last executing test programs: 1m39.070812872s ago: executing program 0 (id=347): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x2010c00, &(0x7f0000000780)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad733642561534f14257b6", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/109, 0x6d}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000800)=""/67, 0x43}], 0x3}, 0x0) sendmmsg$alg(r1, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="4e1d6bd54fda27b82f614329043765d534fc1474b21cddc8a17959c927bd8f9c61cd30ba4302bb118909de6d26219d2f884f3627f657f98880a371fe39245e1759876e13b55314091942c208fdc5f33de72c3d6bc72297f46adaa5489b93f385c79e1e3bc2b1a6fe78d14b1ee9b14e8739b9acc119c40a22b84113e3b7cd11c6b9b0c2a8b658ff552db357dac93b2e0d3081d620c801d56ac601b6e4dda05322232ee4749f92e04031f82855790cb33877ed46", 0xb3}, {&(0x7f0000000540)="45ae90d6b238d607998dd5536285f32a12494a64a0f3a4ef18203a42a93d0ee608ae45065fd8871ca0435e28cd91f2097fa416536b1aaad1234f9d4135cc1075162dfb9dfb25072c46589d9d4784a054cda2d2301b6a792a4ad005a43252490195f347273cc9f8914a1e2be385d9f8c78c97c034f43fd63097b9a2c7820c79", 0x7f}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f00000005c0)="e1d22a4d3f70e1cc65b57cf29b48b8291ef5b2747bc11bba61af3f15f79b939f6fca253f43a29c01a079a16a530a81b5eac57603103fc304999775fe9bf872010de62b175f5c0ddf0e3b18d9ccb6bd600331a2ba49fd8fb394d164c8f219cecdaf868dbd3380e8777c006ce2b70ba1c3acea82a7371fc8b2fbadf33981bf26a372cc1275bc4c71ab2a5b689ff18863eb71241f296a464906cc1396d273e80c8c2717140ccdac5768734bf90efcc43bd030ccc960be", 0xb5}], 0x4, &(0x7f0000000340)=[@op={0xb, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x4004810}], 0x2, 0x40008040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8a04"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r9, @ANYBLOB="200066060a0001000180c2000000000008000f000100000005"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fea8"], 0x48}}, 0x0) memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000a, 0x80010, r2, 0xeae6e000) syz_io_uring_setup(0x8fd, &(0x7f0000000080)={0x0, 0x4d26, 0x10100, 0x3}, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) 1m38.13152959s ago: executing program 0 (id=370): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x9, 0x0, 0xfffe, 0xa}, {@in=@multicast2, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}, {0x0, 0x2000000000000003, 0x2}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x14c}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x2, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) 1m38.078173556s ago: executing program 0 (id=372): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206050000000000000000000100000605000400000000000900020073797a31000000000c000780050015008b0000000500050002000000050001000600000014000300686173683a69702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f00000000c0)={0x1}) 1m37.999766558s ago: executing program 0 (id=376): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f0000000380)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000080)=0x200000, 0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x80000003}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f0000000580)=0x3, 0x4) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000005c0)=0x8b1, 0x4) chdir(&(0x7f0000000280)='./file0\x00') r5 = creat(&(0x7f0000000300)='./bus\x00', 0x15d) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r8, &(0x7f0000000600)=ANY=[@ANYRES64=r5, @ANYRES32=r2], 0x78) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) recvmmsg(r7, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r9, 0x2008002) sendfile(r6, r9, 0x0, 0x80000001) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000540)=r9, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r8, &(0x7f0000000600), 0x0, 0x1, 0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) 1m37.92210525s ago: executing program 0 (id=378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004880)=@polexpire={0xc0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, {{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0x4}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x2}, 0x6a}}, 0xc0}}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m37.728511744s ago: executing program 0 (id=386): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x4040000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000240)=""/196) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) (async) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c9"], 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x64d1, &(0x7f0000000140)={0x0, 0x7079, 0x0, 0x1, 0x28b, 0x0, r0}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r5, r6, 0x0) (async, rerun: 32) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x2d, 0x1}, &(0x7f0000000100)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x20, 0x3fa, 0x300, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r8 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r8, 0x2dcf, 0x987, 0x0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x7, @local, 0xa}}}, 0xa0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000d80), &(0x7f0000000dc0)=""/229, 0xe5, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000f8000002000000000000006000000000103a00ff020000000000000000000000000001fe880000000000000000bac000000000000186009078ff080d000d00000000000000"], 0x46) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1m37.686985586s ago: executing program 32 (id=386): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x4040000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000240)=""/196) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) (async) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c9"], 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x64d1, &(0x7f0000000140)={0x0, 0x7079, 0x0, 0x1, 0x28b, 0x0, r0}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r5, r6, 0x0) (async, rerun: 32) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x2d, 0x1}, &(0x7f0000000100)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x20, 0x3fa, 0x300, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r8 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r8, 0x2dcf, 0x987, 0x0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x7, @local, 0xa}}}, 0xa0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000d80), &(0x7f0000000dc0)=""/229, 0xe5, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000f8000002000000000000006000000000103a00ff020000000000000000000000000001fe880000000000000000bac000000000000186009078ff080d000d00000000000000"], 0x46) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1m27.890882829s ago: executing program 3 (id=478): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x1}, 0xc) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="94150000", @ANYRES16=r4, @ANYBLOB="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"], 0x1594}, 0x1, 0x0, 0x0, 0x80}, 0x24000015) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c4002800500290001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r6 = socket(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) (async, rerun: 64) mkdir(&(0x7f0000000240)='./file0\x00', 0x1) (async, rerun: 64) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000f40)={0x1a}) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x1006, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001940)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001980)={'batadv0\x00', 0x0}) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000001a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a40)={&(0x7f0000000380)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd7000ffdbdf250500000008000500050000005c0001800800030003000000080003000100000014000200626f6e643000000000000000000000000800030002000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="3825eeb8398a528b9b62020beb4f90297c7638d6de6b13d26b7ac8f6b677b43a065f977e48bf16e523fb7068ec406eef11bd2aac9af8fb3578f5f45549a3eb19da763fe2dac35b927668ed6082ed54741076a6778b1d19ce182c92a602818860b557d7ec39e8e4395ffa4030149f796fdc5d542f903b9567452ef6008f8afb00958dcf1a4a018a18ff030000000000003f"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) 1m27.820079489s ago: executing program 3 (id=480): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2044080) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) sendmsg$sock(r1, &(0x7f0000000980)={&(0x7f0000000600)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)="7f1cf5076a1be04f8f47061f940255edd4f24e42b85ebba1f09ece081d325f8d9304aec880c5de7a232c0222c26be4e906196c2767b0bf132cb8968aab3f0c75676c25f6cff57047a48430e5f23d880e9bf84b784038732e886d7630ad259ee90baf4e737b8866fee346dc920c703dacfa645391d016e201c12a445d2d11be2b32beeb12f237862870f7f2946372608062b74b1fd842be14c919b4944e312341f10770955652b256f240a4e13053cc9fa60ae7f4a4ac1c", 0xb7}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000740)="01ed7eaff3aeb2820e839b5ee15e2daa66bcbd9916cda5288ada33954f74fa2ab31ab48e2893fc12f111f71b77b07cdd8a8ebcc41e46d732ead0ab5548bdee160f7b725eae588de3e2e79a16dfaa8371c0207f892386cac599411b82502beec5d75bdca5de10c8b49acd063810a6", 0x6e}, {&(0x7f00000007c0)="21cda07b5c7f8765a99071a051bf47bdc239a184cef7a80dba5caa776e25a798740201aacebf013650bf2d828a31bf1f2e5f2b38eb7537fe7e646e77e40a9d0d74142dc6736720783fbed1315a33f3e7134034a0edefb3c856d40aa2f9315eada4e896ce618a6f88f378cdb8ebaf86cae75e3c62f187bf8fa3b90f36491541e31a2a05d31faa8a23b5fb29c8ab1ebc71e2f5dbb004183de3", 0x98}, {&(0x7f0000000580)="da7ee925a39bfab13a9cc09a2b3e9b6eaade314be10f06044d16a52e4b111275d0fb8e09c099abb5d3ac6d", 0x2b}], 0x5, &(0x7f0000000900)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}], 0x60}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r1, 0x0, 0x23, 0x80000) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000200)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r9, 0xffffffffffffffff}) r11 = syz_io_uring_setup(0x6f15, &(0x7f0000000300)={0x0, 0x7b76, 0x1, 0x0, 0x242}, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x5fe3, &(0x7f0000000480)={0x0, 0xfd1d, 0x80, 0x3, 0x340, 0x0, r11}, &(0x7f0000000500), &(0x7f0000000540)) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd21, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r12, 0x27, 0xe, 0x0, &(0x7f00000002c0)="0300f977030ffa030000004256fd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r13 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) fcntl$addseals(r13, 0x409, 0x8) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x13, r13, 0x2d2b9000) 1m27.526219626s ago: executing program 3 (id=483): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001", @ANYRES8=0x0, @ANYRES64], 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYRES16=r1], 0x40}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x2, 0x10000, 0xfffffffb, 0x7, 0x1a, "f90a2d37c38eaa8ea4540acad9455fb5031af8"}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x5) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x400, 0xfffffffe, 0x0, 0x10000, 0x16, "0524bdb1412c52ae1d8d23590200100000b600"}) syz_emit_ethernet(0xdf, &(0x7f00000003c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@x25={0x805, {0x2, 0x8, 0xf3, "b9c093af77898b196ed4a8422cf8fec4f88a18eaa5c944017324eaa8b91b4ac020fd9b4005d1731531a7cb65f5ffeef9273add442c6b3a0afed82352fda597b555846d5628b72b0bae5b1445f449905cae92bdbbece42548c6c6ea3a4e6c215e7b8dc4a7befee6ca06f50986cd8be42492ad342f480fd72f50e83acf27ba84177c34aeba37e8018d99138ab1bbcca4389fbc7bcf4aa8d6dd4e28b37f0fa073765d35f9e3d04d4ab40ccd0fabe21b718010bde73044436281544912c80a81c214876d1e9b56f7798ba826"}}}}, 0x0) 1m27.348997486s ago: executing program 3 (id=485): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdir(&(0x7f0000000180)='./file0\x00', 0x40) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r4 = socket$inet(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatfs(0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x10d, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) 1m27.191598189s ago: executing program 3 (id=487): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x20242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000300)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000004c0)={0x0, 0x4}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0xaa}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00d32115611bd7a471751b6cdb4fb64f000000", @ANYRES16=r2, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e0002180880c7b3ee824e5b3da90253"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x20242, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000300)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f00000004c0)={0x0, 0x4}, 0x2) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0xaa}, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00d32115611bd7a471751b6cdb4fb64f000000", @ANYRES16=r2, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e0002180880c7b3ee824e5b3da90253"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) (async) 1m26.969634206s ago: executing program 3 (id=489): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x5, "400869524fca21b8cdac3f988e209e5bcef94498d9ef825eb429fa203a7fe1ca", 0x3, 0x5, 0x6, 0x40004, 0x4}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, 0x0, &(0x7f00000008c0)) 1m26.89129221s ago: executing program 33 (id=489): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x5, "400869524fca21b8cdac3f988e209e5bcef94498d9ef825eb429fa203a7fe1ca", 0x3, 0x5, 0x6, 0x40004, 0x4}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, 0x0, &(0x7f00000008c0)) 15.280421765s ago: executing program 2 (id=1335): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1, 0x0, 0x2, 0x40040}}) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x5ca5, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000008000000bf08fffff900000055090100000000009500000000ec0000bf916a0000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r3, 0x8925, 0x20001116) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000007000000ff"]) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.960926278s ago: executing program 2 (id=1340): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x9, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@hyper}, @host, 0x0, 0x0, 0x1, 0x4}) mkdir(&(0x7f0000000540)='./file0\x00', 0xd0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x90000) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 14.866136128s ago: executing program 2 (id=1342): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1, 0xffffff50}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x8, 0x0, r5}) 14.770715767s ago: executing program 2 (id=1344): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getresuid(&(0x7f0000000100), &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) r3 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r4, r3}, &(0x7f0000000080)=""/100, 0x64, &(0x7f0000000180)={&(0x7f0000000400)={'xxhash64-generic\x00'}}) fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r3, r1, r5) lstat(&(0x7f0000000280)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20000, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x3b}}]}}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) umount2(&(0x7f0000000400)='./file0\x00', 0x0) 14.670711887s ago: executing program 2 (id=1346): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) pidfd_send_signal(r0, 0x1c, &(0x7f0000000040)={0x2c, 0x100, 0x100}, 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000100)={0xe, 0x6}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r2, 0x1, 0x6, @local}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x7, 0x92200) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000280)=0x8001) (async) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f00000002c0)={0x80, 0x1}) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000300)={0x5, 0x80}) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000500)={0x3, &(0x7f0000000480)=[{0x6, 0x66, &(0x7f0000000340)="2041221d249ddd0aa880f2cc02c0b4c56a2dd7331d591849cd7e2f2794b7c942276c4b981550aa75c3d8120c14dd5afe4c11b3902307c061abfb207fa867078592d4f569db260cb089a456984cf98ef474c6286c3dc3dee8c64e681d75f639d0dc5bd8f3c573", 0x1}, {0x4, 0x74, &(0x7f00000003c0)="ac8b8bfe04653c64b7b279e1f3d8b8e9480efeddb99019f4a05220323e9fb85b4d48fd45810264a98e6466da829ac22592c72915e6f08f0cb8b2eb69ce060459c013e039c6643d2d92d37f542ed3bda1c58ecc93b9d6ba9d9787f9ddfc164d16240a448947e53b2484d8fe4d43c76d6f1af30dd1", 0x1, 0x1}, {0x5, 0x40, &(0x7f0000000440)="6efd7b82b30dc6ac157dc4f7b2f77be7b078de0c65e82c92394a1eeca76fec5ede4e59c04e2c89f81c7a289a8f707699b3eb01c5a63c82054355f20c6488b2cb", 0x0, 0x1}]}) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000540)={0x4, 0x0, [{0x40000001, 0x401, 0x6, 0x7, 0x7, 0xb19, 0xc899}, {0x2, 0x9, 0xf, 0x7, 0x2, 0xea51, 0x5}, {0xb, 0x3, 0x7, 0x34, 0x10, 0x9, 0xd}, {0xb, 0x8, 0x3, 0xffff, 0x9, 0x9, 0x6}]}) (async) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600), 0x20101, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000640)) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x88900) write$UHID_INPUT2(r6, &(0x7f00000006c0)={0xc, {0x5c, "32df110d5830c647ff706f5e65fd2b77f479c2a3ecb78a36e0a8a62057cd56fd888129aa981106f508eda92fe507b9ab4ceb7171ccff62adab318b6024d4ef7efa27fbe6d8de85f7be613431122bb51e63a4aedaee7bf0445dc272d6"}}, 0x62) (async) r7 = socket(0x11, 0x2, 0x2) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000740)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000780)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000007c0)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000800)={r8, 0x5}, &(0x7f0000000840)=0x8) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x6, 0x7, {{0x3b, 0x4, 0x0, 0xa, 0xec, 0x64, 0x0, 0x8, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@timestamp_addr={0x44, 0x2c, 0x8d, 0x1, 0xa, [{@private=0xa010101, 0x7fffffff}, {@empty, 0x9}, {@rand_addr=0x64010102, 0xc}, {@private=0xa010100, 0x3}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x3}]}, @generic={0x83, 0x8, "342ba0e505f0"}, @generic={0x7, 0xd, "1d85f9e9135cd53934ab14"}, @timestamp_prespec={0x44, 0x14, 0xa3, 0x3, 0x6, [{@empty, 0x13}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xbf7d}]}, @cipso={0x86, 0x67, 0xffffffffffffffff, [{0x5, 0x12, "2536ef9de9670ba864df2a07e53d282d"}, {0x1, 0xd, "3d2d44daec124715a2e5f1"}, {0x1, 0xa, "35206a9633a0d59c"}, {0x1, 0x7, "b3ef3f837b"}, {0x7, 0x8, "d2e13accb089"}, {0x7, 0x12, "b45d6c807999b8834d752d52867267b6"}, {0x1, 0x5, "cd6d99"}, {0xc, 0x12, "de0c07482da0c2aecfc5b91f7b24406b"}]}, @ssrr={0x89, 0x1b, 0x90, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0xda56, 