sockfs" ino=55831 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 199.405624][ T40] audit: type=1400 audit(5270421520.547:33207): avc: denied { accept } for pid=13368 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.412091][ T40] audit: type=1400 audit(5270421520.567:33208): avc: denied { create } for pid=13370 comm="syz.3.2122" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.419392][ T40] audit: type=1400 audit(5270421520.567:33209): avc: denied { bind } for pid=13370 comm="syz.3.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 199.427336][ T40] audit: type=1400 audit(5270421520.567:33210): avc: denied { read } for pid=13370 comm="syz.3.2122" name="file0" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.434671][ T40] audit: type=1400 audit(5270421520.567:33211): avc: denied { open } for pid=13370 comm="syz.3.2122" path="/77/file0" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.442306][ T40] audit: type=1400 audit(5270421520.567:33212): avc: denied { ioctl } for pid=13370 comm="syz.3.2122" path="/77/file0" dev="tmpfs" ino=433 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.447892][T13377] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 199.451516][ T40] audit: type=1400 audit(5270421520.587:33213): avc: denied { unlink } for pid=12243 comm="syz-executor" name="file0" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.456847][ T9] usb 12-1: USB disconnect, device number 16 [ 199.457718][T13377] nvme_fabrics: unknown parameter or missing value ' \' in ctrl creation request [ 199.460506][T13377] serio: Serial port ptm0 [ 199.642851][T13398] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 199.688343][T13400] picdev_read: 77 callbacks suppressed [ 199.689635][T13400] kvm: pic: non byte read [ 199.701678][T13400] kvm: pic: level sensitive irq not supported [ 199.702023][T13400] kvm: pic: non byte read [ 199.708168][T13400] kvm: pic: level sensitive irq not supported [ 199.708502][T13400] kvm: pic: non byte read [ 199.714245][T13400] kvm: pic: level sensitive irq not supported [ 199.714551][T13400] kvm: pic: non byte read [ 199.719929][T13400] kvm: pic: level sensitive irq not supported [ 199.720230][T13400] kvm: pic: non byte read [ 199.726294][T13400] kvm: pic: level sensitive irq not supported [ 199.726596][T13400] kvm: pic: non byte read [ 199.731995][T13400] kvm: pic: level sensitive irq not supported [ 199.732294][T13400] kvm: pic: non byte read [ 199.738096][T13400] kvm: pic: level sensitive irq not supported [ 199.738394][T13400] kvm: pic: non byte read [ 199.862256][T13420] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 200.199119][T13469] SELinux: policydb version 1844414455 does not match my version range 15-35 [ 200.202010][T13469] SELinux: failed to load policy [ 200.325862][T13475] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.476690][T13490] "syz.8.2154" (13490) uses obsolete ecb(arc4) skcipher [ 200.513419][ T3566] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 200.531791][T13497] "syz.8.2154" (13497) uses obsolete ecb(arc4) skcipher [ 200.584585][T13500] max out of range [ 200.685178][ T3566] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 200.687708][ T3566] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 200.690607][ T3566] usb 8-1: config 0 interface 0 has no altsetting 0 [ 200.694483][ T3566] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 200.697326][ T3566] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 200.699813][ T3566] usb 8-1: Product: syz [ 200.701184][ T3566] usb 8-1: Manufacturer: syz [ 200.702688][ T3566] usb 8-1: SerialNumber: syz [ 200.705586][ T3566] usb 8-1: config 0 descriptor?? [ 200.712588][ T3566] hub 8-1:0.0: bad descriptor, ignoring hub [ 200.714856][ T3566] hub 8-1:0.0: probe with driver hub failed with error -5 [ 200.719449][ T3566] usb 8-1: selecting invalid altsetting 0 [ 200.829279][T13509] __nla_validate_parse: 8 callbacks suppressed [ 200.829297][T13509] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2159'. [ 200.931598][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2161'. [ 200.959523][T13514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=13514 comm=syz.8.2161 [ 200.965437][T13521] binder: 13470:13521 ioctl 40044900 6 returned -22 [ 201.015776][ T24] usb 8-1: USB disconnect, device number 4 [ 201.077765][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2166'. [ 201.148899][ T5978] Bluetooth: hci0: ACL packet for unknown connection handle 759 [ 201.254372][T13545] netlink: 'syz.8.2169': attribute type 1 has an invalid length. [ 201.270652][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2169'. [ 201.274169][T13545] 8021q: adding VLAN 0 to HW filter on device bond10 [ 201.303102][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'. [ 201.354339][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2174'. [ 201.366172][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2171'. [ 201.409090][T13561] sctp: [Deprecated]: syz.8.2173 (pid 13561) Use of int in maxseg socket option. [ 201.409090][T13561] Use struct sctp_assoc_value instead [ 201.619022][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2176'. [ 201.680326][T13572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2177'. [ 201.684997][T13573] tipc: Started in network mode [ 201.686997][T13573] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 201.689864][T13573] tipc: Enabled bearer , priority 0 [ 201.901026][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 202.202116][T13607] netlink: 'syz.4.2188': attribute type 4 has an invalid length. [ 202.253623][ T6032] usb 12-1: new