last executing test programs: 1m6.12001298s ago: executing program 2 (id=1008): mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='exfat\x00', 0x400080, &(0x7f00000001c0)='discard') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000600)={@dev={0xfe, 0x80, '\x00', 0x38}, 0x5, 0x0, 0x0, 0x2, 0x3, 0x84ea}, &(0x7f0000000700)=0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000ff0710b400000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x200, 0x5, 0x6, 0x6}, &(0x7f00000004c0)=0x98) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0xe7, 0x80000001, 0x101, 0xb, 0xc}, 0x14) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000002c0), 0x4) r4 = syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000080)=0x80000001, 0x4) r6 = syz_pidfd_open(r4, 0x0) ptrace$pokeuser(0x6, r4, 0x2, 0x1) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000200)={[{0x6, 0x6, 0xd9, 0x0, 0x9, 0x7f, 0x3, 0x4, 0x0, 0xe9, 0xec, 0x6, 0x3}, {0x2, 0x5, 0x20, 0x2, 0x9, 0x3, 0x8, 0x6, 0xf8, 0x92, 0x5, 0x6, 0xfa}, {0x1, 0x8, 0xc, 0x6, 0xf9, 0x6, 0x1, 0x81, 0x9, 0x2, 0x5, 0x81, 0xffffffffffff2c47}], 0xb3b}) 1m5.213478828s ago: executing program 2 (id=1029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x65) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x6, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x402, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="380000002d000100000000000000000008000000", @ANYRES32, @ANYBLOB="3352483aa447a4d98ab0022c6bd6d01649a90400180000", @ANYRES32=0xee00, @ANYBLOB="18000080140001003170d5cb1bc451e04e70f5549e82ac73"], 0x38}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)={0x38, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8, 0x5, "4480f3ba"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a00)={0x264, r7, 0x508, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x90, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x36, 0x5, "d37f142fb74a8ae9ac63c46cfd7763234ada478616535804050bfe9b2f87cb4e9c7137b96ab6c96ce2a00c04c31726629e18"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@,.\\*^\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}+q@+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^}\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfe0}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf4d}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}, @ETHTOOL_A_BITSET_VALUE={0x48, 0x4, "d201b74060dbe5da134084c2d3952658b8086895370b160d9fe6d8666963569a868cb7ded26b6cbb023ffc4c44e6ef1239ace26ca46c836f6b9f4cc89fd84461df432017"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5747}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x10}, 0x48000) 1m5.052260766s ago: executing program 2 (id=1033): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) r2 = syz_io_uring_setup(0x802f10, &(0x7f00000003c0)={0x0, 0x40c4cc, 0x8000, 0x2, 0x1}, &(0x7f00000004c0)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0xc044) io_uring_enter(r2, 0x5b43, 0x94d, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x27) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x2142001, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=rma,port=0x0000000000004e22,rq=0x0000000000000001,\x00\x00']) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x4, 0x2000, 0x1000, &(0x7f00007c5000/0x1000)=nil}) r8 = dup(r7) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) r9 = syz_io_uring_setup(0x81f, &(0x7f00000002c0)={0x0, 0xbc02, 0x10, 0xfffffffc, 0x30c}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xa, 0x0, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x3, [0x6, 0x1]}, {0x80000000, 0x0, 0xa, [0xfffffff7, 0x20009]}, 0x4, [0x200005, 0x80000000]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47bc, 0x0, 0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, @value=r8}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1m4.976803596s ago: executing program 2 (id=1037): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x10, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x0, 0x9}, {0xc, 0xffff}}}, 0x24}}, 0x14) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4091) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000540)={0x4, 0xc}}) r2 = timerfd_create(0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="78224fc427ed619f319b73733d616e792c63616368653d66736361636865"]) (rerun: 64) chdir(&(0x7f0000000100)='./file0\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) quotactl_fd$Q_SYNC(r2, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f0000000200)={0x0, 0x1d, 0x4, @tid=r4}, &(0x7f0000000280)) (rerun: 32) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x6e00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000340)={0x4, 0x9, {r4}, {0xee00}, 0x1, 0x21}) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x4000) (async) write$vhost_msg_v2(r3, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x10003, 0x4, 0xdddd2000, 0x2000, &(0x7f0000102000/0x2000)=nil}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc10dd83", @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0800a000d608000008009f000d000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000080)) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) (rerun: 64) 1m4.840451283s ago: executing program 2 (id=1039): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000900)="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", 0x45c) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x251c0c, &(0x7f0000000340)={'trans=virtio,', {[{@cache_mmap}, {@cachetag={'cachetag', 0x3d, '{]-\\#\'\':'}}, {@privport}, {@ignoreqv}, {@msize={'msize', 0x3d, 0xb}}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, ')+!\x00'}}]}}) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200000000000000ff000040"]) 1m4.518675352s ago: executing program 2 (id=1040): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x5, 0xffff}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20084081}, 0x84010) sendmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000080)=0x2, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x202cc0) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x2, 0x20}) 1m4.483928765s ago: executing program 32 (id=1040): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x5, 0xffff}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20084081}, 0x84010) sendmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000080)=0x2, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x202cc0) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x2, 0x20}) 50.634742564s ago: executing program 1 (id=1264): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x20081) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x73ca9000) userfaultfd(0x80001) r2 = socket$nl_route(0x10, 0x3, 0x0) timer_delete(r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000640)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x7fff, 0x0, 0x62, 0x200}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x9, {0x1a9}}}}]}]}, 0x68}}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e240006000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x2) 50.631426616s ago: executing program 1 (id=1269): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a0101010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x8c880, 0x0) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600000f500140600fe80b5a70000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f00000029c0)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x0, r5, 0x3, {0x6, 0x6d4}, 0xef}, 0x1) r8 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 50.493191301s ago: executing program 1 (id=1271): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f5133"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x4, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) 50.4281171s ago: executing program 1 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x28, 0x8, 0x0, 0x2c, @dev={0xfe, 0x80, '\x00', 0x33}, @loopback, 0x700, 0x1, 0x800000, 0xc}}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0x4, 0x4, 0x390, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [0x0, 0x0, 0x0, 0xff000000], [0xff000000], 'pim6reg0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x58}}, @common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xa8, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x73}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4048804}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000200000005000000180001801400020073797a5f74756e00000000000000000018000380100003800c0001800800010004000000040001"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=0x64010100, 0xe, 0xb}}) 50.3626409s ago: executing program 1 (id=1276): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x6, 0x4e8d0, 0x107b9c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000140)={[{@dyn}]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffe, 0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000080) 50.203324943s ago: executing program 1 (id=1280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002280)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000000, 0x0, 0x0, 0x200000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127b, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd528, 0x1, 0x5, 0x5, 0x3, {0xa, 0x1, 0x0, 0x2, 0x3, 0x5}, {0x3, 0x2, 0x8001, 0x9fb, 0x0, 0xfff}, 0x2, 0x80000001, 0x80000001}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r1 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d9, 0x40, 0x2, 0x2b1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0xffffffff) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x8000000) r3 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$vcsa(0x0, 0x7, 0xc25c2) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfe}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 33.845951905s ago: executing program 33 (id=1280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002280)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000000, 0x0, 0x0, 0x200000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127b, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd528, 0x1, 0x5, 0x5, 0x3, {0xa, 0x1, 0x0, 0x2, 0x3, 0x5}, {0x3, 0x2, 0x8001, 0x9fb, 0x0, 0xfff}, 0x2, 0x80000001, 0x80000001}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r1 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d9, 0x40, 0x2, 0x2b1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0xffffffff) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x8000000) r3 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$vcsa(0x0, 0x7, 0xc25c2) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfe}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 21.159695825s ago: executing program 3 (id=1547): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x29, 0xb, 0x70bd27, 0x4000, {0x3}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="78a449a0"]}]}, 0x1c}}, 0x4040080) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) accept4(r0, &(0x7f0000000140)=@tipc, &(0x7f0000000200)=0x80, 0x80800) close_range(r0, r1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x1, 0x5000, 0x1000, &(0x7f0000fa2000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close(r6) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 21.158054278s ago: executing program 3 (id=1549): sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x2044) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a3000000000090002"], 0x2c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200aa54516c9ca331d51d62140000000000b205059f8f9df67a84b6a05e659b9c630140d332de55f864f4feb1a16e4b331489133ccebe761aad9c146e187168dbb25ab389331b370919e0a945babb"], &(0x7f0000000140)=""/148, 0x26, 0x94, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000091000040"]) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x4000007f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001a00010800000000002000000a008000d3df4b096a2111abcf8ab1a691ff5675d1d1a52ac116cab5a437e7cea40dbeebd5b3179ffb0dfb9162e991f1f5a20a6d39d308d82e008fc7a5b939422a90324ced53e6fbc80b40380d134ce3a438433dc995295bd2ddfff3fd9707c755c37c1bc66eeaeb7798e7a2219d18052dd4885f4b3136de40245d9b0de5d2bf0f55b0ef0d33aeda0140fea1260409f6f8e2e9b69e335f169f3745353fd669311b06db490dac4f49227a44437d65b21daf3f9b3e7b88", @ANYRESDEC=r3, @ANYBLOB="00000000080002000000000014000100fc00"/32], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000001380), &(0x7f00000013c0)=0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r12 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r12, 0xc0481273, &(0x7f0000000100)={'\x00', 0xfff, 0x8, 0x2, 0x5, 0x5993b340}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="470f080fa1c44385449d470000000066baf80cb8abeb098def66bafc0cec66410fc7b500000000f3400f0966b8c3000f00d0440f019f32880000f2643666f3420f238d0f01cf", 0x46}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r11, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4fd615fdf6442c5f, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 21.147485464s ago: executing program 3 (id=1552): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) r2 = getpid() (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r1) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYRES32=r3], 0x14}}, 0x0) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="600002bc1840384a3800", @ANYRES16=r4, @ANYBLOB="080028bd7000fedbdf2502000000140007000000000000000000000000000000000014000900fe8000000000000000000000000000aa060001004e22000008000800ac14141114000900fe880000000000000000000000000101"], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x4000) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x32) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f00000000c0)='./file0\x00') (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) (async) r6 = openat(r5, &(0x7f0000000000)='./file0\x00', 0xa990427eadc88f29, 0x3a7) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095", @ANYRES16=r4, @ANYRES16=r2, @ANYRES32=r5], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000010140)={0x2020}, 0x2036) write$P9_RREADLINK(r6, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) (async) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101480) syz_usb_disconnect(r9) (async) r10 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="4003000000000deca7f9a4e9eedccf0624603a51bf5be49ed5921e6f27edb400697af441c9c54c11699b1394ac6736f004a5556dd7d7eaea199e231fe2bccb5d0069429f0b1da64f417b051c94315fa0b615952ee087dff2a10ea920"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$uac1(r10, 0x0, 0x0) ioctl$EVIOCRMFF(r9, 0x550c, 0x0) (async) kcmp(r2, r2, 0x4, r1, 0xffffffffffffffff) fcntl$setown(r1, 0x8, r2) (async) sendfile(r1, r0, &(0x7f0000000000)=0x7, 0x80) 21.093813147s ago: executing program 3 (id=1554): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000000)={0x2, 0x40}) 20.962068475s ago: executing program 3 (id=1556): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000001eaf"]) 20.686865426s ago: executing program 3 (id=1557): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x3, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00110001332564aa58b9a64411f6bbf44dc48f57", 0x39}, {&(0x7f0000000100)="6d792fcb786fe9cfb4b7458a8fa29d356f5030f0d21c91dc20744b46406ee3bc6d64915bf6a51c209d312f0c9b6983a015301d409bbc3f30c2dc49122ccea96f96915a422f195c66c8e0c7c32c0cfe347caad47075b0fed3e940c82097eefb1c10e1b065b54c4f4dee7f", 0x6a}, {&(0x7f0000000180)="8109a24d65de1a2a0d0a84fdfabac52e8c455345c5770d6ecd2af6c37ff7bd3dfa339694c36872f827733296f60d40a3aa80b6f77bf43c6029864383205e4ee3b155564b955086836a36aa1233e751939bf15616971a", 0x56}, {&(0x7f0000000300)="029a8da445690d05d2a1032209e0c3e3668f875e9927126848b0edf1b111d5b1148a96e00377baf4048c5a849a4f6dd693e786ddc46df4f6780ec661d29eacb5872b0eaa2028a67972a8a06d4f55b0d2c73fb2e87465ab1771fa7f241868043ebba421e9d1c66577ab3c4804f16c85091a0e9af5857e5d2935d456a61ec40dc6ed", 0x81}, {&(0x7f0000000200)="292dec3f56386b9074f6a251480c13ecf8328e2cc27864fbaf201939907677a24b961c68e8ae4c2b723ed6dcbd16cef291fe066524f90c6b1b74228030b41add74e2d16290668e7780e631cff7f75865aff063d3f008405a0b", 0x59}], 0x5) 20.652017331s ago: executing program 34 (id=1557): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x3, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00110001332564aa58b9a64411f6bbf44dc48f57", 0x39}, {&(0x7f0000000100)="6d792fcb786fe9cfb4b7458a8fa29d356f5030f0d21c91dc20744b46406ee3bc6d64915bf6a51c209d312f0c9b6983a015301d409bbc3f30c2dc49122ccea96f96915a422f195c66c8e0c7c32c0cfe347caad47075b0fed3e940c82097eefb1c10e1b065b54c4f4dee7f", 0x6a}, {&(0x7f0000000180)="8109a24d65de1a2a0d0a84fdfabac52e8c455345c5770d6ecd2af6c37ff7bd3dfa339694c36872f827733296f60d40a3aa80b6f77bf43c6029864383205e4ee3b155564b955086836a36aa1233e751939bf15616971a", 0x56}, {&(0x7f0000000300)="029a8da445690d05d2a1032209e0c3e3668f875e9927126848b0edf1b111d5b1148a96e00377baf4048c5a849a4f6dd693e786ddc46df4f6780ec661d29eacb5872b0eaa2028a67972a8a06d4f55b0d2c73fb2e87465ab1771fa7f241868043ebba421e9d1c66577ab3c4804f16c85091a0e9af5857e5d2935d456a61ec40dc6ed", 0x81}, {&(0x7f0000000200)="292dec3f56386b9074f6a251480c13ecf8328e2cc27864fbaf201939907677a24b961c68e8ae4c2b723ed6dcbd16cef291fe066524f90c6b1b74228030b41add74e2d16290668e7780e631cff7f75865aff063d3f008405a0b", 0x59}], 0x5) 1.690022746s ago: executing program 6 (id=1877): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) futex(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x4) (async) socket(0x2, 0xa, 0x5) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0x2, 0x7, 0xdd3, 0x34325258, [0x5, 0x400], [0x2, 0x7], 0x1}}) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x30d202, 0x0) (async) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, r4) (async) r5 = getpgid(r4) setpgid(0x0, r5) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000) (async) r6 = creat(&(0x7f0000000240)='./file2\x00', 0xecf86c37d53048fe) close(r6) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='status\x00') fchdir(r7) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000002d40)={0x0, 0x3e, "081296f25edf080bcda6cbf727df0c17de977bf037f2fce3a727dc8704ad11f4f6d412825ed25b281974153030262bcc4c581dcb7b376398d67f60d05b0f"}, &(0x7f0000002dc0)=0x46) 1.625843276s ago: executing program 6 (id=1878): r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200080, 0x85) lsm_set_self_attr(0x0, 0x0, 0xd1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000008c0)=r5, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r3, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r3, &(0x7f0000000300), 0x5b0) ppoll(&(0x7f0000000240)=[{r1, 0x40cc}, {r2, 0x8000}, {0xffffffffffffffff, 0x240}, {r0, 0x2889}], 0x4, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x9]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x40050) ioctl$RTC_WKALM_RD(r0, 0x40187013, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa6503, 0x0) 1.624984206s ago: executing program 6 (id=1879): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x9) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) close(r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140), &(0x7f0000019100)={[&(0x7f00000190c0)='\xd1d;8\xf3\xcf:\xc8\xfe[ \x11\xa1\xb1']}) 1.52945883s ago: executing program 6 (id=1881): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="58c6dafe150100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000900010000800800070001000000140035006d6163766c616e30"], 0x58}}, 0x24044891) (async) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x40002) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000200)) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b4000040"]) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r5) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r7, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x44) (async, rerun: 32) ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1) (rerun: 32) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0x0, 0x28c000, 0x8}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c00070c000000000000000002000000", @ANYRES32=r9, @ANYRES8=r5], 0x34}, 0x1, 0x0, 0x0, 0x28154}, 0x20024090) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8480142}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="74000000050605000000000000000000000000010900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900030073797a310000000005000100070000000900030073797a30000000000900430073797a31000000000900020073797a3000000000"], 0x74}, 0x1, 0x0, 0x0, 0x40014}, 0x800) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4) (async) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) (async) r11 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r11, 0xffffffffffffff73, 0x2) 845.6344ms ago: executing program 0 (id=1894): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x4}, 0x38) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x3}) 844.690134ms ago: executing program 0 (id=1896): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)="2c83aa84cf5fe4d7dade16ecab3739093c85dd730a67880b9a4c94d4c17f9672ff0b0d56bdff6e47f73a7040960d2b549c7700c9968bec5f17dadeffbe008db8fe7a93c101a1f774f5520b491af2a108d9681c6aadb0364e1185c93403338ef338653a4a16034eae697763e312d310c6800e4490ae7a2534ae7cdb6b063c0493aeaa3b1187", 0x85}, {&(0x7f0000000b40)="afa2eaab9c79f40d1052a81e43025e22613c372462ed44b1c73cfdde2f0812af48b363018d142cc8f939b4bb434f11c0c96a38b0e5db83538610dfc4442cc056dd258627517f498ab9d138d2b870db7929dabeaccc0654a88ce492413ee0cb6313cbc2174e677d2feffb5b33b69e01c572259107cc5c29d42619743037ca49", 0x7f}, {&(0x7f0000000c40)="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", 0xc49}], 0x3}, 0x20000000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000002c0)={0x2, 0x2, 0x0, "57bf65ae889de24e4413192fb16be126e5c0ccd19e4f28f091f6cc884dba98eb", 0x59455247}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETLINK(r6, 0x400454ce, 0x6) r7 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x48010) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)="2c83aa84cf5fe4d7dade16ecab3739093c85dd730a67880b9a4c94d4c17f9672ff0b0d56bdff6e47f73a7040960d2b549c7700c9968bec5f17dadeffbe008db8fe7a93c101a1f774f5520b491af2a108d9681c6aadb0364e1185c93403338ef338653a4a16034eae697763e312d310c6800e4490ae7a2534ae7cdb6b063c0493aeaa3b1187", 0x85}, {&(0x7f0000000b40)="afa2eaab9c79f40d1052a81e43025e22613c372462ed44b1c73cfdde2f0812af48b363018d142cc8f939b4bb434f11c0c96a38b0e5db83538610dfc4442cc056dd258627517f498ab9d138d2b870db7929dabeaccc0654a88ce492413ee0cb6313cbc2174e677d2feffb5b33b69e01c572259107cc5c29d42619743037ca49", 0x7f}, {&(0x7f0000000c40)="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", 0xc49}], 0x3}, 0x20000000) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000002c0)={0x2, 0x2, 0x0, "57bf65ae889de24e4413192fb16be126e5c0ccd19e4f28f091f6cc884dba98eb", 0x59455247}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) (async) ioctl$TUNSETLINK(r6, 0x400454ce, 0x6) (async) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98}) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x48010) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791095000000000061000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3117a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fc3b5fd11e6ca750a6dc5dba2cd1d9fed1fb63bafef7d7bdd5bad81e40379623de9000000000054395605e46e00ded1acb26f8fa9c2702a8aac94fcbbdd2fbbba184bc337d5cb0c04a788fd76b402d5229125c274b171290fdfb32d00504a2a4f797a0103b19a04911e2ab1f208858be1873ee684e45ce2dd5de070f1aabdaa2de7edcbd27f403caffe57995b4e2d914a3c5b9bcf7ba242d1ed391d564b18b3de9c1db2b9232c5e"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) 842.295489ms ago: executing program 0 (id=1898): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000300090900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000300090900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)={0x1}) 683.017271ms ago: executing program 4 (id=1901): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000400)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "20e48560d99f00", 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800002, 0x110, 0xffffffffffffffff, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xa, 0xfff3}, {0xfff2, 0xfff1}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x4044040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000040)=0x335, 0x0, 0x4) 682.875928ms ago: executing program 0 (id=1902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001002a08000000dbdf2500000000", @ANYRES16=r0, @ANYBLOB="0220010008200200140003006e657464657673696d300000000000000a00010082cc6cb2f5110000"], 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x20008044) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000140)=0x9, 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) 630.811752ms ago: executing program 0 (id=1904): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x101800, 0x3) fsetxattr$security_evm(r2, &(0x7f0000000100), &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0xe4, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) (async) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_uid={'access', 0x3d, r10}}]}}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket(0x400000000010, 0x3, 0x0) (async) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r12, &(0x7f0000000340), 0x8) r13 = accept4(r0, &(0x7f0000000140)=@hci, &(0x7f0000000040)=0x80, 0x80000) sendmsg$kcm(r13, &(0x7f0000000340)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="0d912a7ea2086c5fe197ab397a5d3c6bd4ecf3910cfbc0f0b6797a38b25d8a08e2fe4aeb79d0c5056da4ff7cb447e361723cdd774ae1", 0x36}, {&(0x7f00000003c0)="a388c3e7ed8b03a2668fd838fccdc8b68ae2904d931ada9739e408b3e6fcec2bd8459c68b49e3e9979d7fabf1ebe3e31bba1dc6a5efa482aa41d5da6c9038b258e21a96211175bdce8b762fa47188c33c7a9d6b4b8254612323e7610c7daf2105184d1", 0x63}, {&(0x7f0000000440)="a532193094c15d61b31129adf7f29e3eb6dfea4979cbd56880e90c102505ff39a7a878e8ca079cf6886791de77bc30988c7dda8aa5e4fa3498fca485935a91670b34fa4013e3f9d6ed202bcbbabaa29a25bccba850361c85bdcdda3cdf45f9", 0x5f}, {&(0x7f00000002c0)}, {&(0x7f0000000540)="e6c3a500345d77a932a6d1bbcfaf461cbb09c705d17cfac4f3b6dcfa14fc0ffcd159902b4adbc9acf428c5ee6b7ed49830f8d7c17031fc48a5d15ec5d59e19c7e01a3cb3", 0x44}], 0x5, &(0x7f00000028c0)=ANY=[@ANYRES16=r1], 0x10a0}, 0x40) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000000080)) (async) sendmsg$BATADV_CMD_GET_HARDIF(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32=r3, @ANYBLOB="ff165e7673e05a61bb62eff00b59b71b17659274cb1f5ceb3257bbd7601df346a1c6e73d41409bc468a847cbddfee1c31e9bfa8d7cb0c7aa263cf36ea6bd97fe24d8e9a59397879ce76c51e07e3ae6d114ae851adf04e45a0aa6b7e7208cd175fd999570d0cd68f6cfd0b41aab99b8a28f7e08f5b5426888df7c217e9d706dcc6340c2baf105ee76f6f246f895f7e1fb9da7ec0e4aead441570fcd55a04d85882e21d221634cc9c4f55255dc865296d2898ff2eb335c1c1ce8f3bcab40b5a4be433ed276502d71ca8698bbd9e9d80cd52a62bd3b61e26f79d149c3b5d925775f85c762cf205ebc7d6adc06f26be3b5f2a01a5157ad7dc095e029476b5f7139d32a1df4b8e0c740fc5433c10e5d2ab9e094c8b19d8c30d12c13d534abde61d8b3b0b3b6e5f8cae7cd8206d5bf70240528a59d135438447696cfd5648e3ca5e5aeae1946eaed6b5b64c8d2712b8de6"], 0x1c}, 0x1, 0x0, 0x0, 0x28004010}, 0x40000) 544.363382ms ago: executing program 4 (id=1905): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a0021002bbd7000f8dbdf250a100002fd0000090010000008000400", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0xad, 0x0, &(0x7f0000001f40)="46c2aabcdb6f5e65435bde2c21c55fdb6561614b34b427e0b8e5a5300f3fe4a7199eee4e42db41cf4e30d530748a7784c6ecc622f224db7ab4e3520b584f1d45603d8c4aea1cd6dedff0298d3ca35785d4c71260afdbcd32bcfac92ff9d1e1f498896bc9b7c8cdef645f2a67e1504d0dcc3dadf0636efea727826554cd44e269b1e651654442acac04b588f44ac59d877e8a1568042af3d4774670d13e136762c6b027dd4efe536a71f523f44a"}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000080001e"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x81, 0x10e) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xee, 0xb, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffffffffd5f) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x3c, 0x0, &(0x7f0000000180)=[@increfs={0x40046304, 0x3}, @increfs_done, @register_looper, @increfs_done={0x40106308, 0x1}, @decrefs={0x40046307, 0x2}], 0x69, 0x0, &(0x7f0000000300)="79d5b756f800e808d2a3f0a82e809091dfdaa52c88ad19fd3ece63ddbe54e1e04bbfda9200b1fc330e7d5887b28c6623b72ec7f4afe402e9a1f3370c4479a4b48cc9a1c1140441cc121d2dec00660bd54ad4fd4db79df10c09566b9a9139c735e758967f0dc7fef96e"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x74, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x200}, @increfs_done], 0x69, 0x0, &(0x7f0000000540)="a99e8ee6421da28648c4343d831f983495953e8c336c3a6fe51db145b1c6c4e041d90bae8f0bb2e573735b9496dc3063c16843fc77f0dc6fef91e6b6439fc7aef421b3ffb495fefdd677426cb6c9d6d6e6eaa4aa6956e1d60a8f448083a6819c97550dafc739615097"}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 543.520443ms ago: executing program 4 (id=1906): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="3663ff3ac7333d", 0x7}, {&(0x7f0000000280)="e02584eeb69ae6b342", 0x9}], 0x2}], 0x1, 0x2004001) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1}]) ioprio_get$pid(0x2, 0x0) r3 = io_uring_setup(0x4aa8, &(0x7f0000000040)={0x0, 0x28aa, 0x80, 0x2, 0x1db}) syz_io_uring_setup(0x3e96, &(0x7f0000001680)={0x0, 0x4627, 0x400, 0x3, 0x37d, 0x0, r3}, &(0x7f0000000000), &(0x7f0000001740)) 527.465506ms ago: executing program 0 (id=1907): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = memfd_create(&(0x7f0000000480)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\xba\x89#=2G0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f00000001c0)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x844e5877a525e01e) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000e, 0x110, r2, 0xb12ea000) fcntl$getown(r1, 0x9) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x101080, 0x0) r6 = dup(r0) io_setup(0x1, &(0x7f0000000280)=0x0) r8 = eventfd(0x9) io_cancel(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f00000002c0)="c0a7898bdc9ff3890d15dafeffd3158466a3b9352f575b8308d23e86f5b86a48db069cd064f2fbf56e6258ca98222c60e9bf3039b252ea303297ca0d9300d1afd2be040063430bcca96dfcf79eb2fdc9f04d2db71e2e3faf336628712163ea57df36e7f714848f500ff7b3d1b1a26c12fb4df307dc89b6e0666244cfc0806afaea2ef7f66a7ba23f930adb0d9efbfd69890c5c3864204985459e8b0b6702707ace1c8447d5631a5317b2b2b5c9577313541f4acc", 0xb4, 0x1, 0x0, 0x2, r8}, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000600)={0x1, 0x0, &(0x7f0000000400)=""/9, &(0x7f0000000440)=""/141, &(0x7f0000000500)=""/220, 0x2}) ioctl$CEC_ADAP_G_CAPS(r3, 0xc04c6100, &(0x7f0000000640)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000980)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], 0xa, 0x6, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000009c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}, {}, {}], &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x9, 0x0, r9}) io_destroy(r7) io_pgetevents(r7, 0x8, 0x3, &(0x7f0000000a40)=[{}, {}, {}], &(0x7f0000000ac0)={0x77359400}, &(0x7f0000000b40)={&(0x7f0000000b00)={[0x4]}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000b80)={{0x7}, 0x1, 0x7, 0x1ff, {0x0, 0x7f}, 0x5}) io_getevents(r7, 0xa2, 0x1, &(0x7f0000000c00)=[{}], &(0x7f0000000c40)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x400000, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)={@map=r10, r3, 0x16, 0x2026, r4, @void, @void, @value=r11}, 0x20) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000d40)=0x7f, 0x4) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d18, &(0x7f0000000d80)) socket(0x1d, 0x800, 0xaffe) openat$cuse(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) 289.751454ms ago: executing program 5 (id=1912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 287.115757ms ago: executing program 5 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) (rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) (async) r2 = syz_open_dev$evdev(&(0x7f0000001400), 0x4, 0x113100) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000001440)=""/1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d"], 0x110}}, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x3, 0x6, 0x0, 0x2}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl(r5, 0x8b32, &(0x7f0000000040)) (async, rerun: 32) read$FUSE(r3, &(0x7f0000000c40)={0x2020}, 0x2020) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb910021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000c068f2188a00ff150048035c3b61c1d67f6f94007134cf6efb80073f6a26d316b801a7cee4000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae2383b924e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452ad2954b43370e970392", 0xdc}], 0x1}, 0x4000044) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 203.856026ms ago: executing program 5 (id=1914): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x420040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002540)=ANY=[@ANYBLOB="3c00004f702a1b040000000000000013977b8c0046a354462ce0399557965445dd56949ae36e950bc0729d1ac141ebcfc3bf7239430f67d8de08be0b90a73bf5188eb6a1c477bc9c88ee6d5d995a6bd36bc643ea6fe89041e5d2917d9b6c829879b4538b3b874aaea214a20358dada01d9dadf2f06f9468451a50b7f69e30f52d80cdf8780c29837f873248c85850dce56852784c7647a3db640e57a9cbd45658d5a9c74405cf17e1dbb46ae801667605d1f06ffe1b0a38c6ce3f9e7de1b71ad0b060067", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c0002800600010001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000002500)) r2 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000100)={0x6, r2, 'id0\x00'}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0xde, 0x10, 0x6, 0x10, @dev={0xfe, 0x80, '\x00', 0x3e}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x42a3a858, 0x7}}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) close(r4) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0x10, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0x0, 0x3}, {0x1, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x2000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @private, @broadcast}, &(0x7f00000003c0)=0xc) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x110000, &(0x7f0000002640)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0xa}}, {@blksize={'blksize', 0x3d, 0x1800}}]}}) read$FUSE(r10, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000002300)={0x50, 0x0, r11, {0x7, 0x9, 0x0, 0xffffffff90010002, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) syz_fuse_handle_req(r10, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r10, &(0x7f000000fdc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r10, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r13}, 0x10) syz_fuse_handle_req(r10, &(0x7f0000009080)="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", 0x2000, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x6, {0x8, 0xa, 0x0, {0x0, 0x6, 0x1, 0x3fffffffffe, 0x4, 0x100000000004, 0xe767, 0x8, 0x10000, 0x8000, 0xbfffffff, r14, r12, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast2, @in=@local, 0x4e21, 0x1, 0x4e22, 0x7, 0x2, 0x80, 0xa0, 0xe2, r9, r14}, {0xeb3, 0x1, 0x7, 0x3, 0x1, 0xfffffffffffffffe, 0x1, 0x4}, {0x80000005, 0x9, 0xffffffffffffff96, 0xfffffffffffff801}, 0x8, 0x6e6bb0, 0x0, 0x1, 0x1, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x2, 0x0, 0x7, 0x2, 0x8240, 0x8000}}, 0xe8) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000003f000000aa0000000033000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00140063"], 0x184}}, 0x4) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r15, 0x0, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x260, 0x0, 0x0, 0x1c8, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x2d}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0xf4}}}, {{@ip={@rand_addr, @private, 0x0, 0xff000000, 'macvtap0\x00', 'bridge_slave_0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010100, 0xff000000, 0xff, 'ip6gretap0\x00', 'ip6erspan0\x00', {}, {0x75816b9d8404136c}, 0x0, 0x3, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 203.456368ms ago: executing program 4 (id=1915): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r1]) utime(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000040)={0xb, 0xea, 0xa}) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 203.210031ms ago: executing program 5 (id=1916): creat(&(0x7f0000000000)='./bus\x00', 0x3b) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0xa, 0x0, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20", 0x35303553}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x141) flock(r1, 0x2) fcntl$notify(r1, 0x402, 0x23) (async) rename(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380)='./file0\x00') 129.116321ms ago: executing program 5 (id=1917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="671d00000000fbdbdf25460000000e0001006e657464657673696d0080000f0002006e657464657673696d300000080800000000000000008f0009000000000000000c0090000700000000000000259912c6cbfc4dd994c1924799d276cd8a90551bc6c6df2505945c59833cf0a8c813ce9e8e935fef337d51"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 128.884761ms ago: executing program 5 (id=1918): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$usbmon(&(0x7f00008b5000/0x4000)=nil, 0x4000, 0x800004, 0x8010, r0, 0x2940) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async, rerun: 32) r2 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$qrtr(r2, &(0x7f0000000200), &(0x7f0000000340)=0xc) (async, rerun: 64) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0xff61) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000100)=ANY=[@ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) fsmount(r0, 0x1, 0x82) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) (async) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) utimensat(r1, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={{}, {r5, r6/1000+10000}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) 541.95µs ago: executing program 6 (id=1919): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d", 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001180)}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000", 0xce}], 0x2}}], 0x2, 0xc0) 0s ago: executing program 6 (id=1920): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'vcan0\x00', @random="d40280bdf1bf"}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x9, 0x1000, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x68, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@lsrr={0x83, 0x1b, 0xf5, [@remote, @private=0xa010101, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ssrr={0x89, 0x13, 0xe0, [@multicast2, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @noop, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', r7, 0x29, 0x10, 0x0, 0x6, 0x30, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, @mcast1, 0x40, 0x64c414625a888644, 0xc23b, 0x6c}}) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xc) write$tun(r2, &(0x7f0000000500)={@val={0x0, 0x6003}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv4={0x800, @icmp={{0x27, 0x4, 0x0, 0x1, 0x102, 0x67, 0x0, 0x1, 0x1, 0x0, @rand_addr=0x64010101, @empty, {[@generic={0x89, 0x12, "1245a30afa61bf41e748cee7691e6af4"}, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xcf, 