last executing test programs: 3m33.341625402s ago: executing program 3 (id=237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050025bd7000080000002e00000008000300", @ANYRES32=r3, @ANYBLOB="050034008b0000001400490005ac0f"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = syz_open_dev$rtc(&(0x7f00000000c0), 0xffffffffffffffff, 0x40) ioctl$RTC_VL_CLR(r7, 0x7014) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4, 0x69c2}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', r8, 0x20, 0x700, 0xa, 0x5, {{0x9, 0x4, 0x0, 0xd, 0x24, 0x64, 0x0, 0x20, 0x2f, 0x0, @broadcast, @remote, {[@cipso={0x86, 0xc, 0xffffffffffffffff, [{0x0, 0x6, "de0c19e9"}]}, @rr={0x7, 0x3, 0xfa}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getroute={0x28, 0x1a, 0x10, 0x70bd2d, 0x25dfdbfc, {0xa, 0x10, 0x20, 0x6, 0x0, 0x2, 0xc8, 0x3}, [@RTA_MULTIPATH={0xc, 0x9, {0x9, 0x0, 0x6, r10}}]}, 0x28}, 0x1, 0x2000000000000000, 0x0, 0x80001}, 0x0) 3m33.261713294s ago: executing program 3 (id=239): sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000170a03000000000000000000070000072c00038008000140000000000800024000000008040003800400038008000240000080000800024000000008f54c56a1b283fd67629bfe207bfac053ec2d0f55e5fbd2eb661473c2603a30a5d6a2ccf98fbd4b0e8c6a318f1c793ad0602bcd0a328d8d85d475789fd2baf15375d09118d67163dfda795d2d9ded39c880eb430eac0e9605b6"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x44080) r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x5, @mcast1, 0x800000e7}}}, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001100)={'nat\x00', 0x0, 0x0, 0x90, [], 0x2, 0x0, 0x0}, &(0x7f0000001180)=0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000004c0)={0xffff9c88, {{0xa, 0x4e20, 0x3, @loopback, 0x3}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3m33.261504592s ago: executing program 3 (id=240): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x171000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='erofs\x00', 0x0, 0x0) 3m33.162014364s ago: executing program 3 (id=241): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4048aec9, &(0x7f0000000140)={0x3, 0xffffffffffffffff, 0x1}) r5 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') lseek(r5, 0x7, 0x4) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc8800, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ppoll(&(0x7f0000000940), 0x0, &(0x7f0000000980)={0x77359400}, &(0x7f00000009c0)={[0x1]}, 0x8) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f00005b1000/0x4000)=nil, 0x4000, 0x0, 0x21011, r8, 0x800000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000180)={0x1, {{0xa, 0x4e20, 0x6, @mcast2, 0x4b}}}, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x800, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000580)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x80a1, 0x7800, 0x4, 0x8, {{0x8, 0x4, 0x1, 0x4, 0x20, 0x67, 0x0, 0x32, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, {[@generic={0x83, 0xb, "95d53a2ca4a841a692"}]}}}}}) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x25, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000007000000000000000400000095404000f0ffffff551304001000000085000000bc0000003b71000101000000851000000600000085100000f9ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b705000008000000856ff800a5000000184a0000f8ffffff00000000e09000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x4, 0x2f, &(0x7f00000006c0)=""/47, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0x3, 0x4, 0x930}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x1d, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xacc, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @alu={0x7, 0x0, 0x7, 0x9, 0xa, 0x4, 0x18}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', r10, @fallback=0x10, r11, 0x8, &(0x7f00000004c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x0, 0x6, 0x4}, 0x10, 0x0, r12, 0x8, 0x0, &(0x7f0000000800)=[{0x0, 0x1, 0x4, 0x3}, {0x1, 0x4, 0x2, 0x7}, {0x3, 0x5, 0x6}, {0x1, 0x2, 0xe, 0x3}, {0x0, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x9, 0x3}, {0x5, 0x1, 0x1, 0x7}, {0x2, 0x2, 0xe, 0x7}], 0x10, 0x8001, @void, @value}, 0x94) 3m31.461929224s ago: executing program 3 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x84181, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001d"]) 3m31.458669676s ago: executing program 3 (id=255): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_hsr\x00'}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="557b697face0cf0b30a53f14ac1f75277e2ad6f2145df55efdfdf858e9019dcbd91989554d49482371a76a564f3f51d454b836f5a85c4a059a636310b8cbb4632ef2b090229cd88621eb5534f3be1e522350322348f6e832afefed8eb85d", 0x5e}, {&(0x7f0000000100)="83", 0x1}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x238}, 0x10) 3m15.816630959s ago: executing program 32 (id=255): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_hsr\x00'}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="557b697face0cf0b30a53f14ac1f75277e2ad6f2145df55efdfdf858e9019dcbd91989554d49482371a76a564f3f51d454b836f5a85c4a059a636310b8cbb4632ef2b090229cd88621eb5534f3be1e522350322348f6e832afefed8eb85d", 0x5e}, {&(0x7f0000000100)="83", 0x1}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="f00000000000000019010000000001001e8c6689a4a8f3bf54209522bb0b2aad4d2638627e397cc33286415bbb6d11d30f8bc944ff022701c59df34b20988e17ce503fc1f30365c8bf7065a9a5d1670c6a9a5a4da00853acc328b3d95b19d5755f95ffd728bd2092f89cf803fe8df405935aad114e57abe052cb36912e96889d5117f409f23c8d6e2dc666d153da312a681ee3a16d687695df6ceed9b2bc1af6dd26ae245496230aa4d56f1a8bba0567fd102105a18325f2b534114a9cb218df8b1032b31186901ee83f766b6420429d16a0ae30111f0d8da27e1657772f6a5f595d79b0b6f7201a5c000000000000003800000000000000020100000300000012a04e88acff92170c8381c5e07ec5e3b8767d702ddeba307a8cfdb16f33b50e218f00adf92120af4f0000000000e8000000000000000401000000000000258b61b34ef8f147090f0ecf20a594a347bc5758af0886ed321824358094888130f28c979c8670198c76cfec35d574c340c514aa9d26a19515fecee2e2c4e60072d650682bcabf6a8d3386ee4f3d5cd391b0c1e0d989d11402c707fe6fe4ec16ee599ccb3edcfc6dce929d81eb7d410d97d75765f0a49004235804bb95ce1cbab592ddbd900bb20196d7a25f8ad3b3942a0a6277a6574ec9e434e23c1f3c0bfe63e5332c92f11298531084d4251ed718bddeb7491eae40843e985d27ad43fa077c392300c1e9db54985ac07848ba61b6c3000000000000002800000000000000ff0000000300000024ea91a9cc26b7eb04e2ac7f2dec143f3682abff000000006a68d3c0b27d67d6c190eb2a33081a34bdfd539254ab1ac7d98383d38753d7dff430352a7243660ce354d3b7d9b3533b8380ce1d60061b2e2c298f65ef9e048cd960f5101f89148a235641fa79ebaafaca13401a554c049b4422c26c80b71ba1b79d9bcd66ddc20ac2ddbe1a791bafe3d73a10e8556c4f"], 0x238}, 0x10) 2m40.020594528s ago: executing program 1 (id=1130): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x1, 0x1, @stop_pts=0x8000000000000001}) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xffffffff, 0xfffffff5}) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x21a028b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x800000000000, {0x40fffffff, 0xe, 0x0, {0x0, 0x9, 0x1, 0x5, 0x0, 0x20000000000, 0x20000004, 0x3, 0x2, 0x8001, 0x5, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x7, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m39.441280652s ago: executing program 1 (id=1140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m39.44001563s ago: executing program 1 (id=1141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000680)=0x10000) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x40400c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x124, r8, 0x800, 0x70bd24, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m39.291338251s ago: executing program 1 (id=1142): r0 = socket$kcm(0xa, 0x2, 0x3a) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40010100) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4) 2m38.430591322s ago: executing program 1 (id=1148): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000002000000b70300000000000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000001c001700"], 0x38}}, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) openat$cgroup_ro(r5, &(0x7f0000000300)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800010029cb7000fddbdf250a000000b36228fac49d6dbce5fadbd9bef05d14dc4a937e3e25a763c71e73997671d9cfff00f05d8e14e50799c89fecaeb216859885df2bbf1ceee7670b00c94f96cc976134d5", @ANYRES32=r6, @ANYBLOB="050000001400010000000000000000000000ffff0a0101010800020003000000"], 0x38}, 0x1, 0x0, 0x0, 0x26000000}, 0x20040000) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r11 = dup(r10) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r11, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 2m38.291338735s ago: executing program 1 (id=1151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x502, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000100)='fusectl\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast1}, 0x4, 0x1, 0x0, 0x2}}, 0x26) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="000002007fc18126a01e527a", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c001600fcffffffffffffff"], 0x34}}, 0x810) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = epoll_create1(0x0) epoll_pwait2(r6, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x11, &(0x7f00000003c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="ec81d9fe6d15e9989a36", 0xa, 0x2000c850, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r7, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8f}, &(0x7f0000001380)=0x40) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe00000100000000040012"], 0x30}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f0000000100)={0x20000014}) close_range(r6, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000280)="0f09660ff2a9000082c300baf80c66b811b3bc8766efbafc0cec66b80741678266efeffc0cec3665f58b3a66f20f1c030f01bd6e670fc732", 0x38}], 0x1, 0x1, &(0x7f0000000340)=[@cstype3={0x5, 0x5}], 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) 2m10.295314551s ago: executing program 33 (id=1151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x502, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000100)='fusectl\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast1}, 0x4, 0x1, 0x0, 0x2}}, 0x26) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="000002007fc18126a01e527a", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c001600fcffffffffffffff"], 0x34}}, 0x810) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = epoll_create1(0x0) epoll_pwait2(r6, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x11, &(0x7f00000003c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="ec81d9fe6d15e9989a36", 0xa, 0x2000c850, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r7, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8f}, &(0x7f0000001380)=0x40) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe00000100000000040012"], 0x30}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f0000000100)={0x20000014}) close_range(r6, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000280)="0f09660ff2a9000082c300baf80c66b811b3bc8766efbafc0cec66b80741678266efeffc0cec3665f58b3a66f20f1c030f01bd6e670fc732", 0x38}], 0x1, 0x1, &(0x7f0000000340)=[@cstype3={0x5, 0x5}], 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) 53.470731397s ago: executing program 4 (id=2458): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)="16", 0x1}], 0x1, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="f0307024ad83e33e29cada69a04d2d503f12e6cd634e710de7a256edb044825fa794d11a4aa022716faf14336b15c8b0792c321ce225a60f44dd5baf03c4ce747bb5c9f8d52f9dc768881dc57742745c958efd7fd668a95e668b6ac6385b69ac21815c2aed72ea132ca05c61c62cedb1cc28d7a570decc073930cc3b3e7c945dc5c0ae0702d4e19a773fba512b4bf71a36e2920863f8fe5c06549f2647e0f6e9070454a8ee253882d7a5eed5ec9ee2c0ec7a3d338eeb9eb62244beceb56c9870c7d7064b40d293b983509d8f4cca43180064ddaa904cfcaa442c72bba24d25fec602eb9c8bb802bd50be85295d706599e511242e13c2482b35a445ec9c7524a5bed38956a20cdc25c7a5b479da27e9f1e34335fb4206998f2c49d7778aa7e7c63ebefc29c920252dbdf71f2823b2b5d6aca7a21d8e13ef37315e9b6e733382371598dd6592de394d27d91f7eee1e4a47f357ba217cb6a31ad1f00d819f9a6ef7d1aa6720eb484e218708b0be9fe6cf3905cd75af3d6e6d9b0dc1c1e5071c937637b6864ebb665ec730f8fd96b99f07e2e39a5ccbce5c063e802b421242eff9bcbe0a21bf3e762ee42e969248dfcdd8c061ad190cffb69bc09df602029b8484c68fae959fe42fde38d88b947b97896aaec5f9b09d2d05b1f73c8a2d93d2562a915d016092519e7ff424d37cf70f8ee36e0b0984a14cbd2fe5cf7500c10e09467b71abdbcf10b86601f39f20213ca5c1447f7b64a5a0d31256aacbe813c6c3750ae666829712ca442bdc1c1e1dd91af76034f6c4a6b7872f8b487e3bfcca359e8f42ef0221fd0d6f5ef225c918d982bf2d426696e8e9f90822a5c3e65772592a3b77637b67a45ff5cde4ac59aecfcceaad09b877ca6e5c5535c4ddf56002224677ced7e7bf4f5fe0dd4b21f42dfad0cd0da369d368736275a3a58ca8015b87138297ac9232fb6c246ec79ef1ba54b74b8e4abc89f728e8d49570985dcaa34979fa41bed8077ee9c9c861f958c82e883550ef6654057db1371868a4c6d3f72ce7306e7300b2720f9f2836f6db58deca706173f00ac38b50fb8649c4fac3d80677eb725fb172c78540068abd4aec60f0ca32f5aedf6abbaf6e8946b16ed58dd516891b86c6a577348d96a7485a34dd09dc766fc41012e40f7588574ed7c16afe18bd6220924f5eb9447f4acea8996d30ce83a0671e16e44538a4033811658efd277d01cbbd38f5c61ecfc7593dc07e5b4a0d7fad5fbe6e3eee2216bc23e456b793286c06e140ea9389132ce3051912b7f9f31f70f476d23f97113ce69068607d07e2a581cf6646", 0x3a5, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) recvmsg$can_j1939(r2, &(0x7f00000007c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000200)=""/45, 0x2d}], 0x2, &(0x7f00000003c0)}, 0x2100) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x40) 53.47029591s ago: executing program 4 (id=2459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r0, r0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010200000900010073797a300000000044000000030a010100000000000003000100000008000b400000000014000480080002400000000208000140000000000900010073797a300000000008000a4000000003"], 0x8c}}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x1012, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800f6e7cc11bfb8578a000000000000e0000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000002000000000000000800000000800000000000000000000000000000000000000400"/112], 0xb8}}, 0x40) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) set_robust_list(&(0x7f0000000600)={0x0, 0x8000000000000000}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040880}, 0x4000044) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) ioctl$BLKSECDISCARD(r11, 0x127d, 0x0) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r12, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0}) 53.380698993s ago: executing program 4 (id=2460): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) (async) listen(r0, 0x9) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x2, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000f3000040"]) socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d80ff0008000200", @ANYRES16=r6, @ANYRES32=r8], 0x44}}, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendto$unix(r2, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r9, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) 52.410026497s ago: executing program 4 (id=2467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000040)={0xa, 0x8, "a867dc159d50dfabd78a3e1af7591b97f0758b9a8583fb00", {0x4, 0x7}, 0xffffffff}) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) read$FUSE(r6, &(0x7f0000001940)={0x2020}, 0x2020) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xa9494f426bcab871}, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r11 = socket(0x400000000010, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x1}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_vlan\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xffe0}}]}}]}, 0x4c}}, 0x4000084) (async) syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0) 52.336348677s ago: executing program 4 (id=2469): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0xffffffffffffffbe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xae383) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xffffff65, @mcast1, 0x8, 0x4}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x48400640}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="30050000", @ANYRES16=0x0, @ANYBLOB="0c0425bd7000fddbdf25830000000c009900020000004d000000080010017f0000000800100108000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) ioctl$KVM_RUN(r7, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) 52.180749693s ago: executing program 4 (id=2472): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0xfff, 0x1, 0x0, 'queue1\x00', 0x3ff}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x8200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000440)="460f30c744240078000000c744240200800000c7442406000000000f01142466baf80cb8ce39d381ef66bafc0c66edb8010000000f01c1d9f8b8010000000f01d9f3470f2c6200c443215e7000cc6641dad10f01c8", 0x55}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x46, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000002c0)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa26b9e4080f01c966b81f6269e766ba000000000f30653e0f01c50c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x56}], 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x98, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 37.178437082s ago: executing program 34 (id=2472): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0xfff, 0x1, 0x0, 'queue1\x00', 0x3ff}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x8200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000440)="460f30c744240078000000c744240200800000c7442406000000000f01142466baf80cb8ce39d381ef66bafc0c66edb8010000000f01c1d9f8b8010000000f01d9f3470f2c6200c443215e7000cc6641dad10f01c8", 0x55}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x46, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000002c0)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa26b9e4080f01c966b81f6269e766ba000000000f30653e0f01c50c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x56}], 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x98, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.90264733s ago: executing program 0 (id=3175): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getpriority(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000007c0)={0x22c, 0x2, 0x0, {{0x500, 0xeb, 0x0, 0x0, {}, 0x2810000, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x10, '\bg\xa4m\v\x9c\r\xe2kw\x9c\xb0\x17\xc9l\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x22c) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000022c0)={0x28, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x24000000) 2.850266412s ago: executing program 0 (id=3177): io_setup(0xfd, &(0x7f0000000080)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@delchain={0x2c, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8808}, 0x20004804) io_pgetevents(r0, 0x0, 0x24, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.719453834s ago: executing program 2 (id=3179): r0 = socket$inet(0x2, 0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)="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", 0x137}, {&(0x7f0000001c80)="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", 0x472}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r2, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0xfc}, [@RTA_UID={0x8, 0x19, 0xee01}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x8080) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x6c}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, 0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0/../file0\x00', 0x144) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00100000000d6287e298e38b8"], 0x10) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r12, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.62028006s ago: executing program 0 (id=3184): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000000)='8', 0x1}], 0x1) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="4c108416b9c57b", 0x7}], 0x1, 0x7, 0x9) 2.619673063s ago: executing program 2 (id=3186): connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x182, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x40], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0xfffffffd, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffff00, 0xffffff00, 0xff, 0x5895229fa64e7e4a], [0xffffff00, 0x0, 0xff000000, 0xff], 'veth0_to_bond\x00', 'wg0\x00', {0xff}, {}, 0x0, 0x8, 0x5, 0xb}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @remote, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{}, {0x2, 