full-speed USB device number 17 using dummy_hcd [ 202.267340][T13610] bond4: entered allmulticast mode [ 202.269930][T13610] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.407212][ T6032] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.411441][ T6032] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.419139][ T6032] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.425037][ T6032] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.478549][T13642] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 202.481418][T13642] overlayfs: failed to set xattr on upper [ 202.484137][T13642] overlayfs: ...falling back to redirect_dir=nofollow. [ 202.484940][T13640] ptm ptm23: ldisc open failed (-12), clearing slot 23 [ 202.487377][T13642] overlayfs: ...falling back to index=off. [ 202.492279][T13642] overlayfs: ...falling back to uuid=null. [ 202.519597][T13642] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 202.637069][ T6032] usb 12-1: usb_control_msg returned -32 [ 202.639402][ T6032] usbtmc 12-1:16.0: can't read capabilities [ 202.647354][ T6032] usb 12-1: USB disconnect, device number 17 [ 202.683574][ T24] tipc: Node number set to 11578026 [ 202.894132][T13690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.090290][T13697] pimreg3: entered allmulticast mode [ 203.235519][T13717] 9p filesystem being mounted at /289/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 203.249214][T13723] binder: 13722:13723 ioctl c0306201 200000000080 returned -14 [ 203.328501][T13723] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 203.479477][T13737] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.522242][T13741] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 203.525041][T13741] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 203.527838][T13741] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 204.566805][T13750] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 204.698057][T13766] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 204.935667][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 204.935678][ T40] audit: type=1400 audit(5270421526.097:33247): avc: denied { watch } for pid=13779 comm="syz.4.2246" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 204.947742][ T40] audit: type=1400 audit(5270421526.097:33248): avc: denied { watch_sb watch_reads } for pid=13779 comm="syz.4.2246" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 205.058202][T13785] tc_dump_action: action bad kind [ 205.835605][ T40] audit: type=1326 audit(5270421526.997:33249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.8.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057ed8ebe9 code=0x7ffc0000 [ 205.845373][ T40] audit: type=1326 audit(5270421526.997:33250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.8.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057ed8ebe9 code=0x7ffc0000 [ 205.852496][ T40] audit: type=1326 audit(5270421526.997:33251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.8.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f057ed8ebe9 code=0x7ffc0000 [ 205.872791][ T40] audit: type=1326 audit(5270421527.027:33252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.8.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057ed8ebe9 code=0x7ffc0000 [ 205.882817][ T40] audit: type=1326 audit(5270421527.027:33253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.8.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057ed8ebe9 code=0x7ffc0000 [ 205.892431][ T40] audit: type=1326 audit(5270421527.027:33254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.8.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f057ed8ebe9 code=0x7ffc0000 [ 205.902378][ T40] audit: type=1326 audit(5270421527.027:33255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.8.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057ed8ebe9 code=0x7ffc0000 [ 205.911976][ T40] audit: type=1326 audit(5270421527.027:33256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.8.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057ed8ebe9 code=0x7ffc0000 [ 206.959346][T13836] __nla_validate_parse: 10 callbacks suppressed [ 206.959358][T13836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2267'. [ 206.964548][T13836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2267'. [ 206.970136][T13836] sit1: entered allmulticast mode [ 207.042559][T13844] netlink: 'syz.8.2272': attribute type 4 has an invalid length. [ 207.052377][T13844] netlink: 'syz.8.2272': attribute type 4 has an invalid length. [ 207.094801][ T5978] Bluetooth: hci3: unexpected event for opcode 0x080c [ 207.116641][T13853] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2276'. [ 207.172272][T13860] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2280'. [ 207.353445][ T61] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 207.493405][ T61] usb 12-1: device descriptor read/64, error -71 [ 207.566464][T13874] netlink: 'syz.3.2285': attribute type 4 has an invalid length. [ 207.753442][ T61] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 207.893609][ T61] usb 12-1: device descriptor read/64, error -71 [ 208.008214][ T61] usb usb12-port1: attempt power cycle [ 208.373764][ T61] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 208.400423][ T61] usb 12-1: device descriptor read/8, error -71 [ 208.663583][ T61] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 208.693969][ T61] usb 12-1: device descriptor read/8, error -71 [ 208.794130][ T61] usb usb12-port1: unable to enumerate USB device [ 210.668883][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 210.668901][ T40] audit: type=1400 audit(5270421531.287:33375): avc: denied { setopt } for pid=13931 comm="syz.4.