0x0, r6, 0x0, '\x00', r9, r6, 0x4, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) accept$packet(r7, &(0x7f0000000a80), &(0x7f0000000ac0)=0x14) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0xffffffffffffffff, 0x1}, 0xc) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000b40)={0x6, [0x6, 0x1, 0x5, 0x7fff, 0x9b, 0x2]}, 0x10) (async) listen(r7, 0x6e5) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r7) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000c80)={'tunl0\x00', &(0x7f0000000c00)={'tunl0\x00', r2, 0x8, 0x80, 0x0, 0x9, {{0xb, 0x4, 0x1, 0x3, 0x2c, 0x65, 0x0, 0x5e, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0xf, 0x6d, [@multicast2, @rand_addr=0x64010100, @multicast1]}, @rr={0x7, 0x7, 0x21, [@loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x8c, r10, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x8811) 14.418539069s ago: executing program 2 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)={0x0, 0x10, 0x37}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r5}, &(0x7f0000000080)=0x6c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r5, 0xd}, 0x8) r6 = syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, &(0x7f0000000340)="40aa", 0xfffffffffffffebb, 0x102, 0x1}) io_uring_enter(r6, 0x567, 0x1e, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) 14.330627692s ago: executing program 34 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)={0x0, 0x10, 0x37}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r5}, &(0x7f0000000080)=0x6c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r5, 0xd}, 0x8) r6 = syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, &(0x7f0000000340)="40aa", 0xfffffffffffffebb, 0x102, 0x1}) io_uring_enter(r6, 0x567, 0x1e, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) 2.890502746s ago: executing program 1 (id=1503): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) splice(r0, &(0x7f0000000000)=0x917, r0, &(0x7f0000000040)=0x1, 0x2, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d00)=""/164, 0xa4}, {&(0x7f0000000280)=""/40, 0x28}], 0x2}, 0xfffffffe}], 0x1, 0x12123, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.801071825s ago: executing program 5 (id=1504): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0xdffffff8, 0x4, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) (async, rerun: 64) read(r0, &(0x7f0000000000), 0x0) (rerun: 64) 2.738900285s ago: executing program 1 (id=1505): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)=0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x5, 0x2, [0x8, 0xd8]}, &(0x7f0000000040)=0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0xfffffffffffffed4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10680}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x0) accept4$unix(r3, &(0x7f0000000280)=@abs, &(0x7f0000000180)=0x6e, 0x40800) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x2, [@array, @const, @ptr, @typedef, @int, @restrict, @func, @fwd, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x2, [@array, @const, @ptr, @typedef, @int, @restrict, @func, @fwd, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) (async) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0x0, 0x4, 0xb5, 0x5, 0xd13, 0x5, 0x8, 0x9fad, 0x4, 0x1e, 0x4, 0x7, 0xffff18bd, 0x5, 0x2, 0x1, 0x3, 0x7fffffff, 0x0, 0x87, 0x1, 0x8, 0x18000, 0xef, 0x6, 0x6, 0x7f, 0x401, 0x3, 0x83, 0xb, 0x6]}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0x0, 0x4, 0xb5, 0x5, 0xd13, 0x5, 0x8, 0x9fad, 0x4, 0x1e, 0x4, 0x7, 0xffff18bd, 0x5, 0x2, 0x1, 0x3, 0x7fffffff, 0x0, 0x87, 0x1, 0x8, 0x18000, 0xef, 0x6, 0x6, 0x7f, 0x401, 0x3, 0x83, 0xb, 0x6]}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x8, 0x84}, 0x8) 2.549004626s ago: executing program 1 (id=1506): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb535275b725e104757e7dc00c6519a85ef828f711330ff2b0800", "dc5db43f"}, 0x38) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80801}, 0x0) 2.548585394s ago: executing program 5 (id=1507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xffffffff}, 0x1c) listen(r3, 0x100) syz_emit_ethernet(0x42, &(0x7f0000000580)={@local, @empty, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @multicast, @local, @broadcast, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}, 0x0) write$nbd(r1, &(0x7f0000000340)=ANY=[], 0x40) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x32, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006840)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c7250e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef245778490d2d47b1743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29b22d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d8da2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167fa70a177d00b26f56e29b63138a2ebc30b956961a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218deb91320b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978b844085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}}, 0x20004010) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x201028, 0x0) 1.629485354s ago: executing program 1 (id=1512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000129"], 0xfce) 1.450849629s ago: executing program 4 (id=1513): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000040)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x28, r2, 0x301, 0x70bd25, 0x25dfdbef, {{}, {@val={0x8, 0x7, 0x22}, @void, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4c800}, 0xc4) listen(r1, 0x0) 1.300950386s ago: executing program 4 (id=1514): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000002c0)={0xa, 0x1, 0x1, {0x27, 0x6, 0x0, 0x81}}) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000000)={0xe94a, "1ba88a33d1931503eb178eac5235e4a89e1b0ef71f4ac6f97c1d485ff6ad73d1", 0x64aceaff4e948324, 0x1}) 1.190482146s ago: executing program 4 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b0c0000", @ANYRES32=0x0, @ANYBLOB="00db000000400000200012800b"], 0x40}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f00008aa000/0x4000)=nil, 0x4000, 0x2, 0x100010, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) openat$cgroup_ro(r4, &(0x7f0000000240)='memory.events.local\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="9c", 0x1}], 0x300, 0x300000, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'vlan1\x00', {0x2, 0x4e26, @rand_addr=0xdffffc14}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r1, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x0) 1.189033916s ago: executing program 6 (id=1516): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6465636f8937b40d2dbab5df17680000009175744f887a078dae5663573e29383cdd94e2b024828e80150dc9e06d969d22263e88e33bbdee66ba9562b50c1ba0cef41eb1b216f2b68a2705a62c913ab554f2692f43746102d4166bd602193120e4f27d1256355d3e8ab62a7d39928b7fa7cba2c820f6e240dab826c2bc6c751e284cfee927b7d21e14fc53c0dd0feab8fb09002522ee"], 0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x9, {0x1a9}}}}]}]}, 0x68}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@hyper}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = getpid() r6 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x1d, 0x78, 0x1e0, 0x3e, 0x1, 0x3e, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0xfe45, 0x5, 0x600000000000000, 0xdb16, 0x2, 0xfff, 0x1ab6000000000}, &(0x7f0000000280)={0x1000, 0x80, 0x7fffffffffffffff, 0x5, 0x10001, 0x7, 0x8164, 0x1}, &(0x7f00000002c0)={0x5, 0xfffffffffffeffff, 0x1, 0x0, 0xfff, 0x9, 0x3, 0xfffffffffffffffd}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x2]}, 0x8}) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x164) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000000)={0x80000000, 0x4, 0x3, 0x1, 0xffffff01, 0xd}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) 1.140079016s ago: executing program 5 (id=1517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x80000, 0x100) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 900.646044ms ago: executing program 6 (id=1518): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x23939904284bff71, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x3c) creat(&(0x7f0000000100)='./file0\x00', 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r0, 0x0) 799.655159ms ago: executing program 1 (id=1519): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000c00)={{}, {0x1, 0x1}, [], {0x4, 0x5}, [{0x8, 0x5}], {0x10, 0x2}}, 0x2c, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x22, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000}, 0x0) syz_emit_ethernet(0x135f, &(0x7f0000000c40)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1329, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@hopopts={0x2e, 0x58, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @generic={0x8, 0xde, "4679aa152f244bcb63806ff187e037153903da69d5019de478d53b986bfd3e0f531c0cbc94f9ef63a9eeec7832b2bdfc4a2183b8d285513b078bc5d533f90a2101cff84eca1481cc2a3770db69694b90005baac968f4b9a5d120bff3c8d183e1ce8ecb79a65e4636479c01f5d98042ec655fbcda6bcf7dd055cb1cd2851f83d678af4eece1dca3efca96bd2f5d1a880b8bc93946dd5fa6f8821fa4c6bfa301989142dab39a03651adb158e7b580fee70421b8f213d540f8d351486d54f993cd65a4b8e03e23712c63035d4643ba1e218f43a73a9aa6ba6a64aff90d4c459"}, @generic={0x2, 0x7a, "692ba8b49eb992e2624ba91bffc8b96d4880289e3a7eb510f43e4afcd2c5ac1816534843b78b86bace9cd7187320133bf388cd0b306e75563e08af4245de587a62d67bda7518db8728ac887752f265dbc5b6da7a973abf3d2988d71bf3e9acc5a4be34fbdea5328d0bbb5ed1e99da68b8a1395672bb356585466"}, @calipso={0x7, 0x48, {0x1, 0x10, 0x2, 0xcddc, [0x4, 0x5, 0x0, 0x7fffffffffffffff, 0x1, 0xffffffff, 0x7fff, 0x9]}}, @padn, @generic={0x8, 0xfa, "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"}]}, @dstopts={0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}, @hopopts={0x29, 0x1e, '\x00', [@generic={0x5, 0xb3, "2bcd9e56a1f161de92002a231f6037e0e275e01be266d55851cefcd0f6ca96a987cc864038440c9b035b3f435c12a5958b2a6611552b88e6babddcf8ab7a2e22e662b973ddca25476618c18395812aacfb06797279fc045dcd26335ec9d468799d3ae030205c26b0ead58bf86c0f9361a3002ff8ec2cb201f84c55a47b12a3bcf894c3afd9472dc51fbed5fddbcc8d8abc89890197db2aa437e071c7cd2c4c4ec6c9742ccfa90c7da8c35c5da62a6465c4ec21"}, @hao={0xc9, 0x10, @mcast1}, @generic={0x7, 0x21, "adc460039e24ee53c18034e7882aa01d1c3f1ac4d2b4a36dd10875cdebd71857c8"}, @jumbo={0xc2, 0x4, 0x6}, @pad1]}], "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"}}}}}, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa354", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/147, 0x93}], 0x1}, 0xfffffffe}], 0x1, 0x10002, 0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$char_usb(r5, &(0x7f00000008c0)=""/198, 0x70) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000040)=""/44, 0x104000, 0x800, 0x0, 0x3}, 0x20) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 660.42133ms ago: executing program 6 (id=1520): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001000000800000008e20cddbb6a695613bdb84c82d1a2d3995ead122eed696a7ce35313eef0ea0a64b8419158aa55e7f294015f266a011692b9146cca7b9f98ff3e098347ef531c7d7d8dbdb7286f08751d442752ee9372965ce", @ANYBLOB="83521774ba2565c4b4aae31eb9e98de370b6a2038c223cccae2e98a2adf1711c66de752215f69baa84fe6c203eb089ad52296abdbf809ea49a56015ec095cbd1c313a572f673cd5352142974a70ff456d233733928235f51b1f86000ea5ffc555b2d09739151c16a1798ea847a498cc4487cd0cc15939fb3a8b38325abc3006e4e849d6a64cfd0808fecb35c18987b856ff74d7b720be4468624ad77bc07c56101a21a34370a595333b406cf7ecf06989b973cfc8bb9149dd4", @ANYBLOB="70f0ffffff0500000100"/20, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\b\x00'/28], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x72c88d25270cd60a, 0x11, r1, 0x75fb3000) 599.120984ms ago: executing program 4 (id=1521): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='esdfs\x00', 0x282091, 0x0) 549.781425ms ago: executing program 6 (id=1522): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) (async) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) ioctl$CDROMREADAUDIO(r1, 0x530e, 0x0) (async) dup3(r0, r0, 0x0) 389.256199ms ago: executing program 1 (id=1523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xf, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x4, 0x0, 0x7, 0x3, 0x23, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x401, 0x9}}) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESHEX=r0], 0x224}}, 0x20044001) 388.919208ms ago: executing program 4 (id=1524): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x8480, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000300)=@lsc={0x3, 0x0, "54ca5d7b410009f2b02e"}) 310.297511ms ago: executing program 5 (id=1525): r0 = syz_open_dev$video(&(0x7f0000000440), 0x80000000, 0x20200) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xa, 0x0, 0x0, {0x0, 0x1000, 0xffffffff}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="0300", 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x200}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 200.296032ms ago: executing program 5 (id=1526): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000740)={0xfffffffc, 0x1, 0x400, 0x3, 0x44, "0a12f3cb33e8450000000200006a00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0xa) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x161b82, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r6, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f00000002c0)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x5, 0x0, @val=@tracing={r3, 0x8}}, 0x20) 194.822881ms ago: executing program 4 (id=1527): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 189.722772ms ago: executing program 6 (id=1528): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xb9, &(0x7f0000000080)=""/185, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) 250.844µs ago: executing program 6 (id=1529): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read(r0, &(0x7f00000001c0)=""/36, 0x24) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000a80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x32315241, 0x7, 0x3, [{0x7, 0xd381}, {0xdc5, 0x6}, {0x0, 0x4}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x5, 0x6}, {0x1, 0x5}, {0xffefffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000300)="580000001500add427323b0b0759c2088ea0d35b199996c011472545b4560a117fffffff81000e220e227f000008925aa80013007b0009008000289d2f0eaefbdf8d6497d07f000001e809000000ff0000f03ac7100003ffffffffbfffffffffffffe7ee000000deff0000000200000000", 0x71}], 0x1) r4 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r8}, './file0\x00'}) syz_io_uring_submit(r5, r6, &(0x7f0000000e40)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r8, &(0x7f00000002c0)={0x0, 0x0, 0x28}, &(0x7f0000000100)='./file0\x00', 0x18}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_enter(r4, 0xc4f, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f0000000080)=0x1ff, 0x4) 0s ago: executing program 5 (id=1530): r0 = getpid() syz_pidfd_open(r0, 0x0) ptrace$setopts(0x4206, r0, 0x2, 0x20) r1 = getuid() r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x20, 0x11, 0xa}, 0x18) faccessat2(r2, &(0x7f0000000140)='.\x00', 0x8, 0x1000) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fowner_lt={'fowner<', r1}}]}}) kernel console output (not intermixed with test programs): wly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.289359][ T7655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.292524][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.301266][ T7655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.304185][ T7655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.306718][ T7655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.309307][ T7655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.312265][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.325787][ T7655] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.328993][ T7655] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.332359][ T7655] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.339269][ T7655] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.343942][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.411901][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.414295][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.435329][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.437573][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.608187][ T7813] Invalid logical block size (585) [ 87.611317][ T7813] tmpfs: Unknown parameter '‘uota' [ 87.834206][ T5944] Bluetooth: hci0: command 0x040f tx timeout [ 87.968611][ T7823] raw_sendmsg: syz.2.537 forgot to set AF_INET. Fix it! [ 88.044622][ T39] kauditd_printk_skb: 769 callbacks suppressed [ 88.044638][ T39] audit: type=1400 audit(1740930720.809:3670): avc: denied { read write } for pid=7291 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.053076][ T39] audit: type=1400 audit(1740930720.809:3671): avc: denied { read write open } for pid=7291 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.073904][ T39] audit: type=1400 audit(1740930720.809:3672): avc: denied { ioctl } for pid=7291 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.081977][ T39] audit: type=1400 audit(1740930720.819:3673): avc: denied { create } for pid=7829 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.089009][ T39] audit: type=1400 audit(1740930720.819:3674): avc: denied { write } for pid=7829 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.095311][ T39] audit: type=1400 audit(1740930720.819:3675): avc: denied { nlmsg_write } for pid=7829 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.102561][ T39] audit: type=1400 audit(1740930720.839:3676): avc: denied { create } for pid=7829 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.110042][ T39] audit: type=1400 audit(1740930720.839:3677): avc: denied { create } for pid=7829 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.119548][ T39] audit: type=1400 audit(1740930720.839:3678): avc: denied { write } for pid=7829 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.127056][ T39] audit: type=1400 audit(1740930720.859:3679): avc: denied { module_request } for pid=7832 comm="syz.5.541" kmod="fs-nsfs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 88.519134][ T7851] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.746020][ T7903] openvswitch: netlink: nsh attr 0 has unexpected len 2 expected 0 [ 89.748302][ T7903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.914013][ T5952] Bluetooth: hci0: command 0x040f tx timeout [ 89.994860][ T7915] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 89.997032][ T7915] netlink: 56 bytes leftover after parsing attributes in process `syz.4.564'. [ 90.002098][ T7916] syz.4.564 (7916) used greatest stack depth: 20960 bytes left [ 90.136678][ T7922] netlink: 'syz.2.565': attribute type 1 has an invalid length. [ 90.196198][ T7925] mkiss: ax0: crc mode is auto. [ 90.474658][ T7932] xt_TCPMSS: Only works on TCP SYN packets [ 90.953912][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 90.971114][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 90.974722][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 91.069220][ T7953] sock: sock_timestamping_bind_phc: sock not bind to device [ 91.166579][ T7962] netlink: 'syz.5.580': attribute type 11 has an invalid length. [ 91.239776][ T7968] openvswitch: netlink: Invalid VLAN frame [ 91.409668][ T7984] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.582'. [ 91.412685][ T7984] openvswitch: netlink: Missing key (keys=40, expected=80) [ 91.720179][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 91.993846][ T5944] Bluetooth: hci0: command 0x040f tx timeout [ 92.032623][ T7999] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.038778][ T7999] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 92.040758][ T7999] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.043375][ T7999] vhci_hcd vhci_hcd.0: Device attached [ 92.047827][ T8000] vhci_hcd: connection closed [ 92.049665][ T76] vhci_hcd: stop threads [ 92.053351][ T76] vhci_hcd: release socket [ 92.056017][ T76] vhci_hcd: disconnect device [ 92.440483][ T8013] can0: slcan on ptm0. [ 92.514866][ T8013] can0 (unregistered): slcan off ptm0. [ 92.637522][ T8021] netlink: 68 bytes leftover after parsing attributes in process `syz.2.593'. [ 92.959825][ T8054] netlink: 52 bytes leftover after parsing attributes in process `syz.2.601'. [ 92.962791][ T8054] netlink: 52 bytes leftover after parsing attributes in process `syz.2.601'. [ 92.966094][ T8055] bridge_slave_0: left allmulticast mode [ 92.966108][ T8055] bridge_slave_0: left promiscuous mode [ 92.966185][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.975109][ T8055] bridge_slave_1: left allmulticast mode [ 92.976912][ T8055] bridge_slave_1: left promiscuous mode [ 92.979121][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.992387][ T8055] bond0: (slave bond_slave_0): Releasing backup interface [ 92.997061][ T8055] bond0: (slave bond_slave_1): Releasing backup interface [ 93.000988][ T8057] program syz.1.