0x4}}]}, @common=@unspec=@MARK={0x0, 'MARK\x00', 0x2, {0x2, 0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x151) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) r4 = socket$nl_route(0x10, 0x3, 0x0) write$snapshot(r2, &(0x7f0000000580)="086a761ac4ce8b086f21c552932278f489e214ff7ab6236e22327db998486e41b36207d7ddc08f155d44fd0e4d9336ff5ace0d9341eed1870563c3fb9c832931d5d73365712a268acdcf0ac2ad9c45c8dd025979e032fae3bb4c2dad88feec181333867d395a6581635f6002e6840cedcb086851faa8e45385f047073090f87192d7cb3318c23e49ca75f16873ca8a7cd2f3706bf3f8fb8d0a", 0x99) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xffffffffffffff39, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x182, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x40], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0xfffffffd, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) listen(r0, 0x3) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) (async) close(r1) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffff00, 0xffffff00, 0xff, 0x5895229fa64e7e4a], [0xffffff00, 0x0, 0xff000000, 0xff], 'veth0_to_bond\x00', 'wg0\x00', {0xff}, {}, 0x0, 0x8, 0x5, 0xb}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @remote, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{}, {0x2, 0x4}}]}, @common=@unspec=@MARK={0x0, 'MARK\x00', 0x2, {0x2, 0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x151) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) (async) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write$snapshot(r2, &(0x7f0000000580)="086a761ac4ce8b086f21c552932278f489e214ff7ab6236e22327db998486e41b36207d7ddc08f155d44fd0e4d9336ff5ace0d9341eed1870563c3fb9c832931d5d73365712a268acdcf0ac2ad9c45c8dd025979e032fae3bb4c2dad88feec181333867d395a6581635f6002e6840cedcb086851faa8e45385f047073090f87192d7cb3318c23e49ca75f16873ca8a7cd2f3706bf3f8fb8d0a", 0x99) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xffffffffffffff39, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) (async) 2.612351124s ago: executing program 0 (id=3187): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000140)={@private2}, 0x14) r6 = msgget$private(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r8 = fanotify_init(0xf00, 0x0) fanotify_mark(r8, 0x0, 0x4000003a, r7, 0x0) write$6lowpan_enable(r7, &(0x7f0000003d40)='1', 0x1) msgrcv(r6, 0x0, 0x0, 0x1, 0x2000) msgrcv(r6, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000) msgctl$IPC_SET(r6, 0x1, &(0x7f00000008c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170, 0xa4d}, 0x0, 0x0, 0x800000800000000, 0xa, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0200c7612f33117c281794584c199e0af2676f21d1ef000000000000"], 0xe, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100feffffff7f6def280de81d5e7eb244bb8daccf1c9041ea234c16566a8798a4d73aeee22c49d2905f2a4922c6b78717eefefb5cb67daf3c2841ebaf22e5562102a0d2c4292fd9a4a34ed0f4afebd4eb2f048d3acedfdbbce2490079b87840f665203475b44567b817b04d2663ab020e7d771bfeead8f4fe3210871414384e8f10b928b27f00"/168], 0x1c}}, 0x0) r9 = getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0) r12 = syz_pidfd_open(r9, 0x0) open_by_handle_at(r12, 0x0, 0x200) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c30000009e000000620a00ff000000007100080400000000950000000000000018100000", @ANYRES64=r3, @ANYBLOB="00000000000000000500000000000000950000ed00000200"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 2.36902475s ago: executing program 0 (id=3195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a3000000000050005000200000014000780050015000200000008001240000a0000050004000000000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0x50}, 0x1, 0x0, 0x0, 0x2c040051}, 0x20040094) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="705dab17496c0633e4fed04cf61bad0505000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c00028005000100000000001400018008000100ac1e0001080002006401010008000740000000010c0005800800010052415300404737661aeb2b080a3ef7e572"], 0x70}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r6, 0xedaa7000) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a30000000000900020073797a320000"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000b88ae4ef00000001000000080005"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x6, 0x5, 0x41, @loopback, @remote, 0x80, 0x80, 0x2, 0x6}}) sendmsg$nl_route(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c000000100000032dbd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="00020000040800000800200008000000140035007663616e30000000000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="e0ce9eb71b0c3903002d0002001e00"], 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000800) 2.309519821s ago: executing program 0 (id=3197): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = accept$netrom(r0, &(0x7f00000000c0)={{}, [@bcast, @bcast, @rose, @bcast, @bcast, @remote, @remote, @bcast]}, &(0x7f0000000000)=0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000001c0)=0x315023b7, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r5, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000080)=[r6], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02864c3, &(0x7f0000000300)={&(0x7f0000000240)=[r8], 0x1000, 0x1, 0x1}) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x37bf1c31, 0x101, 0x6c0, 0x7, 0x0, 0x3, 0xb, {0x0, @in6={{0xa, 0x4e24, 0xdd977867, @private2, 0xed}}, 0x401, 0x7fff, 0x5, 0x3, 0x2}}, &(0x7f0000000300)=0xb0) 1.838028771s ago: executing program 2 (id=3206): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x410040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x148, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a52}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7417}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x60cf569b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7018}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff65a}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa012f07}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x2004c042}, 0x80) accept4(r1, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x80, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="11f356043825d02bf425760000a808000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1.837650575s ago: executing program 2 (id=3208): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x8010, r0, 0x9eeb8000) 1.787117354s ago: executing program 2 (id=3210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getnexthop={0x34, 0x6a, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 348.523386ms ago: executing program 2 (id=3215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00'}, 0x18) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYRESOCT], 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 346.914983ms ago: executing program 6 (id=3216): iopl(0x3) r0 = syz_open_dev$usbfs(&(0x7f0000000600), 0x800000001ff, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x3, 0x5, 0x401, 0x0, 0x8004, 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0x2a000000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1, {r1}}, 0x58) 279.62839ms ago: executing program 5 (id=3217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001800f08d00000000000000000200000001000006000000006c7a15000200000018001680140001000200000000001f00020004000120bc05"], 0x3c}}, 0x0) 279.254506ms ago: executing program 6 (id=3218): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) unshare(0x40020000) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x51e5, 0xd78, 0x9a, 0x1, 0x268], 0x1, 0x0, 0x0, [{}]}, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000007d117400000000001800"/27], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="0200000074cd8dc5fae56c3b9971aa0d47293f81c9394f53dfc86007e6165d004aa3042fd64a0929f2cfb90e21fb6dcc7571f840d3651de3360feca5a60f401ae47484d79a1d4760c1e25b0ecf667a6325fd5e48d7dc94cb9ca0b57effdb63dc47da5877", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf251000000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async, rerun: 64) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xa1) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="95f3dc41b8", 0x5, 0xfffffffffffffffe) keyctl$search(0xa, r6, &(0x7f0000000100)='trusted\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c6761636865040bed45d36782a72d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000180), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x2) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x74, 0x10, 0x2, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0x21, 0x0, 0x0, 0x1c50}, {0x8, 0xc, 0x0, 0x0, 0x8}, {0x8, 0x1e, 0x0, 0x0, 0x3}, {0x8, 0xe, 0x0, 0x0, 0x9c}, {0x8, 0xa, 0x0, 0x0, 0x8}, {0x8, 0x16, 0x0, 0x0, 0x9}, {0x8, 0xc, 0x0, 0x0, 0x4}, {0x8, 0x10, 0x0, 0x0, 0x2}]}}]}]}, 0x74}}, 0x0) (async) syz_usb_connect(0x2, 0xe43, &(0x7f00000021c0)={{0x12, 0x1, 0x250, 0x4b, 0x47, 0x8, 0x8, 0x404, 0x203, 0x3af6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe31, 0x3, 0xf6, 0x3, 0x60, 0x2, [{{0x9, 0x4, 0xd1, 0xff, 0xf, 0xfa, 0x1d, 0x3e, 0x2, [], [{{0x9, 0x5, 0x2, 0xc, 0x8, 0xa1, 0x81, 0x9}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x2, 0x1, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x9, 0x3, 0x0, [@generic={0x46, 0xf, "c569397785b6285612109dd1e8e544770f4f32d91f6187d62e6526ac07983d267fc3e90948888ece20c14e1d99d82f2c990087813f303e2ff582cbc8289a3df1b811bf4b"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x8ef}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0x0, 0x4, 0xa, [@generic={0x77, 0x7, "6c09f5b7ae629b3a1e0ef5eefa7beb67d7c10842bd871c47e492d65cbbfcd03899e147250ecba3fe57827dbecea41e340ad15b298a9331dca31dd3c2db9590ceff7d25efd0c97fd686cfda2d9e4838057f0c3f015978d150d847c5481089404150521ba742e6d8608ed37d9c08c7164e0feb8f4ae4"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x5, 0x5, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x3, 0xa878}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x69, 0x8}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x5, 0x10, 0x9d, [@generic={0x9b, 0x10, "9206cf567efe45b65deb316280a5bbc1b45af80d4e4fe1be6a9df1db008ba0b8d3d6b7ace4e205c26d64aeb9582367c27c9d62f78dabf56e664437a5f69d67cb4f4917a26398255865eed59842a26b4b60c4ceb044fa2b38db7eb44c750b1627c0196fd4c8f1c48fc79ebf93c726306e88f6f9090c7a888bcc909ec4e56f838bf2b0061095e98e4c28f3274db785a5868d55cc63a928825460"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x9, 0xa, 0xff, [@generic={0xc2, 0x4, "5d7b59ae93fcc9761122d79f14c6042841354ed16a0922ce256c7faab893f0af780d291d8dedf66fd0720b9bda648192c4c6fb5534035af299d596e9754b9aa241531adcfdbca5aa4c4e9a11b02669ae034a422819ce9c6d7a969ac98bdb870ce0e81206ac2fb0aa2e5cab5566ca186e3254595254d192c02f3cd218ee9134c0cd9760117bce6382e23bad496ae32c4d32c95d5ecc6f60efe54944e12c23f20f6c2c24223c97d55b3199bd556ef662614f7c7de5f484f7e1604dd4d25b4b01b7"}, @generic={0x54, 0x4, "282d701935195a84fd080a149b08c85c8c25bc26597cbe65a6ce0a4946f9c23f9015bcc5ee7eb292a6e6362f5955f2c367df1fd5803a12272d2cbe08b4d16511e127dfe4bc3fde810031f9f6b75b121885fc"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x2, 0x0, 0xf, [@generic={0x2c, 0xd, "aea85b5d76cc13e8c3185475307513d73e1a6ae04425b3067c60ba4c490ff11cb915d4a9798b497ef274"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x5}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x6, 0x0, 0x4}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x9, 0x38, 0xba, [@generic={0x5a, 0x26, "7eea92331d2955215408708eeac735e4b7a9de9d11caf117199ceb0ad493491d1920007690348306b1d9abab408bd98aeb4d12aed2ba81c46798ede45adfba7e6fcb1741d58d2853c2685fa9c7a64fcf42d9482d93d655fa"}, @generic={0xa8, 0xa, "1f402a055c58df621220a00a805a86291578e91625196124000ac4337b1ccaeeb901aa2486915e59ca31e06f1353af716cd31435d72185a796c3b168baab9f2cc882c0f2d687e1d1c09317c01064aee2bb5b5752af1d71b3660e44a8ac3f5906f56a9217ce953827b4feddaab0e5225a89ee5ee4ad937cd199562ede65643f0911701812f19fcb95537c60a9c7688912158bf2cf6176a8419944c2168549649d1f838b9acd36"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x7, 0x1, 0x6a, [@generic={0x56, 0xc, "be871703085bd884a5e4c1d6bb58953400380bda089c6493e626bf3ddf1237bd52072ed44f8c14af211a9ddf3f3bd3de7d8ff77de3baefbe9e19dd33ce9e9d5fb23ad54e2c9b42e5640e55fe5da0e0dd667983cb"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x3, 0x5, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x1, 0x46, 0x81}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x4, 0x2, 0x9, [@generic={0x41, 0x4, "9e5ad94b0b2014cded3c86aa5068681c58a98b17181a5af57a6db065733524606879df1d3633bda23843b5db394889cbb5f44cc6fc69c4a394f4498f00b7c9"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x8, 0x7f, 0x9}}]}}, {{0x9, 0x4, 0x40, 0x8, 0x8, 0x22, 0x6e, 0x62, 0x8, [@hid_hid={0x9, 0x21, 0x59, 0x8, 0x1, {0x22, 0x3f4}}], [{{0x9, 0x5, 0x6, 0x3, 0x20, 0xb, 0x4, 0x9f, [@generic={0x4e, 0xc, "a924176d72172166ba4170bcd34c41096b9f77b0ca97b884d2b496060e1745b31b046f74f130b91224cfe59ec93714f897670ef77ab0a9df30aa14c2e9786e8d466c925b46cbe71dc06d21e8"}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x8, 0x6}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x10, 0xe1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xfb, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x7, 0x10}, @generic={0x4c, 0x0, "acccbe7cd8df9c859dcebeef3a5743f51be998137e5c83333a31d5a31453ec7d0df4733d98fee34fdf94d1e388add8f14f5b4f0ec3469fe3b34b5bca9caaa443d4c22f99697575673e46"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x0, 0x40, 0x4, 0xc}}, {{0x9, 0x5, 0x2, 0x3, 0x1ff, 0x9, 0x5b, 0xf4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2d, 0x7}, @generic={0x80, 0x30, "c356d690f79dd65b06aa6a742c58d188d446cc95939a231eb8a3115f67bbe1d48d4824d92b38fd3b805a4365da6d8aa4385e8173e2af27a94418db7e4899d3b712e6e01dd75c015884b4a07a063093894fae5536c3847c5e3a2dae6bf90ce51448478ed4e94c9a388293cf4c8d851ca162de72d16ee17bf7d4348e8a2bb2"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x89, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x99}, @generic={0xd3, 0x7, "fce66b2a70d7c8a27041a239c85cb698a55e3e63ec1ccf09f6250576d42a56aea27dd9e182f614354d1cfed912c201a3617bb351872cfbe3b32db327f0fa6ace285fabcdd5b7544aa4d66c94724cb459dc002d7e64838b2f20d4ddca2b1e758c0caca7879d57676b249269df00385292efaea9db25b65c95ceb6073c74ef33aeda3ab234dcbeed409bbe126779c158cca1bf5bc966a14a73f92dd99314b96d2903b5988987834309158932e3847be7d7edf712c5e516f57d0e795c1f8148337e02deecaab897bab834f0ced81ce90625c1"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x3, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x1, 0xf8, 0x5, [@generic={0x7e, 0x6, "9a3100b3672bacf95ba4735db0d2c53a366ee163923ae8c4759af878f507cdf35c08a0285ebefc8775625ebdd548ee81d179312c07bf6ec3dad6bbdfd05454ed3d6407e34ed1cfd3f796149bf17ec9d6cc44a51cf644ba6357ddca924b802a4cb095b9df473319996d46e6ae4556eb67c4de136c7701b12eda0166db"}]}}]}}, {{0x9, 0x4, 0xc4, 0x3, 0x10, 0x62, 0x46, 0xab, 0xd5, [@generic={0xf0, 0xc, "0adb0436705f5811c1e9c8791e86721fc9aa3e890759f814bf487da4edc3e4683a862a69afeddfa17ce11c44d3aea63a100e552703778a073e9fdea5b3ac13563860cd01f90f065ec963c8835fee48ee6d66031bc3b7d1063ff176b025f05630348a41c1e6941d69ad070b77ab517e4ea3c7a8825a2723e3e117809be226acb3ac6101c70936318032ca813dc6c6aaa403b35f867877f0002f3d2aae2aba736ded4dc034664dfc10b593c950abe5367ef7d2c71fe7fdf8831eebd1d0a8d79d95df44891dcbd217d9f7e7167fcdc5fd1aa989f77d6a703392d8f00601b833639f33eb95434296f7a621860ba52d84"}], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x8, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x1ff}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x1, 0x0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xac, 0x9}, @generic={0xf2, 0x31, "c065b79bd13c8479695079dbab14f2ab28d3f6ec7fd73a116d8df745741fbe4a951acface15263f2bf86fc4cc73933c0084bf5944c93f2fb7762ae6750688c9044d935a9ebeb412b607832fdd55a8ba4869203c7d34e28a47c7a90442d59a962d016b36b805d0cff9e6d820ff7c3ccca0e059298a6c82f2f1a4d5364bf8d7b52200465c76f4955666afb5cc685fdd9a6b3dda9106cdd421b090446f51b20215e6eaabbd60cbd50f4b9bad2e9b1f1de625df0da46185b6267321bc6e2de3936cba78567197367ab549ae8ed89edf239ca6f6de13898bc1b4e6056347f41cf3e5e053da977f9cdaeab1ff7e869038961ea"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x80, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7}, @generic={0xd0, 0xc, "b02c55880a5b3a1028a1270b67b84c1e9932edee13d357a699c01b859a1c3e0955ee336befdd4e54a92e6c2f155eeff7310abcfd15736bd90d55c4d2debda1b2de3fc920aa49d5a267d07d6d8c0b0f97c95e6c45fb7d1f33fb699fe039cb156c5a0bf9344c07abbc7cd1787bfc910e64616107dbd5efccb9b501a3f8c787a8249748dcd039a0afae0b87ec556e44b74bed3b57381c7e1541d869b73cc8aab06b0eccdaa58d1b0e3fb8d90f79f570a9e4f328ff40d56322d6671cd5362d7083332311a03d168ec73b9aa12ffa9661"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x5, 0x7, 0x6, [@generic={0xe0, 0x3, "b99995076f855f9c1ecf780adb980714d111f530ac4a5aa7d11acf0df9dad45886a643e68728aba42f7fd83a5b39cd25c92c380184e0188d98365926d3216c58c283be3fad479af24100d102621b943629089f98b3428a922924a270937ebf0f05a49ec5c66d728309636f1b7202d99e029340c11bac4ce6abc43f43d58a24b75698ba832c312162366003637c42d0df3609dedb97200349761c8618576447e5b52436b55fe031637b781a8d7fed150ce77b0788aa9ddc0c9093f96e1c0338f406d179c8376b1218e7e56cb6b98a624eeb00fd2d4635f1834435d6c6910c"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x8, 0x5, 0x7, [@generic={0xb8, 0x1, "2064b167fc4d6d377db408faec3beec72eda7cd4b5b45291d4c37c31ed19164ee408bc872d5ab7b1e6fb114e9e19d750be0ced97c55b97c02ba505835474089602b1144c43f539a91c37c3de44d5fad1ec4243ba4ffd5d7f9e16a2b8eccb5f34120920d0058b5b3aa7c032f926d021a783abaa8a7b832b4ef73834802fd4ee04f2806ce0c5ddf2c92e0c45cb26720980760b65cc3278db31c71141c6dbf10b8bdd56cce058f61405fac4f4ee565fa8b5d4cb4cf68719"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x5, 0xd, 0x3}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x6, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xa66}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x9}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x7b, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}]}}, {{0x9, 0x5, 0x6, 0x8, 0x10, 0xb, 0x74, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x264}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x4, 0x5, 0x58}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0xf5, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x30}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x81, 0x6, 0x5}}, {{0x9, 0x5, 0x8, 0x3, 0x0, 0x5, 0xd, 0x81}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x8, 0x6b}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x8, 0x88, 0xe, [@generic={0xa0, 0x21, "9cc2962e603ccdee1932886bb0b8053c9063716c8f6f02e879da36cde1f8ed7b850a0fc1b40688809147afd29ca232589f39d2c39a49407d757cf61ea7c5aa0da6ef2db2761d87ed9066824f8f105a733ef93e05312c668dccab28fd889da4d9528ea7d5d2ffc8ce115de43d98888ad56b55d669c1b6ea94d9ea6134c045dbf1fec290d3b40d1afb2efaacb4092f07005fadacb4fcca95b65c4b3b109768"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x1, 0xfb, 0x1, [@generic={0x68, 0x2a, "d08de6dfb19c2ca8c5031bbb4e23460e84725d5b9cac3c4afdcc7b18c8f182a7a46d41b3b1b3c53e42bd6c228146833f3c133dd83db33f5c3ed8f86d6cc565ae750ef69bd4ef412e8b0535a36573eb7aa44d2efa68bf9a5227bf3ed10beb50fc95580e8abaad"}, @generic={0x22, 0xd, "5ff74908f95004adfb60722a4ca3474d3f23e86e32f7ff3cc0f31d4e1addd98f"}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x6, 0xc0, 0x40, 0x4}, 0x145, &(0x7f0000000580)={0x5, 0xf, 0x145, 0x6, [@generic={0x100, 0x10, 0xa, "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"}, @ssp_cap={0x10, 0x10, 0xa, 0x27, 0x1, 0x2, 0xf, 0x94e2, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x14, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xda, "3a206cb42bbf5f94450999881e258b13"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x19, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0xe, 0x5}]}}) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) 278.353379ms ago: executing program 6 (id=3219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1a}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x48005}, 0x4040) 210.078748ms ago: executing program 6 (id=3220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c000200010000001500000014000c8006000100d40008001200d16b00000600030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0xa1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x1ff, 0x0, 0x5}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002f000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) recvmmsg(r5, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000140)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 