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.493754][ T9133] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 212.695547][ T9133] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.699190][ T9133] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.702473][ T9133] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.713663][ T9133] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.725137][ T9133] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.907772][ T9133] usb 12-1: config 0 descriptor?? [ 213.651406][ T9133] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 213.656381][ T9133] usb 12-1: USB disconnect, device number 22 [ 215.033958][ T24] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 215.415657][ T10] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 215.963862][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 215.968097][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.971196][ T24] usb 9-1: config 0 has no interfaces? [ 215.974927][ T24] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 215.977711][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.980157][ T24] usb 9-1: Product: syz [ 215.981455][ T24] usb 9-1: Manufacturer: syz [ 215.982910][ T24] usb 9-1: SerialNumber: syz [ 215.986150][ T24] usb 9-1: config 0 descriptor?? [ 216.005813][ T10] usb 12-1: config 220 has an invalid interface number: 76 but max is 2 [ 216.008491][ T10] usb 12-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 216.015924][ T10] usb 12-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 216.019195][ T10] usb 12-1: config 220 has no interface number 2 [ 216.021233][ T10] usb 12-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 216.025562][ T10] usb 12-1: config 220 interface 0 has no altsetting 0 [ 216.027894][ T10] usb 12-1: config 220 interface 76 has no altsetting 0 [ 216.030111][ T10] usb 12-1: config 220 interface 1 has no altsetting 0 [ 216.035701][ T10] usb 12-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 216.038825][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.041414][ T10] usb 12-1: Product: syz [ 216.042799][ T10] usb 12-1: Manufacturer: syz [ 216.044471][ T10] usb 12-1: SerialNumber: syz [ 216.262385][ T10] usb 12-1: Found UVC 7.01 device syz (8086:0b07) [ 216.264657][ T10] usb 12-1: No valid video chain found. [ 216.266593][ T10] usb 12-1: selecting invalid altsetting 0 [ 216.278783][ T10] usb 12-1: selecting invalid altsetting 0 [ 216.280720][ T10] usbtest 12-1:220.1: probe with driver usbtest failed with error -22 [ 216.285760][ T10] usb 12-1: USB disconnect, device number 23 [ 218.246652][T14069] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 218.327523][ T29] usb 9-1: USB disconnect, device number 29 [ 218.332302][T14073] input: syz1 as /devices/virtual/input/input34 [ 218.636793][T14088] snd_dummy snd_dummy.0: control 1:1:195::53367 is already present [ 218.665129][ T29] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 218.827181][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.837593][ T29] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 218.849702][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.865665][ T29] usb 9-1: config 0 descriptor?? [ 218.884691][ T29] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 219.824461][ T40] audit: type=1400 audit(5270421540.657:33376): avc: denied { watch watch_reads } for pid=14097 comm="syz.7.2368" path="/proc/950/task" dev="proc" ino=60666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 220.106205][T14108] input: syz1 as /devices/virtual/input/input35 [ 221.225753][ T40] audit: type=1400 audit(5270421542.237:33377): avc: denied { ioctl } for pid=14127 comm="syz.7.2380" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 221.712554][ T840] usb 9-1: USB disconnect, device number 30 [ 222.894396][T14188] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 223.257754][ T40] audit: type=1326 audit(5270421544.407:33378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.2404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ccd8ebe9 code=0x7ffc0000 [ 223.285560][ T40] audit: type=1326 audit(5270421544.407:33379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.2404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ccd8ebe9 code=0x7ffc0000 [ 223.493697][ T40] audit: type=1326 audit(5270421544.417:33380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.2404" exe="/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f25ccd8ebe9 code=0x7ffc0000 [ 223.501041][ T40] audit: type=1326 audit(5270421544.417:33381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.2404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ccd8ebe9 code=0x7ffc0000 [ 223.509699][ T40] audit: type=1326 audit(5270421544.417:33382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.2404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ccd8ebe9 code=0x7ffc0000 [ 224.670658][T14226] syzkaller0: entered promiscuous mode [ 224.672489][T14226] syzkaller0: entered allmulticast mode [ 227.039350][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 227.313435][ T6604] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 227.783461][ T6604] usb 12-1: Using ep0 maxpacket: 32 [ 227.786416][ T6604] usb 12-1: config 0 has an invalid interface number: 72 but max is 0 [ 227.789045][ T6604] usb 12-1: config 0 has no interface number 0 [ 227.791060][ T6604] usb 12-1: config 0 interface 72 has no altsetting 0 [ 227.794965][ T6604] usb 12-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 