0x3, 0x2, [{@multicast1, 0x1}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0xc}, 0xfff}, {@remote, 0x4}, {@multicast2, 0x3e}]}, @noop, @timestamp_addr={0x44, 0x3c, 0xd8, 0x1, 0x0, [{@empty, 0xffff}, {@broadcast, 0x706}, {@multicast1, 0xd37}, {@multicast1, 0x2}, {@rand_addr=0x64010100, 0x1}, {@rand_addr=0x64010102, 0x8}, {@empty, 0x7}]}]}}, @redirect={0x5, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, {0x17, 0x4, 0x2, 0x2, 0x5, 0x69, 0x100, 0x5, 0x1, 0x1, @broadcast, @empty, {[@cipso={0x86, 0x17, 0x3, [{0x6, 0xa, "5258ddee6d87478e"}, {0x2, 0x7, "f91bfb8705"}]}, @end, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x4, "bdca"}, @rr={0x7, 0xb, 0xcb, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xb, 0x7b, [@empty, @empty]}, @end, @generic={0x86, 0x11, "9a5f5d99d071e2436d6d013197aa63"}]}}, "81c5"}}}}}}, 0x114) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xa4}}, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000640)={0x0, 'veth0_macvtap\x00', {0x1}, 0x8}) socket$vsock_stream(0x28, 0x1, 0x0) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x0) kernel console output (not intermixed with test programs): tarted in network mode [ 125.833254][ T9413] tipc: Node identity ac1414aa, cluster identity 4711 [ 125.834453][ T6391] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 125.836268][ T9413] tipc: Enabled bearer , priority 10 [ 125.862510][ T9418] netlink: 'syz.1.997': attribute type 25 has an invalid length. [ 125.948746][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.998'. [ 125.955943][ T9424] SET target dimension over the limit! [ 125.994728][ T6391] usb 5-1: Using ep0 maxpacket: 8 [ 126.002651][ T6391] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.008100][ T6391] usb 5-1: config 0 has no interfaces? [ 126.016887][ T6391] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 126.019735][ T6391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.022184][ T6391] usb 5-1: Product: syz [ 126.027064][ T6391] usb 5-1: Manufacturer: syz [ 126.028549][ T6391] usb 5-1: SerialNumber: syz [ 126.032099][ T6391] usb 5-1: config 0 descriptor?? [ 126.033064][ T9436] team0: Device gtp0 is of different type [ 126.216887][ T9448] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 126.223018][ T9448] exFAT-fs (nullb0): invalid boot record signature [ 126.223487][ T9446] lo speed is unknown, defaulting to 1000 [ 126.225061][ T9448] exFAT-fs (nullb0): failed to read boot sector [ 126.225080][ T9448] exFAT-fs (nullb0): failed to recognize exfat type [ 126.250274][ T52] usb 5-1: USB disconnect, device number 18 [ 126.314937][ T9453] netlink: 'syz.3.1009': attribute type 9 has an invalid length. [ 126.349680][ T9458] openvswitch: netlink: EtherType 0 is less than min 600 [ 126.689705][ T9465] 9pnet: Could not find request transport: 0xffffffffffffffff [ 126.903443][ T5994] tipc: Node number set to 2886997162 [ 126.981856][ T9507] QAT: Device 7 not found [ 127.329024][ T9540] netlink: 'syz.2.1037': attribute type 11 has an invalid length. [ 127.336541][ T9543] 9pnet_virtio: no channels available for device syz [ 127.339016][ T9543] 9pnet_virtio: no channels available for device syz [ 127.341354][ T9543] 9pnet_virtio: no channels available for device syz [ 127.345955][ T9543] 9pnet_virtio: no channels available for device syz [ 127.348264][ T9543] 9pnet_virtio: no channels available for device syz [ 127.350576][ T9543] 9pnet_virtio: no channels available for device syz [ 127.354134][ T9543] 9pnet_virtio: no channels available for device syz [ 127.356591][ T9543] 9pnet_virtio: no channels available for device syz [ 127.359456][ T9543] 9pnet_virtio: no channels available for device syz [ 127.361709][ T9543] 9pnet_virtio: no channels available for device syz [ 127.364500][ T9543] 9pnet_virtio: no channels available for device syz [ 127.366832][ T9543] 9pnet_virtio: no channels available for device syz [ 127.369216][ T9543] 9pnet_virtio: no channels available for device syz [ 127.371483][ T9543] 9pnet_virtio: no channels available for device syz [ 127.373991][ T9543] 9pnet_virtio: no channels available for device syz [ 127.376262][ T9543] 9pnet_virtio: no channels available for device syz [ 127.379383][ T9543] 9pnet_virtio: no channels available for device syz [ 127.382426][ T9543] 9pnet_virtio: no channels available for device syz [ 127.386231][ T9543] 9pnet_virtio: no channels available for device syz [ 127.391171][ T9543] 9pnet_virtio: no channels available for device syz [ 127.394226][ T9543] 9pnet_virtio: no channels available for device syz [ 127.397902][ T9543] 9pnet_virtio: no channels available for device syz [ 127.400760][ T9543] 9pnet_virtio: no channels available for device syz [ 127.403791][ T9543] 9pnet_virtio: no channels available for device syz [ 127.406866][ T9543] 9pnet_virtio: no channels available for device syz [ 127.409750][ T9543] 9pnet_virtio: no channels available for device syz [ 127.651865][ T61] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 127.844187][ T61] usb 5-1: Using ep0 maxpacket: 16 [ 127.855770][ T61] usb 5-1: config 1 interface 0 has no altsetting 0 [ 127.860482][ T61] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.40 [ 127.864039][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.869011][ T61] usb 5-1: Product: І [ 127.870701][ T61] usb 5-1: Manufacturer: Д [ 127.872461][ T61] usb 5-1: SerialNumber: ﻜ栽鰆撛龜ᣏ訮䇋㰔桀쬧ﾋᐴ힆DZ㵀瀙뺳﻽屸缏옍箻∼❱둟냡垆ᵎ뢳쇊졠恽ⴻᴘ즽頼ꐈ쌨六≮걧矑夡쪸Ȓ㑗䁻䮣壬Ḋ倔빠剁㬜蜈蛲粗渾ꀁ [ 127.969078][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.973408][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.976845][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.980830][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.983805][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.007852][ T9554] lo speed is unknown, defaulting to 1000 [ 128.099954][ T9554] chnl_net:caif_netlink_parms(): no params data found [ 128.139297][ T61] usbhid 5-1:1.0: can't add hid device: -71 [ 128.141236][ T61] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 128.147159][ T61] usb 5-1: USB disconnect, device number 19 [ 128.179450][ T9554] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.181775][ T9554] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.184056][ T9554] bridge_slave_0: entered allmulticast mode [ 128.187220][ T9554] bridge_slave_0: entered promiscuous mode [ 128.191265][ T9554] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.193603][ T9554] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.195889][ T9554] bridge_slave_1: entered allmulticast mode [ 128.199550][ T9554] bridge_slave_1: entered promiscuous mode [ 128.231836][ T9554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.236483][ T9554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.270558][ T9554] team0: Port device team_slave_0 added [ 128.274130][ T9554] team0: Port device team_slave_1 added [ 128.302970][ T9554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.305263][ T9554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.312959][ T9554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.318547][ T9554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.320696][ T9554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.328974][ T9554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.368874][ T9554] hsr_slave_0: entered promiscuous mode [ 128.371100][ T9554] hsr_slave_1: entered promiscuous mode [ 128.373310][ T9554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.375656][ T9554] Cannot create hsr debugfs directory [ 128.494433][ T9554] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.499276][ T9554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.503278][ T9554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.507636][ T9554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.552297][ T9554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.574833][ T9554] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.581608][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.583894][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.589580][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.591795][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.649921][ T9579] overlayfs: missing 'lowerdir' [ 128.651942][ T9578] overlayfs: missing 'lowerdir' [ 128.707250][ T9554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.775506][ T9599] netem: incorrect gi model size [ 128.777422][ T9599] netem: change failed [ 128.803590][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 128.803601][ T40] audit: type=1400 audit(1749380365.595:6880): avc: denied { bind } for pid=9589 comm="syz.0.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.851761][ T9554] veth0_vlan: entered promiscuous mode [ 128.857339][ T9554] veth1_vlan: entered promiscuous mode [ 128.873483][ T9554] veth0_macvtap: entered promiscuous mode [ 128.877574][ T9554] veth1_macvtap: entered promiscuous mode [ 128.889788][ T9554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.898228][ T9554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.904259][ T9554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.907035][ T9554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.909888][ T9554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.912664][ T9554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.962909][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.965531][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.984953][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.987384][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.002787][ T40] audit: type=1400 audit(1749380365.783:6881): avc: denied { mounton } for pid=9554 comm="syz-executor" path="/syzkaller.bAPXgo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 129.014861][ T40] audit: type=1400 audit(1749380365.783:6882): avc: denied { mounton } for pid=9554 comm="syz-executor" path="/syzkaller.bAPXgo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 129.030851][ T40] audit: type=1400 audit(1749380365.792:6883): avc: denied { mounton } for pid=9554 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 129.106203][ T9621] veth1_macvtap: left promiscuous mode [ 129.112183][ T9621] macsec0: entered promiscuous mode [ 129.113900][ T9621] macsec0: entered allmulticast mode [ 129.121951][ T9621] veth1_macvtap: entered promiscuous mode [ 129.123813][ T9621] veth1_macvtap: entered allmulticast mode [ 129.126006][ T9621] macsec0: left promiscuous mode [ 129.127838][ T9621] macsec0: left allmulticast mode [ 129.129547][ T9621] veth1_macvtap: left allmulticast mode [ 129.129831][ T40] audit: type=1400 audit(1749380365.904:6884): avc: denied { map } for pid=9627 comm="syz.4.1056" path="socket:[30900]" dev="sockfs" ino=30900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.130609][ T9628] binder: Bad value for 'max' [ 129.149616][ T40] audit: type=1400 audit(1749380365.904:6885): avc: denied { read } for pid=9627 comm="syz.4.1056" path="socket:[30900]" dev="sockfs" ino=30900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.251327][ T40] audit: type=1400 audit(1749380366.016:6886): avc: denied { bind } for pid=9637 comm="syz.3.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.251343][ T9631] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 129.499197][ T9653] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 129.502695][ T9653] qnx6: wrong signature (magic) in superblock #1. [ 129.504679][ T9653] qnx6: unable to read the first superblock [ 129.510819][ T40] audit: type=1400 audit(1749380366.250:6887): avc: denied { read } for pid=9652 comm="syz.4.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.727999][ T9664] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 129.730471][ T9664] UDF-fs: Scanning with blocksize 512 failed [ 129.732781][ T9664] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 129.735267][ T9664] UDF-fs: Scanning with blocksize 1024 failed [ 129.738968][ T9664] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 129.741606][ T9664] UDF-fs: Scanning with blocksize 2048 failed [ 129.744262][ T9664] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 129.746703][ T9664] UDF-fs: Scanning with blocksize 4096 failed [ 130.185395][ T9678] rdma_op ffff8880295d79f0 conn xmit_rdma 0000000000000000 [ 130.207100][ T5956] Bluetooth: hci2: command tx timeout [ 130.394762][ T40] audit: type=1400 audit(1749380367.083:6888): avc: denied { connect } for pid=9683 comm="syz.1.1072" laddr=172.20.20.170 lport=28326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.487813][ T40] audit: type=1400 audit(1749380367.176:6889): avc: denied { bind } for pid=9687 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.814427][ T9701] netlink: 'syz.3.1076': attribute type 4 has an invalid length. [ 130.816972][ T9701] __nla_validate_parse: 21 callbacks suppressed [ 130.816980][ T9701] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1076'. [ 130.830250][ T9701] : renamed from bond0 (while UP) [ 131.121031][ T9714] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 131.224362][ T9738] sch_fq: defrate 0 ignored. [ 131.343948][ T9756] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 131.406061][ T9756] macsec2: entered promiscuous mode [ 131.407777][ T9756] macsec2: entered allmulticast mode [ 131.464675][ T9766] binder: BINDER_SET_CONTEXT_MGR already set [ 131.466575][ T9766] binder: 9765:9766 ioctl 4018620d 200000000100 returned -16 [ 131.470280][ T9766] binder: BINDER_SET_CONTEXT_MGR already set [ 131.473006][ T9766] binder: 9765:9766 ioctl 4018620d 200000000100 returned -16 [ 131.474002][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.477460][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.479959][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.482505][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.484848][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.487160][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.487586][ T9766] binder: BINDER_SET_CONTEXT_MGR already set [ 131.489487][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.494391][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.496672][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.498132][ T9766] binder: 9765:9766 ioctl 4018620d 200000000100 returned -16 [ 131.498958][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.504012][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.506395][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.508690][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.509012][ T9766] binder: BINDER_SET_CONTEXT_MGR already set [ 131.513073][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.513121][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.517524][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.519829][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.522652][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.523241][ T9766] binder: 9765:9766 ioctl 4018620d 200000000100 returned -16 [ 131.524977][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.527097][ T9766] binder: BINDER_SET_CONTEXT_MGR already set [ 131.529810][ T9768] binder: 9765:9768 ioctl c0306201 200000000640 returned -22 [ 131.539307][ T9766] binder: 9765:9766 ioctl 4018620d 200000000100 returned -16 [ 131.650648][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 131.714012][ T9784] 9pnet_virtio: no channels available for device syz [ 131.718335][ T9784] 9pnet_virtio: no channels available for device syz [ 131.721416][ T9784] 9pnet_virtio: no channels available for device syz [ 131.724477][ T9784] 9pnet_virtio: no channels available for device syz [ 131.728228][ T9784] 9pnet_virtio: no channels available for device syz [ 131.730835][ T9784] 9pnet_virtio: no channels available for device syz [ 131.733052][ T9784] 9pnet_virtio: no channels available for device syz [ 131.735383][ T9784] 9pnet_virtio: no channels available for device syz [ 131.738863][ T9784] 9pnet_virtio: no channels available for device syz [ 131.741146][ T9784] 9pnet_virtio: no channels available for device syz [ 131.743418][ T9784] 9pnet_virtio: no channels available for device syz [ 131.745701][ T9784] 9pnet_virtio: no channels available for device syz [ 131.748511][ T9784] 9pnet_virtio: no channels available for device syz [ 131.750753][ T9784] 9pnet_virtio: no channels available for device syz [ 131.753036][ T9784] 9pnet_virtio: no channels available for device syz [ 131.755275][ T9784] 9pnet_virtio: no channels available for device syz [ 131.758832][ T9784] 9pnet_virtio: no channels available for device syz [ 131.761191][ T9784] 9pnet_virtio: no channels available for device syz [ 131.763563][ T9784] 9pnet_virtio: no channels available for device syz [ 131.765879][ T9784] 9pnet_virtio: no channels available for device syz [ 131.774890][ T9784] 9pnet_virtio: no channels available for device syz [ 131.777665][ T9784] 9pnet_virtio: no channels available for device syz [ 131.780624][ T9784] 9pnet_virtio: no channels available for device syz [ 131.783059][ T9784] 9pnet_virtio: no channels available for device syz [ 131.785558][ T9784] 9pnet_virtio: no channels available for device syz [ 131.787935][ T9784] 9pnet_virtio: no channels available for device syz [ 131.790789][ T9784] 9pnet_virtio: no channels available for device syz [ 131.793160][ T9784] 9pnet_virtio: no channels available for device syz [ 131.795447][ T9784] 9pnet_virtio: no channels available for device syz [ 131.797723][ T9784] 9pnet_virtio: no channels available for device syz [ 131.800646][ T9784] 9pnet_virtio: no channels available for device syz [ 131.810564][ T9784] 9pnet_virtio: no channels available for device syz [ 131.812882][ T9784] 9pnet_virtio: no channels available for device syz [ 131.830520][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 131.841013][ T9789] 9pnet_virtio: no channels available for device syz [ 132.353494][ T9823] 9pnet_virtio: no channels available for device syz [ 132.430487][ T5956] Bluetooth: hci2: command tx timeout [ 132.664990][ T9850] IPv6: sit1: Disabled Multicast RS [ 132.669903][ T9850] sit1: entered allmulticast mode [ 132.697790][ T9851] IPv6: sit1: Disabled Multicast RS [ 132.699985][ T9851] sit1: entered allmulticast mode [ 133.029817][ T6025] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 133.190082][ T6025] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 133.193428][ T6025] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.196811][ T6025] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.200467][ T6025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.203381][ T6025] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.206520][ T6025] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.210109][ T6025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.213202][ T6025] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.216460][ T6025] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.220391][ T6025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.223860][ T6025] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.226672][ T6025] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.229918][ T6025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.233517][ T6025] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.236532][ T6025] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.240016][ T6025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.243275][ T6025] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.246418][ T6025] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.250361][ T6025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.253280][ T6025] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.256609][ T6025] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.260087][ T6025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.263132][ T6025] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.267167][ T6025] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.270853][ T6025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.274755][ T6025] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 133.278001][ T6025] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 133.280635][ T6025] usb 6-1: Product: syz [ 133.281998][ T6025] usb 6-1: Manufacturer: syz [ 133.283549][ T6025] usb 6-1: SerialNumber: syz [ 133.287574][ T6025] usb 6-1: config 0 descriptor?? [ 133.292494][ T6025] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 133.488844][ T5981] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 133.517468][ T6025] usb 6-1: USB disconnect, device number 19 [ 133.522255][ T6025] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 133.672525][ T5981] usb 5-1: config 0 has no interfaces? [ 133.676137][ T5981] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.679177][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.682096][ T5981] usb 5-1: Product: syz [ 133.683472][ T5981] usb 5-1: Manufacturer: syz [ 133.685012][ T5981] usb 5-1: SerialNumber: syz [ 133.687794][ T5981] usb 5-1: config 0 descriptor?? [ 133.907344][ T9884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.911311][ T9884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.965447][ T9619] usb 5-1: USB disconnect, device number 20 [ 134.007646][ T9899] No source specified [ 134.027748][ T9899] netlink: 200484 bytes leftover after parsing attributes in process `syz.4.1131'. [ 134.096936][ T9901] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 134.113283][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 134.117915][ T9903] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1133'. [ 134.147486][ T9904] delete_channel: no stack [ 134.196623][ T9909] sctp: [Deprecated]: syz.4.1134 (pid 9909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.196623][ T9909] Use struct sctp_sack_info instead [ 134.226614][ T9913] netlink: 'syz.4.1138': attribute type 1 has an invalid length. [ 134.229076][ T9913] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1138'. [ 134.316069][ T9921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1139'. [ 134.319020][ T9921] netlink: 'syz.3.1139': attribute type 7 has an invalid length. [ 134.321570][ T9921] netlink: 'syz.3.1139': attribute type 8 has an invalid length. [ 134.324172][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 134.339508][ T9924] xt_hashlimit: size too large, truncated to 1048576 [ 134.624112][ T9954] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1149'. [ 134.654158][ T5956] Bluetooth: hci2: command tx timeout [ 134.709635][ T9975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35466 sclass=netlink_route_socket pid=9975 comm=syz.4.1155 [ 134.759485][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 134.759502][ T40] audit: type=1800 audit(1749380371.161:6892): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1154" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 134.822831][ T9973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.843316][ T9986] binder: 9985:9986 unknown command 0 [ 134.845168][ T9986] binder: 9985:9986 ioctl c0306201 2000000001c0 returned -22 [ 134.903511][ T9992] vlan2: entered allmulticast mode [ 134.905226][ T9992] : entered allmulticast mode [ 134.906845][ T9992] bond_slave_0: entered allmulticast mode [ 134.908646][ T9992] bond_slave_1: entered allmulticast mode [ 134.910490][ T9992] bridge_slave_1: entered allmulticast mode [ 135.059033][T10005] Cannot find add_set index 0 as target [ 135.085668][ T40] audit: type=1400 audit(1749380371.479:6893): avc: denied { write } for pid=10006 comm="syz.3.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.138772][T10009] 9pnet: p9_errstr2errno: server reported unknown error @ [ 135.170062][T10019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.173928][T10019] batadv_slave_0: entered promiscuous mode [ 135.225749][ T40] audit: type=1400 audit(1749380371.601:6894): avc: denied { setopt } for pid=10021 comm="syz.3.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.241055][T10024] tipc: Started in network mode [ 135.243227][T10024] tipc: Node identity ac1414aa, cluster identity 4711 [ 135.246367][T10024] tipc: Enabled bearer , priority 10 [ 135.249631][ T40] audit: type=1400 audit(1749380371.629:6895): avc: denied { read } for pid=10023 comm="syz.4.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 135.421937][T10040] xt_hashlimit: max too large, truncated to 1048576 [ 135.425867][T10040] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 135.508843][T10048] netlink: 'syz.0.1178': attribute type 2 has an invalid length. [ 135.513843][T10048] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 135.517608][T10048] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 135.533049][T10050] netlink: 'syz.0.1178': attribute type 2 has an invalid length. [ 135.535570][T10050] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 135.692540][ T40] audit: type=1400 audit(1749380372.040:6896): avc: denied { connect } for pid=10055 comm="syz.1.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 135.692880][T10059] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 135.704108][ T40] audit: type=1400 audit(1749380372.059:6897): avc: denied { lock } for pid=10055 comm="syz.1.1180" path="socket:[31449]" dev="sockfs" ino=31449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 135.927969][ T5956] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 135.931095][ T5956] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 135.935175][T10065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10065 comm=syz.0.1183 [ 135.978479][ T40] audit: type=1400 audit(1749380372.302:6898): avc: denied { write } for pid=10069 comm="syz.0.1185" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 135.988677][ T40] audit: type=1400 audit(1749380372.302:6899): avc: denied { open } for pid=10069 comm="syz.0.1185" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 136.236574][T10078] __nla_validate_parse: 9 callbacks suppressed [ 136.236585][T10078] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1188'. [ 136.280197][T10078] kvm: pic: non byte write [ 136.461323][ T6391] tipc: Node number set to 2886997162 [ 136.712116][T10110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1199'. [ 136.749816][T10114] binder: 10113:10114 ioctl c0306201 2000000003c0 returned -14 [ 136.878615][ T5956] Bluetooth: hci2: command tx timeout [ 136.889776][ T40] audit: type=1400 audit(1749380373.153:6900): avc: denied { create } for pid=10117 comm="syz.0.1203" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 136.890409][T10120] o2cb: This node has not been configured. [ 136.898973][T10120] o2cb: Cluster check failed. Fix errors before retrying. [ 136.902717][T10120] (syz.0.1203,10120,0):user_dlm_register:674 ERROR: status = -22 [ 136.906053][T10120] (syz.0.1203,10120,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 136.912943][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 136.915923][T10120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1203'. [ 137.565580][T10129] fuse: Bad value for 'fd' [ 137.667357][T10116] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.670010][T10116] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.672272][T10116] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.674743][T10116] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 137.677830][T10116] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 137.721012][ T40] audit: type=1400 audit(1749380373.939:6901): avc: denied { getopt } for pid=10132 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.753335][T10134] SELinux: policydb magic number 0x1f0003 does not match expected magic number 0xf97cff8c [ 137.758491][T10134] SELinux: failed to load policy [ 137.821600][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.823636][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.842901][T10147] validate_nla: 1 callbacks suppressed [ 137.842912][T10147] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 137.849570][T10147] macvlan0: entered promiscuous mode [ 137.851602][T10147] macvlan0: entered allmulticast mode [ 137.857811][T10147] veth1_vlan: entered allmulticast mode [ 137.862584][T10147] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 138.229807][T10155] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1215'. [ 138.232832][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 138.236006][T10155] tipc: MTU too low for tipc bearer [ 138.723364][T10160] binder: 10159:10160 ioctl c01464a6 200000000780 returned -22 [ 138.725985][T10160] binder: 10159:10160 ioctl c01464a6 2000000007c0 returned -22 [ 138.781762][T10164] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b2f8bddb73e65c239a) [ 139.026619][ T5956] Bluetooth: hci0: command 0x0419 tx timeout [ 139.108635][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 139.408179][ T5956] Bluetooth: hci0: connection err: -111 [ 139.410870][ T5956] Bluetooth: unknown link type 29 [ 139.413372][ T5956] Bluetooth: hci0: connection err: -111 [ 139.637546][T10239] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 139.641650][T10239] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 139.648107][T10239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1242'. [ 139.650987][T10239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1242'. [ 139.656847][T10239] gretap0: entered promiscuous mode [ 139.659254][T10239] batadv_slave_1: entered promiscuous mode [ 139.814083][T10244] overlayfs: failed to resolve './file0': -2 [ 139.851559][T10247] block nbd1: NBD_DISCONNECT [ 139.882459][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.883255][ T5952] Bluetooth: hci1: command 0x0419 tx timeout [ 139.928841][T10250] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1246'. [ 139.931858][T10250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10250 comm=syz.1.1246 [ 140.107178][T10264] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 140.362946][ T5981] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 140.525596][ T5981] usb 6-1: not running at top speed; connect to a high speed hub [ 140.529443][ T5981] usb 6-1: config 5 has an invalid interface number: 245 but max is 0 [ 140.531992][ T5981] usb 6-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 140.533928][ T61] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 140.534774][ T5981] usb 6-1: config 5 has no interface number 0 [ 140.539149][ T5981] usb 6-1: config 5 interface 245 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 140.542633][ T5981] usb 6-1: config 5 interface 245 altsetting 3 endpoint 0x2 has invalid wMaxPacketSize 0 [ 140.545843][ T5981] usb 6-1: config 5 interface 245 altsetting 3 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 140.549221][ T5981] usb 6-1: config 5 interface 245 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 140.552615][ T5981] usb 6-1: config 5 interface 245 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 140.556091][ T5981] usb 6-1: config 5 interface 245 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 140.559403][ T5981] usb 6-1: config 5 interface 245 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 140.562765][ T5981] usb 6-1: config 5 interface 245 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 140.566266][ T5981] usb 6-1: config 5 interface 245 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 140.570200][ T5981] usb 6-1: config 5 interface 245 altsetting 3 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 140.573545][ T5981] usb 6-1: config 5 interface 245 has no altsetting 0 [ 140.577540][ T5981] usb 6-1: New USB device found, idVendor=14f7, idProduct=0004, bcdDevice= c.91 [ 140.580311][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.582822][ T5981] usb 6-1: Product: syz [ 140.584127][ T5981] usb 6-1: Manufacturer: 㳀✊쇲ŕᠩﭱ㭮莙ᘵ格腭堨▕蛠궹ዜ紟䗒⏀쐻Ḍ杛㨮⦿铯暤軤滋ꓤǜ컙绾Ꚉ푆斆纲꾏펍즚⃹鑥垮⼅ந䦖䉹칚ஃ䄛铯⋑彈眪쑒聕☏༏㚫珯 [ 140.590590][ T5981] usb 6-1: SerialNumber: syz [ 140.594651][T10264] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 140.695750][ T61] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 140.698298][ T61] usb 9-1: config 0 has no interface number 0 [ 140.700301][ T61] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 44016, setting to 64 [ 140.703695][ T61] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 140.706539][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.710360][ T61] usb 9-1: config 0 descriptor?? [ 140.712430][T10266] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 140.718419][ T61] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.120/input/input15 [ 140.728679][ C3] usbtouchscreen 9-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 140.830381][ T5981] dvb-usb: found a 'TechniSat AirStar TeleStick 2' in cold state, will try to load a firmware [ 140.840111][ T5981] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 140.842639][ T5981] dib0700: firmware download failed at 7 with -22 [ 140.849329][ T5981] usb 6-1: USB disconnect, device number 21 [ 140.937495][ T6025] usb 9-1: USB disconnect, device number 2 [ 141.396415][T10278] binder: BINDER_SET_CONTEXT_MGR already set [ 141.398941][T10278] binder: 10277:10278 ioctl 4018620d 2000000000c0 returned -16 [ 141.402536][T10278] binder: BINDER_SET_CONTEXT_MGR already set [ 141.404497][T10280] binder: 10277:10280 ioctl c0306201 2000000003c0 returned -22 [ 141.406993][T10278] binder: 10277:10278 ioctl 4018620d 2000000000c0 returned -16 [ 141.545448][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 141.545460][ T40] audit: type=1400 audit(1749380377.512:6908): avc: denied { accept } for pid=10290 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.555408][ T40] audit: type=1400 audit(1749380377.522:6909): avc: denied { read } for pid=10290 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.597716][T10300] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 141.606790][T10304] IPVS: length: 199 != 24 [ 141.628465][T10300] veth5: entered promiscuous mode [ 141.632316][T10300] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 141.632329][T10310] /dev/nullb0: Can't lookup blockdev [ 141.792638][T10318] __nla_validate_parse: 15 callbacks suppressed [ 141.792651][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1270'. [ 141.809494][T10322] xt_hashlimit: size too large, truncated to 1048576 [ 141.834169][ T40] audit: type=1400 audit(1749380377.784:6910): avc: denied { listen } for pid=10324 comm="syz.0.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.866587][T10329] xt_cluster: node mask cannot exceed total number of nodes [ 141.872638][T10329] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 141.906968][T10334] xt_NFQUEUE: number of total queues is 0 [ 141.925525][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 141.996296][T10348] ptrace attach of "/syz-executor exec"[5938] was attempted by ""[10348] [ 141.999527][T10348] ptrace attach of "/syz-executor exec"[5938] was attempted by ""[10348] [ 142.002748][T10348] ptrace attach of "/syz-executor exec"[5938] was attempted by ""[10348] [ 142.005885][T10348] ptrace attach of "/syz-executor exec"[5938] was attempted by ""[10348] [ 142.006797][ T40] audit: type=1400 audit(1749380377.943:6911): avc: denied { mounton } for pid=10337 comm="syz.1.1276" path="/276/file1/file0" dev="autofs" ino=34146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 142.008627][T10348] ptrace attach of "/syz-executor exec"[5938] was attempted by ""[10348] [ 142.019332][T10339] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1276'. [ 142.024361][T10348] ptrace attach of "/syz-executor exec"[5938] was attempted by ""[10348] [ 142.026040][T10339] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1276'. [ 142.027882][T10348] ptrace attach of "/syz-executor exec"[5938] was attempted by ""[10348] [ 142.032021][T10339] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1276'. [ 142.039064][T10348] ptrace attach of "/syz-executor exec"[5938] was attempted by ""[10348] [ 142.042007][T10348] ptrace attach of "/syz-executor exec"[5938] was attempted by ""[10348] [ 142.045737][T10348] ptrace attach of "/syz-executor exec"[5938] was attempted by ""[10348] [ 142.094820][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.107123][ T5952] Bluetooth: hci1: command 0x0419 tx timeout [ 142.227689][ T40] audit: type=1400 audit(1749380378.158:6912): avc: denied { ioctl } for pid=10360 comm="syz.0.1283" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.235621][ T40] audit: type=1400 audit(1749380378.158:6913): avc: denied { execute } for pid=10360 comm="syz.0.1283" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.239120][T10366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1284'. [ 142.263073][T10368] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 142.354209][T10377] lo speed is unknown, defaulting to 1000 [ 142.659446][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1297'. [ 142.699599][ T5952] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 142.757638][ T40] audit: type=1400 audit(1749380378.644:6914): avc: denied { write } for pid=10412 comm="syz.4.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 142.764937][ T40] audit: type=1400 audit(1749380378.654:6915): avc: denied { bind } for pid=10412 comm="syz.4.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.818377][T10422] fuse: Unknown parameter 'rootmOde' [ 142.820555][T10423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=10423 comm=syz.0.1303 [ 142.854843][T10426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53511 sclass=netlink_route_socket pid=10426 comm=syz.0.1304 [ 142.968032][T10433] program syz.0.1305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.025897][ T1111] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 143.028182][ T1111] ata1.00: irq_stat 0x40000000 [ 143.029650][ T1111] ata1.00: failed command: ZAC MANAGEMENT OUT [ 143.031634][ T1111] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 17 [ 143.031634][ T1111] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 143.036940][ T1111] ata1.00: status: { DRDY ERR } [ 143.038462][ T1111] ata1.00: error: { ABRT } [ 143.039848][ T1111] ata1.00: device reported invalid CHS sector 0 [ 143.126277][T10441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.193987][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'. [ 143.199110][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 143.282694][ T40] audit: type=1400 audit(1749380379.140:6916): avc: denied { read } for pid=10457 comm="syz.0.1313" path="socket:[34236]" dev="sockfs" ino=34236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.410299][T10483] No such timeout policy "syz0" [ 143.425251][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 143.428048][T10487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1321'. [ 143.748800][T10509] netlink: 'syz.4.1326': attribute type 2 has an invalid length. [ 143.757317][T10509] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 144.465038][T10517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10517 comm=syz.3.1329 [ 144.601810][ T40] audit: type=1400 audit(1749380380.375:6917): avc: denied { bind } for pid=10527 comm="syz.3.