209.812476ms ago: executing program 5 (id=3221): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000600)=0x2) write$cgroup_subtree(r2, 0x0, 0x9) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x14a, 0x0) (async) r4 = fcntl$getown(r0, 0x9) (async, rerun: 64) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (rerun: 64) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000000000)=0xe1df) (async) syz_open_procfs(r4, &(0x7f00000000c0)='net/wireless\x00') 209.478887ms ago: executing program 6 (id=3222): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="130000001000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r3], 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, &(0x7f0000000040), 0x0}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fc0200000000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b46b6e00000000000000000000000000000000000a00100080"], 0xcc}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fc0200000000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b46b6e00000000000000000000000000000000000a00100080"], 0xcc}}, 0x0) 197.652804ms ago: executing program 6 (id=3223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) flock(r0, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r6, 0x5, 0x100000, 0x100000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}}, 0x4000800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r8, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r9 = syz_open_pts(r8, 0x48500) r10 = dup3(r9, r8, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x5) read$FUSE(r10, &(0x7f0000003f80)={0x2020}, 0x2020) read$FUSE(r10, &(0x7f0000005fc0)={0x2020}, 0xfeb4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c000000100003040100"/20, @ANYRES32=0x0, @ANYBLOB="16080300000000001c0012800b00010084726964676500000c0002800800030017000000"], 0x3c}}, 0x40840) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000021c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026c67000000000b5a7f0e16157c81b8001000100", @ANYRES32=r14, @ANYBLOB="10000280080003800400018004000100"], 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', r14, 0x4, 0x2, 0x6a, 0x8, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x6, 0x27}}) 89.685568ms ago: executing program 5 (id=3224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x5ee}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 87.017271ms ago: executing program 5 (id=3225): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) shutdown(r0, 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1, 0x0, 0x0, 0xe703}, 0x0) 200.402µs ago: executing program 5 (id=3226): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xc, 0x6, 0x600, 0x0, 0x0, {0x5, 0x0, 0x101}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000805}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1/file3\x00'}) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xbc}}, 0x48004) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r5 = memfd_create(&(0x7f00000012c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\b\x00\x00\x00~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x9b3\x15ps\a7\x8bm\xdaf\x94Z\x81\x03\xed\x1c\xfc\xdb\xdc\x9f\x84\xdf\xbaa\xf5\x81\xac\xc8\xf1\xaa\xfb(\xb7', 0x1) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0xf, 0x2) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x5, 0x6, 0x200001d, 0x15, "6b6ad585391b258ae44899b97d24ce89ddf1dfaea30e0416f2e15364b6a2aaf5425f72e0999fffb5cb89205a2eefd2349c15103caac86ec6a7f52fd12fdce0c4", "abc1ecba5228dc36ce5ea6e0c7b8d8a66a1d329bebd26ef8cf172ea14eee6d74", [0x0, 0xe32]}) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x3, "81914800fcffffffffffffa7d9fcea57000900000000000000000000002000", 0x44495658}) fcntl$notify(r6, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x100) mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000001c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xc, 0x6, 0x600, 0x0, 0x0, {0x5, 0x0, 0x101}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000805}, 0x80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1/file3\x00'}) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xbc}}, 0x48004) (async) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) (async) memfd_create(&(0x7f00000012c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\b\x00\x00\x00~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x9b3\x15ps\a7\x8bm\xdaf\x94Z\x81\x03\xed\x1c\xfc\xdb\xdc\x9f\x84\xdf\xbaa\xf5\x81\xac\xc8\xf1\xaa\xfb(\xb7', 0x1) (async) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x40) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0xf, 0x2) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x5, 0x6, 0x200001d, 0x15, "6b6ad585391b258ae44899b97d24ce89ddf1dfaea30e0416f2e15364b6a2aaf5425f72e0999fffb5cb89205a2eefd2349c15103caac86ec6a7f52fd12fdce0c4", "abc1ecba5228dc36ce5ea6e0c7b8d8a66a1d329bebd26ef8cf172ea14eee6d74", [0x0, 0xe32]}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x3, "81914800fcffffffffffffa7d9fcea57000900000000000000000000002000", 0x44495658}) (async) fcntl$notify(r6, 0x402, 0x8000003d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x100) (async) mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9) (async) 0s ago: executing program 5 (id=3227): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000240)={0x21, 0x24, 0x17, 0x11, 0x9, 0xc, 0x5, 0x61, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_cmd={0x4c, 0xb, 0x76e, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3f}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000940)={'sit0\x00', 0x0}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xc}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xfffffff7}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffc}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xfff}, @TCA_FLOW_XOR={0x8, 0x7, 0x4}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008ed}, 0x0) kernel console output (not intermixed with test programs): 3*512kB (U) 20*1024kB (UME) 15*2048kB (UM) 369*4096kB (UM) = 1602208kB [ 218.879804][T13260] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 218.881973][T13251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.882004][T13251] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.890380][T13251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.895152][T13251] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.897988][T13251] 59687 total pagecache pages [ 218.899507][T13251] 0 pages in swap cache [ 218.900845][T13251] Free swap = 124996kB [ 218.902166][T13251] Total swap = 124996kB [ 218.903552][T13251] 1048443 pages RAM [ 218.904887][T13251] 0 pages HighMem/MovableOnly [ 218.906458][T13251] 282930 pages reserved [ 218.907787][T13251] 0 pages cma reserved [ 219.132050][T13263] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input61 [ 219.144120][ T29] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 219.316324][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.319921][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 219.323427][ T29] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 219.327114][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.333338][ T29] usb 7-1: config 0 descriptor?? [ 219.338284][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 219.340439][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 219.343309][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 219.346876][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 219.349274][ T29] usb 7-1: media controller created [ 219.351687][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.356545][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 219.358421][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 219.361888][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input62 [ 219.368674][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 219.370954][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 219.497509][T13275] atomic_op ffff88803d37e998 conn xmit_atomic 0000000000000000 [ 219.502645][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 219.526350][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 219.530030][ T29] dvb-usb: error while querying for an remote control event. [ 219.562228][T13284] netlink: 'syz.0.2291': attribute type 1 has an invalid length. [ 219.564050][ T40] audit: type=1400 audit(1749516098.144:929): avc: denied { map } for pid=13281 comm="syz.5.2290" path="/164/file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 219.571828][T13287] fuse: Bad value for 'fd' [ 219.596630][T13260] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.599735][T13260] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.664007][T13260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.664992][T13295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2291'. [ 219.671341][T13260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.707233][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 219.709677][ T29] dvb-usb: error while querying for an remote control event. [ 219.732641][T13260] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.735689][T13260] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.738565][T13260] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.741603][T13260] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.778148][ T5943] usb 7-1: USB disconnect, device number 15 [ 219.788141][T13284] 8021q: adding VLAN 0 to HW filter on device bond39 [ 219.801111][T13293] bond39: (slave gretap2): making interface the new active one [ 219.806802][ T5943] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 219.807205][T13293] bond39: (slave gretap2): Enslaving as an active interface with an up link [ 219.819692][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 219.911024][T13316] ubifs: Unknown parameter 'fd' [ 219.968076][T13322] x_tables: duplicate underflow at hook 1 [ 219.997121][T13325] mmap: syz.0.2296 (13325): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 220.131237][T13341] /dev/nullb0: Can't open blockdev [ 220.203776][ T40] audit: type=1400 audit(1749516098.784:930): avc: denied { write } for pid=13348 comm="syz.0.2299" name="file0" dev="tmpfs" ino=2713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 220.210790][ T40] audit: type=1400 audit(1749516098.794:931): avc: denied { open } for pid=13348 comm="syz.0.2299" path="/513/file0" dev="tmpfs" ino=2713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 220.231592][ T40] audit: type=1400 audit(1749516098.794:932): avc: denied { ioctl } for pid=13348 comm="syz.0.2299" path="/513/file0" dev="tmpfs" ino=2713 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 220.254391][T13349] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 220.409470][ T40] audit: type=1400 audit(1749516098.994:933): avc: granted { setsecparam } for pid=13369 comm="syz.5.2303" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 220.423724][ T5944] Bluetooth: hci2: command tx timeout [ 220.458964][ T29] IPVS: starting estimator thread 0... [ 220.543627][T13374] IPVS: using max 44 ests per chain, 105600 per kthread [ 220.545932][ T5985] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 220.887196][T13391] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.933289][T13393] sctp: [Deprecated]: syz.5.2309 (pid 13393) Use of int in maxseg socket option. [ 220.933289][T13393] Use struct sctp_assoc_value instead [ 221.024479][T13399] bridge_slave_0: left allmulticast mode [ 221.026317][T13399] bridge_slave_0: left promiscuous mode [ 221.028254][T13399] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.031897][T13399] bridge_slave_1: left allmulticast mode [ 221.034963][T13399] bridge_slave_1: left promiscuous mode [ 221.037647][T13399] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.044524][T13399] bond0: (slave bond_slave_0): Releasing backup interface [ 221.049063][T13399] bond0: (slave bond_slave_1): Releasing backup interface [ 221.057793][T13399] team0: Port device team_slave_0 removed [ 221.075840][T13399] team0: Port device team_slave_1 removed [ 221.078611][T13399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.082738][T13399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.087748][T13400] team0: Mode changed to "broadcast" [ 221.104265][T13399] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 221.106954][T13400] tipc: Started in network mode [ 221.111109][T13400] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 221.114376][T13400] tipc: Enabled bearer , priority 0 [ 221.308531][T13425] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2321'. [ 221.346143][T13431] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 221.358350][T13434] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2322'. [ 221.419724][T13437] cgroup: fork rejected by pids controller in /syz5 [ 221.568155][T13482] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2326'. [ 221.753577][ T1266] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 221.903685][ T1266] usb 9-1: Using ep0 maxpacket: 8 [ 221.907490][ T1266] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.910109][ T1266] usb 9-1: config 0 has no interface number 0 [ 221.912083][ T1266] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.915863][ T1266] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 221.918773][ T1266] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.922408][ T1266] usb 9-1: config 0 descriptor?? [ 221.926453][ T1266] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 222.114785][T12776] tipc: Node number set to 11578026 [ 222.127260][ T29] usb 9-1: USB disconnect, device number 5 [ 222.274841][T13489] program syz.2.2328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.332984][T13490] hub 1-0:1.0: USB hub found [ 222.336168][T13490] hub 1-0:1.0: 2 ports detected [ 222.472294][T13509] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input64 [ 222.513806][ T5944] Bluetooth: hci2: command tx timeout [ 222.552500][T13512] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 222.608993][T13518] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2341'. [ 222.652989][T13524] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 222.655076][T13524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.658431][T13524] vhci_hcd vhci_hcd.0: Device attached [ 222.661232][T13526] vhci_hcd: connection closed [ 222.661432][ T1141] vhci_hcd: stop threads [ 222.667290][ T1141] vhci_hcd: release socket [ 222.669293][ T1141] vhci_hcd: disconnect device [ 222.676804][T13529] No such timeout policy "syz0" [ 222.778048][T13539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input65 [ 222.852898][ T40] audit: type=1400 audit(1749516101.434:934): avc: denied { mounton } for pid=13541 comm="syz.4.2347" path="/30/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 223.191585][T13546] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 223.212112][ T40] audit: type=1400 audit(1749516101.794:935): avc: denied { map } for pid=13547 comm="syz.2.2349" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.219635][ T40] audit: type=1400 audit(1749516101.794:936): avc: denied { execute } for pid=13547 comm="syz.2.2349" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.228803][ T40] audit: type=1400 audit(1749516101.814:937): avc: denied { getopt } for pid=13547 comm="syz.2.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 223.252129][T13546] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2348'. [ 223.259407][T13546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.288185][ T1266] IPVS: starting estimator thread 0... [ 223.392835][T13514] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 223.393608][T13552] IPVS: using max 45 ests per chain, 108000 per kthread [ 223.813333][T13589] 9p: Unknown Cache mode or invalid value fs¿3ZO+”$rsion=9G000.uÿ#±ÃtÌã5lE©Bytïê Pe|h‚å¼ö [ 223.853609][ T5985] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 224.023934][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 224.027905][ T5985] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 224.031234][ T5985] usb 5-1: config 0 has no interface number 0 [ 224.036105][ T5985] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 224.039699][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.042223][ T5985] usb 5-1: Product: syz [ 224.043705][ T5985] usb 5-1: Manufacturer: syz [ 224.045193][ T5985] usb 5-1: SerialNumber: syz [ 224.047941][ T5985] usb 5-1: config 0 descriptor?? [ 224.050966][ T5985] smsc95xx v2.0.0 [ 224.187314][T13592] random: crng reseeded on system resumption [ 224.196044][ T40] audit: type=1400 audit(1749516102.784:938): avc: denied { ioctl } for pid=13591 comm="syz.2.2359" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 224.253151][T13576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.258515][T13576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.478261][ T5985] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 224.481927][ T5985] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 224.485297][ T5985] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 224.488778][ T5985] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 224.493903][ T5985] usb 5-1: USB disconnect, device number 24 [ 224.685449][T13596] 9pnet_virtio: no channels available for device 127.0.0.1 [ 224.890367][T13609] __nla_validate_parse: 1 callbacks suppressed [ 224.890378][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2361'. [ 224.895321][T13609] openvswitch: netlink: Unknown nsh attribute 0 [ 224.897295][T13609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.900955][ T40] audit: type=1400 audit(1749516103.494:939): avc: denied { create } for pid=13608 comm="syz.5.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 224.903723][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 224.907610][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 224.910877][ T40] audit: type=1400 audit(1749516103.494:940): avc: denied { write } for pid=13608 comm="syz.5.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 224.918508][ T40] audit: type=1400 audit(1749516103.494:941): avc: denied { read } for pid=13608 comm="syz.5.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 225.082062][T13619] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input66 [ 225.228057][T13630] binder: 13628:13630 ioctl 400c620e 200000001580 returned -22 [ 225.231748][T13630] vlan0: entered promiscuous mode [ 225.268236][ T40] audit: type=1400 audit(1749516103.854:942): avc: denied { read } for pid=13631 comm="syz.2.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 225.275959][ T40] audit: type=1400 audit(1749516103.854:943): avc: denied { getopt } for pid=13631 comm="syz.2.