227.798042][ T6604] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.800627][ T6604] usb 12-1: Product: syz [ 227.802072][ T6604] usb 12-1: Manufacturer: syz [ 227.803839][ T6604] usb 12-1: SerialNumber: syz [ 227.806962][ T6604] usb 12-1: config 0 descriptor?? [ 228.015780][ T6604] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.018117][ T6604] usb 12-1: MIDIStreaming interface descriptor not found [ 228.030072][ T40] audit: type=1400 audit(5270421549.187:33383): avc: denied { watch } for pid=14314 comm="syz.4.2452" path="/535/file1" dev="tmpfs" ino=2870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 228.030790][ T6604] usb 12-1: USB disconnect, device number 24 [ 228.143225][T14318] ecryptfs: Unknown parameter '³(' [ 228.795404][T14331] tmpfs: Bad value for 'nr_inodes' [ 229.179275][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2460'. [ 229.305850][ T40] audit: type=1326 audit(5270421550.467:33384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.4.2467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 229.318808][ T40] audit: type=1326 audit(5270421550.467:33385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.4.2467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 229.415078][ T40] audit: type=1326 audit(5270421550.477:33386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.4.2467" exe="/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 229.430706][ T40] audit: type=1326 audit(5270421550.477:33387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.4.2467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 229.496565][ T40] audit: type=1326 audit(5270421550.477:33388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.4.2467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 229.513944][ T40] audit: type=1326 audit(5270421550.497:33389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.4.2467" exe="/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 229.522585][ T40] audit: type=1326 audit(5270421550.497:33390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.4.2467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 229.531391][ T40] audit: type=1326 audit(5270421550.497:33391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.4.2467" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 229.538745][ T40] audit: type=1326 audit(5270421550.497:33392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.4.2467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 231.045498][ T24] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 231.344272][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 231.348692][ T24] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 231.357734][ T24] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 231.521574][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.526214][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.531441][ T24] usb 9-1: Product: syz [ 231.536433][ T24] usb 9-1: Manufacturer: syz [ 231.540020][ T24] usb 9-1: SerialNumber: syz [ 231.638540][T14364] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.860906][T14364] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.865051][T14364] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 233.111060][T14364] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 233.113856][T14364] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 233.318101][ T24] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 233.320452][ T24] cdc_ncm 9-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 233.324335][ T24] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 233.488998][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 233.489010][ T40] audit: type=1400 audit(5270421554.647:33407): avc: denied { mounton } for pid=14401 comm="syz.7.2483" path="/proc/1032/task" dev="proc" ino=60920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 233.518400][ T24] cdc_ncm 9-1:1.0: setting tx_max = 104 [ 233.592349][ T24] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 233.719003][ T840] usb 9-1: USB disconnect, device number 31 [ 233.721591][ T840] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 233.993393][ T6604] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 234.153448][ T6604] usb 8-1: Using ep0 maxpacket: 32 [ 234.642963][T14414] 9pnet: p9_errstr2errno: server reported unknown error 1844 [ 235.562039][ T6604] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.576139][ T6604] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.579199][ T6604] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 235.582082][ T6604] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.615031][ T6604] usb 8-1: config 0 descriptor?? [ 235.630359][ T6604] hub 8-1:0.0: USB hub found [ 235.702703][ T40] audit: type=1326 audit(5270421556.857:33408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.2490" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 235.726497][ T40] audit: type=1326 audit(5270421556.877:33409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.2490" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3172adb9 code=0x7ffc0000 [ 235.734696][ T40] audit: type=1326 audit(5270421556.877:33410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.2490" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 235.744054][ T40] audit: type=1326 audit(5270421556.877:33411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.2490" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3172adb9 code=0x7ffc0000 [ 235.752297][ T40] audit: type=1326 audit(5270421556.877:33412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.2490" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3172adb9 