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.015440][ T8055] team0: Port device team_slave_0 removed [ 93.019494][ T8055] team0: Port device team_slave_1 removed [ 93.021736][ T8055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.024314][ T8055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.027971][ T8055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.030182][ T8055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.045681][ T8058] vxcan1: entered promiscuous mode [ 93.049165][ T8058] team0: Port device vxcan1 added [ 93.054143][ T39] kauditd_printk_skb: 984 callbacks suppressed [ 93.054152][ T39] audit: type=1400 audit(1740930725.819:4664): avc: denied { create } for pid=8059 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.065763][ T39] audit: type=1400 audit(1740930725.819:4665): avc: denied { bind } for pid=8059 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.072417][ T39] audit: type=1400 audit(1740930725.819:4666): avc: denied { accept } for pid=8059 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.082654][ T39] audit: type=1400 audit(1740930725.819:4667): avc: denied { create } for pid=8053 comm="syz.5.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.091046][ T39] audit: type=1400 audit(1740930725.819:4668): avc: denied { setopt } for pid=8053 comm="syz.5.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.101281][ T39] audit: type=1400 audit(1740930725.819:4669): avc: denied { write } for pid=8059 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.109978][ T39] audit: type=1400 audit(1740930725.849:4670): avc: denied { read write } for pid=8059 comm="syz.2.604" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.120026][ T39] audit: type=1400 audit(1740930725.849:4671): avc: denied { read write open } for pid=8059 comm="syz.2.604" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.128543][ T39] audit: type=1400 audit(1740930725.849:4672): avc: denied { ioctl } for pid=8059 comm="syz.2.604" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.138848][ T39] audit: type=1400 audit(1740930725.859:4673): avc: denied { read write } for pid=7655 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.167571][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 93.260115][ T8071] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 93.262550][ T8071] overlayfs: missing 'lowerdir' [ 93.307424][ T8073] IPVS: Unknown mcast interface: macvlan0 [ 93.434915][ T8076] team0 (unregistering): Port device vxcan1 removed [ 93.595825][ T8030] delete_channel: no stack [ 93.617474][ T8084] tmpfs: Unknown parameter 'mpÙó' [ 93.629366][ T45] Bluetooth: hci4: Frame reassembly failed (-84) [ 93.775048][ T8092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8092 comm=syz.4.615 [ 93.787500][ T8092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.073870][ T5952] Bluetooth: hci0: command 0x040f tx timeout [ 94.084008][ T4316] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 94.196671][ T8104] bond0 (unregistering): Released all slaves [ 94.478458][ T8128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.091990][ T8138] xt_hashlimit: size too large, truncated to 1048576 [ 95.663958][ T5944] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 95.664214][ T5952] Bluetooth: hci4: command 0xfc11 tx timeout [ 96.047494][ T8149] __nla_validate_parse: 5 callbacks suppressed [ 96.047505][ T8149] netlink: 32 bytes leftover after parsing attributes in process `syz.4.632'. [ 96.173639][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 96.176888][ T8164] openvswitch: netlink: Flow actions attr not present in new flow. [ 96.394279][ T8172] program syz.4.640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.521367][ T8174] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 96.583233][ T8176] openvswitch: netlink: Actions may not be safe on all matching packets [ 96.631178][ T8179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.643'. [ 96.887495][ T8189] 9pnet_fd: Insufficient options for proto=fd [ 97.692479][ T8205] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.731524][ T8218] netlink: 80 bytes leftover after parsing attributes in process `syz.2.652'. [ 97.920550][ T8227] cgroup: fork rejected by pids controller in /syz2 [ 98.044499][ T8268] Bluetooth: MGMT ver 1.23 [ 98.064284][ T39] kauditd_printk_skb: 1840 callbacks suppressed [ 98.064296][ T39] audit: type=1400 audit(1740930730.819:6514): avc: denied { setopt } for pid=8254 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.074087][ T7260] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 98.074823][ T39] audit: type=1400 audit(1740930730.819:6515): avc: denied { create } for pid=8254 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.082956][ T39] audit: type=1400 audit(1740930730.829:6516): avc: denied { setopt } for pid=8254 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.088852][ T39] audit: type=1400 audit(1740930730.829:6517): avc: denied { ioctl } for pid=8254 comm="syz.4.656" path="socket:[22994]" dev="sockfs" ino=22994 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.096363][ T39] audit: type=1400 audit(1740930730.849:6518): avc: denied { read write } for pid=7655 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.104386][ T39] audit: type=1400 audit(1740930730.849:6519): avc: denied { ioctl } for pid=8225 comm="syz.2.655" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.111204][ T39] audit: type=1400 audit(1740930730.849:6520): avc: denied { read write open } for pid=7655 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.118402][ T39] audit: type=1400 audit(1740930730.849:6521): avc: denied { ioctl } for pid=8225 comm="syz.2.655" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.125529][ T39] audit: type=1400 audit(1740930730.849:6522): avc: denied { ioctl } for pid=7655 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.133622][ T39] audit: type=1400 audit(1740930730.849:6523): avc: denied { ioctl } for pid=8225 comm="syz.2.655" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.142685][ T8270] netlink: 'syz.5.659': attribute type 10 has an invalid length. [ 98.145529][ T8270] netlink: 2 bytes leftover after parsing attributes in process `syz.5.659'. [ 98.221274][ T8273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.270024][ T7260] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 98.273242][ T7260] usb 7-1: config 0 interface 0 has no altsetting 0 [ 98.285256][ T7260] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.287901][ T7260] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 98.290441][ T7260] usb 7-1: Product: syz [ 98.291843][ T7260] usb 7-1: Manufacturer: syz [ 98.293636][ T7260] usb 7-1: SerialNumber: syz [ 98.308613][ T7260] usb 7-1: config 0 descriptor?? [ 98.324260][ T7260] usb 7-1: selecting invalid altsetting 0 [ 98.422435][ T8278] netlink: 'syz.4.662': attribute type 3 has an invalid length. [ 98.424988][ T8278] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.662'. [ 98.623277][ T57] usb 7-1: USB disconnect, device number 11 [ 98.738158][ T8394] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.030028][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 99.551571][ T8450] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.351217][ T215] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 100.364742][ T5944] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 100.399659][ T8494] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.466791][ T8500] syz.4.698: attempt to access beyond end of device [ 100.466791][ T8500] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 100.470526][ T8500] gfs2: error -5 reading superblock [ 100.566393][ T8504] netlink: 256 bytes leftover after parsing attributes in process `syz.4.700'. [ 100.763085][ T8511] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.848710][ T8511] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.900583][ T8518] overlayfs: statfs failed on './file0' [ 100.936461][ T8511] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.998981][ T8511] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.061068][ T8525] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 101.099622][ T8511] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.112678][ T8511] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.137788][ T8511] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.150184][ T8511] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.160152][ T8510] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.226172][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.709'. [ 101.229942][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 101.232586][ T8546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.711'. [ 101.239205][ T8510] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.300833][ T8510] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.388705][ T8510] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.417300][ T7260] libceph: connect (1)[c::]:6789 error -22 [ 101.419388][ T7260] libceph: mon0 (1)[c::]:6789 connect error [ 101.433920][ T8559] ceph: No mds server is up or the cluster is laggy [ 101.575413][ T8568] netlink: 'syz.1.716': attribute type 30 has an invalid length. [ 102.888808][ T8608] QAT: Stopping all acceleration devices. [ 102.979974][ T8615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8615 comm=syz.1.727 [ 102.985372][ T8615] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 102.992015][ T8615] bond2: entered promiscuous mode [ 102.993277][ T8615] bond2: entered allmulticast mode [ 103.079682][ T39] kauditd_printk_skb: 987 callbacks suppressed [ 103.079694][ T39] audit: type=1400 audit(1740930735.839:7511): avc: denied { prog_load } for pid=8619 comm="syz.5.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.087754][ T39] audit: type=1400 audit(1740930735.839:7512): avc: denied { map_create } for pid=8620 comm="syz.2.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.093486][ T39] audit: type=1400 audit(1740930735.839:7513): avc: denied { bpf } for pid=8619 comm="syz.5.729" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.100157][ T39] audit: type=1400 audit(1740930735.839:7514): avc: denied { perfmon } for pid=8620 comm="syz.2.730" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.106493][ T39] audit: type=1400 audit(1740930735.839:7515): avc: denied { perfmon } for pid=8619 comm="syz.5.729" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.109216][ T8624] bond3: entered allmulticast mode [ 103.112582][ T39] audit: type=1400 audit(1740930735.839:7516): avc: denied { map_read map_write } for pid=8620 comm="syz.2.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.116138][ T8624] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.123343][ T39] audit: type=1400 audit(1740930735.839:7517): avc: denied { perfmon } for pid=8619 comm="syz.5.729" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.124014][ T8624] bond2: (slave bond3): Enslaving as an active interface with a down link [ 103.130091][ T39] audit: type=1400 audit(1740930735.839:7518): avc: denied { perfmon } for pid=8619 comm="syz.5.729" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.143273][ T39] audit: type=1400 audit(1740930735.839:7519): avc: denied { perfmon } for pid=8619 comm="syz.5.729" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.149832][ T39] audit: type=1400 audit(1740930735.839:7520): avc: denied { bpf } for pid=8619 comm="syz.5.729" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.193321][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 103.763566][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 103.811464][ T8643] kvm: pic: non byte write [ 103.999320][ T8646] netlink: 'syz.1.735': attribute type 2 has an invalid length. [ 105.092331][ T8663] rtc_cmos 00:05: Alarms can be up to one day in the future [ 105.097787][ T8663] netlink: 48 bytes leftover after parsing attributes in process `syz.1.740'. [ 105.188682][ T8510] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.196994][ T8510] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.210931][ T8510] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.219224][ T8510] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.733980][ T35] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 105.913889][ T35] usb 9-1: Using ep0 maxpacket: 16 [ 105.927483][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.931721][ T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.936969][ T35] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.940336][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.948327][ T35] usb 9-1: config 0 descriptor?? [ 106.184982][ T35] usbhid 9-1:0.0: can't add hid device: -71 [ 106.186948][ T35] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 106.191665][ T35] usb 9-1: USB disconnect, device number 2 [ 106.348399][ T8695] netfs: Couldn't get user pages (rc=-14) [ 106.361114][ T8694] delete_channel: no stack [ 106.704330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.807870][ T8711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.756'. [ 106.883443][ T8714] cgroup: none used incorrectly [ 106.958561][ T8722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8722 comm=syz.4.760 [ 106.965318][ T8722] netlink: 'syz.4.760': attribute type 1 has an invalid length. [ 106.980189][ T8724] bond2: entered allmulticast mode [ 106.985435][ T8724] bond2 (unregistering): Released all slaves [ 106.999450][ T8722] bond2: entered promiscuous mode [ 107.000936][ T8722] bond2: entered allmulticast mode [ 107.002561][ T8726] batadv_slave_1: entered promiscuous mode [ 107.094766][ T8723] batadv_slave_1: left promiscuous mode [ 107.226721][ T8736] netlink: 32 bytes leftover after parsing attributes in process `syz.5.764'. [ 107.229322][ T8736] netlink: 32 bytes leftover after parsing attributes in process `syz.5.764'. [ 107.530579][ T8751] netlink: 'syz.5.768': attribute type 3 has an invalid length. [ 107.532722][ T8751] netlink: 56 bytes leftover after parsing attributes in process `syz.5.768'. [ 107.611226][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.769'. [ 107.615075][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.769'. [ 108.067262][ T8765] openvswitch: netlink: nsh attr 2051 is out of range max 3 [ 108.069398][ T8765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.091710][ T39] kauditd_printk_skb: 1109 callbacks suppressed [ 108.091722][ T39] audit: type=1400 audit(1740930740.849:8630): avc: denied { read write } for pid=7655 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.113995][ T39] audit: type=1400 audit(1740930740.849:8631): avc: denied { read write open } for pid=7655 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.121071][ T39] audit: type=1400 audit(1740930740.849:8632): avc: denied { ioctl } for pid=7655 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.134019][ T39] audit: type=1400 audit(1740930740.849:8633): avc: denied { prog_load } for pid=8766 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.139796][ T39] audit: type=1400 audit(1740930740.849:8634): avc: denied { bpf } for pid=8766 comm="syz.1.773" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.147565][ T39] audit: type=1400 audit(1740930740.869:8635): avc: denied { read write } for pid=7291 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.154439][ T39] audit: type=1400 audit(1740930740.869:8636): avc: denied { read write open } for pid=7291 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.161200][ T39] audit: type=1400 audit(1740930740.869:8637): avc: denied { ioctl } for pid=7291 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.168844][ T39] audit: type=1400 audit(1740930740.899:8638): avc: denied { write } for pid=8771 comm="syz.5.772" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.175072][ T39] audit: type=1400 audit(1740930740.899:8639): avc: denied { write open } for pid=8771 comm="syz.5.772" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.211522][ T8773] tmpfs: Bad value for 'mpol' [ 108.467611][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 108.470915][ T8785] bridge_slave_1: left allmulticast mode [ 