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 225.284023][T12776] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 225.374145][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2371'. [ 225.447139][T12776] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.450620][T12776] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 225.455466][T12776] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.458194][T12776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.460609][T12776] usb 5-1: Product: syz [ 225.461867][T12776] usb 5-1: Manufacturer: syz [ 225.463261][T12776] usb 5-1: SerialNumber: syz [ 225.467671][T12776] cdc_mbim 5-1:1.0: skipping garbage [ 225.469899][T13654] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input67 [ 225.671753][T13613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.749462][T13668] nfs: Bad value for 'source' [ 225.786126][ T5985] hid-generic 0000:0004:0009.0008: unknown main item tag 0x0 [ 225.788548][ T5985] hid-generic 0000:0004:0009.0008: unknown main item tag 0x0 [ 225.791094][ T5985] hid-generic 0000:0004:0009.0008: unknown main item tag 0x0 [ 225.795596][T13673] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input68 [ 225.797322][ T5985] hid-generic 0000:0004:0009.0008: hidraw1: HID v0.04 Device [syz0] on syz1 [ 226.025830][ T9737] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 226.048683][T13687] binder: BINDER_SET_CONTEXT_MGR already set [ 226.050716][T13687] binder: 13686:13687 ioctl 4018620d 200000000040 returned -16 [ 226.120858][T13699] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2391'. [ 226.278009][T13613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.280634][T12776] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 226.283807][T12776] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 226.291103][T12776] wwan wwan0: port wwan0mbim0 attached [ 226.302052][T12776] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:84:3e:10:d4:a9 [ 226.468059][T13732] netlink: 'syz.2.2398': attribute type 21 has an invalid length. [ 226.470506][T13732] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2398'. [ 226.473369][T13732] netlink: 'syz.2.2398': attribute type 4 has an invalid length. [ 226.479593][T13732] netlink: 'syz.2.2398': attribute type 5 has an invalid length. [ 226.482044][T13732] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2398'. [ 226.571319][T13613] netlink: 'syz.0.2363': attribute type 3 has an invalid length. [ 226.574549][ T5985] usb 5-1: USB disconnect, device number 25 [ 226.577104][ T5985] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 226.646366][ T5985] wwan wwan0: port wwan0mbim0 disconnected [ 226.774320][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 226.893928][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 227.268918][T13759] input: syz1 as /devices/virtual/input/input69 [ 227.333069][T13766] syz_tun: refused to change device tx_queue_len [ 227.360244][T13757] syzkaller0: entered promiscuous mode [ 227.362038][T13757] syzkaller0: entered allmulticast mode [ 227.786939][ T5943] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 227.944442][ T5943] usb 7-1: Using ep0 maxpacket: 16 [ 227.949822][ T5943] usb 7-1: config 0 has no interfaces? [ 227.952352][ T5943] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.955449][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 227.957934][ T5943] usb 7-1: SerialNumber: syz [ 227.960501][ T5943] usb 7-1: config 0 descriptor?? [ 228.193635][T13774] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 228.543576][ T5943] usb 7-1: USB disconnect, device number 16 [ 229.074719][ T6220] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 240.790247][T13810] 9pnet_fd: Insufficient options for proto=fd [ 240.808684][T13815] netlink: 'syz.5.2413': attribute type 21 has an invalid length. [ 240.823030][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 240.823043][ T40] audit: type=1400 audit(1749516119.404:949): avc: denied { mounton } for pid=13809 comm="syz.0.2411" path="/534/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 240.826084][T13810] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 240.838308][T13810] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 240.866371][T13821] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input70 [ 240.897059][T13831] 9pnet_fd: Insufficient options for proto=fd [ 240.899536][T13832] 9pnet_fd: Insufficient options for proto=fd [ 240.911885][T13829] xt_cgroup: xt_cgroup: no path or classid specified [ 240.923148][T13834] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2419'. [ 241.214774][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2426'. [ 241.307475][T13857] openvswitch: netlink: Key 6 has unexpected len 183 expected 2 [ 241.310602][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2426'. [ 241.315708][T13857] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 241.318588][T13857] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 241.321501][T13857] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 241.340164][T13863] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 241.340665][T13857] syz.4.2426 (13857) used greatest stack depth: 19640 bytes left [ 241.346215][ T40] audit: type=1400 audit(1749516119.924:950): avc: denied { map } for pid=13858 comm="syz.0.2427" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 241.526936][T13868] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input71 [ 241.610477][T13878] TCP: out of memory -- consider tuning tcp_mem [ 241.653803][T13879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.656983][T13879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.692714][T13883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2434'. [ 241.755179][ T40] audit: type=1400 audit(1749516120.334:951): avc: denied { mounton } for pid=13885 comm="syz.2.2436" path="/81/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 241.891180][T13905] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input72 [ 241.961314][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2444'. [ 241.983771][T13910] kvm: user requested TSC rate below hardware speed [ 241.990731][T13910] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 242.207835][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2449'. [ 242.210752][T13931] nbd: illegal input index -16777216 [ 242.243699][T13933] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2450'. [ 242.247535][T13933] nbd: must specify at least one socket [ 242.443252][T13943] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input73 [ 242.968908][T13972] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 242.971634][T13972] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 243.029717][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 243.192640][T13976] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input74 [ 243.918916][T13992] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2467'. [ 244.037779][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2469'. [ 244.120115][T14006] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input75 [ 244.192362][ T40] audit: type=1400 audit(1749516122.774:952): avc: denied { write } for pid=14008 comm="syz.2.2473" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 244.202323][ T40] audit: type=1400 audit(1749516122.774:953): avc: denied { setattr } for pid=14008 comm="syz.2.2473" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 244.212748][ T40] audit: type=1400 audit(1749516122.784:954): avc: denied { ioctl } for pid=14008 comm="syz.2.2473" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 244.310625][T14013] syz.2.2476: attempt to access beyond end of device [ 244.310625][T14013] sr0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 244.315936][T14013] hpfs: hpfs_map_sector(): read error [ 244.428226][T14016] afs: Unknown parameter 'smackfstransmute' [ 244.442381][ T40] audit: type=1400 audit(1749516123.034:955): avc: denied { read } for pid=14020 comm="syz.0.2475" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 244.453562][ T40] audit: type=1400 audit(1749516123.034:956): avc: denied { open } for pid=14020 comm="syz.0.2475" path="/553/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 244.462037][ T40] audit: type=1400 audit(1749516123.034:957): avc: denied { ioctl } for pid=14020 comm="syz.0.2475" path="/553/file0" dev="tracefs" ino=1 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 244.471518][ T40] audit: type=1400 audit(1749516123.044:958): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 244.621818][T14034] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input76 [ 244.917745][T14060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input77 [ 245.021180][T14073] tipc: Enabling of bearer rejected, failed to enable media [ 245.057694][T14076] netlink: 'syz.2.2496': attribute type 3 has an invalid length. [ 245.103252][T14082] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 245.241760][ T9743] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.328707][ T9743] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.353797][ T6220] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 245.407266][ T9743] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.472652][ T9743] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.503790][ T5985] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 245.523801][ T6220] usb 5-1: Using ep0 maxpacket: 32 [ 245.527735][ T6220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 245.531043][ T6220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 245.534298][ T6220] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 245.537892][ T6220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 245.541101][ T6220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 245.546166][ T6220] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 245.548941][ T6220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.551345][ T6220] usb 5-1: Product: syz [ 245.552718][ T6220] usb 5-1: Manufacturer: syz [ 245.554618][ T6220] usb 5-1: SerialNumber: syz [ 245.557315][ T6220] usb 5-1: config 0 descriptor?? [ 245.559524][T14082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.563997][ T6220] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input78 [ 245.654060][ T5985] usb 7-1: Using ep0 maxpacket: 32 [ 245.658791][ T5985] usb 7-1: config 16 has an invalid interface number: 41 but max is 3 [ 245.662758][ T5985] usb 7-1: config 16 has an invalid interface number: 14 but max is 3 [ 245.667223][ T5985] usb 7-1: config 16 has an invalid interface number: 150 but max is 3 [ 245.670557][ T5985] usb 7-1: config 16 has an invalid interface number: 184 but max is 3 [ 245.674009][ T5985] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 245.678019][ T5985] usb 7-1: config 16 has no interface number 0 [ 245.680528][ T5985] usb 7-1: config 16 has no interface number 1 [ 245.682856][ T5985] usb 7-1: config 16 has no interface number 2 [ 245.686148][ T5985] usb 7-1: config 16 has no interface number 3 [ 245.688653][ T5985] usb 7-1: config 16 interface 41 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 245.692705][ T5985] usb 7-1: config 16 interface 41 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 245.696220][ T5985] usb 7-1: config 16 interface 41 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 245.699529][ T5985] usb 7-1: config 16 interface 41 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 245.702818][ T5985] usb 7-1: config 16 interface 41 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 245.708050][ T5985] usb 7-1: config 16 interface 41 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 245.711374][ T5985] usb 7-1: config 16 interface 14 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 245.715400][ T5985] usb 7-1: config 16 interface 14 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 245.718707][ T5985] usb 7-1: config 16 interface 14 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 245.723216][ T5985] usb 7-1: too many endpoints for config 16 interface 150 altsetting 232: 131, using maximum allowed: 30 [ 245.726890][ T5985] usb 7-1: config 16 interface 150 altsetting 232 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 245.730372][ T5985] usb 7-1: config 16 interface 150 altsetting 232 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 245.733886][ T5985] usb 7-1: config 16 interface 150 altsetting 232 has a duplicate endpoint with address 0x1, skipping [ 245.737291][ T5985] usb 7-1: config 16 interface 150 altsetting 232 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 245.740741][ T5985] usb 7-1: config 16 interface 150 altsetting 232 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 245.744544][ T5985] usb 7-1: config 16 interface 150 altsetting 232 has 6 endpoint descriptors, different from the interface descriptor's value: 131 [ 245.748707][ T5985] usb 7-1: config 16 interface 184 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 245.752833][ T5985] usb 7-1: config 16 interface 41 has no altsetting 0 [ 245.755035][ T5985] usb 7-1: config 16 interface 14 has no altsetting 0 [ 245.757175][ T5985] usb 7-1: config 16 interface 150 has no altsetting 0 [ 245.759363][ T5985] usb 7-1: config 16 interface 184 has no altsetting 0 [ 245.763070][ T5985] usb 7-1: Dual-Role OTG device on HNP port [ 245.765666][ T5985] usb 7-1: New USB device found, idVendor=0ac8, idProduct=303b, bcdDevice=c2.0a [ 245.768480][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.770990][ T5985] usb 7-1: Product: syz [ 245.772308][ T5985] usb 7-1: Manufacturer: syz [ 245.774031][ T5985] usb 7-1: SerialNumber: syz [ 245.979741][T14097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.984542][T14097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.001185][ T5985] usb 7-1: USB disconnect, device number 17 [ 246.016357][ T9743] bond0 (unregistering): Released all slaves [ 246.028950][ T9743] bond1 (unregistering): Released all slaves [ 246.115881][ T9743] tipc: Disabling bearer [ 246.118816][ T9743] tipc: Left network mode [ 246.309867][ T9743] hsr_slave_0: left promiscuous mode [ 246.311956][ T9743] hsr_slave_1: left promiscuous mode [ 246.331679][ T9743] veth0_macvtap: left promiscuous mode [ 246.333677][ T9743] veth1_vlan: left promiscuous mode [ 246.335358][ T9743] veth0_vlan: left promiscuous mode [ 246.386424][ T9743] pimreg (unregistering): left allmulticast mode [ 246.671848][T14107] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input79 [ 247.900614][ T9743] IPVS: stop unused estimator thread 0... [ 247.910905][T14125] __nla_validate_parse: 3 callbacks suppressed [ 247.910915][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'. [ 248.113857][ T6220] usb 5-1: USB disconnect, device number 26 [ 248.154071][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 248.154082][ T40] audit: type=1400 audit(1749516126.744:960): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 248.179742][T14136] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input81 [ 248.296211][T14147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.300168][T14147] batadv_slave_0: entered promiscuous mode [ 248.302328][T14147] batadv_slave_0: entered allmulticast mode [ 248.312052][T14147] sctp: [Deprecated]: syz.0.2516 (pid 14147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.312052][T14147] Use struct sctp_sack_info instead [ 248.358744][T14149] xt_ecn: cannot match TCP bits for non-tcp packets [ 248.668891][T14155] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2519'. [ 248.705935][T14157] cgroup: No subsys list or none specified [ 249.438777][T14162] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input82 [ 249.573423][T14159] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.575899][T14159] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 249.579662][T14159] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 249.582619][T14159] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.585160][T14159] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 249.588447][T14159] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 249.617609][T14171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2525'. [ 249.618120][T14172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2525'. [ 249.621671][T14173] 9pnet_fd: Insufficient options for proto=fd [ 249.657744][T14176] macsec0: entered promiscuous mode [ 249.659515][T14176] macsec0: entered allmulticast mode [ 249.661153][T14176] veth1_macvtap: entered allmulticast mode [ 249.679149][T14179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2529'. [ 249.874397][T14187] could not allocate digest TFM handle sha224-avx [ 250.270558][ T40] audit: type=1400 audit(1749516128.854:961): avc: denied { setopt } for pid=14193 comm="syz.5.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 250.271049][T14194] afs: Unknown parameter '00000000000000000000004' [ 250.322543][T14197] xt_ecn: cannot match TCP bits for non-tcp packets [ 250.385773][T14206] libceph: resolve ' [ 250.385773][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.385773][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.390011][T14206] libceph: resolve ' [ 250.390011][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.390011][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.395262][T14206] libceph: resolve ' [ 250.395262][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.395262][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.399214][T14206] libceph: resolve ' [ 250.399214][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.399214][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.403092][T14206] libceph: resolve ' [ 250.403092][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.403092][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.407274][T14206] libceph: resolve ' [ 250.407274][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.407274][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.411214][T14206] libceph: resolve ' [ 250.411214][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.411214][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.416733][T14206] libceph: resolve ' [ 250.416733][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.416733][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.420763][T14206] libceph: resolve ' [ 250.420763][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.420763][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.424791][T14206] libceph: resolve ' [ 250.424791][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.424791][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.428787][T14206] libceph: resolve ' [ 250.428787][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.428787][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.432663][T14206] libceph: resolve ' [ 250.432663][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.432663][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.436907][T14206] libceph: resolve ' [ 250.436907][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.436907][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.440832][T14206] libceph: resolve ' [ 250.440832][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.440832][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.445054][T14206] libceph: resolve ' [ 250.445054][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.445054][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.449038][T14206] libceph: resolve ' [ 250.449038][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.449038][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.452945][T14206] libceph: resolve ' [ 250.452945][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.452945][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.456967][T14206] libceph: resolve ' [ 250.456967][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.456967][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.460899][T14206] libceph: resolve ' [ 250.460899][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.460899][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.465216][T14206] libceph: resolve ' [ 250.465216][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.465216][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.469216][T14206] libceph: resolve ' [ 250.469216][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.469216][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.473247][T14206] libceph: resolve ' [ 250.473247][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.473247][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.477780][T14206] libceph: resolve ' [ 250.477780][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.477780][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.481866][T14206] libceph: resolve ' [ 250.481866][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.481866][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.486051][T14206] libceph: resolve ' [ 250.486051][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.486051][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.490098][T14206] libceph: resolve ' [ 250.490098][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.490098][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.494428][T14206] libceph: resolve ' [ 250.494428][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.494428][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.498476][T14206] libceph: resolve ' [ 250.498476][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.498476][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.502505][T14206] libceph: resolve ' [ 250.502505][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.502505][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.506858][T14206] libceph: resolve ' [ 250.506858][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.506858][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.510921][T14206] libceph: resolve ' [ 250.510921][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.510921][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.515054][T14206] libceph: resolve ' [ 250.515054][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.515054][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.519182][T14206] libceph: resolve ' [ 250.519182][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.519182][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.523279][T14206] libceph: resolve ' [ 250.523279][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.523279][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.527642][T14206] libceph: resolve ' [ 250.527642][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.527642][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.531903][T14206] libceph: resolve ' [ 250.531903][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.531903][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.536784][T14206] libceph: resolve ' [ 250.536784][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.536784][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.541587][T14206] libceph: resolve ' [ 250.541587][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.541587][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.545673][T14206] libceph: resolve ' [ 250.545673][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.545673][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.549960][T14206] libceph: resolve ' [ 250.549960][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.549960][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.554197][T14206] libceph: resolve ' [ 250.554197][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.554197][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.558174][T14206] libceph: resolve ' [ 250.558174][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.558174][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.562194][T14206] libceph: resolve ' [ 250.562194][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.562194][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.566268][T14206] libceph: resolve ' [ 250.566268][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.566268][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.570475][T14206] libceph: resolve ' [ 250.570475][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.570475][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.574583][T14206] libceph: resolve ' [ 250.574583][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.574583][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.579009][T14206] libceph: resolve ' [ 250.579009][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.579009][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.583236][T14206] libceph: resolve ' [ 250.583236][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.583236][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.587534][T14206] libceph: resolve ' [ 250.587534][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.587534][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.591637][T14206] libceph: resolve ' [ 250.591637][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.591637][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.595739][T14206] libceph: resolve ' [ 250.595739][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.595739][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.599885][T14206] libceph: resolve ' [ 250.599885][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.599885][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.603925][T14206] libceph: resolve ' [ 250.603925][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.603925][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.613613][T14206] libceph: resolve ' [ 250.613613][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.613613][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.617647][T14206] libceph: resolve ' [ 250.617647][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.617647][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.621658][T14206] libceph: resolve ' [ 250.621658][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.621658][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.635527][T14206] libceph: resolve ' [ 250.635527][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.635527][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.639633][T14206] libceph: resolve ' [ 250.639633][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.639633][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.643943][T14206] libceph: resolve ' [ 250.643943][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.643943][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.647991][T14206] libceph: resolve ' [ 250.647991][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.647991][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.652087][T14206] libceph: resolve ' [ 250.652087][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.652087][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.659901][T14206] libceph: resolve ' [ 250.659901][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.659901][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.664005][T14206] libceph: resolve ' [ 250.664005][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.664005][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.668319][T14206] libceph: resolve ' [ 250.668319][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.668319][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.672430][T14206] libceph: resolve ' [ 250.672430][T14206] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 250.672430][T14206] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 250.738528][ T40] audit: type=1400 audit(1749516129.324:962): avc: denied { write } for pid=14214 comm="syz.2.2540" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 250.757989][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2542'. [ 250.761263][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2542'. [ 250.763011][T14227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2543'. [ 250.778934][T14228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2543'. [ 250.781631][T14224] fuse: Bad value for 'group_id' [ 250.783653][T14224] fuse: Bad value for 'group_id' [ 250.840538][T14236] overlay: filesystem on ./file0 not supported [ 250.873610][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 250.994261][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 251.015695][ T24] usb 5-1: device descriptor read/64, error -71 [ 251.253621][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 251.386108][ T24] usb 5-1: device descriptor read/64, error -71 [ 251.503751][ T24] usb usb5-port1: attempt power cycle [ 251.633645][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 251.730072][ T5956] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 251.732993][ T5956] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 251.853632][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 251.874713][ T24] usb 5-1: device descriptor read/8, error -71 [ 252.113574][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 252.144011][ T24] usb 5-1: device descriptor read/8, error -71 [ 252.171526][T14277] 9pnet_virtio: no channels available for device syz [ 252.264834][ T24] usb usb5-port1: unable to enumerate USB device [ 252.320039][T14286] ip6t_rpfilter: unknown options [ 252.322579][T14286] x_tables: duplicate underflow at hook 1 [ 253.027244][T14300] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 253.063692][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.095035][ T40] audit: type=1400 audit(1749516131.684:963): avc: denied { setopt } for pid=14299 comm="syz.2.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 253.245595][T14308] block device autoloading is deprecated and will be removed. [ 253.297041][T14314] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 253.391986][ T40] audit: type=1400 audit(1749516131.974:964): avc: denied { map } for pid=14325 comm="syz.2.2573" path="socket:[58815]" dev="sockfs" ino=58815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 253.651191][ T40] audit: type=1400 audit(1749516132.234:965): avc: denied { mounton } for pid=14331 comm="syz.0.2575" path="/581/file0" dev="tmpfs" ino=3079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 253.703670][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.824028][ T40] audit: type=1400 audit(1749516132.414:966): avc: denied { append } for pid=14335 comm="syz.2.2577" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.825305][T14336] binder: 14335:14336 ioctl c018620c 200000000a80 returned -1 [ 253.860586][T14340] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 253.951649][ T5944] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 254.012083][T14343] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2579'. [ 254.273575][ T6220] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 254.425503][ T6220] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.428896][ T6220] usb 10-1: config 0 has no interfaces? [ 254.431112][ T6220] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 254.434308][ T6220] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.437786][ T6220] usb 10-1: config 0 descriptor?? [ 254.643036][ T5943] usb 10-1: USB disconnect, device number 12 [ 254.648199][T14348] netlink: 'syz.0.2581': attribute type 1 has an invalid length. [ 254.756526][T14354] binder: 14353:14354 ioctl 4018620d 0 returned -22 [ 254.829614][T14352] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 254.834159][T14352] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 254.863032][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2583'. [ 254.866972][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2583'. [ 255.153687][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.557892][ T40] audit: type=1400 audit(1749516134.144:967): avc: denied { accept } for pid=14375 comm="syz.5.2589" path="socket:[57987]" dev="sockfs" ino=57987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 255.639809][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 255.646839][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 255.661624][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2592'. [ 255.661855][T14390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2592'. [ 255.716128][T14408] IPv6: NLM_F_REPLACE set, but no existing node found! [ 255.783646][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 256.103474][T14441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2608'. [ 256.109552][T14441] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 256.174974][T14444] delete_channel: no stack [ 256.326462][ T40] audit: type=1400 audit(1749516134.914:968): avc: denied { read } for pid=14452 comm="syz.2.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 256.333252][T14453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2613'. [ 256.349668][T14453] netlink: 'syz.2.2613': attribute type 4 has an invalid length. [ 256.651065][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2616'. [ 256.657358][T14464] random: crng reseeded on system resumption [ 256.664161][T14464] Restarting kernel threads ... [ 256.667589][T14464] Done restarting kernel threads. [ 256.838157][ T5944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.846864][ T5944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.849949][ T5944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.852797][ T5944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.857378][ T5944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.970357][T14467] chnl_net:caif_netlink_parms(): no params data found [ 257.046362][T14467] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.048612][T14467] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.050836][T14467] bridge_slave_0: entered allmulticast mode [ 257.053434][T14467] bridge_slave_0: entered promiscuous mode [ 257.059616][T14467] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.061808][T14467] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.065154][T14467] bridge_slave_1: entered allmulticast mode [ 257.067764][T14467] bridge_slave_1: entered promiscuous mode [ 257.109539][T14467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.114786][T14467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.151966][T14467] team0: Port device team_slave_0 added [ 257.157222][T14467] team0: Port device team_slave_1 added [ 257.191073][T14467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.193291][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.202615][T14467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.207258][T14467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.209469][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.217525][T14467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.261891][T14467] hsr_slave_0: entered promiscuous mode [ 257.264845][T14467] hsr_slave_1: entered promiscuous mode [ 257.277174][T14476] No such timeout policy "syz1" [ 257.277943][T14477] No such timeout policy "syz1" [ 257.360574][T14467] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.364219][T14467] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.444730][T14467] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.447816][T14467] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.628743][T14467] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.631799][T14467] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.697078][T14467] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.700293][T14467] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.813700][T12776] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 257.826222][T14467] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.839946][T14467] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 257.844270][T14467] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 257.848700][T14467] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 257.884672][T14493] openvswitch: netlink: Multiple metadata blocks provided [ 257.889126][T14467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.900169][T14467] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.906175][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.908424][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.914490][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.916837][ T9742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.963751][T12776] usb 7-1: device descriptor read/64, error -71 [ 258.024119][T14467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.045337][T14497] netlink: 'syz.5.2623': attribute type 5 has an invalid length. [ 258.048876][T14467] veth0_vlan: entered promiscuous mode [ 258.053926][T14467] veth1_vlan: entered promiscuous mode [ 258.072518][T14467] veth0_macvtap: entered promiscuous mode [ 258.076303][T14467] veth1_macvtap: entered promiscuous mode [ 258.084588][T14467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.089120][T14467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.092786][T14467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.095752][T14467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.098361][T14467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.100997][T14467] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.142303][T14504] bridge2: entered promiscuous mode [ 258.165798][ T9735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.168558][ T9735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.191012][ T9735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.193398][ T9735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.203709][T12776] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 258.258607][T14511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input83 [ 258.326123][T14514] overlayfs: conflicting lowerdir path [ 258.345784][T12776] usb 7-1: device descriptor read/64, error -71 [ 258.464690][T12776] usb usb7-port1: attempt power cycle [ 258.493773][T14545] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input84 [ 258.523764][ T40] audit: type=1326 audit(1749516137.104:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.0.2634" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe934b8e929 code=0x0 [ 258.728231][T14562] macsec1: entered promiscuous mode [ 258.730464][T14562] macsec1: entered allmulticast mode [ 258.803965][T12776] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 258.844204][T12776] usb 7-1: device descriptor read/8, error -71 [ 258.903894][ T5956] Bluetooth: hci4: command tx timeout [ 258.933983][T14570] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input85 [ 259.045528][T14574] ALSA: mixer_oss: invalid OSS volume '' [ 259.047892][T14574] ALSA: mixer_oss: invalid OSS volume 'ºå};šw47ô¨’<3T$ëëþpâ¡ËðÿÜ©²Ÿ' [ 259.051212][T14574] ALSA: mixer_oss: invalid OSS volume '+gH:G`' [ 259.053804][T14574] ALSA: mixer_oss: invalid OSS volume '¿n¬W²<0¹8„DZ¿IйºãuTô#?ˆ»-¼' [ 259.056981][T14574] ALSA: mixer_oss: invalid OSS volume '£°v¿ ½&647øë>ÈvÎ9{Há|œ´41Ÿ„G„ë' [ 259.060181][T14574] ALSA: mixer_oss: invalid OSS volume 'ïZÞÇ‚^×ÿðˆCXtÆÄyF)@÷¢tXͱ(' [ 259.063356][T14574] ALSA: mixer_oss: invalid OSS volume 'D–ð‡:¯ÕíØ8˜^^¢¶|êÔy;w1Ÿ‘òH0­2' [ 259.067427][T14574] ALSA: mixer_oss: invalid OSS volume 'Ò^š­œ¥ºFhãø°^›õ<—\¿­xú¯û' [ 259.070672][T14574] ALSA: mixer_oss: invalid OSS volume '“tÖ°‚G2Ó)¤Lhg¶YšJ¸$çOËÖ?ó' [ 259.073935][T14574] ALSA: mixer_oss: invalid OSS volume 'òžÙ{$%Èx~ãSD¬£š9ªI±šê™ÆO[Aj$' [ 259.077521][T14574] ALSA: mixer_oss: invalid OSS volume '›í ô¯}¸:÷sÿwêØ862±¸)¤‰¶)s|' [ 259.080626][T14574] ALSA: mixer_oss: invalid OSS volume ']wðäz:K^¶'¡€w‡6á‰YÍãWA¯BáBý' [ 259.083932][T14574] ALSA: mixer_oss: invalid OSS volume 'füU›`ì÷ãÅÿ¾WJ‚—Œ]Ž¹|pSP”¬Ê' [ 259.087156][T14574] ALSA: mixer_oss: invalid OSS volume 'ÆUä±£' [ 259.089638][T14574] ALSA: mixer_oss: invalid OSS volume ':¥' [ 259.091936][T14574] ALSA: mixer_oss: invalid OSS volume '›s³¹_›ñÐ¥4ö¿Ô|' [ 259.093629][T12776] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 259.114364][T12776] usb 7-1: device descriptor read/8, error -71 [ 259.227339][T12776] usb usb7-port1: unable to enumerate USB device [ 259.329402][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.333204][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.339649][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.343086][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.346372][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.459340][T14580] chnl_net:caif_netlink_parms(): no params data found [ 259.533807][T14580] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.536957][T14580] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.539246][T14580] bridge_slave_0: entered allmulticast mode [ 259.541865][T14580] bridge_slave_0: entered promiscuous mode [ 259.545429][T14580] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.548065][T14580] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.550702][T14580] bridge_slave_1: entered allmulticast mode [ 259.554019][T14580] bridge_slave_1: entered promiscuous mode [ 259.609123][ T9743] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.635907][T14580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.640597][T14580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.682271][T14580] team0: Port device team_slave_0 added [ 259.689198][T14580] team0: Port device team_slave_1 added [ 259.716479][ T9743] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.745450][T14580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.747645][T14580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.756034][T14580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.760242][T14580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.762409][T14580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.770344][T14580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.787091][ T9743] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.865925][T14580] hsr_slave_0: entered promiscuous mode [ 259.869104][T14580] hsr_slave_1: entered promiscuous mode [ 259.871819][T14580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.875446][T14580] Cannot create hsr debugfs directory [ 259.909709][ T9743] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.089027][T14600] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input86 [ 260.362726][ T9743] bond0 (unregistering): Released all slaves [ 260.420816][T14580] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 260.427184][T14580] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 260.435774][T14580] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 260.449189][T14580] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 260.536464][T14613] openvswitch: netlink: Missing key (keys=40, expected=100) [ 260.544223][T14580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.557396][T14580] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.562469][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.564722][ T9742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.596669][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.602711][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.604971][ T9742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.644210][T14621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 260.708367][ T9743] hsr_slave_0: left promiscuous mode [ 260.710517][ T9743] hsr_slave_1: left promiscuous mode [ 260.739316][ T9743] veth1_macvtap: left promiscuous mode [ 260.741224][ T9743] veth0_macvtap: left promiscuous mode [ 260.743041][ T9743] veth1_vlan: left promiscuous mode [ 260.745475][ T9743] veth0_vlan: left promiscuous mode [ 260.986071][ T5956] Bluetooth: hci4: command tx timeout [ 261.065647][T14636] tmpfs: Unknown parameter 'mpVl' [ 261.121481][T14637] ALSA: seq fatal error: cannot create timer (-16) [ 261.294632][ T40] audit: type=1326 audit(1749516139.884:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.0.2654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe934b8e929 code=0x7fc00000 [ 261.358120][T14639] loop6: detected capacity change from 0 to 63 [ 261.385995][ T5956] Bluetooth: hci1: command tx timeout [ 261.475749][T14641] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input87 [ 261.568041][ T40] audit: type=1400 audit(1749516140.154:971): avc: denied { setcurrent } for pid=14643 comm="syz.0.