code=0x7ffc0000 [ 235.762447][ T40] audit: type=1326 audit(5270421556.877:33413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.2490" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3172adb9 code=0x7ffc0000 [ 235.782542][ T40] audit: type=1326 audit(5270421556.877:33414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.2490" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 235.790193][ T40] audit: type=1326 audit(5270421556.877:33415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.2490" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3172adb9 code=0x7ffc0000 [ 235.797621][ T40] audit: type=1326 audit(5270421556.877:33416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.2490" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3178ebe9 code=0x7ffc0000 [ 236.632800][ T6604] hub 8-1:0.0: 1 port detected [ 236.833474][ T6604] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 236.835761][ T6604] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 236.882752][ T6604] usbhid 8-1:0.0: can't add hid device: -71 [ 236.884838][ T6604] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 236.927452][ T6604] usb 8-1: USB disconnect, device number 5 [ 237.173642][ T29] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 237.336459][ T29] usb 12-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 237.341898][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.347078][ T29] usb 12-1: config 0 descriptor?? [ 237.351732][ T29] cp210x 12-1:0.0: cp210x converter detected [ 237.613732][ T840] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 237.758231][ T29] cp210x 12-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 237.795057][ T840] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 237.797963][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.803248][ T840] usb 8-1: config 0 descriptor?? [ 237.806786][ T840] cp210x 8-1:0.0: cp210x converter detected [ 237.860250][T14452] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 237.862699][T14453] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 237.968553][ T29] usb 12-1: cp210x converter now attached to ttyUSB0 [ 238.008949][ T840] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 238.011213][ T840] cp210x 8-1:0.0: querying part number failed [ 238.015576][ T840] usb 8-1: cp210x converter now attached to ttyUSB1 [ 238.153447][ T53] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 238.164622][ T24] usb 12-1: USB disconnect, device number 25 [ 238.168336][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 238.175238][ T24] cp210x 12-1:0.0: device disconnected [ 238.210146][ T840] usb 8-1: USB disconnect, device number 6 [ 238.218548][ T840] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 238.221559][ T840] cp210x 8-1:0.0: device disconnected [ 239.293652][ T24] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 239.592610][ T24] usb 12-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.607036][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.640744][ T24] usb 12-1: config 0 descriptor?? [ 239.643815][ T24] cp210x 12-1:0.0: cp210x converter detected [ 239.853489][ T53] usb 9-1: Using ep0 maxpacket: 32 [ 239.862660][ T53] usb 9-1: unable to get BOS descriptor or descriptor too short [ 239.869788][ T53] usb 9-1: config 7 has an invalid interface number: 128 but max is 0 [ 239.872585][ T53] usb 9-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 239.878152][ T53] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 239.881430][ T53] usb 9-1: config 7 has no interface number 0 [ 239.884839][ T53] usb 9-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 239.888515][ T53] usb 9-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 239.891724][ T53] usb 9-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 239.897608][ T53] usb 9-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 239.901669][ T53] usb 9-1: config 7 interface 128 has no altsetting 0 [ 239.911801][ T53] usb 9-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 239.919112][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.922372][ T53] usb 9-1: Product: syz [ 239.926355][ T53] usb 9-1: Manufacturer: syz [ 239.928575][ T53] usb 9-1: SerialNumber: syz [ 239.965341][T14471] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 240.176381][ T53] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.178660][ T53] usb 9-1: MIDIStreaming interface descriptor not found [ 240.192056][ T24] cp210x 12-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 240.196621][ T53] usb 9-1: USB disconnect, device number 32 [ 240.207682][ T24] usb 12-1: cp210x converter now attached to ttyUSB0 [ 240.413906][ T24] usb 12-1: USB disconnect, device number 26 [ 240.418493][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.433633][ T24] cp210x 12-1:0.0: device disconnected [ 240.891007][T14514] Driver unsupported XDP return value 0 on prog (id 530) dev N/A, expect packet loss! [ 240.937823][T14518] netlink: 452 bytes leftover after parsing attributes in process `syz.4.2524'. [ 240.963063][ T40] kauditd_printk_skb: 419 callbacks suppressed [ 240.963074][ T40] audit: type=1400 audit(5270421562.117:33836): avc: denied { map } for pid=14515 comm="syz.8.2523" path="/dev/vcsa1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 242.933848][ T1466] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 243.113475][ T1466] usb 8-1: Using ep0 maxpacket: 32 [ 243.125109][ T1466] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 243.128358][ T1466] usb 8-1: config 0 has no interface number 0 [ 243.130674][ T1466] usb 