108.473883][ T8785] bridge_slave_1: left promiscuous mode [ 108.476182][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.481821][ T8785] bridge_slave_0: left allmulticast mode [ 108.484109][ T8785] bridge_slave_0: left promiscuous mode [ 108.485826][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.706644][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'. [ 108.804220][ T835] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 108.977335][ T835] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 108.980690][ T835] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.983440][ T835] usb 9-1: Product: syz [ 108.985194][ T835] usb 9-1: Manufacturer: syz [ 108.986915][ T835] usb 9-1: SerialNumber: syz [ 109.005599][ T835] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 109.050609][ T835] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 109.282498][ T8794] sctp: [Deprecated]: syz.1.779 (pid 8794) Use of int in maxseg socket option. [ 109.282498][ T8794] Use struct sctp_assoc_value instead [ 109.293599][ T8799] [U] [ 109.294722][ T8799] [U] [ 109.295617][ T8799] [U] [ 109.296468][ T8799] [U] [ 109.297715][ T8799] [U] [ 109.298555][ T8799] [U] [ 109.299343][ T8799] [U] [ 109.300170][ T8799] [U] [ 109.301075][ T8799] [U] [ 109.301874][ T8799] [U] [ 109.302664][ T8799] [U] [ 109.303431][ T8799] [U] [ 109.304652][ T8799] [U] [ 109.305487][ T8799] [U] [ 109.306332][ T8799] [U] [ 109.307150][ T8799] [U] [ 109.844270][ T5982] usb 9-1: USB disconnect, device number 3 [ 110.052192][ T8795] [U] [ 110.063881][ T835] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 110.066117][ T835] ath9k_htc: Failed to initialize the device [ 110.069123][ T5982] usb 9-1: ath9k_htc: USB layer deinitialized [ 110.182365][ T8803] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.324031][ T8808] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 110.615154][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'. [ 110.629259][ T8818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57872 sclass=netlink_route_socket pid=8818 comm=syz.1.786 [ 110.873877][ T1326] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 111.033843][ T1326] usb 9-1: Using ep0 maxpacket: 16 [ 111.051063][ T1326] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 111.053635][ T1326] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 111.055948][ T1326] usb 9-1: Product: syz [ 111.057150][ T1326] usb 9-1: Manufacturer: syz [ 111.058429][ T1326] usb 9-1: SerialNumber: syz [ 111.063204][ T1326] usb 9-1: config 0 descriptor?? [ 111.167386][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 111.178100][ T8831] securityfs: Unknown parameter '€«u&nÌÿª¶[‰Ø' [ 111.395164][ T1326] usb 9-1: USB disconnect, device number 4 [ 111.509244][ T8850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.511717][ T8850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.703939][ T5982] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 111.872518][ T5982] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 111.875277][ T5982] usb 7-1: config 0 interface 0 has no altsetting 0 [ 111.885389][ T5982] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.887828][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.890102][ T5982] usb 7-1: Product: syz [ 111.891352][ T5982] usb 7-1: Manufacturer: syz [ 111.892754][ T5982] usb 7-1: SerialNumber: syz [ 111.897593][ T5982] usb 7-1: config 0 descriptor?? [ 111.904740][ T5982] usb 7-1: selecting invalid altsetting 0 [ 111.934241][ T8856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.936592][ T8856] IPv6: NLM_F_CREATE should be set when creating new route [ 111.939905][ T8856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.112678][ T57] usb 7-1: USB disconnect, device number 12 [ 112.257202][ T8873] fuse: Bad value for 'group_id' [ 112.258626][ T8873] fuse: Bad value for 'group_id' [ 112.373868][ T5982] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 112.523936][ T5982] usb 9-1: Using ep0 maxpacket: 16 [ 112.532517][ T5982] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 163, changing to 7 [ 112.535683][ T5982] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 40966, setting to 1024 [ 112.546463][ T5982] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 112.549704][ T5982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.551936][ T5982] usb 9-1: Product: syz [ 112.553104][ T5982] usb 9-1: Manufacturer: syz [ 112.554498][ T5982] usb 9-1: SerialNumber: syz [ 112.561046][ T5982] usb 9-1: config 0 descriptor?? [ 112.567360][ T5982] hub 9-1:0.0: bad descriptor, ignoring hub [ 112.569048][ T5982] hub 9-1:0.0: probe with driver hub failed with error -5 [ 112.572148][ T5982] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input12 [ 112.884126][ T8876] __nla_validate_parse: 2 callbacks suppressed [ 112.884138][ T8876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.805'. [ 112.936171][ T1326] usb 9-1: USB disconnect, device number 5 [ 113.130260][ T39] kauditd_printk_skb: 710 callbacks suppressed [ 113.130272][ T39] audit: type=1400 audit(1740930745.889:9350): avc: denied { read write } for pid=5939 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.140135][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 113.142214][ T39] audit: type=1400 audit(1740930745.899:9351): avc: denied { read write open } for pid=5939 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.149693][ T39] audit: type=1400 audit(1740930745.899:9352): avc: denied { ioctl } for pid=5939 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.155838][ T8886] input: syz0 as /devices/virtual/input/input13 [ 113.156776][ T39] audit: type=1400 audit(1740930745.899:9353): avc: denied { read write } for pid=8885 comm="syz.2.808" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 113.165403][ T39] audit: type=1400 audit(1740930745.899:9354): avc: denied { read write open } for pid=8885 comm="syz.2.808" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 113.172099][ T39] audit: type=1400 audit(1740930745.909:9355): avc: denied { mounton } for pid=8885 comm="syz.2.808" path="/198/file0" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.179062][ T39] audit: type=1400 audit(1740930745.909:9356): avc: denied { mount } for pid=8885 comm="syz.2.808" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 113.185321][ T39] audit: type=1400 audit(1740930745.909:9357): avc: denied { read write } for pid=8885 comm="syz.2.808" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.192254][ T39] audit: type=1400 audit(1740930745.909:9358): avc: denied { read write open } for pid=8885 comm="syz.2.808" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.199484][ T39] audit: type=1400 audit(1740930745.919:9359): avc: denied { ioctl } for pid=8885 comm="syz.2.808" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.330538][ T8896] fuse: Invalid rootmode [ 113.330648][ T8897] bridge_slave_0: default FDB implementation only supports local addresses [ 113.528309][ T8908] netlink: 'syz.2.816': attribute type 2 has an invalid length. [ 113.530163][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 113.533002][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 113.601836][ T8910] overlay: ./bus is not a directory [ 113.828369][ T8921] netlink: 'syz.4.821': attribute type 3 has an invalid length. [ 113.830601][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.821'. [ 113.869230][ T8919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.903574][ T8925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.822'. [ 114.566717][ T8952] input: syz1 as /devices/virtual/input/input14 [ 115.086550][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 115.089378][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.840'. [ 115.092101][ T8990] netlink: 'syz.4.840': attribute type 7 has an invalid length. [ 115.342349][ T8997] netlink: 'syz.5.843': attribute type 11 has an invalid length. [ 115.596951][ T9007] netlink: 'syz.5.848': attribute type 2 has an invalid length. [ 116.196837][ T9040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51984 sclass=netlink_route_socket pid=9040 comm=syz.4.857 [ 116.277484][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 116.279916][ T9047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.860'. [ 116.392337][ T9052] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 116.796622][ T9075] PM: Enabling pm_trace changes system date and time during resume. [ 116.796622][ T9075] PM: Correct system time has to be restored manually after resume. [ 117.005187][ T9095] netlink: 'syz.5.872': attribute type 10 has an invalid length. [ 117.016457][ T9095] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 117.030185][ T9088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9088 comm=syz.4.873 [ 117.036787][ T9088] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 117.086494][ T9097] netlink: 'syz.2.875': attribute type 13 has an invalid length. [ 117.096998][ T9097] gretap0: refused to change device tx_queue_len [ 117.098786][ T9097] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.168062][ T9089] block nbd1: shutting down sockets [ 117.208420][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.877'. [ 117.246173][ T9105] bridge_slave_1: left allmulticast mode [ 117.247875][ T9105] bridge_slave_1: left promiscuous mode [ 117.249531][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.252641][ T9105] bridge5: port 1(bridge_slave_1) entered blocking state [ 117.254999][ T9105] bridge5: port 1(bridge_slave_1) entered disabled state [ 117.257322][ T9105] bridge_slave_1: entered allmulticast mode [ 117.259523][ T9105] bridge_slave_1: entered promiscuous mode [ 118.138119][ T39] kauditd_printk_skb: 1056 callbacks suppressed [ 118.138136][ T39] audit: type=1400 audit(1740930750.899:10416): avc: denied { create } for pid=9133 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.148562][ T39] audit: type=1400 audit(1740930750.899:10417): avc: denied { read } for pid=9133 comm="syz.4.889" dev="nsfs" ino=4026533535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 118.156741][ T39] audit: type=1400 audit(1740930750.899:10418): avc: denied { read open } for pid=9133 comm="syz.4.889" path="net:[4026533535]" dev="nsfs" ino=4026533535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 118.166248][ T39] audit: type=1400 audit(1740930750.899:10419): avc: denied { create } for pid=9133 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.178217][ T39] audit: type=1400 audit(1740930750.919:10420): avc: denied { create } for pid=9133 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.186316][ T39] audit: type=1400 audit(1740930750.919:10421): avc: denied { write } for pid=9133 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.193999][ T39] audit: type=1400 audit(1740930750.919:10422): avc: denied { read } for pid=9133 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.202107][ T39] audit: type=1400 audit(1740930750.919:10423): avc: denied { read } for pid=9133 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.210163][ T39] audit: type=1400 audit(1740930750.919:10424): avc: denied { write } for pid=9133 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.218220][ T39] audit: type=1400 audit(1740930750.929:10425): avc: denied { write } for pid=9133 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.219924][ T9144] __nla_validate_parse: 4 callbacks suppressed [ 118.219935][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.891'. [ 118.472189][ T9161] random: crng reseeded on system resumption [ 118.489740][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.5.897'. [ 118.495091][ T9163] snd_dummy snd_dummy.0: control 0:0:0:syz0:512 is already present [ 118.567531][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.897'. [ 118.570246][ T9167] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.695668][ T9161] program syz.1.898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.862448][ T5944] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 118.863485][ T9176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=9176 comm=syz.4.902 [ 120.072808][ T9214] netlink: 'syz.4.913': attribute type 4 has an invalid length. [ 120.082608][ T9214] netlink: 'syz.4.913': attribute type 4 has an invalid length. [ 120.276181][ T9228] syz.4.915 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 120.770805][ T9248] netlink: 'syz.4.922': attribute type 1 has an invalid length. [ 120.805134][ T9248] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 120.820769][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 120.821136][ T9248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.935566][ T1171] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 121.089670][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.927'. [ 121.324630][ T9274] misc userio: Begin command sent, but we're already running [ 121.329709][ T9274] qrtr: Invalid version 0 [ 121.346630][ T9276] netlink: 32 bytes leftover after parsing attributes in process `syz.1.929'. [ 121.534883][ T9283] netlink: 830 bytes leftover after parsing attributes in process `syz.5.932'. [ 122.274217][ T8] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 122.453823][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 122.467190][ T8] usb 7-1: config 255 has an invalid interface number: 47 but max is 0 [ 122.469456][ T8] usb 7-1: config 255 has no interface number 0 [ 122.471249][ T8] usb 7-1: config 255 interface 47 has no altsetting 0 [ 122.480264][ T8] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 122.482864][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.493876][ T8] usb 7-1: Product: syz [ 122.496151][ T8] usb 7-1: Manufacturer: syz [ 122.497623][ T8] usb 7-1: SerialNumber: syz [ 122.714234][ T8] legousbtower 7-1:255.47: interrupt endpoints not found [ 122.729245][ T8] usb 7-1: USB disconnect, device number 13 [ 122.760417][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 122.767775][ T9331] hsr_slave_0: left promiscuous mode [ 122.771081][ T9331] hsr_slave_1: left promiscuous mode [ 123.009423][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 123.098392][ T9340] random: crng reseeded on system resumption [ 123.144451][ T39] kauditd_printk_skb: 1168 callbacks suppressed [ 123.144463][ T39] audit: type=1400 audit(1740930755.909:11594): avc: denied { create } for pid=9333 comm="syz.5.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.153869][ T39] audit: type=1400 audit(1740930755.909:11595): avc: denied { read } for pid=9333 comm="syz.5.947" dev="nsfs" ino=4026533045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.160464][ T39] audit: type=1400 audit(1740930755.909:11596): avc: denied { read open } for pid=9333 comm="syz.5.947" path="net:[4026533045]" dev="nsfs" ino=4026533045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.193842][ T39] audit: type=1400 audit(1740930755.909:11597): avc: denied { create } for pid=9333 comm="syz.5.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.199264][ T39] audit: type=1400 audit(1740930755.909:11598): avc: denied { read } for pid=9333 comm="syz.5.947" dev="nsfs" ino=4026533045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.213858][ T39] audit: type=1400 audit(1740930755.919:11599): avc: denied { read open } for pid=9333 comm="syz.5.947" path="net:[4026533045]" dev="nsfs" ino=4026533045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.220858][ T39] audit: type=1400 audit(1740930755.919:11600): avc: denied { create } for pid=9333 comm="syz.5.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.243816][ T39] audit: type=1400 audit(1740930755.919:11601): avc: denied { read } for pid=9333 comm="syz.5.947" dev="nsfs" ino=4026533045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.249652][ T39] audit: type=1400 audit(1740930755.919:11602): avc: denied { read open } for pid=9333 comm="syz.5.947" path="net:[4026533045]" dev="nsfs" ino=4026533045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.249674][ T39] audit: type=1400 audit(1740930755.919:11603): avc: denied { create } for pid=9333 comm="syz.5.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.405517][ T9344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.559178][ T9350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.952'. [ 123.848572][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 124.025507][ T9383] fuse: Bad value for 'group_id' [ 124.027061][ T9383] fuse: Bad value for 'group_id' [ 124.073107][ T9386] netlink: 'syz.5.962': attribute type 5 has an invalid length. [ 124.079066][ T9387] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 124.125939][ T9386] overlayfs: missing 'lowerdir' [ 124.164673][ T9390] ip6gretap2: entered promiscuous mode [ 124.442798][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.5.971'. [ 124.643650][ T9421] netlink: 'syz.2.976': attribute type 16 has an invalid length. [ 124.649654][ T9421] netlink: 'syz.2.976': attribute type 17 has an invalid length. [ 124.707350][ T9421] program syz.2.976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.717541][ T9421] netlink: 816 bytes leftover after parsing attributes in process `syz.2.976'. [ 125.194439][ T9456] netlink: 44 bytes leftover after parsing attributes in process `syz.2.985'. [ 125.199228][ T9456] netlink: 44 bytes leftover after parsing attributes in process `syz.2.985'. [ 125.349971][ T9418] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.352051][ T9418] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.354302][ T9418] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.356747][ T9418] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.515923][ T9469] 9pnet_fd: Insufficient options for proto=fd [ 125.520008][ T9469] tmpfs: Unknown parameter 'usrquotaA0' [ 125.620582][ T9473] 9pnet_virtio: no channels available for device syz [ 125.923820][ T9488] xt_bpf: check failed: parse error [ 126.378170][ T9500] 9pnet_fd: p9_fd_create_tcp (9500): problem connecting socket to 127.0.0.1 [ 126.582437][ T9523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1005'. [ 126.585871][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 126.623935][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.890204][ T9538] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1009'. [ 126.893195][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 127.014866][ T9543] Bluetooth: MGMT ver 1.23 [ 127.424146][ T5952] Bluetooth: hci3: command 0x0401 tx timeout [ 127.426166][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.618399][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1017'. [ 127.779855][ T9564] tipc: Started in network mode [ 127.781325][ T9564] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 127.784045][ T9564] tipc: Enabling of bearer rejected, failed to enable media [ 127.883831][ T7260] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 127.960342][ T9577] xt_l2tp: v2 doesn't support IP mode [ 127.996138][ T9575] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3926835311 (251317459904 ns) > initial count (129948695040 ns). Using initial count to start timer. [ 128.011422][ T9575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.211655][ T39] kauditd_printk_skb: 1329 callbacks suppressed [ 128.211669][ T39] audit: type=1400 audit(1740930760.969:12924): avc: denied { create } for pid=9596 comm="syz.1.