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.823658][T10546] 9pnet: Found fid 0 not clunked [ 145.034092][T10563] fuse: Bad value for 'fd' [ 145.078040][ T1111] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 145.080166][ T1111] ata1: failed to read log page 10h (errno=-5) [ 145.082443][ T1111] ata1.00: exception Emask 0x1 SAct 0x40000 SErr 0x0 action 0x0 [ 145.084948][ T1111] ata1.00: irq_stat 0x40000000 [ 145.086477][ T1111] ata1.00: failed command: WRITE FPDMA QUEUED [ 145.088530][ T1111] ata1.00: cmd 61/20:90:66:08:10/00:00:00:00:00/40 tag 18 ncq dma 16384 out [ 145.088530][ T1111] res 50/00:01:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 145.093782][ T1111] ata1.00: status: { DRDY } [ 145.095960][ T1111] ata1.00: configured for UDMA/100 [ 145.097818][ T1111] ata1: EH complete [ 145.151140][T10568] No such timeout policy "syz1" [ 145.185067][T10572] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 145.237042][T10578] netlink: 'syz.4.1348': attribute type 3 has an invalid length. [ 145.334848][T10584] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 145.526452][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.608167][T10609] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 145.610820][T10609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.996828][ T6391] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 146.179133][ T6391] usb 5-1: too many configurations: 208, using maximum allowed: 8 [ 146.182707][ T6391] usb 5-1: config index 0 descriptor too short (expected 65145, got 72) [ 146.186269][ T6391] usb 5-1: config index 1 descriptor too short (expected 65145, got 72) [ 146.190062][ T6391] usb 5-1: config index 2 descriptor too short (expected 65145, got 72) [ 146.194049][ T6391] usb 5-1: config index 3 descriptor too short (expected 65145, got 72) [ 146.197563][ T6391] usb 5-1: config index 4 descriptor too short (expected 65145, got 72) [ 146.201562][ T6391] usb 5-1: config index 5 descriptor too short (expected 65145, got 72) [ 146.205085][ T6391] usb 5-1: config index 6 descriptor too short (expected 65145, got 72) [ 146.209187][ T6391] usb 5-1: config index 7 descriptor too short (expected 65145, got 72) [ 146.214198][ T6391] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.217224][ T6391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.219790][ T6391] usb 5-1: Product: syz [ 146.221537][ T6391] usb 5-1: Manufacturer: syz [ 146.223144][ T6391] usb 5-1: SerialNumber: syz [ 146.228812][ T6391] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 146.245172][ T61] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 146.479998][ T6391] usb 5-1: USB disconnect, device number 21 [ 147.398385][ T61] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 147.401250][ T61] ath9k_htc: Failed to initialize the device [ 147.405498][ T6391] usb 5-1: ath9k_htc: USB layer deinitialized [ 158.478589][T10637] batadv_slave_0: entered allmulticast mode [ 158.504000][T10642] lo speed is unknown, defaulting to 1000 [ 158.638695][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 158.638708][ T40] audit: type=1400 audit(1749380393.508:6929): avc: denied { lock } for pid=10655 comm="syz.3.1375" path="socket:[35573]" dev="sockfs" ino=35573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 158.640305][ T5956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.653223][ T5956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.656812][ T5956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.659720][ T5956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.662399][ T5956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.689258][T10654] lo speed is unknown, defaulting to 1000 [ 158.743066][T10661] __nla_validate_parse: 9 callbacks suppressed [ 158.743082][T10661] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1376'. [ 158.861008][T10654] chnl_net:caif_netlink_parms(): no params data found [ 158.933168][T10654] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.935482][T10654] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.937869][T10654] bridge_slave_0: entered allmulticast mode [ 158.940566][T10654] bridge_slave_0: entered promiscuous mode [ 158.944099][T10654] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.946455][T10654] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.948737][T10654] bridge_slave_1: entered allmulticast mode [ 158.951397][T10654] bridge_slave_1: entered promiscuous mode [ 159.003649][T10654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.009608][T10654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.080724][T10654] team0: Port device team_slave_0 added [ 159.088835][T10654] team0: Port device team_slave_1 added [ 159.127011][T10654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.129160][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.136945][T10654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.142280][T10654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.144429][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.153057][T10654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.192107][T10654] hsr_slave_0: entered promiscuous mode [ 159.194355][T10654] hsr_slave_1: entered promiscuous mode [ 159.196335][T10654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.198673][T10654] Cannot create hsr debugfs directory [ 159.241362][ T4422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.312026][ T4422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.377524][T10654] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.385676][T10654] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.385847][ T40] audit: type=1400 audit(1749380394.200:6930): avc: denied { read write } for pid=5938 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.400072][ T40] audit: type=1400 audit(1749380394.200:6931): avc: denied { open } for pid=5938 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.408130][ T40] audit: type=1400 audit(1749380394.200:6932): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.419922][ T4422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.428598][T10654] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.434086][T10654] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.456073][T10654] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.458443][T10654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.460857][T10654] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.463104][T10654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.493776][ T4422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.504782][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1379'. [ 159.508496][T10681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1379'. [ 159.529481][T10654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.539884][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.544357][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.557561][T10654] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.569273][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.572024][ T7391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.581610][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.583885][ T7389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.651195][ T4422] bridge_slave_1: left promiscuous mode [ 159.655389][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.662373][ T4422] bridge_slave_0: left allmulticast mode [ 159.664305][ T4422] bridge_slave_0: left promiscuous mode [ 159.666216][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.728746][ T5994] hid (null): global environment stack underflow [ 159.731122][ T5994] hid (null): report_id 170028613 is invalid [ 159.733523][ T5994] hid (null): unknown global tag 0xc [ 159.748585][ T5994] hid-generic 0005:0400:0001.0002: unexpected long global item [ 159.751801][ T5994] hid-generic 0005:0400:0001.0002: probe with driver hid-generic failed with error -22 [ 160.002107][ T836] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 160.107606][ T40] audit: type=1400 audit(1749380394.883:6933): avc: denied { node_bind } for pid=10688 comm="syz.3.1382" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 160.129411][ T4422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.135561][ T4422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.139300][ T4422] bond0 (unregistering): Released all slaves [ 160.151582][ T4422] bond1 (unregistering): (slave veth5): Releasing backup interface [ 160.155158][ T4422] bond1 (unregistering): Released all slaves [ 160.162382][ T836] usb 9-1: Using ep0 maxpacket: 16 [ 160.166833][ T836] usb 9-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 16 [ 160.170470][ T836] usb 9-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 64 [ 160.174844][ T836] usb 9-1: config 1 interface 0 has no altsetting 0 [ 160.176672][ T40] audit: type=1400 audit(1749380394.948:6934): avc: denied { accept } for pid=10688 comm="syz.3.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 160.179586][ T836] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.187652][ T836] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.190191][ T836] usb 9-1: Product: syz [ 160.191870][ T836] usb 9-1: Manufacturer: syz [ 160.198482][ T836] usb 9-1: SerialNumber: syz [ 160.201808][T10686] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.209694][T10686] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.308589][T10654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.415969][T10717] 9pnet_virtio: no channels available for device syz [ 160.448870][ T4422] hsr_slave_0: left promiscuous mode [ 160.451706][ T4422] hsr_slave_1: left promiscuous mode [ 160.454005][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.456509][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.459896][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.462882][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.500569][ T4422] veth1_macvtap: left promiscuous mode [ 160.502648][ T4422] veth0_macvtap: left allmulticast mode [ 160.504642][ T4422] veth0_macvtap: left promiscuous mode [ 160.506656][ T4422] veth1_vlan: left promiscuous mode [ 160.508511][ T4422] veth0_vlan: left promiscuous mode [ 160.618581][ T4422] pim6reg (unregistering): left allmulticast mode [ 160.662615][ T836] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 160.670947][ T836] usb 9-1: USB disconnect, device number 3 [ 160.825106][ T5952] Bluetooth: hci4: command tx timeout [ 161.244097][T10731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1388'. [ 161.249804][ T4422] team0 (unregistering): Port device team_slave_1 removed [ 161.290168][ T40] audit: type=1400 audit(1749380395.987:6935): avc: denied { append } for pid=10733 comm="syz.4.1389" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 161.292862][T10734] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 161.302995][T10734] qnx6: wrong signature (magic) in superblock #1. [ 161.305266][T10734] qnx6: unable to read the first superblock [ 161.355639][ T4422] team0 (unregistering): Port device team_slave_0 removed [ 161.943679][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 161.984022][T10654] veth0_vlan: entered promiscuous mode [ 161.997912][T10654] veth1_vlan: entered promiscuous mode [ 162.021042][T10654] veth0_macvtap: entered promiscuous mode [ 162.025196][T10654] veth1_macvtap: entered promiscuous mode [ 162.041796][T10654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.048908][T10654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.052825][T10654] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.056694][T10654] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.059673][T10654] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.062520][T10654] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.127161][T10765] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1395'. [ 162.133388][ T7389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.136567][ T7389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.175417][ T7389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.178469][ T7389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.271628][T10776] xt_hashlimit: size too large, truncated to 1048576 [ 162.331281][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 162.337900][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1399'. [ 162.392274][T10794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.395112][T10794] IPv6: NLM_F_CREATE should be set when creating new route [ 162.400677][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 162.403579][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 162.419882][ T40] audit: type=1400 audit(1749380397.044:6936): avc: denied { map } for pid=10796 comm="syz.5.1402" path="/dev/dma_heap/system" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.434990][ T40] audit: type=1400 audit(1749380397.044:6937): avc: denied { setopt } for pid=10796 comm="syz.5.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 162.436355][T10799] syz.0.1403: attempt to access beyond end of device [ 162.436355][T10799] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 162.441526][ T40] audit: type=1400 audit(1749380397.053:6938): avc: denied { setopt } for pid=10796 comm="syz.5.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.445313][T10799] syz.0.1403: attempt to access beyond end of device [ 162.445313][T10799] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 162.461400][T10799] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 162.464708][T10799] syz.0.1403: attempt to access beyond end of device [ 162.464708][T10799] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 162.468968][T10799] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 162.474852][T10799] syz.0.1403: attempt to access beyond end of device [ 162.474852][T10799] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 162.480242][T10799] syz.0.1403: attempt to access beyond end of device [ 162.480242][T10799] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 162.486835][T10799] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 162.489909][T10799] syz.0.1403: attempt to access beyond end of device [ 162.489909][T10799] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 162.494766][T10799] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 162.498625][T10799] syz.0.1403: attempt to access beyond end of device [ 162.498625][T10799] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 162.502880][T10799] syz.0.1403: attempt to access beyond end of device [ 162.502880][T10799] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 162.507530][T10799] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 162.510730][T10799] syz.0.1403: attempt to access beyond end of device [ 162.510730][T10799] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 162.515077][T10799] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 162.515137][T10809] dvmrp1: entered allmulticast mode [ 162.520025][T10799] syz.0.1403: attempt to access beyond end of device [ 162.520025][T10799] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 162.524284][T10799] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 162.527728][T10799] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 162.530803][T10799] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 162.571130][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.575834][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.582638][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.589123][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.592363][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.599912][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.603117][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.606365][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.609536][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.614602][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.618488][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.621982][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.625375][T10821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.783922][T10865] tmpfs: Bad value for 'mpol' [ 162.812248][T10867] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 163.049055][ T5952] Bluetooth: hci4: command tx timeout [ 163.075854][T10911] 9pnet_fd: Insufficient options for proto=fd [ 163.159026][T10920] batadv0: entered promiscuous mode [ 163.160716][T10920] batadv0: entered allmulticast mode [ 163.200609][T10928] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 163.331490][T10947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.369904][T10949] 9pnet: Found fid 0 not clunked [ 163.420927][T10951] netlink: 'syz.5.1443': attribute type 7 has an invalid length. [ 163.424093][T10951] netlink: 'syz.5.1443': attribute type 8 has an invalid length. [ 163.479526][T10957] erofs (device loop5): cannot find valid erofs superblock [ 165.275623][T10987] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 165.280501][T10987] overlayfs: failed to clone upperpath [ 165.283144][ T5952] Bluetooth: hci4: command tx timeout [ 165.309077][T10991] __nla_validate_parse: 9 callbacks suppressed [ 165.309089][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 165.319857][T10991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1454'. [ 165.480705][T10999] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 165.511501][T11003] fuse: Invalid rootmode [ 165.520681][T11003] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1457'. [ 166.214572][T11010] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 166.368172][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 166.368183][ T40] audit: type=1400 audit(1749380400.738:6943): avc: denied { mount } for pid=11019 comm="syz.0.1463" name="/" dev="pstore" ino=6176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 166.379700][ T40] audit: type=1400 audit(1749380400.748:6944): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 166.403643][T11026] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 166.428718][T11026] 8021q: adding VLAN 0 to HW filter on device bond7 [ 166.433460][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 166.437772][T11026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11026 comm=syz.0.1464 [ 166.443565][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1464'. [ 166.457667][ T40] audit: type=1326 audit(1749380400.813:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11028 comm="syz.3.1465" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb0bd8e929 code=0x0 [ 166.565383][ T40] audit: type=1400 audit(1749380400.916:6946): avc: denied { read } for pid=11028 comm="syz.3.1465" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.614808][T11043] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1469'. [ 166.617860][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1469'. [ 166.647247][T11047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11047 comm=syz.0.1470 [ 166.671134][ T40] audit: type=1400 audit(1749380401.019:6947): avc: denied { setopt } for pid=11040 comm="syz.4.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 166.745833][ T40] audit: type=1400 audit(1749380401.085:6948): avc: denied { create } for pid=11056 comm="syz.0.