8-1: config 0 interface 184 has no altsetting 0 [ 243.139165][ T1466] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 243.145525][ T1466] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.148367][ T1466] usb 8-1: Product: syz [ 243.150027][ T1466] usb 8-1: Manufacturer: syz [ 243.151606][ T1466] usb 8-1: SerialNumber: syz [ 243.164984][ T1466] usb 8-1: config 0 descriptor?? [ 243.179164][ T1466] smsc75xx v1.0.0 [ 243.807276][ T1466] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 243.810621][ T1466] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 243.953422][ T61] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 244.117134][ T61] usb 9-1: config 0 has an invalid interface number: 97 but max is 0 [ 244.120241][ T61] usb 9-1: config 0 has no interface number 0 [ 244.125739][ T61] usb 9-1: New USB device found, idVendor=3a2d, idProduct=cb2e, bcdDevice=db.ed [ 244.128822][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.131531][ T61] usb 9-1: Product: syz [ 244.133186][ T61] usb 9-1: Manufacturer: syz [ 244.134853][ T61] usb 9-1: SerialNumber: syz [ 244.137910][ T61] usb 9-1: config 0 descriptor?? [ 244.144339][ T61] rndis_host 9-1:0.97: skipping garbage [ 244.146259][ T61] usb 9-1: bad CDC descriptors [ 244.213962][ T40] audit: type=1400 audit(5270421565.377:33837): avc: denied { view } for pid=14589 comm="syz.7.2554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 244.346376][ T61] usb 9-1: USB disconnect, device number 33 [ 244.673677][ T1466] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 244.677203][ T1466] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 244.680147][ T1466] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 244.683297][ T1466] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 244.687547][ T1466] usb 8-1: USB disconnect, device number 7 [ 245.017793][T14603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 245.034108][ T40] audit: type=1326 audit(5270421566.097:33838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14598 comm="syz.7.2557" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ccd8ebe9 code=0x7ffc0000 [ 245.043791][ T40] audit: type=1326 audit(5270421566.097:33839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14598 comm="syz.7.2557" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ccd8ebe9 code=0x7ffc0000 [ 245.052694][ T40] audit: type=1326 audit(5270421566.097:33840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14598 comm="syz.7.2557" exe="/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f25ccd8ebe9 code=0x7ffc0000 [ 245.083552][ T40] audit: type=1326 audit(5270421566.097:33841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14598 comm="syz.7.2557" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ccd8ebe9 code=0x7ffc0000 [ 245.103442][ T40] audit: type=1326 audit(5270421566.097:33842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14598 comm="syz.7.2557" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ccd8ebe9 code=0x7ffc0000 [ 245.573975][ T40] audit: type=1400 audit(5270421566.737:33843): avc: denied { shutdown } for pid=14621 comm="syz.7.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 246.252740][ T5978] Bluetooth: hci3: ACL packet for unknown connection handle 1075 [ 246.649613][ T40] audit: type=1400 audit(5270421567.807:33844): avc: denied { ioctl } for pid=14642 comm="syz.7.2575" path="socket:[63734]" dev="sockfs" ino=63734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 246.929520][T14651] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2579'. [ 246.933164][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2579'. [ 246.991940][T14649] ------------[ cut here ]------------ [ 246.993610][T14649] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x0, 0x0] s64=[0x0, 0x0] u32=[0x80632f4, 0x0] s32=[0x0, 0x0] var_off=(0x0, 0x0)(1) [ 246.998291][T14649] WARNING: CPU: 3 PID: 14649 at kernel/bpf/verifier.c:2722 reg_bounds_sanity_check+0x62b/0x1200 [ 247.001249][T14649] Modules linked in: [ 247.002536][T14649] CPU: 3 UID: 0 PID: 14649 Comm: syz.8.2576 Not tainted syzkaller #0 PREEMPT(full) [ 247.007433][T14649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.010450][T14649] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 247.012283][T14649] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 66 76 aa ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 247.018392][T14649] RSP: 0018:ffffc90004a472f8 EFLAGS: 00010286 [ 247.020141][T14649] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90007501000 [ 247.022361][T14649] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 247.024513][T14649] RBP: ffffc90004a473f0 R08: 0000000000000001 R09: 0000000000000000 [ 247.026755][T14649] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888064ac8000 [ 247.029119][T14649] R13: ffff88806512e324 R14: ffff88806512e31c R15: ffff88806512e2d0 [ 247.031608][T14649] FS: 00007f057fc386c0(0000) GS:ffff8880d69b8000(0000) knlGS:0000000000000000 [ 247.034210][T14649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.036132][T14649] CR2: 0000000000000000 CR3: 000000002bbfe000 CR4: 0000000000352ef0 [ 247.038429][T14649] Call Trace: [ 247.039402][T14649] [ 247.040271][T14649] reg_set_min_max+0x183/0x2c0 [ 247.041653][T14649] check_cond_jmp_op+0x19b0/0x72d0 [ 247.043149][T14649] ? states_equal+0xb0/0x1d10 [ 247.044573][T14649] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 247.046157][T14649] ? __asan_memset+0x23/0x50 [ 247.047552][T14649] do_check_common+0xa13e/0xb410 [ 247.048990][T14649] ? __pfx_do_check_common+0x10/0x10 [ 247.050495][T14649] ? lockdep_hardirqs_on+0x51/0x110 [ 247.051991][T14649] ? kfree+0x2b4/0x4d0 [ 247.053209][T14649] ? bpf_check+0x7c34/0xc670 [ 247.054609][T14649] bpf_check+0x869f/0xc670 [ 247.055925][T14649] ? __pfx_bpf_check+0x10/0x10 [ 247.057347][T14649] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 247.058897][T14649] bpf_prog_load+0xe41/0x2490 [ 247.060257][T14649] ? __pfx_bpf_prog_load+0x10/0x10 [ 247.061713][T14649] ? avc_has_perm+0x144/0x1f0 [ 247.063092][T14649] ? selinux_bpf+0xde/0x130 [ 247.064467][T14649] ? bpf_lsm_bpf+0x9/0x10 [ 247.065709][T14649] __sys_bpf+0x4a3f/0x4de0 [ 247.067038][T14649] ? __pfx___sys_bpf+0x10/0x10 [ 247.068424][T14649] ? errseq_sample+0x53/0x70 [ 247.069758][T14649] ? file_init_path+0x4fe/0x760 [ 247.071155][T14649] ? do_futex+0x122/0x350 [ 247.072451][T14649] ? __pfx_do_futex+0x10/0x10 [ 247.073955][T14649] ? __sys_socket+0xac/0x260 [ 247.075322][T14649] ? __pfx___x64_sys_futex+0x10/0x10 [ 247.076830][T14649] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 247.078394][T14649] __x64_sys_bpf+0x78/0xc0 [ 247.079656][T14649] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.081139][T14649] do_syscall_64+0xcd/0x4c0 [ 247.082460][T14649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.084184][T14649] RIP: 0033:0x7f057ed8ebe9 [ 247.085455][T14649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.090765][T14649] RSP: 002b:00007f057fc38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.093129][T14649] RAX: ffffffffffffffda RBX: 00007f057efc5fa0 RCX: 00007f057ed8ebe9 [ 247.095388][T14649] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 247.097599][T14649] RBP: 00007f057ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 247.099812][T14649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.102049][T14649] R13: 00007f057efc6038 R14: 00007f057efc5fa0 R15: 00007fff7611a468 [ 247.104370][T14649] [ 247.105277][T14649] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 247.107338][T14649] CPU: 3 UID: 0 PID: 14649 Comm: syz.8.2576 Not tainted syzkaller #0 PREEMPT(full) [ 247.109951][T14649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.113002][T14649] Call Trace: [ 247.113982][T14649] [ 247.114851][T14649] dump_stack_lvl+0x3d/0x1f0 [ 247.116201][T14649] vpanic+0x6e8/0x7a0 [ 247.117362][T14649] ? __pfx_vpanic+0x10/0x10 [ 247.118679][T14649] ? reg_bounds_sanity_check+0x62b/0x1200 [ 247.120314][T14649] panic+0xca/0xd0 [ 247.121410][T14649] ? __pfx_panic+0x10/0x10 [ 247.122746][T14649] check_panic_on_warn+0xab/0xb0 [ 247.124179][T14649] __warn+0xf6/0x3c0 [ 247.125313][T14649] ? reg_bounds_sanity_check+0x62b/0x1200 [ 247.126939][T14649] report_bug+0x3c3/0x580 [ 247.128210][T14649] ? reg_bounds_sanity_check+0x62b/0x1200 [ 247.129829][T14649] handle_bug+0x184/0x210 [ 247.131063][T14649] exc_invalid_op+0x17/0x50 [ 247.132391][T14649] asm_exc_invalid_op+0x1a/0x20 [ 247.133783][T14649] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 247.135588][T14649] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 66 76 aa ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 247.140872][T14649] RSP: 0018:ffffc90004a472f8 EFLAGS: 00010286 [ 247.142601][T14649] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90007501000 [ 247.144830][T14649] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 247.147058][T14649] RBP: ffffc90004a473f0 R08: 0000000000000001 R09: 0000000000000000 [ 247.149297][T14649] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888064ac8000 [ 247.151529][T14649] R13: ffff88806512e324 R14: ffff88806512e31c R15: ffff88806512e2d0 [ 247.153783][T14649] ? __warn_printk+0x1a5/0x350 [ 247.155145][T14649] ? reg_bounds_sanity_check+0x62a/0x1200 [ 247.156777][T14649] reg_set_min_max+0x183/0x2c0 [ 247.158160][T14649] check_cond_jmp_op+0x19b0/0x72d0 [ 247.159646][T14649] ? states_equal+0xb0/0x1d10 [ 247.161005][T14649] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 247.162607][T14649] ? __asan_memset+0x23/0x50 [ 247.163952][T14649] do_check_common+0xa13e/0xb410 [ 247.165381][T14649] ? __pfx_do_check_common+0x10/0x10 [ 247.166879][T14649] ? lockdep_hardirqs_on+0x51/0x110 [ 247.168369][T14649] ? kfree+0x2b4/0x4d0 [ 247.169541][T14649] ? bpf_check+0x7c34/0xc670 [ 247.170864][T14649] bpf_check+0x869f/0xc670 [ 247.172166][T14649] ? __pfx_bpf_check+0x10/0x10 [ 247.173557][T14649] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 247.175115][T14649] bpf_prog_load+0xe41/0x2490 [ 247.176466][T14649] ? __pfx_bpf_prog_load+0x10/0x10 [ 247.177994][T14649] ? avc_has_perm+0x144/0x1f0 [ 247.179358][T14649] ? selinux_bpf+0xde/0x130 [ 247.180665][T14649] ? bpf_lsm_bpf+0x9/0x10 [ 247.181914][T14649] __sys_bpf+0x4a3f/0x4de0 [ 247.183256][T14649] ? __pfx___sys_bpf+0x10/0x10 [ 247.184630][T14649] ? errseq_sample+0x53/0x70 [ 247.185941][T14649] ? file_init_path+0x4fe/0x760 [ 247.187357][T14649] ? do_futex+0x122/0x350 [ 247.188606][T14649] ? __pfx_do_futex+0x10/0x10 [ 247.189959][T14649] ? __sys_socket+0xac/0x260 [ 247.191298][T14649] ? __pfx___x64_sys_futex+0x10/0x10 [ 247.192867][T14649] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 247.194443][T14649] __x64_sys_bpf+0x78/0xc0 [ 247.195755][T14649] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.197231][T14649] do_syscall_64+0xcd/0x4c0 [ 247.198539][T14649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.200234][T14649] RIP: 0033:0x7f057ed8ebe9 [ 247.201503][T14649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.206922][T14649] RSP: 002b:00007f057fc38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.209272][T14649] RAX: ffffffffffffffda RBX: 00007f057efc5fa0 RCX: 00007f057ed8ebe9 [ 247.211505][T14649] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 