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.216354][ T39] audit: type=1400 audit(1740930760.979:12925): avc: denied { read append } for pid=9596 comm="syz.1.1028" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.229494][ T39] audit: type=1400 audit(1740930760.979:12926): avc: denied { read append open } for pid=9596 comm="syz.1.1028" path="/dev/dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.237405][ T39] audit: type=1400 audit(1740930760.979:12927): avc: denied { create } for pid=9596 comm="syz.1.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.243352][ T39] audit: type=1400 audit(1740930760.989:12928): avc: denied { write } for pid=9596 comm="syz.1.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.252914][ T39] audit: type=1400 audit(1740930761.019:12929): avc: denied { read write } for pid=5949 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.260782][ T39] audit: type=1400 audit(1740930761.019:12930): avc: denied { read write open } for pid=5949 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.267685][ T39] audit: type=1400 audit(1740930761.019:12931): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.272658][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.275683][ T39] audit: type=1400 audit(1740930761.039:12932): avc: denied { read write } for pid=9555 comm="syz.5.1016" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.284860][ T39] audit: type=1400 audit(1740930761.039:12933): avc: denied { read write open } for pid=9555 comm="syz.5.1016" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.292362][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.299405][ T7260] usb 10-1: unable to get BOS descriptor or descriptor too short [ 128.302475][ T7260] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 128.304761][ T7260] usb 10-1: can't read configurations, error -71 [ 128.454211][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 128.807625][ T9621] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 129.087794][ T9628] 9pnet_fd: p9_fd_create_unix (9628): problem connecting socket: ./file2: -2 [ 129.401510][ T9644] VFS: unable to find oldfs superblock on device nullb0 [ 129.514219][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.517557][ T9653] netlink: 'syz.5.1046': attribute type 10 has an invalid length. [ 129.622424][ T9653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9653 comm=syz.5.1046 [ 129.712912][ T9662] tap0: tun_chr_ioctl cmd 1074025672 [ 129.714771][ T9662] tap0: ignored: set checksum disabled [ 129.803887][ T8] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 129.943938][ T8] usb 9-1: device descriptor read/64, error -71 [ 130.024859][ T9679] __nla_validate_parse: 6 callbacks suppressed [ 130.024870][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 130.183843][ T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 130.314627][ T8] usb 9-1: device descriptor read/64, error -71 [ 130.424709][ T8] usb usb9-port1: attempt power cycle [ 130.783846][ T8] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 130.819544][ T8] usb 9-1: device descriptor read/8, error -71 [ 131.073919][ T8] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 131.105924][ T8] usb 9-1: device descriptor read/8, error -71 [ 131.162530][ T9710] usb usb8: usbfs: process 9710 (syz.2.1064) did not claim interface 0 before use [ 131.216040][ T8] usb usb9-port1: unable to enumerate USB device [ 131.260681][ T9719] input: syz0 as /devices/virtual/input/input16 [ 131.470779][ T9724] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 132.185575][ T9728] openvswitch: netlink: IP tunnel dst address not specified [ 132.350979][ T9736] netlink: 'syz.5.1072': attribute type 12 has an invalid length. [ 132.458539][ T9740] mkiss: ax0: crc mode is auto. [ 132.507393][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 132.625137][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.627310][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.718054][ T9747] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 133.009102][ T9758] openvswitch: netlink: Invalid VLAN frame [ 133.105802][ T9764] input: syz0 as /devices/virtual/input/input17 [ 133.195387][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.237362][ T9748] netlink: 'syz.5.1074': attribute type 1 has an invalid length. [ 133.240250][ T9748] netlink: 'syz.5.1074': attribute type 3 has an invalid length. [ 133.242614][ T9748] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1074'. [ 133.246576][ T39] kauditd_printk_skb: 680 callbacks suppressed [ 133.246586][ T39] audit: type=1400 audit(1740930765.999:13614): avc: denied { write } for pid=9741 comm="syz.5.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.254218][ T39] audit: type=1400 audit(1740930766.009:13615): avc: denied { mounton } for pid=9741 comm="syz.5.1074" path="/128/file0" dev="tmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 133.272467][ T39] audit: type=1400 audit(1740930766.009:13616): avc: denied { mount } for pid=9765 comm="syz.4.1081" name="/" dev="overlay" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 133.285148][ T39] audit: type=1400 audit(1740930766.029:13617): avc: denied { mount } for pid=9741 comm="syz.5.1074" name="/" dev="9p" ino=36049929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 133.309500][ T39] audit: type=1400 audit(1740930766.069:13618): avc: denied { read write } for pid=5939 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.328849][ T39] audit: type=1400 audit(1740930766.069:13619): avc: denied { read write open } for pid=5939 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.344136][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.345001][ T39] audit: type=1400 audit(1740930766.069:13620): avc: denied { ioctl } for pid=5939 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.353283][ T7260] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 133.356829][ T7260] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 133.363183][ T39] audit: type=1400 audit(1740930766.069:13621): avc: denied { create } for pid=9769 comm="syz.2.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.363204][ T39] audit: type=1400 audit(1740930766.089:13622): avc: denied { create } for pid=9769 comm="syz.2.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.363222][ T39] audit: type=1400 audit(1740930766.089:13623): avc: denied { write } for pid=9769 comm="syz.2.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.447891][ T9779] x_tables: duplicate underflow at hook 2 [ 133.710099][ T9788] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 133.712631][ T9788] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 133.719523][ T9788] vhci_hcd vhci_hcd.0: Device attached [ 133.904706][ T5986] vhci_hcd: vhci_device speed not set [ 133.963891][ T5986] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 133.970891][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1089'. [ 134.061288][ T9812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9812 comm=syz.2.1093 [ 134.124641][ T9815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1093'. [ 134.232389][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1095'. [ 134.243816][ T9817] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 134.255698][ T9817] ipvlan0: entered promiscuous mode [ 134.257237][ T9817] ipvlan0: entered allmulticast mode [ 134.258755][ T9817] veth0_vlan: entered allmulticast mode [ 134.278565][ T9820] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 134.280512][ T9820] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 134.283259][ T9820] vhci_hcd vhci_hcd.0: Device attached [ 134.285248][ T9816] delete_channel: no stack [ 134.286542][ T9822] vhci_hcd: connection closed [ 134.287763][ T1179] vhci_hcd: stop threads [ 134.290814][ T1179] vhci_hcd: release socket [ 134.292362][ T1179] vhci_hcd: disconnect device [ 134.455924][ T9789] vhci_hcd: connection reset by peer [ 134.458533][ T1141] vhci_hcd: stop threads [ 134.459852][ T1141] vhci_hcd: release socket [ 134.463226][ T1141] vhci_hcd: disconnect device [ 134.688695][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1097'. [ 134.782672][ T9839] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 135.053954][ T9865] mmap: syz.4.1106 (9865) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.312391][ T9883] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1111'. [ 135.317462][ T9885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1112'. [ 135.424344][ T5944] Bluetooth: hci3: command 0x0401 tx timeout [ 135.426127][ T7260] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 135.427926][ T7260] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 135.484507][ T9894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=9894 comm=syz.5.1116 [ 135.667214][ T9911] syz_tun: entered allmulticast mode [ 135.781599][ T9909] syz_tun: left allmulticast mode [ 135.904509][ T9921] nbd: must specify at least one socket [ 135.919358][ T9922] veth1_macvtap: left promiscuous mode [ 135.921497][ T9922] macsec0: entered promiscuous mode [ 135.937383][ T9921] bridge0: entered promiscuous mode [ 135.940157][ T9921] bridge0: port 1(macsec1) entered blocking state [ 135.942214][ T9921] bridge0: port 1(macsec1) entered disabled state [ 135.944638][ T9921] macsec1: entered allmulticast mode [ 135.946192][ T9921] bridge0: entered allmulticast mode [ 135.961331][ T9921] macsec1: left allmulticast mode [ 135.965153][ T9921] bridge0: left allmulticast mode [ 135.969915][ T9921] bridge0: left promiscuous mode [ 136.246376][ T9936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1131'. [ 136.494776][ T9953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1138'. [ 136.497557][ T9953] netlink: 'syz.2.1138': attribute type 6 has an invalid length. [ 136.501443][ T9953] netlink: 'syz.2.1138': attribute type 5 has an invalid length. [ 136.504227][ T9953] netlink: 'syz.2.1138': attribute type 4 has an invalid length. [ 136.577666][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1139'. [ 136.590666][ T9962] gtp0: entered promiscuous mode [ 136.592169][ T9962] gtp0: entered allmulticast mode [ 136.605323][ T9961] xt_socket: unknown flags 0x8 [ 136.855631][ T9978] tmpfs: Bad value for 'size' [ 137.321731][ T9993] IPVS: set_ctl: invalid protocol: 41 172.20.20.47:20000 [ 137.503897][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.505983][ T7260] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 137.507769][ T7260] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 137.576433][T10000] syz_tun (unregistering): left promiscuous mode [ 137.667272][ T35] IPVS: starting estimator thread 0... [ 137.753888][T10012] IPVS: using max 37 ests per chain, 88800 per kthread [ 137.800642][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1152'. [ 138.135749][T10021] could not open pipe file descriptor [ 138.229068][T10025] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 138.236060][T10025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=10025 comm=syz.2.1155 [ 138.265362][ T39] kauditd_printk_skb: 1084 callbacks suppressed [ 138.265378][ T39] audit: type=1400 audit(1740930771.029:14708): avc: denied { read write } for pid=5949 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.273879][ T8] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 138.274867][ T39] audit: type=1400 audit(1740930771.029:14709): avc: denied { read write open } for pid=5949 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.286447][ T39] audit: type=1400 audit(1740930771.029:14710): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.293531][ T39] audit: type=1400 audit(1740930771.039:14711): avc: denied { ioctl } for pid=10018 comm="syz.5.1153" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.302196][ T39] audit: type=1400 audit(1740930771.039:14712): avc: denied { ioctl } for pid=10018 comm="syz.5.1153" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.314771][ T39] audit: type=1400 audit(1740930771.039:14713): avc: denied { ioctl } for pid=10018 comm="syz.5.1153" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.323375][ T39] audit: type=1400 audit(1740930771.079:14714): avc: denied { prog_load } for pid=10026 comm="syz.2.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.331963][ T39] audit: type=1400 audit(1740930771.079:14715): avc: denied { bpf } for pid=10026 comm="syz.2.1156" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.339362][ T39] audit: type=1400 audit(1740930771.079:14716): avc: denied { perfmon } for pid=10026 comm="syz.2.1156" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.345909][ T39] audit: type=1400 audit(1740930771.079:14717): avc: denied { perfmon } for pid=10026 comm="syz.2.1156" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.451717][ T8] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 138.455084][ T8] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 138.458159][ T8] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.460672][ T8] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 138.479003][ T8] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.481514][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.483959][ T8] usb 10-1: Product: 빷倴ﮒⶲ럑 [ 138.485575][ T8] usb 10-1: Manufacturer: Ñ [ 138.487284][ T8] usb 10-1: SerialNumber: syz [ 138.621492][T10045] fuse: Unknown parameter 'ÏÆ2ŽG¾Ì4$JZùä˜ÚÚù' [ 138.724510][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.727034][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.731991][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 138.736670][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.739588][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.752874][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1164'. [ 138.865499][T10054] netlink: 'syz.2.1166': attribute type 2 has an invalid length. [ 138.867704][T10054] netlink: 'syz.2.1166': attribute type 11 has an invalid length. [ 138.869893][T10054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1166'. [ 138.957525][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.960376][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.975168][ T8] usb 10-1: 0:2 : does not exist [ 138.988401][ T8] usb 10-1: USB disconnect, device number 4 [ 139.076904][T10060] xt_hashlimit: size too large, truncated to 1048576 [ 139.113912][ T5986] vhci_hcd: vhci_device speed not set [ 139.393933][ T835] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 139.413178][T10068] sctp: [Deprecated]: syz.4.1171 (pid 10068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.413178][T10068] Use struct sctp_sack_info instead [ 139.564100][ T835] usb 7-1: Using ep0 maxpacket: 16 [ 139.572176][ T835] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 139.574729][ T835] usb 7-1: config 0 has no interface number 0 [ 139.585968][ T835] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 139.589391][ T835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.591883][ T835] usb 7-1: Product: syz [ 139.593133][ T835] usb 7-1: Manufacturer: syz [ 139.594884][ T835] usb 7-1: SerialNumber: syz [ 139.599873][ T835] usb 7-1: config 0 descriptor?? [ 139.605541][ T835] hub 7-1:0.132: bad descriptor, ignoring hub [ 139.607482][ T835] hub 7-1:0.132: probe with driver hub failed with error -5 [ 139.610844][ T835] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input18 [ 139.714144][T10083] overlay: Unknown parameter 'appraise_type' [ 139.803299][T10087] fuse: Unknown parameter '' [ 139.924200][ T57] usb 7-1: USB disconnect, device number 14 [ 140.044000][T10096] netlink: 'syz.1.1179': attribute type 29 has an invalid length. [ 140.044370][T10094] cgroup: fork rejected by pids controller in /syz5 [ 140.046885][T10098] netlink: 'syz.1.1179': attribute type 29 has an invalid length. [ 140.051560][T10096] netlink: 'syz.1.1179': attribute type 29 has an invalid length. [ 140.061013][T10096] netlink: 548 bytes leftover after parsing attributes in process `syz.1.1179'. [ 140.320726][T10203] SELinux: policydb string length 1886744328 does not match expected length 8 [ 140.323635][T10203] SELinux: failed to load policy [ 140.326361][T10203] SELinux: policydb version 588619510 does not match my version range 15-34 [ 140.328934][T10203] SELinux: failed to load policy [ 140.637479][T10219] netlink: 'syz.4.1183': attribute type 7 has an invalid length. [ 140.701306][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.709072][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.712859][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.715646][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.718361][ T5952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 140.721302][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.736632][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.739073][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.741237][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.743661][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.746121][ T5944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 140.748494][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.970902][T10232] Invalid ELF header type: 0 != 1 [ 141.014806][T10234] Attempt to restore checkpoint with obsolete wellknown handles [ 141.165155][T10223] chnl_net:caif_netlink_parms(): no params data found [ 141.230215][T10247] SELinux: unknown common r [ 141.231678][T10247] SELinux: failed to load policy [ 141.255696][T10247] input: syz1 as /devices/virtual/input/input19 [ 141.304350][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.307358][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.309695][T10223] bridge_slave_0: entered allmulticast mode [ 141.313173][T10223] bridge_slave_0: entered promiscuous mode [ 141.320593][T10223] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.327273][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.329649][T10223] bridge_slave_1: entered allmulticast mode [ 141.331869][T10223] bridge_slave_1: entered promiscuous mode [ 141.371171][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 141.373987][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 141.381167][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 141.383854][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 141.391156][T10258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10258 comm=syz.4.1198 [ 141.395541][T10223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.405052][T10223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.462384][T10223] team0: Port device team_slave_0 added [ 141.482005][T10223] team0: Port device team_slave_1 added [ 141.527920][T10223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.530036][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.538197][T10223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.553903][T10223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.555927][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.563398][T10223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.639150][T10223] hsr_slave_0: entered promiscuous mode [ 141.640246][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 141.641153][T10223] hsr_slave_1: entered promiscuous mode [ 141.825435][T10223] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.929601][T10290] netlink: 'syz.2.1210': attribute type 10 has an invalid length. [ 141.932911][T10290] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.936599][T10290] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.988603][T10223] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.022163][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 142.067698][T10223] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.094206][ T1326] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 142.188871][T10223] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.261468][ T1326] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 142.264514][ T1326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.266776][ T1326] usb 6-1: Product: syz [ 142.267988][ T1326] usb 6-1: Manufacturer: syz [ 142.269425][ T1326] usb 6-1: SerialNumber: syz [ 142.275429][ T1326] usb 6-1: config 0 descriptor?? [ 142.357328][T10223] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.363124][T10223] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.367914][T10223] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.376729][T10223] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.384174][ T835] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 142.538706][T10223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.551212][ T835] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.554981][ T835] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.561281][ T835] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.563878][ T835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.576794][T10300] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 142.582346][ T835] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.664819][T10223] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.673952][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.676080][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.687642][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.689680][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.793866][ T5952] Bluetooth: hci0: command tx timeout [ 142.855065][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.857522][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.895673][ T63] usb 7-1: USB disconnect, device number 15 [ 143.276176][ T39] kauditd_printk_skb: 1088 callbacks suppressed [ 143.276188][ T39] audit: type=1400 audit(1740930776.039:15806): avc: denied { read } for pid=10318 comm="syz.2.1220" dev="nsfs" ino=4026533074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 143.281160][T10328] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1220'. [ 143.294063][ T39] audit: type=1400 audit(1740930776.039:15807): avc: denied { read open } for pid=10318 comm="syz.2.1220" path="net:[4026533074]" dev="nsfs" ino=4026533074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 143.298231][T10328] program syz.2.1220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.300869][ T39] audit: type=1400 audit(1740930776.039:15808): avc: denied { create } for pid=10318 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.310347][ T39] audit: type=1400 audit(1740930776.039:15809): avc: denied { write } for pid=10318 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.316117][ T39] audit: type=1400 audit(1740930776.059:15810): avc: denied { create } for pid=10318 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.322244][ T39] audit: type=1400 audit(1740930776.059:15811): avc: denied { write } for pid=10318 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.328492][ T39] audit: type=1400 audit(1740930776.059:15812): avc: denied { create } for pid=10318 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.334785][ T39] audit: type=1400 audit(1740930776.059:15813): avc: denied { write } for pid=10318 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.340488][ T39] audit: type=1400 audit(1740930776.059:15814): avc: denied { read } for pid=10318 comm="syz.2.1220" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.347852][ T39] audit: type=1400 audit(1740930776.059:15815): avc: denied { read open } for pid=10318 comm="syz.2.1220" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.611939][T10337] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 143.615057][T10337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.626822][T10339] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 143.628968][T10339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.684706][T10223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.169494][T10357] 9pnet_virtio: no channels available for device syz [ 144.196875][T10360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1229'. [ 144.199938][T10360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1229'. [ 144.202471][T10360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1229'. [ 144.394284][T10367] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 144.540698][T10376] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 144.543730][T10376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.849344][ T4316] usb 6-1: USB disconnect, device number 8 [ 144.873915][ T5952] Bluetooth: hci0: command tx timeout [ 144.929348][T10223] veth0_vlan: entered promiscuous mode [ 144.950709][T10223] veth1_vlan: entered promiscuous mode [ 145.015605][T10223] veth0_macvtap: entered promiscuous mode [ 145.027033][T10223] veth1_macvtap: entered promiscuous mode [ 145.057242][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.060250][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.063019][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.066626][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.071658][T10223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.085965][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.088925][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.091814][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.095170][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.098657][T10223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.101629][T10395] netlink: 'syz.1.1236': attribute type 4 has an invalid length. [ 145.110862][T10223] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.113507][T10223] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.116062][T10223] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.118505][T10223] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.216090][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.219679][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.248792][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.251363][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.391930][T10407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10407 comm=syz.4.1239 [ 145.591683][T10418] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 145.689602][ T1141] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 145.993881][ T63] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 146.154014][ T63] usb 7-1: Using ep0 maxpacket: 32 [ 146.162939][ T63] usb 7-1: config 35 has an invalid descriptor of length 0, skipping remainder of the config [ 146.166628][ T63] usb 7-1: config 35 has 0 interfaces, different from the descriptor's value: 1 [ 146.168982][ T63] usb 7-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice=1d.e8 [ 146.171512][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.497329][ T8] usb 7-1: USB disconnect, device number 16 [ 146.583033][T10470] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 146.819728][T10480] Bluetooth: MGMT ver 1.23 [ 146.893891][ T63] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 146.944030][ T5944] Bluetooth: hci0: command tx timeout [ 147.054118][ T63] usb 9-1: Using ep0 maxpacket: 16 [ 147.067133][ T63] usb 9-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config [ 147.070923][ T63] usb 9-1: too many endpoints for config 0 interface 0 altsetting 240: 135, using maximum allowed: 30 [ 147.074815][ T63] usb 9-1: config 0 interface 0 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 135 [ 147.079841][ T63] usb 9-1: config 0 interface 0 has no altsetting 0 [ 147.104935][ T63] usb 9-1: New USB device found, idVendor=134c, idProduct=8002, bcdDevice=ec.7e [ 147.107594][ T63] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.109701][ T63] usb 9-1: Product: syz [ 147.111199][ T63] usb 9-1: Manufacturer: syz [ 147.112770][ T63] usb 9-1: SerialNumber: syz [ 147.121494][ T63] usb 9-1: config 0 descriptor?? [ 147.213089][T10490] __nla_validate_parse: 5 callbacks suppressed [ 147.213103][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1258'. [ 147.403007][ T63] usb 9-1: USB disconnect, device number 10 [ 147.511743][T10497] xt_hashlimit: size too large, truncated to 1048576 [ 147.725154][T10512] [U] VÔ3¸ÂFÙ¾"WÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 148.073561][ T1171] tipc: Subscription rejected, illegal request [ 148.253746][T10525] Invalid logical block size (6) [ 148.284235][ T39] kauditd_printk_skb: 876 callbacks suppressed [ 148.284246][ T39] audit: type=1400 audit(1740930781.049:16692): avc: denied { write } for pid=10521 comm="syz.5.1270" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.296624][ T39] audit: type=1400 audit(1740930781.049:16693): avc: denied { write } for pid=10521 comm="syz.5.1270" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.307205][ T39] audit: type=1400 audit(1740930781.049:16694): avc: denied { write } for pid=10521 comm="syz.5.1270" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.319064][ T39] audit: type=1400 audit(1740930781.049:16695): avc: denied { write } for pid=10521 comm="syz.5.1270" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.328108][ T39] audit: type=1400 audit(1740930781.049:16696): avc: denied { write } for pid=10521 comm="syz.5.1270" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.335621][T10524] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.338431][ T39] audit: type=1400 audit(1740930781.049:16697): avc: denied { write } for pid=10521 comm="syz.5.1270" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.340146][T10524] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 148.349381][ T39] audit: type=1400 audit(1740930781.049:16698): avc: denied { write } for pid=10521 comm="syz.5.1270" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.353649][T10524] audit: backlog limit exceeded [ 148.373597][T10526] openvswitch: netlink: IP tunnel dst address not specified [ 148.576876][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 148.670241][T10538] netlink: 'syz.2.1273': attribute type 5 has an invalid length. [ 148.678063][T10538] nfs: Unknown parameter './file0' [ 148.830052][T10542] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 148.832620][T10542] UDF-fs: Scanning with blocksize 2048 failed [ 148.835751][T10542] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 148.838940][T10542] UDF-fs: Scanning with blocksize 4096 failed [ 148.874130][ T5952] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 149.024352][ T5952] Bluetooth: hci0: command 0x0419 tx timeout [ 149.499815][T10578] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1285'. [ 149.503316][T10577] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1285'. [ 149.520197][T10571] PKCS8: Unsupported PKCS#8 version [ 149.666166][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 149.774889][T10590] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 150.105682][T10609] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1292'. [ 150.537381][T10631] netfs: Couldn't get user pages (rc=-14) [ 150.812001][T10640] fuse: Unknown parameter '' [ 150.940516][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1299'. [ 150.960405][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1299'. [ 151.104169][ T5944] Bluetooth: hci0: command 0x0419 tx timeout [ 151.309685][T10667] x_tables: duplicate underflow at hook 3 [ 151.312484][T10667] sctp: [Deprecated]: syz.1.1305 (pid 10667) Use of int in max_burst socket option. [ 151.312484][T10667] Use struct sctp_assoc_value instead [ 151.709015][T10678] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 152.073730][T10709] netlink: 'syz.4.1319': attribute type 1 has an invalid length. [ 152.087897][T10709] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.116403][T10709] bond5: (slave veth13): Enslaving as an active interface with a down link [ 152.128625][T10708] sg_read: process 1130 (syz.2.1318) changed security contexts after opening file descriptor, this is not allowed. [ 152.232740][T10713] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 152.421691][T10727] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 152.624365][T10735] 9pnet_virtio: no channels available for device syz [ 152.886518][T10751] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 152.899224][T10749] program syz.5.1333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.994468][T10760] mkiss: ax0: crc mode is auto. [ 153.304630][ T39] kauditd_printk_skb: 1618 callbacks suppressed [ 153.304648][ T39] audit: type=1400 audit(1740930786.069:18317): avc: denied { prog_load } for pid=10768 comm="syz.1.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 153.322634][ T39] audit: type=1400 audit(1740930786.069:18318): avc: denied { bpf } for pid=10768 comm="syz.1.1341" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.328763][ T39] audit: type=1400 audit(1740930786.069:18319): avc: denied { perfmon } for pid=10768 comm="syz.1.1341" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.335224][ T39] audit: type=1400 audit(1740930786.069:18320): avc: denied { perfmon } for pid=10768 comm="syz.1.1341" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.342061][ T39] audit: type=1400 audit(1740930786.069:18321): avc: denied { perfmon } for pid=10768 comm="syz.1.1341" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.348309][ T39] audit: type=1400 audit(1740930786.069:18322): avc: denied { perfmon } for pid=10768 comm="syz.1.1341" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.354367][ T39] audit: type=1400 audit(1740930786.069:18323): avc: denied { perfmon } for pid=10768 comm="syz.1.1341" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.361020][ T39] audit: type=1400 audit(1740930786.069:18324): avc: denied { bpf } for pid=10768 comm="syz.1.1341" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.366760][ T39] audit: type=1400 audit(1740930786.069:18325): avc: denied { bpf } for pid=10768 comm="syz.1.1341" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.372525][ T39] audit: type=1400 audit(1740930786.069:18326): avc: denied { prog_run } for pid=10768 comm="syz.1.