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 166.842846][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1476'. [ 166.890229][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 166.929805][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 167.371391][ T40] audit: type=1400 audit(1749380401.674:6949): avc: denied { watch watch_reads } for pid=11074 comm="syz.3.1479" path="pipe:[39131]" dev="pipefs" ino=39131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 167.379119][ T40] audit: type=1400 audit(1749380401.674:6950): avc: denied { relabelfrom } for pid=11074 comm="syz.3.1479" name="" dev="pipefs" ino=37223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 167.462546][T11077] 9pnet_fd: Insufficient options for proto=fd [ 167.489144][ T40] audit: type=1400 audit(1749380401.786:6951): avc: denied { name_bind } for pid=11080 comm="syz.3.1481" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 167.497001][T11040] delete_channel: no stack [ 167.497459][ T5952] Bluetooth: hci4: command tx timeout [ 167.601463][ T40] audit: type=1400 audit(1749380401.889:6952): avc: denied { ioctl } for pid=11085 comm="syz.4.1483" path="socket:[36378]" dev="sockfs" ino=36378 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.704606][T11106] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 167.707079][T11106] netlink: 'syz.3.1490': attribute type 4 has an invalid length. [ 167.800197][T11105] netlink: 'syz.3.1490': attribute type 21 has an invalid length. [ 167.802795][T11105] netlink: 'syz.3.1490': attribute type 6 has an invalid length. [ 168.062247][ T5981] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 168.234582][ T5981] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.239160][ T5981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.243689][ T5981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 168.247712][ T5981] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.253106][ T5981] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.257851][ T5981] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.267874][ T5981] usb 10-1: config 0 descriptor?? [ 168.725363][ T5981] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 168.739342][ T5981] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 168.763572][T11185] 0XD: renamed from gretap0 [ 168.766334][T11185] 0XD: entered allmulticast mode [ 168.774116][T11185] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 168.791006][T11190] lo speed is unknown, defaulting to 1000 [ 168.989877][T11211] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.005224][ T5981] usb 10-1: USB disconnect, device number 2 [ 169.120672][ T29] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 169.330298][ T29] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.333138][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.335908][ T29] usb 5-1: Product: syz [ 169.337261][ T29] usb 5-1: Manufacturer: syz [ 169.338717][ T29] usb 5-1: SerialNumber: syz [ 169.346981][ T29] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 169.360455][ T9619] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 170.128149][T11231] team0: entered allmulticast mode [ 170.130438][T11231] team_slave_0: entered allmulticast mode [ 170.132955][T11231] team_slave_1: entered allmulticast mode [ 170.184721][T11229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.188437][T11229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.499893][ T9619] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 170.502548][ T9619] ath9k_htc: Failed to initialize the device [ 170.523516][ T9619] usb 5-1: ath9k_htc: USB layer deinitialized [ 170.540236][ T836] usb 5-1: USB disconnect, device number 22 [ 170.564935][T11252] Bluetooth: MGMT ver 1.23 [ 170.568637][T11252] MTD: Attempt to mount non-MTD device "/dev/nbd5" [ 170.572344][T11252] cramfs: wrong magic [ 170.584786][T11254] binder: 11253:11254 ioctl c0306201 0 returned -14 [ 171.011006][T11294] fuse: Unknown parameter '' [ 171.017441][T11294] __nla_validate_parse: 12 callbacks suppressed [ 171.017453][T11294] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1543'. [ 171.083532][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1546'. [ 171.086542][ T7389] bond0: (slave bond_slave_0): interface is now down [ 171.089742][T11303] netlink: 'syz.5.1546': attribute type 10 has an invalid length. [ 171.093841][ T7389] bond0: (slave bond_slave_1): interface is now down [ 171.098806][T11303] erspan0: entered promiscuous mode [ 171.102723][T11303] bond0: (slave erspan0): no link monitoring support [ 171.107158][T11303] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 171.136676][T11305] nbd: couldn't find a device at index -1605786504 [ 171.247765][T11314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.252928][T11314] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1551'. [ 171.302295][ T61] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 171.484687][ T61] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.487650][ T61] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.491536][ T61] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.494473][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.713709][ T61] usb 9-1: usb_control_msg returned -32 [ 171.715675][ T61] usbtmc 9-1:16.0: can't read capabilities [ 171.799921][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.804028][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.807361][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.811027][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.813964][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.834487][T11331] lo speed is unknown, defaulting to 1000 [ 171.912986][T11331] chnl_net:caif_netlink_parms(): no params data found [ 171.982077][T11331] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.984427][T11331] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.987047][T11331] bridge_slave_0: entered allmulticast mode [ 171.990041][T11331] bridge_slave_0: entered promiscuous mode [ 171.994532][T11331] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.997112][T11331] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.999449][T11331] bridge_slave_1: entered allmulticast mode [ 172.002090][T11331] bridge_slave_1: entered promiscuous mode [ 172.035495][T11331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.040463][T11331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.077549][T11331] team0: Port device team_slave_0 added [ 172.081726][T11331] team0: Port device team_slave_1 added [ 172.115134][ T4232] usb 9-1: USB disconnect, device number 4 [ 172.159287][T11331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.161535][T11331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.179576][T11331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.184080][T11331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.186263][T11331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.196418][T11331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.236773][T11356] ipt_REJECT: ECHOREPLY no longer supported. [ 172.246055][T11331] hsr_slave_0: entered promiscuous mode [ 172.248437][T11331] hsr_slave_1: entered promiscuous mode [ 172.272767][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1566'. [ 172.278306][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1566'. [ 172.501915][T11331] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.506665][T11331] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.513427][T11331] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.519731][T11331] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 172.539188][T11397] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 172.541355][T11397] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.545011][T11397] vhci_hcd vhci_hcd.0: Device attached [ 172.547274][T11398] vhci_hcd: connection closed [ 172.547437][ T7392] vhci_hcd: stop threads [ 172.550310][ T7392] vhci_hcd: release socket [ 172.551756][ T7392] vhci_hcd: disconnect device [ 172.571923][T11331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.583296][T11331] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.591698][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.594036][ T7386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.601259][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.603546][ T7386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.678132][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 172.678143][ T40] audit: type=1400 audit(1749380406.631:6962): avc: denied { read append } for pid=11405 comm="syz.5.1579" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 172.692244][ T40] audit: type=1400 audit(1749380406.631:6963): avc: denied { open } for pid=11405 comm="syz.5.1579" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 172.700020][ T40] audit: type=1400 audit(1749380406.631:6964): avc: denied { ioctl } for pid=11405 comm="syz.5.1579" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 172.716930][T11331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.805425][ T40] audit: type=1400 audit(1749380406.753:6965): avc: denied { ioctl } for pid=11417 comm="syz.5.1580" path="socket:[37696]" dev="sockfs" ino=37696 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 172.813381][ T40] audit: type=1400 audit(1749380406.753:6966): avc: denied { read } for pid=11417 comm="syz.5.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 172.821572][T11423] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 172.855904][T11331] veth0_vlan: entered promiscuous mode [ 172.862170][T11331] veth1_vlan: entered promiscuous mode [ 172.885037][T11331] veth0_macvtap: entered promiscuous mode [ 172.889050][T11331] veth1_macvtap: entered promiscuous mode [ 172.899049][T11331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.904763][T11331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.909908][T11331] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.912631][T11331] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.915354][T11331] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.918965][T11331] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.963443][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.966066][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.985126][T11430] netlink: 30 bytes leftover after parsing attributes in process `syz.5.1583'. [ 172.987879][ T7386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.990457][ T7386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.151036][ T4422] bond0: (slave bond_slave_0): interface is now down [ 173.153697][ T4422] bond0: (slave bond_slave_1): interface is now down [ 173.207797][T11449] netlink: 'syz.6.1587': attribute type 1 has an invalid length. [ 173.210872][T11449] netlink: 780 bytes leftover after parsing attributes in process `syz.6.1587'. [ 173.233245][T11451] netlink: 'syz.0.1588': attribute type 10 has an invalid length. [ 173.236139][T11451] 0: entered promiscuous mode [ 173.237948][T11451] 0: left allmulticast mode [ 173.239449][T11451] hsr_slave_0: left allmulticast mode [ 173.241155][T11451] hsr_slave_1: left allmulticast mode [ 173.252269][T11451] bond0: (slave 70): The slave device specified does not support setting the MAC address [ 173.255506][T11451] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 173.259582][T11451] bond0: (slave 70): Error -22 calling dev_set_mtu [ 173.276978][T11456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.325110][T11460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.336323][T11461] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 173.389454][T11470] tls_set_device_offload: netdev not found [ 173.426299][T11476] netlink: 'syz.6.1596': attribute type 4 has an invalid length. [ 173.428779][T11476] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1596'. [ 173.438877][T11476] netlink: 'syz.6.1596': attribute type 4 has an invalid length. [ 173.442927][T11476] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1596'. [ 173.446985][T11476] netlink: 'syz.6.1596': attribute type 4 has an invalid length. [ 173.454411][T11476] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1596'. [ 173.461283][T11476] netlink: 'syz.6.1596': attribute type 4 has an invalid length. [ 173.463911][T11476] netlink: 'syz.6.1596': attribute type 4 has an invalid length. [ 173.466518][T11476] netlink: 'syz.6.1596': attribute type 4 has an invalid length. [ 173.469113][T11476] netlink: 'syz.6.1596': attribute type 4 has an invalid length. [ 173.590580][ T40] audit: type=1400 audit(1749380407.492:6967): avc: denied { ioctl } for pid=11485 comm="syz.6.1599" path="socket:[38908]" dev="sockfs" ino=38908 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.599650][ T40] audit: type=1400 audit(1749380407.492:6968): avc: denied { mount } for pid=11485 comm="syz.6.1599" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 173.610054][ T40] audit: type=1400 audit(1749380407.501:6969): avc: denied { mounton } for pid=11485 comm="syz.6.1599" path="/5/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 173.678716][ T40] audit: type=1400 audit(1749380407.576:6970): avc: denied { unmount } for pid=11331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 173.725234][ T40] audit: type=1400 audit(1749380407.614:6971): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 173.750156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 173.996098][ T5952] Bluetooth: hci1: command tx timeout [ 174.295410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.403674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.508854][T11551] loop6: detected capacity change from 0 to 524287999 [ 174.649432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.652586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.658241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.685878][T11558] netfs: Couldn't get user pages (rc=-14) [ 174.724931][T11560] loop6: detected capacity change from 0 to 524287999 [ 174.743753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 174.766154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.798510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.948204][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 175.018791][T11586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.021081][T11586] IPv6: NLM_F_CREATE should be set when creating new route [ 175.081458][T11593] afs: Unknown parameter 'dynXHF;J 1üJY.F)Z-UD?;/R' [ 175.133479][T11598] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 175.193939][ T4422] bond0: (slave bond_slave_0): interface is now down [ 175.196043][ T4422] bond0: (slave bond_slave_1): interface is now down [ 175.198108][ T4422] bond0: (slave erspan0): interface is now down [ 175.202363][ T4422] bond0: now running without any active interface! [ 175.277205][T11607] efs: device does not support 512 byte blocks [ 175.284446][T11607] device does not support 512 byte blocks [ 175.284446][T11607] [ 175.391160][T11621] tmpfs: Bad value for 'mpol' [ 175.684965][ T836] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 175.841094][T11670] tipc: Started in network mode [ 175.842684][T11670] tipc: Node identity 4, cluster identity 4711 [ 175.844600][T11670] tipc: Node number set to 4 [ 175.856695][ T836] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 175.860148][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.862970][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.866865][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 175.870172][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.872981][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.881628][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 175.884852][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.888349][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.892070][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 175.898982][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.901809][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.905238][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 175.908214][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.911453][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.914813][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 175.919257][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.922716][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.926051][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 175.929232][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.932497][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.935831][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 175.939013][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.942363][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.945881][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 175.950364][ T836] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 175.954281][ T836] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 175.957358][ T836] usb 9-1: Product: syz [ 175.959042][ T836] usb 9-1: Manufacturer: syz [ 175.960490][ T836] usb 9-1: SerialNumber: syz [ 175.964478][ T836] usb 9-1: config 0 descriptor?? [ 175.971699][ T836] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 176.014176][T11689] unknown channel width for channel at 909000KHz? [ 176.192670][ T6025] usb 9-1: USB disconnect, device number 6 [ 176.197270][ T6025] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 176.219363][ T5952] Bluetooth: hci1: command tx timeout [ 176.262013][ T61] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 176.376093][T11711] "syz.5.1662" (11711) uses obsolete ecb(arc4) skcipher [ 176.400633][T11713] fuse: Bad value for 'fd' [ 176.400957][ T61] usb 11-1: device descriptor read/64, error -71 [ 176.403131][T11713] __nla_validate_parse: 39 callbacks suppressed [ 176.403141][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 176.409835][T11713] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 176.414534][T11713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.657668][ T61] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 176.807357][ T61] usb 11-1: device descriptor read/64, error -71 [ 176.925843][ T61] usb usb11-port1: attempt power cycle [ 177.145416][T11752] x_tables: ip_tables: ah match: only valid for protocol 51 [ 177.156516][T11753] x_tables: ip_tables: ah match: only valid for protocol 51 [ 177.183538][T11757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1677'. [ 177.220386][T11761] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1124 [ 177.305983][ T5952] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 177.310482][ T61] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 177.331816][ T61] usb 11-1: device descriptor read/8, error -71 [ 177.587614][ T61] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 177.609377][ T61] usb 11-1: device descriptor read/8, error -71 [ 177.620589][ T836] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 177.740489][ T61] usb usb11-port1: unable to enumerate USB device [ 177.782666][ T836] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.787427][ T836] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.792604][ T836] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.796292][ T836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.803786][T11771] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.810542][ T836] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.089247][ T836] usb 9-1: USB disconnect, device number 7 [ 178.443107][ T5952] Bluetooth: hci1: command tx timeout [ 178.626907][T11824] overlay: ./file0 is not a directory [ 179.033443][T11849] lo speed is unknown, defaulting to 1000 [ 179.188411][T11853] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 179.191186][T11853] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 179.260574][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 179.260586][ T40] audit: type=1400 audit(1749380412.796:6988): avc: denied { mounton } for pid=11852 comm="syz.4.1698" path="mnt:[4026533153]" dev="nsfs" ino=4026533153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 179.311540][ T40] audit: type=1400 audit(1749380412.842:6989): avc: denied { sqpoll } for pid=11873 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 179.335201][T11883] openvswitch: netlink: IP tunnel dst address not specified [ 179.683268][ T836] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 179.843921][ T836] usb 5-1: Using ep0 maxpacket: 8 [ 179.848775][ T836] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.851762][ T836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 179.855799][ T836] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 179.859984][ T836] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 179.864209][ T836] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 179.868538][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.878592][ T836] hub 5-1:1.0: bad descriptor, ignoring hub [ 179.881097][ T836] hub 5-1:1.0: probe with driver hub failed with error -5 [ 179.885740][ T836] cdc_wdm 5-1:1.0: skipping garbage [ 179.888422][ T836] cdc_wdm 5-1:1.0: skipping garbage [ 179.893905][ T836] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 179.896213][ T836] cdc_wdm 5-1:1.0: Unknown control protocol [ 180.092304][ T40] audit: type=1400 audit(1749380413.572:6990): avc: denied { read write } for pid=11893 comm="syz.0.1711" name="cdc-wdm0" dev="devtmpfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 180.104699][ T40] audit: type=1400 audit(1749380413.572:6991): avc: denied { open } for pid=11893 comm="syz.0.1711" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 180.211614][ T836] usb 5-1: USB disconnect, device number 23 [ 180.242668][T11920] validate_nla: 26 callbacks suppressed [ 180.242679][T11920] netlink: 'syz.4.1718': attribute type 3 has an invalid length. [ 180.247193][T11920] netlink: 'syz.4.1718': attribute type 1 has an invalid length. [ 180.254568][T11920] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1718'. [ 180.259742][ T5952] Bluetooth: unknown link type 29 [ 180.262994][ T5952] Bluetooth: hci2: connection err: -111 [ 180.307387][ T40] audit: type=1400 audit(1749380413.778:6992): avc: denied { write } for pid=11893 comm="syz.0.1711" name="btrfs-control" dev="devtmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 180.340849][T11894] cdc_wdm 5-1:1.0: Error autopm - -16 [ 180.380857][T11922] netlink: 'syz.5.1719': attribute type 2 has an invalid length. [ 180.383378][T11922] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1719'. [ 180.484918][ T836] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 180.624189][ T836] usb 5-1: device descriptor read/64, error -71 [ 180.666972][ T5952] Bluetooth: hci1: command tx timeout [ 180.750000][ T40] audit: type=1400 audit(1749380414.180:6993): avc: denied { accept } for pid=11958 comm="syz.6.