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 261.574379][ T40] audit: type=1401 audit(1749516140.154:972): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 261.603542][ T40] audit: type=1400 audit(1749516140.184:973): avc: denied { getopt } for pid=14645 comm="syz.0.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 261.971212][T14658] __nla_validate_parse: 7 callbacks suppressed [ 261.971228][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'. [ 262.291162][ T9737] bond0: (slave bond_slave_0): interface is now down [ 262.294874][ T9737] bond0: (slave bond_slave_1): interface is now down [ 262.322869][T14580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.334632][T14664] tmpfs: Unknown parameter 'V¹€òjZôÒ–ÊÀVŽ‡zß„F÷­²`* [ 262.334632][T14664] ì³(FJ¬à™µ3õHí'xˆkE' [ 262.339470][T14665] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 262.356630][T14664] vim2m vim2m.0: vidioc_s_fmt queue busy [ 262.415495][T14679] /dev/sg0: Can't lookup blockdev [ 262.461978][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'. [ 262.474155][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2675'. [ 262.476972][T14685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2675'. [ 262.494010][T14580] veth0_vlan: entered promiscuous mode [ 262.506990][T14580] veth1_vlan: entered promiscuous mode [ 262.510077][T14691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input88 [ 262.528725][T14580] veth0_macvtap: entered promiscuous mode [ 262.553983][T14580] veth1_macvtap: entered promiscuous mode [ 262.561394][T14697] x_tables: duplicate underflow at hook 2 [ 262.572863][T14580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.590700][T14580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.603177][T14580] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.603989][ T40] audit: type=1400 audit(1749516141.194:974): avc: denied { listen } for pid=14698 comm="syz.2.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 262.606803][T14580] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.612270][ T40] audit: type=1400 audit(1749516141.194:975): avc: denied { accept } for pid=14698 comm="syz.2.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 262.615093][T14580] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.616537][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2681'. [ 262.621535][T14704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2681'. [ 262.624249][T14580] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.696697][T14709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2683'. [ 262.700543][ T9742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.706206][ T9742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.707618][T14709] netlink: 'syz.0.2683': attribute type 7 has an invalid length. [ 262.713614][T14709] netlink: 'syz.0.2683': attribute type 8 has an invalid length. [ 262.716649][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2683'. [ 262.735938][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.738663][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.740215][ T9743] IPVS: stop unused estimator thread 0... [ 262.835105][T14714] bridge0: port 3(dummy0) entered disabled state [ 262.837223][T14714] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.839565][T14714] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.961988][T14714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.973694][T14714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.063890][ T5956] Bluetooth: hci4: command tx timeout [ 263.069264][T14714] netdevsim netdevsim5 ªªªªªª: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.072124][T14714] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.075122][T14714] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.077826][T14714] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.149139][ T9743] bridge_slave_1: left allmulticast mode [ 263.151008][ T9743] bridge_slave_1: left promiscuous mode [ 263.152942][ T9743] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.159090][ T9743] bridge_slave_0: left allmulticast mode [ 263.161128][ T9743] bridge_slave_0: left promiscuous mode [ 263.165806][ T9743] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.212848][T14733] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input89 [ 263.228167][T14734] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2687'. [ 263.310680][ T9743] bond0 (unregistering): (slave gretap1): Releasing active interface [ 263.463909][ T5956] Bluetooth: hci1: command tx timeout [ 263.808798][ T9743]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.812204][ T9743]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.816959][ T9743]  (unregistering): Released all slaves [ 263.906309][ T9743] bond0 (unregistering): Released all slaves [ 263.912495][ T9743] bond1 (unregistering): Released all slaves [ 263.919007][ T9743] bond2 (unregistering): Released all slaves [ 263.923597][ T54] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 263.969451][T14743] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 264.004257][ T9743] tipc: Disabling bearer [ 264.006686][ T9743] tipc: Left network mode [ 264.009328][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 264.022495][T14749] JFS: charset not found [ 264.025697][T14749] fuse: Unknown parameter 'pootmode' [ 264.083616][ T54] usb 11-1: Using ep0 maxpacket: 16 [ 264.095026][ T54] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 264.098064][ T54] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 264.101526][ T54] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 264.113585][ T54] usb 11-1: config 0 interface 0 has no altsetting 0 [ 264.117498][ T54] usb 11-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 264.120577][ T54] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.123056][ T54] usb 11-1: Product: syz [ 264.125247][ T54] usb 11-1: Manufacturer: syz [ 264.126757][ T54] usb 11-1: SerialNumber: syz [ 264.131136][ T54] usb 11-1: config 0 descriptor?? [ 264.133234][T14741] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 264.191032][T14765] use of bytesused == 0 is deprecated and will be removed in the future, [ 264.196563][T14765] use the actual size instead. [ 264.239902][ T40] audit: type=1400 audit(1749516142.824:976): avc: denied { append } for pid=14772 comm="syz.5.2703" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 264.241094][T14771] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input90 [ 264.245639][ T9743] hsr_slave_0: left promiscuous mode [ 264.257463][ T9743] hsr_slave_1: left promiscuous mode [ 264.259926][ T9743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.269733][ T9743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.340135][T14741] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 264.344504][ T54] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input91 [ 264.860843][ T9743] team0 (unregistering): Port device team_slave_1 removed [ 264.937957][ T9743] team0 (unregistering): Port device team_slave_0 removed [ 265.145869][ T5956] Bluetooth: hci4: command tx timeout [ 265.422482][ T6013] usb 11-1: USB disconnect, device number 2 [ 265.543753][ T5956] Bluetooth: hci1: command tx timeout [ 265.612733][T14809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14809 comm=syz.2.2718 [ 265.710625][T14812] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input92 [ 265.795158][ T9743] IPVS: stop unused estimator thread 0... [ 265.823670][ T6220] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 265.883660][ T5985] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 265.985726][ T6220] usb 5-1: config index 0 descriptor too short (expected 46, got 36) [ 265.988391][ T6220] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.988479][T14823] netlink: 'syz.6.2723': attribute type 21 has an invalid length. [ 265.992219][ T6220] usb 5-1: config 0 interface 0 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.992246][ T6220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 266.004227][ T6220] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 266.007000][ T6220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.010484][ T6220] usb 5-1: config 0 descriptor?? [ 266.013693][ T6220] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 266.033770][ T5985] usb 7-1: Using ep0 maxpacket: 16 [ 266.036859][ T5985] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 266.040082][ T5985] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.044630][ T5985] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.048072][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.050903][ T5985] usb 7-1: Product: 뎤â“⎾ⵃëœä„⃾夯皴⑖ቲ鹌ë岩⌮頗騟䋂ë™è‚€â­“뗘资ऺ겅뜰츲ﬣ崽鲞漘쌾룘ê˜ä¿™é°”ϔ౗笳㚋뢷乹욓騨ᥒ埜늘ꓱ쑯 [ 266.061424][ T5985] usb 7-1: Manufacturer: 䜹얃⾡⠯ì…䷂庺惌༓䦹୤逆â¤ì€™î¨µæ€åœŸå¬«ê¤ªë’˜è§‹ç²³Ü‰ç¦Šâª¼ä–¶è²îƒ«è½³é³¿åœ¸ç´‡âµÞœì…—îœîž¾è¹¾ã¾á©Œà¼©î´èˆ¨à¡¡ãŠ’횰Ĩᗂë“疱턒ä£ã¢–㈺ʳై쪪䅆쮑踆ᇽ긭봧䕧å´ï¤£ç‹”â¼æ„¨ë¨šë¯Žè™‡â†”涾춋콀攩躥 媮◣䓤䄴ᣙï뷭奬뢙 [ 266.070812][ T5985] usb 7-1: SerialNumber: ꇛ濜ꈻê²È á™¥é¬Ì•ì°­ì€î¨­à££à¿í…•ê‰‹é¤šá³žîŠŽê•œìŽ»è¹Œèƒ„얩ġ۟ᦺ㚡çŽç¯—拆ॴ랋ﯟí藯扒᥆䡊ìŸî²î»©á¸†ï”¯à¤ï ¤î¼šâŸ¢á·¿æ¨¾é¬²ì”¤ä《鱮薧헃간砣ã—æœå•­ë¦‡ä€‚ì¶èª¶ì¶¯î­‡â±¹é¦¨ãœ–巽隤帜躠螷踃贵ä‡ç„‚ [ 266.450917][T14853] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input93 [ 266.495147][T14856] team0: entered allmulticast mode [ 266.496798][T14856] team_slave_0: entered allmulticast mode [ 266.498557][T14856] team_slave_1: entered allmulticast mode [ 266.516811][ T5943] usb 5-1: USB disconnect, device number 31 [ 266.914549][T14863] netlink: 'syz.5.2732': attribute type 30 has an invalid length. [ 267.133294][ T40] audit: type=1400 audit(1749516145.714:977): avc: denied { write } for pid=14864 comm="syz.0.2733" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 267.623875][ T5956] Bluetooth: hci1: command tx timeout [ 267.982589][T14884] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input94 [ 268.187206][T14896] __nla_validate_parse: 6 callbacks suppressed [ 268.187218][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2742'. [ 268.205374][T14896] : entered promiscuous mode [ 268.211397][T14896] netlink: 'syz.6.2742': attribute type 10 has an invalid length. [ 268.214055][T14896] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2742'. [ 268.216894][T14896] team0: entered promiscuous mode [ 268.219985][T14896] team_slave_0: entered promiscuous mode [ 268.222034][T14896] team_slave_1: entered promiscuous mode [ 268.226328][T14896] bridge0: port 3(team0) entered blocking state [ 268.228440][T14896] bridge0: port 3(team0) entered disabled state [ 268.231796][T14896] bridge0: port 3(team0) entered blocking state [ 268.233889][T14896] bridge0: port 3(team0) entered forwarding state [ 268.258043][T14900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14900 comm=syz.0.2743 [ 268.299463][ T40] audit: type=1400 audit(1749516146.884:978): avc: denied { mount } for pid=14908 comm="syz.0.2746" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 268.300001][T14902] syzkaller1: entered promiscuous mode [ 268.309209][T14902] syzkaller1: entered allmulticast mode [ 268.378892][ T40] audit: type=1400 audit(1749516146.964:979): avc: denied { unmount } for pid=14467 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 268.404474][T14915] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input95 [ 268.591208][ T5985] usb 7-1: 0:2 : does not exist [ 268.603044][ T5985] usb 7-1: USB disconnect, device number 22 [ 268.664398][T14938] overlayfs: overlapping lowerdir path [ 268.792805][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 268.795793][ T5943] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 268.846402][T14946] SELinux: syz.5.2758 (14946) set checkreqprot to 1. This is no longer supported. [ 268.846447][ T40] audit: type=1400 audit(1749516147.434:980): avc: denied { setcheckreqprot } for pid=14945 comm="syz.5.2758" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 268.884123][T14948] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input96 [ 268.902674][T14949] XFS (nbd0): no-recovery mounts must be read-only. [ 268.953740][ T5943] usb 11-1: Using ep0 maxpacket: 8 [ 268.958143][ T5943] usb 11-1: config 179 has an invalid interface number: 65 but max is 0 [ 268.960766][ T5943] usb 11-1: config 179 has no interface number 0 [ 268.962675][ T5943] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 268.966333][ T5943] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 268.969812][ T5943] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 268.973869][ T5943] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 268.977410][ T5943] usb 11-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 268.981369][ T5943] usb 11-1: config 179 interface 65 has no altsetting 0 [ 268.983456][ T5943] usb 11-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 268.988799][ T5943] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.998316][ T5943] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:179.65/input/input97 [ 269.015748][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2761'. [ 269.018485][T14962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2761'. [ 269.145024][T14969] xt_hashlimit: size too large, truncated to 1048576 [ 269.206044][T14971] C: renamed from lo [ 269.208733][T14971] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 269.219127][T14934] ip6gre1: entered promiscuous mode [ 269.223840][T14934] Bluetooth: hci0: too big key_count value 14993 [ 269.255435][T14973] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 269.277768][ T54] usb 11-1: USB disconnect, device number 3 [ 269.277891][ C3] xpad 11-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 269.283323][ T54] xpad 11-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 269.391518][T14979] 9pnet_fd: p9_fd_create_unix (14979): problem connecting socket: ./file0: -111 [ 269.653608][ T29] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 269.720996][T14985] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input98 [ 269.824823][ T29] usb 10-1: not running at top speed; connect to a high speed hub [ 269.828515][ T29] usb 10-1: config 5 has an invalid interface number: 197 but max is 1 [ 269.831098][ T29] usb 10-1: config 5 has an invalid interface number: 192 but max is 1 [ 269.835249][ T29] usb 10-1: config 5 has no interface number 0 [ 269.837142][ T29] usb 10-1: config 5 has no interface number 1 [ 269.839313][ T29] usb 10-1: config 5 interface 197 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 269.842624][ T29] usb 10-1: config 5 interface 197 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 269.847649][ T29] usb 10-1: config 5 interface 197 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 269.851064][ T29] usb 10-1: config 5 interface 197 altsetting 8 has an endpoint descriptor with address 0x34, changing to 0x4 [ 269.855896][ T29] usb 10-1: config 5 interface 197 altsetting 8 endpoint 0x4 has invalid maxpacket 214, setting to 64 [ 269.859251][ T29] usb 10-1: config 5 interface 197 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 269.862561][ T29] usb 10-1: config 5 interface 197 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 269.866593][ T29] usb 10-1: config 5 interface 197 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 269.870041][ T29] usb 10-1: config 5 interface 197 altsetting 8 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 269.873588][ T29] usb 10-1: config 5 interface 197 altsetting 8 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 269.877369][ T29] usb 10-1: config 5 interface 197 altsetting 8 endpoint 0x81 has invalid maxpacket 57217, setting to 64 [ 269.880970][ T29] usb 10-1: config 5 interface 197 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 269.884543][ T29] usb 10-1: config 5 interface 197 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 269.887752][ T29] usb 10-1: config 5 interface 197 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 1023 [ 269.891895][ T29] usb 10-1: config 5 interface 197 altsetting 8 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 269.895615][ T29] usb 10-1: config 5 interface 197 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 269.898872][ T29] usb 10-1: config 5 interface 197 altsetting 8 has 18 endpoint descriptors, different from the interface descriptor's value: 16 [ 269.902819][ T29] usb 10-1: config 5 interface 192 altsetting 206 has a duplicate endpoint with address 0xA, skipping [ 269.906338][ T29] usb 10-1: config 5 interface 192 altsetting 206 has a duplicate endpoint with address 0x2, skipping [ 269.909617][ T29] usb 10-1: config 5 interface 192 altsetting 206 has an endpoint descriptor with address 0x36, changing to 0x6 [ 269.913439][ T29] usb 10-1: config 5 interface 192 altsetting 206 has a duplicate endpoint with address 0x6, skipping [ 269.923729][ T29] usb 10-1: config 5 interface 192 altsetting 206 has a duplicate endpoint with address 0x2, skipping [ 269.927059][ T29] usb 10-1: config 5 interface 192 altsetting 206 has a duplicate endpoint with address 0x1, skipping [ 269.930666][ T29] usb 10-1: config 5 interface 192 altsetting 206 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 269.935000][ T29] usb 10-1: config 5 interface 192 altsetting 206 has an invalid descriptor for endpoint zero, skipping [ 269.939031][ T29] usb 10-1: config 5 interface 192 altsetting 206 has a duplicate endpoint with address 0x7, skipping [ 269.942733][ T29] usb 10-1: config 5 interface 192 altsetting 206 has a duplicate endpoint with address 0x3, skipping [ 269.946449][ T29] usb 10-1: config 5 interface 192 altsetting 206 has a duplicate endpoint with address 0xB, skipping [ 269.949755][ T29] usb 10-1: config 5 interface 192 altsetting 206 has a duplicate endpoint with address 0xF, skipping [ 269.953041][ T29] usb 10-1: config 5 interface 192 altsetting 206 has a duplicate endpoint with address 0x4, skipping [ 269.957476][ T29] usb 10-1: config 5 interface 192 altsetting 206 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 269.961727][ T29] usb 10-1: config 5 interface 197 has no altsetting 0 [ 269.964238][ T29] usb 10-1: config 5 interface 192 has no altsetting 0 [ 269.967971][ T29] usb 10-1: New USB device found, idVendor=12d1, idProduct=d32b, bcdDevice=76.27 [ 269.970842][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.973347][ T29] usb 10-1: Product: ⶮᘘ䙶᧨ဒᰎ엖콽붶嗽塓È㄀릵㚾ኟﶭ熲冞≧ᑙ唧磔켞턜赡Ვ궊⺳鰘賑뼯ሹ졚ⶋ黗撸å³é¡’텮쟼氩⹷麢á¥æ¬šì’µè­˜ [ 269.979045][ T29] usb 10-1: Manufacturer: ã [ 269.980511][ T29] usb 10-1: SerialNumber: 䄽ᣘ夂ᱯ讯犀ﵷí‹è‹®èŒ•î’¯ê± [ 269.984752][T14981] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 269.987130][T14981] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 269.989720][T14981] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 270.040709][ T5956] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 270.051800][T15013] netfs: Couldn't get user pages (rc=-14) [ 270.114106][T15017] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input99 [ 270.152340][T15020] tmpfs: Bad value for 'mpol' [ 270.178881][T15022] tipc: Started in network mode [ 270.180459][T15022] tipc: Node identity ac14142f, cluster identity 4711 [ 270.182707][T15022] tipc: New replicast peer: 0.0.0.0 [ 270.186828][T15022] tipc: Enabled bearer , priority 10 [ 270.194702][T14981] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 270.196907][T14981] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 270.200700][T14981] vhci_hcd vhci_hcd.0: Device attached [ 270.202120][T15025] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8) [ 270.204545][T15025] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 270.207441][T15025] vhci_hcd vhci_hcd.0: Device attached [ 270.209823][T15028] vhci_hcd: connection closed [ 270.210070][ T9741] vhci_hcd: stop threads [ 270.210929][T15026] vhci_hcd: connection closed [ 270.211625][ T9741] vhci_hcd: release socket [ 270.216063][ T29] option 10-1:5.197: GSM modem (1-port) converter detected [ 270.216408][ T9741] vhci_hcd: disconnect device [ 270.220780][ T9741] vhci_hcd: stop threads [ 270.222611][ T9741] vhci_hcd: release socket [ 270.226744][ T29] usb 10-1: USB disconnect, device number 13 [ 270.226915][ T9741] vhci_hcd: disconnect device [ 270.233177][ T29] option 10-1:5.197: device disconnected [ 270.555704][T15048] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input100 [ 270.600378][T15051] bridge1: entered promiscuous mode [ 270.734673][T15056] Malformed UNC in devname [ 270.734673][T15056] [ 270.737517][T15056] CIFS: VFS: Malformed UNC in devname [ 270.850363][ T40] audit: type=1400 audit(1749516149.434:981): avc: denied { read } for pid=15057 comm="syz.5.