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 153.625132][T10784] tipc: Failed to remove unknown binding: 66,1,1/0:2096031868/2096031870 [ 153.628092][T10784] tipc: Failed to remove unknown binding: 66,1,1/0:2096031868/2096031870 [ 153.802578][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.939803][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.008476][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.025260][T10806] : entered promiscuous mode [ 154.032470][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.036153][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.039491][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.042026][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.047160][ T5944] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.049936][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.059763][T10808] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 154.135196][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.191673][T10817] vivid-004: disconnect [ 154.193659][T10817] vivid-004: reconnect [ 154.323597][ T12] bridge_slave_1: left allmulticast mode [ 154.325978][ T12] bridge_slave_1: left promiscuous mode [ 154.328617][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.333163][ T12] bridge_slave_0: left allmulticast mode [ 154.335015][ T12] bridge_slave_0: left promiscuous mode [ 154.336911][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.427075][ T12] bond0 (unregistering): (slave ip6gre1): Releasing backup interface [ 154.429775][ T12] ip6gre1 (unregistering): left promiscuous mode [ 154.518689][T10836] SELinux: ebitmap: truncated map [ 154.522802][T10836] SELinux: failed to load policy [ 154.573337][ T12] team0: Port device geneve0 removed [ 154.864029][ T12] bond0 (unregistering): Released all slaves [ 154.875867][T10811] chnl_net:caif_netlink_parms(): no params data found [ 154.953422][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.956211][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.958239][T10811] bridge_slave_0: entered allmulticast mode [ 154.960477][T10811] bridge_slave_0: entered promiscuous mode [ 154.965563][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.967613][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.969615][T10811] bridge_slave_1: entered allmulticast mode [ 154.972157][T10811] bridge_slave_1: entered promiscuous mode [ 155.000924][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.007010][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.039326][T10854] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1369'. [ 155.041563][T10811] team0: Port device team_slave_0 added [ 155.048819][T10811] team0: Port device team_slave_1 added [ 155.073806][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.076119][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.084044][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.090822][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.092991][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.101707][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.142932][T10811] hsr_slave_0: entered promiscuous mode [ 155.146177][T10811] hsr_slave_1: entered promiscuous mode [ 155.148393][T10811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.150467][T10811] Cannot create hsr debugfs directory [ 155.284424][T10861] sp0: Synchronizing with TNC [ 155.331790][T10811] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.340029][T10811] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.349061][T10811] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.358179][T10811] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 155.540627][T10811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.569792][T10811] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.581071][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.583228][ T8387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.603209][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.606173][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.612225][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1374'. [ 155.615037][T10866] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1374'. [ 155.806902][T10879] netlink: 504 bytes leftover after parsing attributes in process `syz.5.1377'. [ 155.811078][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1377'. [ 155.922204][T10885] [U] [ 155.923058][T10885] [U] [ 155.923938][T10885] [U] [ 155.924754][T10885] [U] [ 155.926153][T10885] [U] [ 155.927156][T10885] [U] [ 155.928095][T10885] [U] [ 155.929087][T10885] [U] [ 155.930194][T10885] [U] [ 155.931104][T10885] [U] [ 155.931980][T10885] [U] [ 155.932837][T10885] [U] [ 155.933873][T10885] [U] [ 155.934913][T10885] [U] [ 155.935970][T10885] [U] [ 155.937034][T10885] [U] [ 156.072758][T10900] netlink: 'syz.5.1382': attribute type 3 has an invalid length. [ 156.144791][ T5944] Bluetooth: hci3: command tx timeout [ 156.225346][T10885] [U] [ 156.595477][T10811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.712030][ T12] hsr_slave_0: left promiscuous mode [ 156.720777][ T12] hsr_slave_1: left promiscuous mode [ 156.722716][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.723200][T10931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1391'. [ 156.724856][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.729792][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1391'. [ 156.730171][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.732323][T10931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1391'. [ 156.735541][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.737056][T10931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1391'. [ 156.774168][ T12] veth0_macvtap: left promiscuous mode [ 156.832088][T10941] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 156.952964][ T5944] Bluetooth: hci0: unexpected event for opcode 0x200a [ 157.391872][ T12] team0 (unregistering): Port device team_slave_1 removed [ 157.500896][ T12] team0 (unregistering): Port device team_slave_0 removed [ 157.803958][ T5980] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 157.953921][ T5980] usb 6-1: Using ep0 maxpacket: 16 [ 157.963050][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.966997][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.969880][ T5980] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 157.972401][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.978764][ T5980] usb 6-1: config 0 descriptor?? [ 158.152270][T10972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.234002][ T5944] Bluetooth: hci3: command tx timeout [ 158.320185][ T39] kauditd_printk_skb: 930 callbacks suppressed [ 158.320244][ T39] audit: type=1400 audit(1740931047.082:19257): avc: denied { sys_module } for pid=10811 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 158.329436][ T39] audit: type=1400 audit(1740931047.082:19258): avc: denied { module_request } for pid=10811 comm="syz-executor" kmod="netdevsim6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 158.347748][ T39] audit: type=1400 audit(1740931047.112:19259): avc: denied { read write } for pid=7291 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.354816][ T39] audit: type=1400 audit(1740931047.112:19260): avc: denied { read write open } for pid=7291 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.361957][ T39] audit: type=1400 audit(1740931047.112:19261): avc: denied { ioctl } for pid=7291 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.399294][ T39] audit: type=1400 audit(1740931047.162:19262): avc: denied { ioctl } for pid=10969 comm="syz.1.1402" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.408479][ T39] audit: type=1400 audit(1740931047.172:19263): avc: denied { create } for pid=10981 comm="syz.4.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 158.411958][ T5980] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 158.417270][ T39] audit: type=1400 audit(1740931047.172:19264): avc: denied { ioctl } for pid=10969 comm="syz.1.1402" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.417927][ T5980] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 158.424830][ T39] audit: type=1400 audit(1740931047.172:19265): avc: denied { create } for pid=10981 comm="syz.4.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.432892][ T5980] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 158.435530][ T39] audit: type=1400 audit(1740931047.172:19266): avc: denied { write } for pid=10981 comm="syz.4.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.437707][ T5980] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 158.446513][ T5980] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 158.449060][ T5980] appleir 0003:05AC:8241.0004: No inputs registered, leaving [ 158.470757][ T5980] appleir 0003:05AC:8241.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 158.671127][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1402'. [ 158.691132][ T5980] usb 6-1: USB disconnect, device number 9 [ 158.883185][T10811] veth0_vlan: entered promiscuous mode [ 158.898315][T10811] veth1_vlan: entered promiscuous mode [ 158.941676][T10811] veth0_macvtap: entered promiscuous mode [ 158.950606][T10811] veth1_macvtap: entered promiscuous mode [ 158.972829][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.976618][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.979676][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.983134][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.986752][T10811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.996061][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.999773][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.002734][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.006212][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.009753][T10811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.019087][T10811] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.021544][T10811] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.024294][T10811] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.026667][T10811] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.123076][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.125724][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.157115][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.159243][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.466229][T10999] kvm: pic: non byte write [ 159.548674][T11009] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 159.916213][T11030] overlay: Unknown parameter 'dont_appraise' [ 160.121675][T11040] trusted_key: syz.5.1420 sent an empty control message without MSG_MORE. [ 160.303965][ T5944] Bluetooth: hci3: command tx timeout [ 160.408610][T11053] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 160.496263][T11057] __nla_validate_parse: 1 callbacks suppressed [ 160.496282][T11057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1423'. [ 160.531203][T11060] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 160.694488][T11070] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 160.699080][T11075] 9pnet_virtio: no channels available for device syz [ 161.111442][T11095] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 161.253926][ T835] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 161.436464][ T835] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 161.439390][ T835] usb 9-1: config 0 interface 0 has no altsetting 0 [ 161.456503][ T835] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 161.459777][ T835] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 161.462722][ T835] usb 9-1: Product: syz [ 161.469992][ T835] usb 9-1: Manufacturer: syz [ 161.471656][ T835] usb 9-1: SerialNumber: syz [ 161.480422][ T835] usb 9-1: config 0 descriptor?? [ 161.491530][T11107] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 161.494316][ T835] usb 9-1: selecting invalid altsetting 0 [ 161.512362][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1442'. [ 161.700465][ T7260] usb 9-1: USB disconnect, device number 11 [ 161.818014][T11122] sch_fq: defrate 5 ignored. [ 162.307543][T11147] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1452'. [ 162.384017][ T5944] Bluetooth: hci3: command tx timeout [ 162.400449][T11153] netlink: 'syz.4.1454': attribute type 1 has an invalid length. [ 162.403013][T11153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.519407][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1457'. [ 162.704019][ T835] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 162.768741][T11175] kvm: pic: non byte write [ 162.772488][T11172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4324882 ns). Using initial count to start timer. [ 162.885067][ T835] usb 10-1: Using ep0 maxpacket: 8 [ 162.893369][ T835] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 162.895312][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 162.897261][ T835] usb 10-1: config 0 has no interface number 0 [ 162.900650][ T835] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.903957][ T835] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 162.907100][ T835] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.910235][ T835] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.914263][ T835] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 162.917682][ T835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.932810][ T835] usb 10-1: config 0 descriptor?? [ 162.949288][ T835] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 163.010374][T11192] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1466'. [ 163.013248][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 163.112000][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1467'. [ 163.169720][ T835] usb 10-1: USB disconnect, device number 5 [ 163.175783][ T835] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 163.334762][ T39] kauditd_printk_skb: 969 callbacks suppressed [ 163.334781][ T39] audit: type=1400 audit(1740931052.102:20236): avc: denied { map_create } for pid=11207 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.342664][ T39] audit: type=1400 audit(1740931052.102:20237): avc: denied { map_read map_write } for pid=11207 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.363900][ T39] audit: type=1400 audit(1740931052.102:20238): avc: denied { map_create } for pid=11207 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.369440][ T39] audit: type=1400 audit(1740931052.102:20239): avc: denied { prog_load } for pid=11207 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.375258][ T39] audit: type=1400 audit(1740931052.102:20240): avc: denied { bpf } for pid=11207 comm="syz.1.1471" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.381022][ T39] audit: type=1400 audit(1740931052.102:20241): avc: denied { bpf } for pid=11207 comm="syz.1.1471" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.386581][ T39] audit: type=1400 audit(1740931052.102:20242): avc: denied { map_create } for pid=11207 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.391632][ T39] audit: type=1400 audit(1740931052.102:20243): avc: denied { perfmon } for pid=11207 comm="syz.1.1471" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.397956][ T39] audit: type=1400 audit(1740931052.102:20244): avc: denied { map_create } for pid=11207 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.403060][ T39] audit: type=1400 audit(1740931052.102:20245): avc: denied { map_read map_write } for pid=11207 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.742282][T11224] tipc: Enabled bearer , priority 10 [ 163.773952][ T835] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 163.847028][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 163.855068][T11228] 9pnet_virtio: no channels available for device 127.0.0.1 [ 163.934090][ T835] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.936696][ T835] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 163.939876][ T835] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.942446][ T835] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 163.953899][ T835] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 163.963936][ T835] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.966523][ T835] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.968792][ T835] usb 9-1: Product: syz [ 163.969974][ T835] usb 9-1: Manufacturer: syz [ 163.980501][T11238] loop6: detected capacity change from 0 to 524287999 [ 163.981882][ T835] cdc_wdm 9-1:1.0: skipping garbage [ 163.984228][ T835] cdc_wdm 9-1:1.0: skipping garbage [ 163.988670][ T835] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 163.988737][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 163.990364][ T835] cdc_wdm 9-1:1.0: Unknown control protocol [ 163.993204][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.001317][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.004064][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.008667][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.014123][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.016864][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.020006][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.022539][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.025617][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.028622][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.031865][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.034408][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.039254][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.042185][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.044922][T11238] ldm_validate_partition_table(): Disk read failed. [ 164.045783][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.049776][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.052970][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.056109][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.061677][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 164.066196][T11238] Dev loop6: unable to read RDB block 0 [ 164.072343][T11238] loop6: unable to read partition table [ 164.074544][T11238] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 164.316986][ T7260] usb 9-1: USB disconnect, device number 12 [ 164.865987][ T835] tipc: Node number set to 4278255617 [ 165.179478][T11290] tipc: Started in network mode [ 165.180918][T11290] tipc: Node identity , cluster identity 4711 [ 165.182615][T11290] tipc: Failed to obtain node identity [ 165.185595][T11290] tipc: Enabling of bearer rejected, failed to enable media [ 165.308429][T11302] netlink: 'syz.5.1500': attribute type 2 has an invalid length. [ 165.310801][T11302] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1500'. [ 165.557344][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 165.560027][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1505'. [ 165.562638][T11317] netlink: 'syz.1.1505': attribute type 7 has an invalid length. [ 165.700557][T11324] tls_set_device_offload_rx: netdev not found [ 165.705205][T11323] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 165.768178][T11320] xt_NFQUEUE: number of total queues is 0 [ 166.418535][T11342] fuse: Bad value for 'fd' [ 166.422267][T11342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1510'. [ 167.169573][T11371] veth0_macvtap: left promiscuous mode [ 167.171760][T11371] macvtap0: entered promiscuous mode [ 167.180067][T11371] veth0_macvtap: entered promiscuous mode [ 167.200901][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.214413][T11371] veth0_macvtap: left promiscuous mode [ 167.242791][T11371] veth0_macvtap: entered promiscuous mode [ 167.246628][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.253949][T11371] veth0_macvtap: left promiscuous mode [ 167.261163][T11371] veth0_macvtap: entered promiscuous mode [ 167.263547][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.276991][T11371] veth0_macvtap: left promiscuous mode [ 167.283622][T11371] veth0_macvtap: entered promiscuous mode [ 167.287961][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.290765][T11371] veth0_macvtap: left promiscuous mode [ 167.296397][T11371] veth0_macvtap: entered promiscuous mode [ 167.300708][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.307326][T11371] veth0_macvtap: left promiscuous mode [ 167.316283][T11371] veth0_macvtap: entered promiscuous mode [ 167.318917][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.321452][T11371] veth0_macvtap: left promiscuous mode [ 167.326720][T11371] veth0_macvtap: entered promiscuous mode [ 167.329044][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.333423][T11371] veth0_macvtap: left promiscuous mode [ 167.344041][T11371] veth0_macvtap: entered promiscuous mode [ 167.346246][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.348744][T11371] veth0_macvtap: left promiscuous mode [ 167.384131][T11371] veth0_macvtap: entered promiscuous mode [ 167.389912][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.396289][T11371] veth0_macvtap: left promiscuous mode [ 