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 180.750506][T11959] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1730'. [ 180.779688][T11959] netlink: 47 bytes leftover after parsing attributes in process `syz.6.1730'. [ 180.863935][T11963] lo speed is unknown, defaulting to 1000 [ 180.881055][ T836] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 181.019679][ T836] usb 5-1: device descriptor read/64, error -71 [ 181.139359][ T836] usb usb5-port1: attempt power cycle [ 181.511418][ T836] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 181.533224][ T836] usb 5-1: device descriptor read/8, error -71 [ 181.569539][ T40] audit: type=1400 audit(1749380414.956:6994): avc: denied { bind } for pid=12007 comm="syz.6.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 181.622983][T12013] ubi31: attaching mtd0 [ 181.625972][T12013] ubi31: scanning is finished [ 181.627470][T12013] ubi31: empty MTD device detected [ 181.667646][T12017] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1748'. [ 181.684624][T12017] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.688144][T12017] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.705994][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1748'. [ 181.708902][T12017] ksmbd: Daemon and kernel module version mismatch. ksmbd: 162, kernel module: 1. User-space ksmbd should terminate. [ 181.713533][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1748'. [ 181.717267][T12018] ksmbd: Daemon and kernel module version mismatch. ksmbd: 162, kernel module: 1. User-space ksmbd should terminate. [ 181.737469][T12013] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 181.740520][T12013] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 181.743428][T12013] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 181.750898][T12013] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 181.753925][T12013] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 181.756922][T12013] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 181.760146][T12013] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 221573051 [ 181.764125][T12013] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 181.774920][T12021] ubi31: background thread "ubi_bgt31d" started, PID 12021 [ 181.789664][ T836] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 181.811196][ T836] usb 5-1: device descriptor read/8, error -71 [ 181.929479][ T836] usb usb5-port1: unable to enumerate USB device [ 182.018619][T12043] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 182.154287][T12050] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1757'. [ 182.158461][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1757'. [ 182.304139][ T40] audit: type=1400 audit(1749380415.649:6995): avc: denied { create } for pid=12053 comm="syz.6.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 182.347645][ T40] audit: type=1400 audit(1749380415.686:6996): avc: denied { read } for pid=12055 comm="syz.6.1760" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 182.356821][ T40] audit: type=1400 audit(1749380415.686:6997): avc: denied { open } for pid=12055 comm="syz.6.1760" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 182.720555][ T5952] Bluetooth: hci2: unexpected event 0x34 length: 3 < 6 [ 182.722925][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1764'. [ 182.725782][T12064] nbd: must specify at least one socket [ 182.837048][T12069] fuse: Bad value for 'fd' [ 182.915038][T12075] 9p: Unknown uid 00000000004294967295 [ 182.986202][T12078] bridge0: port 3(syz_tun) entered blocking state [ 182.989289][T12078] bridge0: port 3(syz_tun) entered disabled state [ 182.991678][T12078] syz_tun: entered allmulticast mode [ 182.995338][T12078] syz_tun: entered promiscuous mode [ 182.997675][T12078] bridge0: port 3(syz_tun) entered blocking state [ 183.001178][T12078] bridge0: port 3(syz_tun) entered forwarding state [ 183.093349][ T61] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 183.234920][T12035] Set syz1 is full, maxelem 65536 reached [ 183.265786][ T61] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 183.268282][ T61] usb 5-1: config 0 has no interface number 0 [ 183.270317][ T61] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 44016, setting to 64 [ 183.273783][ T61] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 183.284529][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.288622][ T61] usb 5-1: config 0 descriptor?? [ 183.290688][T12062] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.295109][ T61] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.120/input/input20 [ 183.318280][ T29] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 183.371219][ T5945] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 183.478184][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 183.481790][ T29] usb 9-1: config 1 interface 0 altsetting 192 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 183.485302][ T29] usb 9-1: config 1 interface 0 has no altsetting 0 [ 183.489449][ T29] usb 9-1: New USB device found, idVendor=046d, idProduct=c30a, bcdDevice= 0.40 [ 183.492317][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.494770][ T29] usb 9-1: Product: ﳞ꽥਺蒕擓뻠艆뚨焋ヌ㣗㜖쨵ㇳ镽띘鋑৯턂䔑椧跛왻⎋㜹ꨤ成Ｓ䋦秽懇ꁪ뻂섘잽뮊宿྘鄏妗朁ㆬ篁．▗Ⱌﺔ堟ᖬ틏飧ꍒ덴Ặᱭ蜧ꔱ㕠啒ﵻⰑ塧癞藌묖돇鿕鿦麸⬃黟춨ꪨ呧빭蚕틹㵾ර欐膁ꨴఅ텋圭套瀮ᶟ™쯾㕗螢⏆ᣀ矸 [ 183.495406][T12096] lo speed is unknown, defaulting to 1000 [ 183.505295][T12086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.508021][ T29] usb 9-1: Manufacturer: ვ惯떿♝⨐ᣐ뼏짆괽쟎ᇰ芐䈠Ꟍ喾䨤䠍ꈒ笎廒ꇮ߲㒡㣁孤噓⣯菧ྩ渲掗顝⟊첦鯡줷䊔貚讛뾰膦挞⪅姍륦᪘ࠦⵠ눟谓⒣枢ః᜿잢㍳临ꮪ呟੼थ㍓躦⧭Ⲫ뤟뽶媙܅촪㉛ﰌ藛媣ವ鉳깷뗾堃ꃼ湊츄⍥슀 [ 183.517726][ T29] usb 9-1: SerialNumber: ػ [ 183.518637][T12086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.531935][ T52] usb 5-1: USB disconnect, device number 28 [ 183.532313][T12086] xt_hashlimit: invalid rate [ 183.668604][T12105] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1779'. [ 183.807950][T12126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.813750][T12126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.960125][ T29] usbhid 9-1:1.0: can't add hid device: -71 [ 183.962217][ T29] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 183.969761][ T29] usb 9-1: USB disconnect, device number 8 [ 184.521536][T12148] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1790'. [ 184.551556][T12154] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 184.581367][T12156] overlayfs: failed to resolve './file1': -2 [ 184.633029][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 184.633041][ T40] audit: type=1400 audit(1749380417.828:7007): avc: denied { unlink } for pid=12164 comm="syz.4.1798" name="file1" dev="9p" ino=35913885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 184.642756][ T40] audit: type=1400 audit(1749380417.828:7008): avc: denied { link } for pid=12164 comm="syz.4.1798" name="file0" dev="9p" ino=35913860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 184.807579][T12179] evm: overlay not supported [ 184.868141][ T5945] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 185.060927][ T5945] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 185.064224][ T5945] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.067050][ T5945] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.070403][ T5945] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.073723][ T5945] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.076523][ T5945] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.079895][ T5945] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.083245][ T5945] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.086138][ T5945] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.089513][ T5945] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.092462][ T5945] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.095316][ T5945] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.098729][ T5945] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.101641][ T5945] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.104657][ T5945] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.108009][ T5945] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.110895][ T5945] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.113887][ T5945] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.117340][ T5945] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.121353][ T5945] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.124311][ T5945] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.127931][ T5945] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.130836][ T5945] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.133922][ T5945] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.137398][ T5945] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.142712][ T5945] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 185.145712][ T5945] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 185.148427][ T5945] usb 11-1: Product: syz [ 185.149843][ T5945] usb 11-1: Manufacturer: syz [ 185.151556][ T5945] usb 11-1: SerialNumber: syz [ 185.154982][ T5945] usb 11-1: config 0 descriptor?? [ 185.160330][ T5945] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 185.199411][ T5952] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 185.202600][ T5952] Bluetooth: hci1: Injecting HCI hardware error event [ 185.206546][ T5952] Bluetooth: hci1: hardware error 0x00 [ 185.281699][ T40] audit: type=1400 audit(1749380418.427:7009): avc: denied { read } for pid=12193 comm="syz.0.1809" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 185.290223][ T40] audit: type=1400 audit(1749380418.427:7010): avc: denied { open } for pid=12193 comm="syz.0.1809" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 185.298412][ T40] audit: type=1400 audit(1749380418.446:7011): avc: denied { ioctl } for pid=12193 comm="syz.0.1809" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 185.375206][T12159] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 185.381161][ T5945] usb 11-1: USB disconnect, device number 7 [ 185.384309][ T5945] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 185.448347][T12202] bio_check_eod: 2 callbacks suppressed [ 185.448359][T12202] syz.0.1813: attempt to access beyond end of device [ 185.448359][T12202] sr0: rw=0, sector=4, nr_sectors = 4 limit=0 [ 185.454248][T12202] vxfs: unable to read disk superblock at 1 [ 185.457654][T12202] syz.0.1813: attempt to access beyond end of device [ 185.457654][T12202] sr0: rw=0, sector=32, nr_sectors = 4 limit=0 [ 185.461638][T12202] vxfs: unable to read disk superblock at 8 [ 185.463542][T12202] vxfs: can't find superblock. [ 185.544761][ T40] audit: type=1400 audit(1749380418.670:7012): avc: denied { map } for pid=12203 comm="syz.0.1814" path="socket:[41757]" dev="sockfs" ino=41757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 185.689059][T12210] CUSE: unknown device info "" [ 185.691138][T12210] CUSE: zero length info key specified [ 185.738544][T12216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=12216 comm=syz.5.1818 [ 185.860427][T12229] netem: change failed [ 186.080364][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 186.083211][T12243] netlink: 'syz.4.1829': attribute type 30 has an invalid length. [ 186.086508][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'. [ 186.151134][ T5981] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 186.249282][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1833'. [ 186.323321][ T5981] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 186.325954][ T5981] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 186.328533][ T5981] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 186.332383][ T5981] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 186.336077][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 186.339525][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 186.343677][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 186.351409][ T5981] usb 5-1: string descriptor 0 read error: -22 [ 186.353423][ T5981] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 186.357013][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.364941][ T5981] usb 5-1: config 0 descriptor?? [ 186.366988][T12232] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.372497][ T5981] hub 5-1:0.0: bad descriptor, ignoring hub [ 186.375116][ T5981] hub 5-1:0.0: probe with driver hub failed with error -5 [ 186.381569][ T5981] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input21 [ 186.590086][ T40] audit: type=1400 audit(1749380419.652:7013): avc: denied { append } for pid=12231 comm="syz.0.1826" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 186.645681][T12276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.646076][T12277] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 186.650266][T12276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.683437][ T5945] usb 5-1: USB disconnect, device number 29 [ 186.704186][T12282] netlink: 'syz.0.1840': attribute type 27 has an invalid length. [ 186.784758][T12282] dummy0: left promiscuous mode [ 186.814451][ T836] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 186.872678][T12280] openvswitch: netlink: Key type 179 is out of range max 32 [ 186.887657][T12282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.892178][T12282] batadv_slave_0: left allmulticast mode [ 186.905228][T12282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.936832][T12282] 0: left promiscuous mode [ 186.972307][T12282] veth1_vlan: left allmulticast mode [ 186.974729][ T836] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 186.977855][T12282] macvlan0: left promiscuous mode [ 186.979061][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.979461][T12282] macvlan0: left allmulticast mode [ 186.982226][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.988987][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 186.991928][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.994699][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.998798][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 187.002283][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.005874][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.018343][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 187.022395][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.025952][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.031126][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 187.034722][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.039166][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.043444][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 187.043470][T12282] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.047089][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.050426][T12282] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.054030][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.057592][T12282] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.057625][T12282] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.069797][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 187.071477][T12282] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 187.074067][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.079327][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.085947][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 187.090065][ T836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.094325][ T836] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.098713][ T836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 187.104428][ T836] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 187.107987][ T836] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 187.111231][ T836] usb 9-1: Product: syz [ 187.119853][ T836] usb 9-1: Manufacturer: syz [ 187.121807][ T836] usb 9-1: SerialNumber: syz [ 187.126933][ T836] usb 9-1: config 0 descriptor?? [ 187.133673][ T836] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 187.141888][T12282] bond3: left promiscuous mode [ 187.143460][T12282] ip6gretap1: left promiscuous mode [ 187.146821][T12282] bond3: left allmulticast mode [ 187.148886][T12282] ip6gretap1: left allmulticast mode [ 187.172118][T12282] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 187.184785][T12298] program syz.6.1843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.206941][T12287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.210980][T12287] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.215907][T12287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.349375][ T6011] usb 9-1: USB disconnect, device number 9 [ 187.352675][ T6011] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 187.430421][T12311] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12311 comm=syz.6.1846 [ 187.433935][ T5952] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 187.545524][T12315] tmpfs: Cannot change global quota limit on remount [ 187.826004][T12324] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1852'. [ 187.863685][T12332] loop2: detected capacity change from 0 to 3 [ 187.870584][T10728] Dev loop2: unable to read RDB block 3 [ 187.882724][T10728] loop2: unable to read partition table [ 187.884854][T10728] loop2: partition table beyond EOD, truncated [ 187.891152][T12332] Dev loop2: unable to read RDB block 3 [ 187.893031][T12332] loop2: unable to read partition table [ 187.898020][T12332] loop2: partition table beyond EOD, truncated [ 187.900110][T12332] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 187.968858][T12340] xt_hashlimit: size too large, truncated to 1048576 [ 188.265246][T12350] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1860'. [ 188.332107][ T6001] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 188.492158][ T6001] usb 11-1: Using ep0 maxpacket: 32 [ 188.504404][ T6001] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 188.509062][ T6001] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 188.513069][ T6001] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 188.518638][ T6001] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 188.522962][ T6001] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 188.528578][ T6001] usb 11-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 188.531789][ T6001] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.534264][ T6001] usb 11-1: Product: syz [ 188.536261][ T6001] usb 11-1: Manufacturer: syz [ 188.537758][ T6001] usb 11-1: SerialNumber: syz [ 188.541281][ T6001] usb 11-1: config 0 descriptor?? [ 188.543739][T12340] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 188.549393][ T6001] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input22 [ 188.555728][ T5337] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 188.568138][ T5337] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 188.574133][ T5337] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 188.578306][ C1] xpad 11-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 188.582790][ T5337] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 188.595431][T12098] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 188.601671][ T5337] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 188.608633][ T5337] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 188.619544][ T5337] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 188.624024][ T59] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 188.643136][ T5337] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 188.762576][T12340] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 188.770439][ T6001] usb 11-1: USB disconnect, device number 8 [ 188.803772][ T59] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.806617][ T59] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 188.811312][ T59] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.815124][ T59] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 188.818520][ T59] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 188.823916][ T59] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.826739][ T59] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.829237][ T59] usb 9-1: Product: syz [ 188.830589][ T59] usb 9-1: Manufacturer: syz [ 188.842097][ T59] cdc_wdm 9-1:1.0: skipping garbage [ 188.846763][ T59] cdc_wdm 9-1:1.0: skipping garbage [ 188.855654][ T59] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 188.857562][ T59] cdc_wdm 9-1:1.0: Unknown control protocol [ 189.028902][T12356] 9pnet: Could not find request transport: vifltgid=0x000000000000ee00 [ 189.034884][ T40] audit: type=1400 audit(1749380421.935:7014): avc: denied { getopt } for pid=12355 comm="syz.5.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.385171][T12354] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.395817][T12374] NILFS (loop6): device size too small [ 189.559450][ T40] audit: type=1400 audit(1749380422.421:7015): avc: denied { read } for pid=12383 comm="syz.6.1870" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.658760][ T40] audit: type=1400 audit(1749380422.524:7016): avc: denied { listen } for pid=12388 comm="syz.6.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.700551][ T59] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 189.862224][ T59] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 189.865644][ T59] usb 5-1: config 0 has no interface number 0 [ 189.868258][ T59] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 44016, setting to 64 [ 189.872960][ T59] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 189.876763][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.882880][ T59] usb 5-1: config 0 descriptor?? [ 189.888507][T12376] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 189.895809][ T59] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.120/input/input23 [ 189.908116][ C3] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 190.109019][ T6001] usb 5-1: USB disconnect, device number 30 [ 190.121364][T12404] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1875'. [ 190.659232][ T40] audit: type=1400 audit(1749380423.450:7017): avc: denied { append } for pid=12413 comm="syz.6.1878" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 190.662427][T12414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.677024][ T40] audit: type=1400 audit(1749380423.478:7018): avc: denied { ioctl } for pid=12413 comm="syz.6.1878" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 190.884503][ T40] audit: type=1400 audit(1749380423.665:7019): avc: denied { audit_write } for pid=12424 comm="syz.6.1881" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 190.933206][ T40] audit: type=1400 audit(1749380423.712:7020): avc: denied { listen } for pid=12433 comm="syz.0.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 190.941453][T12425] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1881'. [ 190.945945][T12425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=12425 comm=syz.6.1881 [ 190.954582][ T40] audit: type=1400 audit(1749380423.731:7021): avc: denied { bind } for pid=12433 comm="syz.0.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 190.999263][ T40] audit: type=1400 audit(1749380423.777:7022): avc: denied { watch } for pid=12436 comm="syz.0.1886" path="/442/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 191.008238][ T40] audit: type=1400 audit(1749380423.777:7023): avc: denied { watch_sb watch_reads } for pid=12436 comm="syz.0.1886" path="/442/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 191.573741][ T59] usb 9-1: USB disconnect, device number 10 [ 191.661539][T12477] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1902'. [ 191.732294][T12481] 9p: Unknown uid 00000000004294967295 [ 191.736735][ T40] audit: type=1400 audit(1749380424.460:7024): avc: denied { accept } for pid=12480 comm="syz.0.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 191.739185][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1903'. [ 191.749158][T12488] binder: 12487:12488 ioctl c0189372 200000000100 returned -22 [ 191.752032][T12488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=12488 comm=syz.4.1905 [ 191.992604][ T40] audit: type=1400 audit(1749380424.703:7025): avc: denied { execute } for pid=12502 comm="syz.4.1911" path="pipe:[45950]" dev="pipefs" ino=45950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 192.098318][T12513] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1914'. [ 192.101669][T12513] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 192.106132][T12513] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 192.121141][ T40] audit: type=1400 audit(1749380424.825:7026): avc: denied { write } for pid=12514 comm="syz.4.1915" name="/" dev="9p" ino=35913824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.172412][T12520] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1917'. [ 192.351664][ T6001] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 192.364939][T12529] vcan0: entered allmulticast mode [ 192.395355][T12534] bond0: option use_carrier: invalid value (17) [ 192.397859][T12534] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1921'. [ 192.400845][ T73] ------------[ cut here ]------------ [ 192.401076][T12534] netlink: 'syz.5.1921': attribute type 10 has an invalid length. [ 192.403215][ T73] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 192.411851][ T73] WARNING: CPU: 2 PID: 73 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 192.414970][ T73] Modules linked in: [ 192.416671][ T73] CPU: 2 UID: 0 PID: 73 Comm: kworker/u32:4 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 192.422310][ T73] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.425645][ T73] Workqueue: bond0 bond_mii_monitor [ 192.427376][ T73] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 192.429264][ T73] Code: 05 ff ff ff e8 74 d1 59 f8 c6 05 e5 3a 2e 07 01 90 ba 48 00 00 00 48 c7 c6 c0 88 e3 8c 48 c7 c7 60 88 e3 8c e8 74 96 18 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 4e a8 90 e8 6e 90 c0 f8 e9 [ 192.429693][T12536] netlink: 'syz.6.1920': attribute type 4 has an invalid length. [ 192.435267][ T73] RSP: 0018:ffffc9000161f9f0 EFLAGS: 00010286 [ 192.440030][ T73] RAX: 0000000000000000 RBX: ffff88803724c000 RCX: ffffffff817ae368 [ 192.442486][ T73] RDX: ffff888022088000 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 192.442539][T12536] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1920'. [ 192.445001][ T73] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 192.450395][ T73] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff920002c3f48 [ 192.452812][ T73] R13: ffff88803724ccc5 R14: ffffffff8c5909a0 R15: ffffffff899b8940 [ 192.455360][ T73] FS: 0000000000000000(0000) GS:ffff8880d6954000(0000) knlGS:0000000000000000 [ 192.458233][ T73] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.460254][ T73] CR2: 000000110c2eeecf CR3: 000000004ef2f000 CR4: 0000000000352ef0 [ 192.462656][ T73] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.465107][ T73] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.467604][ T73] Call Trace: [ 192.468686][ T73] [ 192.469799][ T73] ethtool_op_get_link+0x1d/0x70 [ 192.471404][ T73] bond_check_dev_link+0x3f9/0x710 [ 192.473088][ T73] ? stack_trace_save+0x8e/0xc0 [ 192.474706][ T73] ? __pfx_bond_check_dev_link+0x10/0x10 [ 192.476525][ T73] bond_mii_monitor+0x3c0/0x2dc0 [ 192.478152][ T73] ? __pfx_bond_mii_monitor+0x10/0x10 [ 192.479961][ T73] ? rcu_is_watching+0x12/0xc0 [ 192.481543][ T73] process_one_work+0x9cf/0x1b70 [ 192.483142][ T73] ? __pfx_process_one_work+0x10/0x10 [ 192.484878][ T73] ? assign_work+0x1a0/0x250 [ 192.486366][ T73] worker_thread+0x6c8/0xf10 [ 192.487860][ T73] ? __pfx_worker_thread+0x10/0x10 [ 192.489525][ T73] kthread+0x3c5/0x780 [ 192.490904][ T73] ? __pfx_kthread+0x10/0x10 [ 192.492394][ T73] ? rcu_is_watching+0x12/0xc0 [ 192.493977][ T73] ? __pfx_kthread+0x10/0x10 [ 192.495502][ T73] ret_from_fork+0x5d4/0x6f0 [ 192.497012][ T73] ? __pfx_kthread+0x10/0x10 [ 192.498518][ T73] ret_from_fork_asm+0x1a/0x30 [ 192.500055][ T73] [ 192.501164][ T73] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.503481][ T73] CPU: 2 UID: 0 PID: 73 Comm: kworker/u32:4 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 192.507158][ T73] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.510554][ T73] Workqueue: bond0 bond_mii_monitor [ 192.512260][ T73] Call Trace: [ 192.513367][ T73] [ 192.514343][ T73] dump_stack_lvl+0x3d/0x1f0 [ 192.515838][ T73] panic+0x71c/0x800 [ 192.517139][ T73] ? __pfx_panic+0x10/0x10 [ 192.518609][ T73] ? show_trace_log_lvl+0x29b/0x3e0 [ 192.520342][ T73] ? check_panic_on_warn+0x1f/0xb0 [ 192.522011][ T73] ? __linkwatch_sync_dev+0x1ed/0x230 [ 192.523746][ T73] check_panic_on_warn+0xab/0xb0 [ 192.525378][ T73] __warn+0xf6/0x3c0 [ 192.526720][ T73] ? preempt_schedule_notrace+0x62/0xe0 [ 192.528501][ T73] ? __linkwatch_sync_dev+0x1ed/0x230 [ 192.530235][ T73] report_bug+0x3c3/0x580 [ 192.531651][ T73] ? __linkwatch_sync_dev+0x1ed/0x230 [ 192.533378][ T73] handle_bug+0x184/0x210 [ 192.534811][ T73] exc_invalid_op+0x17/0x50 [ 192.536282][ T73] asm_exc_invalid_op+0x1a/0x20 [ 192.537868][ T73] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 192.539846][ T73] Code: 05 ff ff ff e8 74 d1 59 f8 c6 05 e5 3a 2e 07 01 90 ba 48 00 00 00 48 c7 c6 c0 88 e3 8c 48 c7 c7 60 88 e3 8c e8 74 96 18 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 4e a8 90 e8 6e 90 c0 f8 e9 [ 192.546087][ T73] RSP: 0018:ffffc9000161f9f0 EFLAGS: 00010286 [ 192.548084][ T73] RAX: 0000000000000000 RBX: ffff88803724c000 RCX: ffffffff817ae368 [ 192.550675][ T73] RDX: ffff888022088000 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 192.553263][ T73] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 192.555821][ T73] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff920002c3f48 [ 192.558338][ T73] R13: ffff88803724ccc5 R14: ffffffff8c5909a0 R15: ffffffff899b8940 [ 192.560912][ T73] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 192.562747][ T73] ? __warn_printk+0x198/0x350 [ 192.564313][ T73] ? __warn_printk+0x1a5/0x350 [ 192.565884][ T73] ethtool_op_get_link+0x1d/0x70 [ 192.567491][ T73] bond_check_dev_link+0x3f9/0x710 [ 192.569166][ T73] ? stack_trace_save+0x8e/0xc0 [ 192.570785][ T73] ? __pfx_bond_check_dev_link+0x10/0x10 [ 192.572607][ T73] bond_mii_monitor+0x3c0/0x2dc0 [ 192.574279][ T73] ? __pfx_bond_mii_monitor+0x10/0x10 [ 192.576025][ T73] ? rcu_is_watching+0x12/0xc0 [ 192.577606][ T73] process_one_work+0x9cf/0x1b70 [ 192.579226][ T73] ? __pfx_process_one_work+0x10/0x10 [ 192.580980][ T73] ? assign_work+0x1a0/0x250 [ 192.582480][ T73] worker_thread+0x6c8/0xf10 [ 192.583997][ T73] ? __pfx_worker_thread+0x10/0x10 [ 192.585660][ T73] kthread+0x3c5/0x780 [ 192.586978][ T73] ? __pfx_kthread+0x10/0x10 [ 192.588462][ T73] ? rcu_is_watching+0x12/0xc0 [ 192.590022][ T73] ? __pfx_kthread+0x10/0x10 [ 192.591520][ T73] ret_from_fork+0x5d4/0x6f0 [ 192.593038][ T73] ? __pfx_kthread+0x10/0x10 [ 192.594441][ T73] ret_from_fork_asm+0x1a/0x30 [ 192.595966][ T73] [ 192.597672][ T73] Kernel Offset: disabled [ 192.599074][ T73] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:56:18 Registers: info registers vcpu 0 CPU#0 RAX=000000000023dfd3 RBX=0000000000000000 RCX=ffffffff8b7fbc99 RDX=0000000000000000 RSI=ffffffff8de19768 RDI=ffffffff8c156fe0 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a81c50 R15=0000000000000000 RIP=ffffffff8b7fa7ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6754000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007facb809deb8 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c50088b277eada51 4412819154bbb0e4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4525557edf0c0d69 84ef5e0af0aac01f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 97131944f8a342f9 487b0ad0d400294e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 59f3ab46591f49d4 4b12db44b160c10f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000dc80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0075b6df6938c77e e9d2fdbb0abb0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0075b7320075b838 0075ba2b0075b846 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fbe6543f9eb09791 b2dc00005bd20000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3b400004eac0000 0000019888140000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9fcae0d4e0a9d4fe c3061893fc5be855 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a34be2649e845335 6ce50e77dc5eaf17 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006980000 RBX=0000000000000000 RCX=ffff888029aa9070 RDX=000000000000009d RSI=ffffffff86a85448 RDI=ffff888029aa92d0 RBP=0000000000000001 RSP=ffffc900006a0b60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000004e20 R14=ffff888029aa9070 R15=0000000000000001 RIP=ffffffff86a85485 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6854000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007facb818b6b0 CR3=000000002865d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556d870498 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556d875912 000055556d875770 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556d888207 000055556d887930 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030008000190030f ffffffffffff0401 8003180800061000 20100006006ff634 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000080106 0200000044018808 0880030880040293 80030293800401a0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cd2b082464fd2600 7fb063b92a6261b8 b7af778e2db2feb6 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c00304100034b003 039c100030030000 001cfe76f7ff0132 ccaa42e554a86408 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06080157e6000800 34f00300080034e0 0300100034d0030f ffffffffffff0434 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0103801000041000 3380040100000008 06080157e6000800 34f00300080034e0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100034d0030f ffffffffffff0434 c00304100034b003 039c100030030000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001cfe76f7ff0132 ccaa42e554a86408 cd2b082464fd2600 7fb063b92a6261b8 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b7af778e2db2feb6 2a986902d2f493ed a9a4967cab074cee 535aaa721da00ff3 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b5305 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc9000161f360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000006f R14=ffffffff9b088360 R15=ffffffff855b52a0 RIP=ffffffff855b532f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d6954000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2eeecf CR3=000000004ef2f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdef8fb360 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa86811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa86811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa86811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa86811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa86811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa86811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff888028034880 RBX=ffffffff8e5c4cc0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff822e8330 RDI=fffffbfff1cb8998 RBP=0000000000000002 RSP=ffffc900035974c8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81987ef3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c452293 CR3=000000003448c000 CR4=00352ef0 DR0=0000000000000040 DR1=0000000000000004 DR2=0000000000000003 DR3=00000000000010e3 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564091dab600 0000564091dab600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0da12f10 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2032373a682e6b63 6f6c5f7665647465 6e2f74656e2f6564 756c636e692f2e20 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7420745f64656c65 62616c6e753a725f 7463656a626f3a75 5f6d65747379733d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747865746e6f6374 20745f6d64617379 733a725f6d646173 79733a746f6f723d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747865746e6f6373 2034323833313935 333d6f6e69202270 39223d7665642022 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f223d656d616e20 22353139312e342e 7a7973223d6d6d6f 632034313532313d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000