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 270.901625][T15061] pimreg: left allmulticast mode [ 270.965760][ T40] audit: type=1400 audit(1749516149.554:982): avc: denied { append } for pid=15062 comm="syz.6.2792" name="pfkey" dev="proc" ino=4026534519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 270.967539][T15063] loop6: detected capacity change from 0 to 524287999 [ 270.992088][T15063] syz.6.2792: attempt to access beyond end of device [ 270.992088][T15063] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 270.998473][T15063] syz.6.2792: attempt to access beyond end of device [ 270.998473][T15063] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 271.187258][T15074] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input101 [ 271.203628][ T6220] tipc: Node number set to 2886997039 [ 271.549932][T15103] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input102 [ 271.885299][T15127] netlink: 'syz.5.2814': attribute type 1 has an invalid length. [ 271.887737][T15127] netlink: 'syz.5.2814': attribute type 4 has an invalid length. [ 271.890498][T15127] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2814'. [ 272.023255][T15136] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input103 [ 272.032576][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022ddc000: rx timeout, send abort [ 272.222816][T15141] mkiss: ax0: crc mode is auto. [ 272.532680][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022dddc00: rx timeout, send abort [ 272.535711][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022ddc000: abort rx timeout. Force session deactivation [ 272.584203][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2822'. [ 272.610558][T15158] xt_hashlimit: size too large, truncated to 1048576 [ 272.621737][T15160] Attempt to restore checkpoint with obsolete wellknown handles [ 272.623983][T15161] Attempt to restore checkpoint with obsolete wellknown handles [ 272.663120][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2823'. [ 272.777563][T15168] overlay: filesystem on ./file0 not supported as upperdir [ 272.779652][T15171] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input104 [ 272.836843][T15177] af_packet: tpacket_rcv: packet too big, clamped from 103 to 4294967272. macoff=96 [ 272.884543][T15190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.896598][T15190] sp0: Synchronizing with TNC [ 272.949712][T15194] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2834'. [ 273.035356][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022dddc00: abort rx timeout. Force session deactivation [ 273.313661][ T54] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 273.344955][T15209] kvm: pic: non byte write [ 273.465109][ T54] usb 7-1: config 0 has no interfaces? [ 273.466954][ T54] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.469725][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.473385][ T54] usb 7-1: config 0 descriptor?? [ 273.479645][T15212] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input105 [ 273.528088][T15216] devtmpfs: Cannot change global quota limit on remount [ 273.555722][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2842'. [ 273.558609][T15220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2842'. [ 273.625107][T15224] xt_nfacct: accounting object `syz1' does not exists [ 273.713162][ T54] usb 7-1: USB disconnect, device number 23 [ 273.728056][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2847'. [ 273.731285][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2847'. [ 273.736237][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2847'. [ 273.738984][T15231] netlink: 'syz.5.2847': attribute type 13 has an invalid length. [ 273.775363][T15235] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input106 [ 273.779931][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2850'. [ 273.784409][T15237] program syz.0.2850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.841632][T15240] can0: slcan on ptm0. [ 273.913645][T15239] can0 (unregistered): slcan off ptm0. [ 274.036503][T15258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.091898][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2857'. [ 274.096069][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2857'. [ 274.159284][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2860'. [ 274.162059][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2860'. [ 274.196262][T15272] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input107 [ 274.242302][T15278] Malformed UNC in devname [ 274.242302][T15278] [ 274.244819][T15278] CIFS: VFS: Malformed UNC in devname [ 274.370134][T15290] netlink: 'syz.5.2867': attribute type 21 has an invalid length. [ 274.673774][ T6220] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 274.833929][ T6220] usb 10-1: Using ep0 maxpacket: 8 [ 274.837665][ T6220] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.841560][ T6220] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.846189][ T6220] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.849581][ T6220] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.854049][ T6220] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.857726][ T6220] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.066136][ T6220] usb 10-1: GET_CAPABILITIES returned 0 [ 275.068105][ T6220] usbtmc 10-1:16.0: can't read capabilities [ 275.224357][T15293] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 275.271968][ T6220] usb 10-1: USB disconnect, device number 14 [ 275.351223][T15295] Driver unsupported XDP return value 0 on prog (id 532) dev N/A, expect packet loss! [ 275.565622][T15303] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input108 [ 275.993779][T15330] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input109 [ 276.133637][ T40] audit: type=1400 audit(1749516154.714:983): avc: denied { setattr } for pid=15339 comm="syz.5.2886" name="PPTP" dev="sockfs" ino=65501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 276.268058][ T40] audit: type=1400 audit(1749516154.854:984): avc: denied { mounton } for pid=15348 comm="syz.6.2890" path="/bus" dev="ramfs" ino=65519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 276.271305][T15349] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 276.277698][T15349] overlayfs: failed to set xattr on upper [ 276.280068][T15349] overlayfs: ...falling back to redirect_dir=nofollow. [ 276.282211][T15349] overlayfs: ...falling back to index=off. [ 276.285407][T15349] overlayfs: ...falling back to uuid=null. [ 276.287613][T15349] overlayfs: ...falling back to xino=off. [ 276.290118][T15349] overlayfs: conflicting lowerdir path [ 276.320558][T15352] netlink: 'syz.6.2891': attribute type 21 has an invalid length. [ 276.384419][T15359] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input110 [ 276.390939][T15361] ksmbd: Unknown IPC event: 0, ignore. [ 276.414365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 276.505522][T15375] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 276.553784][T15381] pim6reg1: entered promiscuous mode [ 276.555487][T15381] pim6reg1: entered allmulticast mode [ 276.752823][T15395] sctp: [Deprecated]: syz.0.2904 (pid 15395) Use of int in max_burst socket option deprecated. [ 276.752823][T15395] Use struct sctp_assoc_value instead [ 276.805346][ T6017] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 276.835361][T15398] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input111 [ 276.943884][ T5985] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 276.953615][ T6017] usb 10-1: Using ep0 maxpacket: 8 [ 276.957793][ T6017] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.962250][ T6017] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 276.965629][ T6017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.969829][ T6017] usb 10-1: config 0 descriptor?? [ 277.094163][ T5985] usb 11-1: Using ep0 maxpacket: 16 [ 277.098026][ T5985] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 277.100778][ T5985] usb 11-1: can't read configurations, error -61 [ 277.176385][ T6017] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 277.224470][ T5985] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 277.372472][ T40] audit: type=1400 audit(1749516155.954:985): avc: denied { open } for pid=15419 comm="syz.0.2911" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=68211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 277.382036][ T5985] usb 11-1: Using ep0 maxpacket: 16 [ 277.389704][ T5985] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 277.392225][ T5985] usb 11-1: can't read configurations, error -61 [ 277.397002][ T5985] usb usb11-port1: attempt power cycle [ 277.584160][ T6017] usb 10-1: USB disconnect, device number 15 [ 277.658631][ T40] audit: type=1400 audit(1749516156.244:986): avc: denied { connect } for pid=15428 comm="syz.0.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 277.699532][T15433] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input112 [ 277.733752][ T5985] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 277.754157][ T5985] usb 11-1: Using ep0 maxpacket: 16 [ 277.757424][ T5985] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 277.759869][ T5985] usb 11-1: can't read configurations, error -61 [ 277.883703][ T5985] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 277.904518][ T5985] usb 11-1: Using ep0 maxpacket: 16 [ 277.909022][ T5985] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 277.912225][ T5985] usb 11-1: can't read configurations, error -61 [ 277.915105][ T5985] usb usb11-port1: unable to enumerate USB device [ 278.723946][T15457] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 278.726835][T15457] overlayfs: missing 'lowerdir' [ 278.758057][T15462] program syz.5.2922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.798117][T15462] program syz.5.2922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.948738][T15474] __nla_validate_parse: 9 callbacks suppressed [ 278.948750][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2925'. [ 278.980009][T15476] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input113 [ 279.302388][T15485] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2929'. [ 279.305511][T15485] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2929'. [ 279.609608][T15494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2931'. [ 279.612684][T15494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.618427][T15494] Unknown options in mask 5 [ 279.750937][T15505] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input114 [ 279.897144][ T40] audit: type=1400 audit(1749516158.484:987): avc: denied { map } for pid=15517 comm="syz.2.2938" path="/dev/tty3" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 279.914069][ T40] audit: type=1400 audit(1749516158.484:988): avc: denied { execute } for pid=15517 comm="syz.2.2938" path="/dev/tty3" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 280.157965][ T40] audit: type=1400 audit(1749516158.744:989): avc: denied { accept } for pid=15543 comm="syz.5.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 280.209055][T15546] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input115 [ 280.617359][T15570] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.754702][T15577] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input116 [ 281.521296][T15616] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input117 [ 281.584465][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2968'. [ 281.635317][T15625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2968'. [ 281.667706][T15624] tipc: Disabling bearer [ 281.765709][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'. [ 281.859499][T15641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2974'. [ 281.875642][T15642] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 281.875642][T15642] The task syz.6.2970 (15642) triggered the difference, watch for misbehavior. [ 281.889089][T15645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input118 [ 281.934954][T15642] pim6reg9: entered allmulticast mode [ 282.082801][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2980'. [ 282.086790][T15664] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2980'. [ 282.244175][ T1266] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 282.405559][ T1266] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 282.408976][ T1266] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 282.413011][ T1266] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.420181][ T1266] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 282.423056][ T1266] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.426659][ T1266] usb 7-1: Product: syz [ 282.428019][ T1266] usb 7-1: Manufacturer: syz [ 282.429551][ T1266] usb 7-1: SerialNumber: syz [ 282.640661][ T1266] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 282.647100][ T1266] usb 7-1: USB disconnect, device number 24 [ 282.651988][ T1266] usblp0: removed [ 282.692192][T15671] "syz.6.2983" (15671) uses obsolete ecb(arc4) skcipher [ 282.723804][T15673] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input119 [ 283.084369][ T40] audit: type=1400 audit(1749516161.674:990): avc: denied { bind } for pid=15715 comm="syz.5.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 283.100185][T15723] binder: 15720:15723 ioctl c0306201 200000000480 returned -14 [ 283.118754][T15725] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input120 [ 283.143720][T15728] tmpfs: Bad value for 'mpol' [ 283.230406][T15744] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=15744 comm=syz.5.3003 [ 283.233701][T15745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=15745 comm=syz.5.3003 [ 283.287315][ T40] audit: type=1400 audit(1749516161.874:991): avc: denied { map } for pid=15741 comm="syz.0.3002" path="socket:[71212]" dev="sockfs" ino=71212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 283.353579][ T40] audit: type=1400 audit(1749516161.934:992): avc: denied { read } for pid=15756 comm="syz.5.3007" name="file0" dev="tmpfs" ino=2037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 283.458378][T15766] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 283.460511][T15766] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 283.463101][T15766] vhci_hcd vhci_hcd.0: Device attached [ 283.473904][T15767] vhci_hcd: connection closed [ 283.475497][ T9738] vhci_hcd: stop threads [ 283.478416][ T9738] vhci_hcd: release socket [ 283.479837][ T9738] vhci_hcd: disconnect device [ 283.482227][T15770] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input121 [ 283.572275][T15778] fuse: Bad value for 'fd' [ 283.649853][T15785] bridge: RTM_NEWNEIGH with invalid ether address [ 283.702999][T15792] ip6t_srh: unknown srh match flags B153 [ 283.943702][ T6220] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 284.004987][T15812] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input123 [ 284.100796][T15819] __nla_validate_parse: 74 callbacks suppressed [ 284.100807][T15819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3023'. [ 284.108459][T15818] kvm: kvm [15816]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000000000 [ 284.113762][ T6220] usb 5-1: Using ep0 maxpacket: 8 [ 284.117483][ T6220] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 284.120023][ T6220] usb 5-1: config 0 has no interface number 0 [ 284.120344][ T40] audit: type=1400 audit(1749516162.704:993): avc: denied { listen } for pid=15816 comm="syz.5.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.121931][ T6220] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.131765][T15819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3023'. [ 284.132631][ T6220] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 284.138275][ T6220] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 284.141723][ T6220] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 284.146056][ T6220] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 284.148896][ T6220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.152392][ T6220] usb 5-1: config 0 descriptor?? [ 284.157723][ T6220] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 284.262509][T15828] SET target dimension over the limit! [ 284.340820][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3028'. [ 284.367086][T15828] md2: using deprecated bitmap file support [ 284.369735][T15828] md2: error: failed to get bitmap file [ 284.374436][T15840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input124 [ 284.385382][ T6017] usb 5-1: USB disconnect, device number 32 [ 284.389946][ T6017] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 284.465530][T15844] program syz.2.3031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.536762][T15853] overlay: filesystem on ./bus not supported as upperdir [ 284.951231][T15874] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input125 [ 285.066955][T15872] hugetlbfs: Bad value 'e' for mount option 'size' [ 285.066955][T15872] [ 285.108909][T15898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.142019][T15900] netlink: 'syz.2.3042': attribute type 1 has an invalid length. [ 285.300126][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3043'. [ 285.628311][T15919] xt_hashlimit: Unknown mode mask 180, kernel too old? [ 285.660593][T15921] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input126 [ 285.792446][T15929] overlayfs: missing 'lowerdir' [ 285.958241][T15939] 9pnet_fd: Insufficient options for proto=fd [ 285.961083][ T40] audit: type=1400 audit(1749516164.544:994): avc: denied { watch } for pid=15938 comm="syz.0.3054" path="/145/file1" dev="tmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 286.007911][T15945] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input127 [ 286.057111][T15948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.982818][T15967] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 286.986904][T15967] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 286.989862][T15967] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 286.992352][T15967] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 287.289479][T15976] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input128 [ 287.621779][ T40] audit: type=1400 audit(1749516166.204:995): avc: denied { execute } for pid=15996 comm="syz.5.3072" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=73753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 287.624699][T15997] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3072'. [ 287.625213][T15999] overlay: Unknown parameter 'fsname' [ 287.631304][ T40] audit: type=1800 audit(1749516166.204:996): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3072" name="[kvm-gmem]" dev="anon_inodefs" ino=73753 res=0 errno=0 [ 287.637978][T15998] delete_channel: no stack [ 287.699268][T16005] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3075'. [ 287.727891][ T40] audit: type=1400 audit(1749516166.314:997): avc: denied { append } for pid=16004 comm="syz.2.3075" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 287.758435][T16007] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3076'. [ 287.775599][T16011] @ÿ: renamed from bond_slave_0 [ 287.961748][T16029] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3083'. [ 287.999321][ T40] audit: type=1800 audit(1749516166.584:998): pid=16032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3085" name="bus" dev="overlay" ino=831 res=0 errno=0 [ 288.002012][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'. [ 288.009332][T16032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3085'. [ 288.046500][ T40] audit: type=1326 audit(1749516166.634:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.5.3084" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe87f58e929 code=0x0 [ 288.297230][T16046] IPv6: NLM_F_CREATE should be specified when creating new route [ 288.735544][T16055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=16055 comm=syz.2.3091 [ 288.740755][T16056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=16056 comm=syz.2.3091 [ 288.809573][T16059] block nbd2: not configured, cannot reconfigure [ 288.812500][T16059] ALSA: mixer_oss: invalid OSS volume '' [ 288.859354][ T40] audit: type=1400 audit(1749516167.444:1000): avc: denied { ioctl } for pid=16063 comm="syz.2.3093" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 288.913795][ T5956] Bluetooth: hci4: command tx timeout [ 288.985144][ T40] audit: type=1400 audit(1749516167.574:1001): avc: denied { getopt } for pid=16073 comm="syz.2.