167.397871][T11378] ref_ctr increment failed for inode: 0xa2 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801b079400 [ 167.405244][T11377] uprobe: syz.6.1518:11377 failed to unregister, leaking uprobe [ 167.407086][T11371] veth0_macvtap: entered promiscuous mode [ 167.410958][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.416673][T11371] veth0_macvtap: left promiscuous mode [ 167.426652][T11371] veth0_macvtap: entered promiscuous mode [ 167.429999][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.443978][T11371] veth0_macvtap: left promiscuous mode [ 167.450557][T11371] veth0_macvtap: entered promiscuous mode [ 167.453967][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.465231][T11371] veth0_macvtap: left promiscuous mode [ 167.470656][T11371] veth0_macvtap: entered promiscuous mode [ 167.473042][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.484472][T11371] veth0_macvtap: left promiscuous mode [ 167.488399][T11371] veth0_macvtap: entered promiscuous mode [ 167.490750][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.494372][T11371] veth0_macvtap: left promiscuous mode [ 167.505562][T11371] veth0_macvtap: entered promiscuous mode [ 167.510436][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.513493][T11371] veth0_macvtap: left promiscuous mode [ 167.521528][T11371] veth0_macvtap: entered promiscuous mode [ 167.527813][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.538931][T11371] veth0_macvtap: left promiscuous mode [ 167.546901][T11371] veth0_macvtap: entered promiscuous mode [ 167.550624][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.554515][T11371] veth0_macvtap: left promiscuous mode [ 167.564406][T11371] veth0_macvtap: entered promiscuous mode [ 167.567949][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.571367][T11371] veth0_macvtap: left promiscuous mode [ 167.580752][T11371] veth0_macvtap: entered promiscuous mode [ 167.583227][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.587038][T11371] veth0_macvtap: left promiscuous mode [ 167.592508][T11371] veth0_macvtap: entered promiscuous mode [ 167.594897][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.598872][T11371] veth0_macvtap: left promiscuous mode [ 167.606334][T11371] veth0_macvtap: entered promiscuous mode [ 167.608674][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.614226][T11371] veth0_macvtap: left promiscuous mode [ 167.624097][T11371] veth0_macvtap: entered promiscuous mode [ 167.632895][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.639912][T11371] veth0_macvtap: left promiscuous mode [ 167.647170][T11371] veth0_macvtap: entered promiscuous mode [ 167.651621][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.658317][T11371] veth0_macvtap: left promiscuous mode [ 167.664894][T11371] veth0_macvtap: entered promiscuous mode [ 167.668683][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.672364][T11371] veth0_macvtap: left promiscuous mode [ 167.695392][T11371] veth0_macvtap: entered promiscuous mode [ 167.699435][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.706206][T11371] veth0_macvtap: left promiscuous mode [ 167.714790][T11371] veth0_macvtap: entered promiscuous mode [ 167.718208][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.722431][T11371] veth0_macvtap: left promiscuous mode [ 167.734413][T11371] veth0_macvtap: entered promiscuous mode [ 167.745592][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.748667][T11371] veth0_macvtap: left promiscuous mode [ 167.753017][T11371] veth0_macvtap: entered promiscuous mode [ 167.757989][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.764087][T11371] veth0_macvtap: left promiscuous mode [ 167.768060][T11371] veth0_macvtap: entered promiscuous mode [ 167.770490][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.773115][T11371] veth0_macvtap: left promiscuous mode [ 167.779358][T11371] veth0_macvtap: entered promiscuous mode [ 167.781597][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.784598][T11371] veth0_macvtap: left promiscuous mode [ 167.788981][T11371] veth0_macvtap: entered promiscuous mode [ 167.791294][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.798386][T11371] veth0_macvtap: left promiscuous mode [ 167.805188][T11371] veth0_macvtap: entered promiscuous mode [ 167.807986][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.815512][T11371] veth0_macvtap: left promiscuous mode [ 167.821896][T11371] veth0_macvtap: entered promiscuous mode [ 167.831471][T11371] team0: Device macvtap0 failed to register rx_handler [ 167.833844][T11371] veth0_macvtap: left promiscuous mode [ 168.117169][T11400] cgroup: release_agent respecified [ 168.258886][T11412] 9pnet_fd: Insufficient options for proto=fd [ 168.265981][T11414] ================================================================== [ 168.269451][T11414] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1fdc/0x4380 [ 168.272630][T11414] Write of size 1440 at addr ffffc90003925a80 by task vivid-000-vid-c/11414 [ 168.278162][T11414] [ 168.279197][T11414] CPU: 2 UID: 0 PID: 11414 Comm: vivid-000-vid-c Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 168.279224][T11414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.279236][T11414] Call Trace: [ 168.279243][T11414] [ 168.279251][T11414] dump_stack_lvl+0x116/0x1f0 [ 168.279280][T11414] print_report+0xc3/0x670 [ 168.279312][T11414] ? __virt_addr_valid+0x5e/0x590 [ 168.279334][T11414] kasan_report+0xd9/0x110 [ 168.279354][T11414] ? tpg_fill_plane_buffer+0x1fdc/0x4380 [ 168.279379][T11414] ? tpg_fill_plane_buffer+0x1fdc/0x4380 [ 168.279404][T11414] kasan_check_range+0xef/0x1a0 [ 168.279429][T11414] __asan_memcpy+0x3c/0x60 [ 168.279456][T11414] tpg_fill_plane_buffer+0x1fdc/0x4380 [ 168.279494][T11414] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 168.279520][T11414] vivid_fillbuff+0x8e0/0x41f0 [ 168.279543][T11414] ? hlock_class+0x4e/0x130 [ 168.279563][T11414] ? __lock_acquire+0x15a9/0x3c40 [ 168.279598][T11414] ? __pfx_vivid_fillbuff+0x10/0x10 [ 168.279622][T11414] ? vivid_thread_vid_cap_tick+0x7ab/0x15d0 [ 168.279648][T11414] ? v4l2_ctrl_request_setup+0x45c/0xa60 [ 168.279675][T11414] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.279699][T11414] ? vivid_thread_vid_cap_tick+0x81b/0x15d0 [ 168.279720][T11414] vivid_thread_vid_cap_tick+0x81b/0x15d0 [ 168.279742][T11414] ? lock_acquire+0x2f/0xb0 [ 168.279770][T11414] vivid_thread_vid_cap+0x5b8/0xb90 [ 168.279802][T11414] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.279823][T11414] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 168.279843][T11414] ? __kthread_parkme+0x148/0x220 [ 168.279861][T11414] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 168.279879][T11414] kthread+0x3af/0x750 [ 168.279899][T11414] ? __pfx_kthread+0x10/0x10 [ 168.279923][T11414] ? __pfx_kthread+0x10/0x10 [ 168.279945][T11414] ret_from_fork+0x45/0x80 [ 168.279970][T11414] ? __pfx_kthread+0x10/0x10 [ 168.279991][T11414] ret_from_fork_asm+0x1a/0x30 [ 168.280019][T11414] [ 168.280026][T11414] [ 168.345674][T11414] The buggy address belongs to the virtual mapping at [ 168.345674][T11414] [ffffc90003922000, ffffc90003927000) created by: [ 168.345674][T11414] vb2_vmalloc_alloc+0x11e/0x3d0 [ 168.350436][T11414] [ 168.351066][T11414] The buggy address belongs to the physical page: [ 168.352667][T11414] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x4e7ce [ 168.355147][T11414] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 168.356952][T11414] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 168.359396][T11414] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 168.361974][T11414] page dumped because: kasan: bad access detected [ 168.363876][ T39] kauditd_printk_skb: 978 callbacks suppressed [ 168.363889][ T39] audit: type=1400 audit(1740931057.112:21224): avc: denied { read write } for pid=7291 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.363933][T11414] page_owner tracks the page as allocated [ 168.363939][T11414] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 11413, tgid 11410 (syz.6.1529), ts 168259810364, free_ts 167884230553 [ 168.365819][ T39] audit: type=1400 audit(1740931057.112:21225): avc: denied { read write open } for pid=7291 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.372007][T11414] post_alloc_hook+0x181/0x1b0 [ 168.373872][ T39] audit: type=1400 audit(1740931057.122:21226): avc: denied { ioctl } for pid=7291 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.378568][T11414] get_page_from_freelist+0xfce/0x2f80 [ 168.395616][T11414] __alloc_frozen_pages_noprof+0x221/0x2470 [ 168.397536][T11414] alloc_pages_mpol+0x1fc/0x540 [ 168.399183][T11414] alloc_pages_noprof+0x131/0x390 [ 168.400945][T11414] __vmalloc_node_range_noprof+0x721/0x1530 [ 168.402718][T11414] vmalloc_user_noprof+0x6b/0x90 [ 168.403961][T11414] vb2_vmalloc_alloc+0x11e/0x3d0 [ 168.405294][T11414] __vb2_queue_alloc+0x896/0x1230 [ 168.406617][T11414] vb2_core_reqbufs+0xa73/0xfb0 [ 168.407883][T11414] __vb2_init_fileio+0x3f3/0x1110 [ 168.409150][T11414] __vb2_perform_fileio+0x9de/0x1620 [ 168.410507][T11414] vb2_fop_read+0x213/0x3e0 [ 168.411676][T11414] v4l2_read+0x226/0x360 [ 168.412748][T11414] vfs_read+0x1df/0xbf0 [ 168.413807][T11414] ksys_read+0x12b/0x250 [ 168.414897][T11414] page last free pid 63 tgid 63 stack trace: [ 168.416353][T11414] free_frozen_pages+0x6db/0xfb0 [ 168.417526][T11414] vfree+0x174/0x950 [ 168.418512][T11414] delayed_vfree_work+0x56/0x70 [ 168.419805][T11414] process_one_work+0x9c5/0x1ba0 [ 168.421099][T11414] worker_thread+0x6c8/0xf00 [ 168.422301][T11414] kthread+0x3af/0x750 [ 168.423434][T11414] ret_from_fork+0x45/0x80 [ 168.424709][T11414] ret_from_fork_asm+0x1a/0x30 [ 168.425983][T11414] [ 168.426596][T11414] Memory state around the buggy address: [ 168.428004][T11414] ffffc90003925f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 168.430010][T11414] ffffc90003925f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 168.432109][T11414] >ffffc90003926000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 168.434253][T11414] ^ [ 168.435372][T11414] ffffc90003926080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 168.437526][T11414] ffffc90003926100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 168.439596][T11414] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 168.464109][ T39] audit: type=1400 audit(1740931057.222:21227): avc: denied { read } for pid=5336 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 168.470953][ T39] audit: type=1400 audit(1740931057.222:21228): avc: denied { search } for pid=5336 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.477996][ T39] audit: type=1400 audit(1740931057.222:21229): avc: denied { append } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 168.503881][ T39] audit: type=1400 audit(1740931057.222:21230): avc: denied { append open } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 168.503962][T11414] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 168.503979][T11414] CPU: 1 UID: 0 PID: 11414 Comm: vivid-000-vid-c Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 168.504001][T11414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.504012][T11414] Call Trace: [ 168.504018][T11414] [ 168.504025][T11414] dump_stack_lvl+0x3d/0x1f0 [ 168.504052][T11414] panic+0x71d/0x800 [ 168.504071][T11414] ? __pfx_panic+0x10/0x10 [ 168.504089][T11414] ? irqentry_exit+0x3b/0x90 [ 168.504109][T11414] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.504129][T11414] ? preempt_schedule_thunk+0x1a/0x30 [ 168.504151][T11414] ? preempt_schedule_common+0x44/0xc0 [ 168.504174][T11414] ? check_panic_on_warn+0x1f/0xb0 [ 168.504196][T11414] check_panic_on_warn+0xab/0xb0 [ 168.504215][T11414] end_report+0x117/0x180 [ 168.504234][T11414] kasan_report+0xe9/0x110 [ 168.504252][T11414] ? tpg_fill_plane_buffer+0x1fdc/0x4380 [ 168.504273][T11414] ? tpg_fill_plane_buffer+0x1fdc/0x4380 [ 168.504295][T11414] kasan_check_range+0xef/0x1a0 [ 168.504317][T11414] __asan_memcpy+0x3c/0x60 [ 168.504342][T11414] tpg_fill_plane_buffer+0x1fdc/0x4380 [ 168.504373][T11414] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 168.504397][T11414] vivid_fillbuff+0x8e0/0x41f0 [ 168.504418][T11414] ? hlock_class+0x4e/0x130 [ 168.504435][T11414] ? __lock_acquire+0x15a9/0x3c40 [ 168.504465][T11414] ? __pfx_vivid_fillbuff+0x10/0x10 [ 168.504486][T11414] ? vivid_thread_vid_cap_tick+0x7ab/0x15d0 [ 168.504509][T11414] ? v4l2_ctrl_request_setup+0x45c/0xa60 [ 168.504533][T11414] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.504554][T11414] ? vivid_thread_vid_cap_tick+0x81b/0x15d0 [ 168.504573][T11414] vivid_thread_vid_cap_tick+0x81b/0x15d0 [ 168.504591][T11414] ? lock_acquire+0x2f/0xb0 [ 168.504615][T11414] vivid_thread_vid_cap+0x5b8/0xb90 [ 168.504637][T11414] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.504656][T11414] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 168.504675][T11414] ? __kthread_parkme+0x148/0x220 [ 168.504692][T11414] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 168.504717][T11414] kthread+0x3af/0x750 [ 168.504737][T11414] ? __pfx_kthread+0x10/0x10 [ 168.504759][T11414] ? __pfx_kthread+0x10/0x10 [ 168.504779][T11414] ret_from_fork+0x45/0x80 [ 168.504801][T11414] ? __pfx_kthread+0x10/0x10 [ 168.504821][T11414] ret_from_fork_asm+0x1a/0x30 [ 168.504844][T11414] [ 168.511387][T11414] Kernel Offset: disabled VM DIAGNOSIS: 15:53:21 Registers: info registers vcpu 0 CPU#0 RAX=1ffff11006266509 RBX=ffff888031332848 RCX=1ffff1100474a926 RDX=0000000000000000 RSI=ffffffff847e8577 RDI=ffffc90003a076a6 RBP=ffffc90003a076a0 RSP=ffffc90003a07570 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000800 R11=0000000000000001 R12=00000000000004a9 R13=dffffc0000000000 R14=00000000000001f0 R15=0000000000000007 RIP=ffffffff847e8583 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d681f CR3=00000000433a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000000a DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000ffffff44 RBX=00000000ffffd106 RCX=0000000000002ef8 RDX=00000000ffffd106 RSI=0000000000000008 RDI=ffffffff96ecc0e0 RBP=0000000000000003 RSP=ffffc9000280f688 R8 =0000000000000000 R9 =fffffbfff2dd859a R10=ffffffff96ec2cd7 R11=0000000000000000 R12=0000000000000000 R13=ffff888024150000 R14=0000000000000080 R15=ffff888024150af0 RIP=ffffffff81966e11 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f666fca4d00 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555584171808 CR3=0000000028736000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=f76d598f0f55d68f 4ae4bbd717254692 f76d598f0f55d68f 4ae4bbd717254692 f76d598f0f55d68f 4ae4bbd717254692 f76d598f0f55d68f 4ae4bbd717254692 ZMM18=93bc8b6b6614b707 8da16760e6bb261c 93bc8b6b6614b707 8da16760e6bb261c 93bc8b6b6614b707 8da16760e6bb261c 93bc8b6b6614b707 8da16760e6bb261c ZMM19=d80a000000000000 0000000000000005 d80a000000000000 0000000000000004 d80a000000000000 0000000000000003 d80a000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=250e74e2250e74e2 250e74e2250e74e2 250e74e2250e74e2 250e74e2250e74e2 250e74e2250e74e2 250e74e2250e74e2 250e74e2250e74e2 250e74e2250e74e2 ZMM22=36f114ff36f114ff 36f114ff36f114ff 36f114ff36f114ff 36f114ff36f114ff 36f114ff36f114ff 36f114ff36f114ff 36f114ff36f114ff 36f114ff36f114ff ZMM23=21ffadef21ffadef 21ffadef21ffadef 21ffadef21ffadef 21ffadef21ffadef 21ffadef21ffadef 21ffadef21ffadef 21ffadef21ffadef 21ffadef21ffadef ZMM24=a81bc7eea81bc7ee a81bc7eea81bc7ee a81bc7eea81bc7ee a81bc7eea81bc7ee a81bc7eea81bc7ee a81bc7eea81bc7ee a81bc7eea81bc7ee a81bc7eea81bc7ee ZMM25=06eaa23806eaa238 06eaa23806eaa238 06eaa23806eaa238 06eaa23806eaa238 06eaa23806eaa238 06eaa23806eaa238 06eaa23806eaa238 06eaa23806eaa238 ZMM26=df3bab78df3bab78 df3bab78df3bab78 df3bab78df3bab78 df3bab78df3bab78 df3bab78df3bab78 df3bab78df3bab78 df3bab78df3bab78 df3bab78df3bab78 ZMM27=5250a0aa5250a0aa 5250a0aa5250a0aa 5250a0aa5250a0aa 5250a0aa5250a0aa 5250a0aa5250a0aa 5250a0aa5250a0aa 5250a0aa5250a0aa 5250a0aa5250a0aa ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4107000041070000 4107000041070000 4107000041070000 4107000041070000 4107000041070000 4107000041070000 4107000041070000 4107000041070000 info registers vcpu 2 CPU#2 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85408875 RDI=ffffffff9ab80780 RBP=ffffffff9ab80740 RSP=ffffc90003777240 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9ab80740 R15=0000000000000000 RIP=ffffffff8540889f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3a9035 CR3=000000005b418000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000a000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed61f28d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d0800f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d0800f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d0800f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d0800f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d0800f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d0800f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001021100 0000140000000030 7a79730001000900 00958a0001000680 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a00000700000000 0000000000010211 0000001400000000 307a797300010009 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000958a00010006 8004000c80050004 1200000040020008 140000004000399f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d7ff0e6be04466e2 7c2a6eb8cb947f2c 4b75bcd217cb086d 600cffa6c9084ed9 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3b0611bf4aa5203 0b2978fc713fc203 dc38484c1f2cb070 eccb9b8554376a31 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=fffffbfff2dd859a RBX=fffffbfff2dd859b RCX=ffffffff8195b7be RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff96ec2cd0 RBP=fffffbfff2dd859a RSP=ffffc9000e88f798 R8 =0000000000000000 R9 =fffffbfff2dd859a R10=ffffffff96ec2cd7 R11=0000000000000004 R12=0000000000000000 R13=ffff888022b98000 R14=00000000000000b8 R15=ffff888022b98b68 RIP=ffffffff821cf44b RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555655ca500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555655e55c8 CR3=0000000041d84000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe9c3dff0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41eae0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41eae0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41eae0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41eae0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41eae0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41eae0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000