247.213742][T14649] RBP: 00007f057ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 247.215954][T14649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.218183][T14649] R13: 00007f057efc6038 R14: 00007f057efc5fa0 R15: 00007fff7611a468 [ 247.220409][T14649] [ 247.222109][T14649] Kernel Offset: disabled [ 247.223371][T14649] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:00:09 Registers: info registers vcpu 0 CPU#0 RAX=000000000037717d RBX=0000000000000000 RCX=ffffffff8b93fc29 RDX=0000000000000000 RSI=ffffffff8de50a38 RDI=ffffffff8c162a00 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab5290 R15=0000000000000000 RIP=ffffffff8b93e78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdd1e6fc7a0 CR3=000000003dc7d000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555584b3f7e0 0000555584b3f7e0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffc4c1df0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffc4c1f76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffc4c1f76 00007ffffc4c1f7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1da12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1da12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1da12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1da12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1da12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1da12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff93fa4048 RBX=ffff888065650af0 RCX=00000000aec47373 RDX=5c518eb5ec6f5223 RSI=00000000ba812c85 RDI=ffff888065650bb8 RBP=0000000000000000 RSP=ffffc900006a0950 R8 =5c518eb5ec6f5223 R9 =0000000000000001 R10=0000000000000005 R11=0000000000000000 R12=ffff888065650bb8 R13=ffff888065650000 R14=000000002bdd35c8 R15=ffffffff97472b08 RIP=ffffffff8197af41 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555584b3f500 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdd1d85f190 CR3=000000003dc7d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffc4c1bd0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffc4c1f76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffc4c1f76 00007ffffc4c1f7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1da12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1da12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1da12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1da12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1da12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd1da12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f687370616e5300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff91428108 RBX=0000000000000001 RCX=0000000000014ec2 RDX=0000000000014ec3 RSI=00000000000a97da RDI=0000000000014ec2 RBP=ffffc900007ef730 RSP=ffffc900007ef678 R8 =000000000003ec49 R9 =0000000000000000 R10=0000000000000004 R11=00000000000082fd R12=ffffc900007ef738 R13=ffffc900007ef6e8 R14=ffffc900007ef71d R15=ffffffff8182fda7 RIP=ffffffff816ae772 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555584b3f808 CR3=0000000025f49000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555583aefe10 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555583af223c 0000555583af1b40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555583af1584 0000555583af0f10 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff0404a7 e208000108000601 3d90200800061000 2010000601719a10 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10e80300080010e0 0300080010d80300 080010d0030fffff ffffffff0410c003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080010b8030008 0010b0030fffffff ffffff0410a00300 0800109803000800 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1090036408001088 0300080010800300 0000000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff df080fe003000800 0fd8030008000fd0 030fffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020000001818 080280030280040f 90030608000f8803 0c08000f80030fff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040fc0030008000f b8030008000fb003 0fffffffffffff04 0fa0036f00000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff df080fe003000800 0fd8030008000fd0 030fffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0122808810000380 0401000000080606 01599858080003e0 0300100003d0030f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643cf5 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc90004a46c60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9b112060 R15=ffffffff85643c90 RIP=ffffffff85643d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f057fc386c0 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002bbfe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000fefce002 Opmask02=00000000fefcf800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7611a976 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7611a976 00007fff7611a97c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057ee12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057ee12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057ee12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057ee12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057ee12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057ee12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057ef974a8 00007f057ef974a0 00007f057ef97498 00007f057ef97470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057fafd100 00007f057ef97460 00007f057ef97478 00007f057ef974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f057ef974b8 00007f057ef974b0 00007f057ef974a8 00007f057ef974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000