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 289.018431][T16076] binder: 16075:16076 ioctl c0306201 200000000640 returned -22 [ 289.031959][T16076] kvm: kvm [16075]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000003f) [ 289.045195][T16077] kvm: kvm [16075]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000003f) [ 289.066504][T16081] netlink: 'syz.2.3100': attribute type 6 has an invalid length. [ 289.070727][T16081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16081 comm=syz.2.3100 [ 289.186745][T16087] __nla_validate_parse: 1 callbacks suppressed [ 289.186757][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'. [ 289.191804][T16087] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 289.194825][T16087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.243240][T16089] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 289.329057][T16094] tipc: Started in network mode [ 289.330667][T16094] tipc: Node identity ac14140f, cluster identity 4711 [ 289.332967][T16094] tipc: New replicast peer: 255.255.255.255 [ 289.336973][T16094] tipc: Enabled bearer , priority 10 [ 289.564969][ T54] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 289.726593][ T54] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.729885][ T54] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 289.732858][ T54] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.740470][ T54] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 289.744327][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 289.747688][ T54] usb 7-1: Product: syz [ 289.749483][ T54] usb 7-1: Manufacturer: syz [ 289.751627][ T54] usb 7-1: SerialNumber: syz [ 289.842360][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'. [ 289.846882][T16118] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 289.850960][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'. [ 289.851579][T16119] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 289.888987][T16122] @: renamed from vlan0 (while UP) [ 289.925862][T16124] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input129 [ 289.958900][ T54] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 290.178931][T16137] netlink: 700 bytes leftover after parsing attributes in process `syz.0.3119'. [ 290.183371][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3119'. [ 290.187604][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3119'. [ 290.210898][ T6017] usb 7-1: USB disconnect, device number 25 [ 290.219346][ T6017] usblp0: removed [ 290.268551][T16143] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.3121' resets device [ 290.277975][T16143] 9pnet_fd: Insufficient options for proto=fd [ 290.281694][ T40] audit: type=1326 audit(1749516168.874:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.0.3121" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe934b8e929 code=0x0 [ 290.343649][ T29] tipc: Node number set to 2886997007 [ 290.492946][T16152] Bluetooth: hci0: unsupported parameter 52488 [ 290.495405][T16152] Bluetooth: hci0: unsupported parameter 52488 [ 290.843411][T16161] syzkaller1: entered promiscuous mode [ 290.845269][T16161] syzkaller1: entered allmulticast mode [ 290.916013][ T5956] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 290.918902][ T5956] Bluetooth: hci4: Injecting HCI hardware error event [ 290.924326][ T5944] Bluetooth: hci4: hardware error 0x00 [ 291.129639][T16166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3127'. [ 291.173737][T16163] nbd5: detected capacity change from 0 to 67108884 [ 291.178296][T16166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16166 comm=syz.0.3127 [ 291.223580][T16167] nbd5: detected capacity change from 67108884 to 8 [ 291.227758][T16163] CIFS: Unable to determine destination address [ 291.242084][ T40] audit: type=1400 audit(1749516169.824:1003): avc: denied { ioctl } for pid=16165 comm="syz.0.3127" path="socket:[74883]" dev="sockfs" ino=74883 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 291.906674][T16164] block nbd5: shutting down sockets [ 291.947661][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3128'. [ 291.950651][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3128'. [ 291.992407][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3129'. [ 292.108271][T16177] netlink: 'syz.6.3131': attribute type 4 has an invalid length. [ 292.110802][T16179] netlink: 'syz.6.3131': attribute type 4 has an invalid length. [ 292.134748][ T40] audit: type=1400 audit(1749516170.724:1004): avc: denied { write } for pid=16173 comm="syz.5.3130" path="socket:[74952]" dev="sockfs" ino=74952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 292.142068][ T40] audit: type=1400 audit(1749516170.724:1005): avc: denied { write } for pid=16173 comm="syz.5.3130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 292.307272][T16191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input130 [ 292.340923][ T40] audit: type=1400 audit(1749516170.924:1006): avc: denied { lock } for pid=16193 comm="syz.2.3135" path="socket:[74960]" dev="sockfs" ino=74960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 292.421162][T16199] netlink: 'syz.2.3136': attribute type 64 has an invalid length. [ 292.426302][T16199] netlink: 'syz.2.3136': attribute type 4 has an invalid length. [ 292.429996][T16199] binder: 16195:16199 ioctl c00c620f 200000000540 returned -22 [ 292.436666][T16204] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 292.440941][T16204] binder: 16203:16204 ioctl c0306201 0 returned -14 [ 292.444445][T16204] xt_socket: unknown flags 0xc [ 292.535993][T16208] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 292.645950][T16222] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.709316][T16229] loop2: detected capacity change from 0 to 7 [ 292.711739][T16229] Dev loop2: unable to read RDB block 7 [ 292.713822][T16229] loop2: AHDI p1 p2 p3 [ 292.715170][T16229] loop2: partition table partially beyond EOD, truncated [ 292.717369][T16229] loop2: p1 start 1601398130 is beyond EOD, truncated [ 292.719544][T16229] loop2: p2 start 1702059890 is beyond EOD, truncated [ 292.744796][T16231] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input131 [ 292.759503][T16235] usb usb8: usbfs: process 16235 (syz.6.3147) did not claim interface 0 before use [ 292.766224][T16235] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 292.801683][ T40] audit: type=1400 audit(1749516171.384:1007): avc: denied { bind } for pid=16236 comm="syz.6.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 292.914819][T16246] netlink: 'syz.6.3150': attribute type 1 has an invalid length. [ 292.946869][ T40] audit: type=1400 audit(1749516171.534:1008): avc: denied { execute_no_trans } for pid=16248 comm="syz.0.3151" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=75196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 292.972400][T16249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.993909][ T5944] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 293.203027][ T40] audit: type=1400 audit(1749516171.784:1009): avc: denied { create } for pid=16289 comm="syz.0.3163" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 293.368303][T16330] syz_tun: entered allmulticast mode [ 293.376683][T16329] syz_tun: left allmulticast mode [ 293.601847][T16350] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.707307][T16369] SELinux: syz.0.3184 (16369) set checkreqprot to 1. This is no longer supported. [ 293.826555][T16383] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(16) [ 293.828695][T16383] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.831292][T16383] vhci_hcd vhci_hcd.0: Device attached [ 293.834927][T16387] vhci_hcd: connection closed [ 293.835769][ T12] vhci_hcd: stop threads [ 293.838610][ T12] vhci_hcd: release socket [ 293.840009][ T12] vhci_hcd: disconnect device [ 293.851018][T16376] netlink: 'syz.0.3187': attribute type 7 has an invalid length. [ 293.853696][T16376] netlink: 'syz.0.3187': attribute type 8 has an invalid length. [ 293.860123][T16376] syz_tun: entered promiscuous mode [ 293.863085][T16376] syz_tun: left promiscuous mode [ 293.891298][T16393] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input132 [ 293.963734][ T1266] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 294.115065][ T1266] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.118675][ T1266] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 294.121841][ T1266] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.125634][ T1266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.131209][T16372] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.136246][ T1266] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 294.367589][T16372] __nla_validate_parse: 16 callbacks suppressed [ 294.367600][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3186'. [ 294.379929][T16372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.382628][T16372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.394960][T16421] input: syz0 as /devices/virtual/input/input133 [ 294.398055][T16421] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3201'. [ 294.402066][T16422] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input134 [ 294.434264][T16425] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 294.438997][T16425] PM: Enabling pm_trace changes system date and time during resume. [ 294.438997][T16425] PM: Correct system time has to be restored manually after resume. [ 294.446751][ T29] usb 7-1: USB disconnect, device number 26 [ 294.500922][T16437] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3207'. [ 294.539817][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'. [ 295.841870][T16448] hsr_slave_1 (unregistering): left promiscuous mode [ 295.850241][T16451] 9pnet_fd: p9_fd_create_unix (16451): problem connecting socket: éq‰Y’3aK: -91 [ 295.927848][T16462] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input135 [ 296.006265][T16466] IPVS: Error connecting to the multicast addr [ 296.008303][T16468] usb usb9: check_ctrlrecip: process 16468 (syz.6.3216) requesting ep 01 but needs 81 [ 296.011628][T16468] usb usb9: usbfs: process 16468 (syz.6.3216) did not claim interface 0 before use [ 296.078051][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3219'. [ 296.081593][T16478] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 296.085927][T16478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.112594][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3220'. [ 296.181063][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 296.181074][ T40] audit: type=1400 audit(1749516174.764:1014): avc: denied { lock } for pid=16489 comm="syz.6.3223" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 296.243785][ T5985] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 296.259104][T16495] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input136 [ 296.325432][ T40] audit: type=1400 audit(1749516174.914:1015): avc: denied { ioctl } for pid=16498 comm="syz.5.3226" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x4c02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 296.381135][T16504] program syz.5.3227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.395176][ T5985] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 296.397993][ T5985] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 296.400788][ T5985] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.407507][ T5985] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 296.410366][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 296.412876][ T5985] usb 7-1: Product: syz [ 296.414811][ T5985] usb 7-1: Manufacturer: syz [ 296.418711][ T5985] cdc_wdm 7-1:1.0: skipping garbage [ 296.420353][ T5985] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 296.433840][ T9735] ------------[ cut here ]------------ [ 296.435970][ T9735] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 296.438628][ T9735] WARNING: CPU: 1 PID: 9735 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 296.441726][ T9735] Modules linked in: [ 296.443890][ T9735] CPU: 1 UID: 0 PID: 9735 Comm: kworker/u32:14 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 296.449553][ T9735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.454102][ T9735] Workqueue: bond0 bond_mii_monitor [ 296.456279][ T9735] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 296.458506][ T9735] Code: 05 ff ff ff e8 64 d1 59 f8 c6 05 76 2e 2e 07 01 90 ba 48 00 00 00 48 c7 c6 c0 88 e3 8c 48 c7 c7 60 88 e3 8c e8 64 96 18 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 3e a8 90 e8 fe 8e c0 f8 e9 [ 296.465336][ T9735] RSP: 0018:ffffc90003c2f9f0 EFLAGS: 00010286 [ 296.467290][ T9735] RAX: 0000000000000000 RBX: ffff88805d8ce000 RCX: ffffffff817ae368 [ 296.469797][ T9735] RDX: ffff888024d74880 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 296.472307][ T9735] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 296.475160][ T9735] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000785f48 [ 296.478466][ T9735] R13: ffff88805d8cecc5 R14: ffffffff8c590920 R15: ffffffff899b8950 [ 296.481734][ T9735] FS: 0000000000000000(0000) GS:ffff8880d6854000(0000) knlGS:0000000000000000 [ 296.484736][ T9735] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.486863][ T9735] CR2: 00007fe87f5726e0 CR3: 000000000e382000 CR4: 0000000000352ef0 [ 296.489628][ T9735] DR0: 0000000000000007 DR1: 0000000000004e6a DR2: 0000000000000007 [ 296.492348][ T9735] DR3: 00000000000002d5 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 296.495705][ T9735] Call Trace: [ 296.497063][ T9735] [ 296.498174][ T9735] ethtool_op_get_link+0x1d/0x70 [ 296.499831][ T9735] bond_check_dev_link+0x3f9/0x710 [ 296.501902][ T9735] ? __pfx_bond_check_dev_link+0x10/0x10 [ 296.504918][ T9735] bond_mii_monitor+0x3c0/0x2dc0 [ 296.507076][ T9735] ? __pfx_bond_mii_monitor+0x10/0x10 [ 296.509360][ T9735] ? rcu_is_watching+0x12/0xc0 [ 296.511398][ T9735] process_one_work+0x9cf/0x1b70 [ 296.513622][ T9735] ? __pfx_batadv_nc_worker+0x10/0x10 [ 296.515868][ T9735] ? __pfx_process_one_work+0x10/0x10 [ 296.518104][ T9735] ? assign_work+0x1a0/0x250 [ 296.520093][ T9735] worker_thread+0x6c8/0xf10 [ 296.522008][ T9735] ? __pfx_worker_thread+0x10/0x10 [ 296.523928][ T9735] kthread+0x3c5/0x780 [ 296.525544][ T9735] ? __pfx_kthread+0x10/0x10 [ 296.527296][ T9735] ? rcu_is_watching+0x12/0xc0 [ 296.529158][ T9735] ? __pfx_kthread+0x10/0x10 [ 296.531120][ T9735] ret_from_fork+0x5d4/0x6f0 [ 296.533064][ T9735] ? __pfx_kthread+0x10/0x10 [ 296.535324][ T9735] ret_from_fork_asm+0x1a/0x30 [ 296.537379][ T9735] [ 296.538768][ T9735] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 296.541751][ T9735] CPU: 1 UID: 0 PID: 9735 Comm: kworker/u32:14 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 296.545982][ T9735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.550325][ T9735] Workqueue: bond0 bond_mii_monitor [ 296.552518][ T9735] Call Trace: [ 296.553929][ T9735] [ 296.555197][ T9735] dump_stack_lvl+0x3d/0x1f0 [ 296.557168][ T9735] panic+0x71c/0x800 [ 296.558762][ T9735] ? __pfx_panic+0x10/0x10 [ 296.560248][ T9735] ? show_trace_log_lvl+0x29b/0x3e0 [ 296.561914][ T9735] ? check_panic_on_warn+0x1f/0xb0 [ 296.563928][ T9735] ? __linkwatch_sync_dev+0x1ed/0x230 [ 296.566192][ T9735] check_panic_on_warn+0xab/0xb0 [ 296.568282][ T9735] __warn+0xf6/0x3c0 [ 296.569888][ T9735] ? __pfx_vprintk_emit+0x10/0x10 [ 296.571732][ T9735] ? __linkwatch_sync_dev+0x1ed/0x230 [ 296.573842][ T9735] report_bug+0x3c3/0x580 [ 296.575407][ T9735] ? __linkwatch_sync_dev+0x1ed/0x230 [ 296.577597][ T9735] handle_bug+0x184/0x210 [ 296.579130][ T9735] exc_invalid_op+0x17/0x50 [ 296.580807][ T9735] asm_exc_invalid_op+0x1a/0x20 [ 296.582670][ T9735] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 296.585240][ T9735] Code: 05 ff ff ff e8 64 d1 59 f8 c6 05 76 2e 2e 07 01 90 ba 48 00 00 00 48 c7 c6 c0 88 e3 8c 48 c7 c7 60 88 e3 8c e8 64 96 18 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 3e a8 90 e8 fe 8e c0 f8 e9 [ 296.593128][ T9735] RSP: 0018:ffffc90003c2f9f0 EFLAGS: 00010286 [ 296.595716][ T9735] RAX: 0000000000000000 RBX: ffff88805d8ce000 RCX: ffffffff817ae368 [ 296.598276][ T9735] RDX: ffff888024d74880 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 296.600752][ T9735] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 296.603198][ T9735] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000785f48 [ 296.605697][ T9735] R13: ffff88805d8cecc5 R14: ffffffff8c590920 R15: ffffffff899b8950 [ 296.608168][ T9735] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 296.609935][ T9735] ? __warn_printk+0x198/0x350 [ 296.611450][ T9735] ? __warn_printk+0x1a5/0x350 [ 296.612979][ T9735] ethtool_op_get_link+0x1d/0x70 [ 296.614550][ T9735] bond_check_dev_link+0x3f9/0x710 [ 296.616172][ T9735] ? __pfx_bond_check_dev_link+0x10/0x10 [ 296.617933][ T9735] bond_mii_monitor+0x3c0/0x2dc0 [ 296.619492][ T9735] ? __pfx_bond_mii_monitor+0x10/0x10 [ 296.621167][ T9735] ? rcu_is_watching+0x12/0xc0 [ 296.622664][ T9735] process_one_work+0x9cf/0x1b70 [ 296.624185][ T9735] ? __pfx_batadv_nc_worker+0x10/0x10 [ 296.625899][ T9735] ? __pfx_process_one_work+0x10/0x10 [ 296.627592][ T9735] ? assign_work+0x1a0/0x250 [ 296.629086][ T9735] worker_thread+0x6c8/0xf10 [ 296.630562][ T9735] ? __pfx_worker_thread+0x10/0x10 [ 296.632159][ T9735] kthread+0x3c5/0x780 [ 296.633463][ T9735] ? __pfx_kthread+0x10/0x10 [ 296.634900][ T9735] ? rcu_is_watching+0x12/0xc0 [ 296.636398][ T9735] ? __pfx_kthread+0x10/0x10 [ 296.637864][ T9735] ret_from_fork+0x5d4/0x6f0 [ 296.639336][ T9735] ? __pfx_kthread+0x10/0x10 [ 296.640815][ T9735] ret_from_fork_asm+0x1a/0x30 [ 296.642342][ T9735] [ 296.644074][ T9735] Kernel Offset: disabled [ 296.645484][ T9735] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:42:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff822e859c RDX=ffff88802d7b4880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc9000d117538 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000003 R11=0000000000000001 R12=ffff88801dde1ea0 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bc1cb0 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6754000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000012c0 CR3=0000000055155000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=00000000000000c8 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555826278f2 0000555582626e80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555582641051 0000555582630c20 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffee08004cf003 1004004cec031004 004ce8030404004c e403018804004ce0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0404004d8c031004 004d88030608004d 80031804004cfc03 1004004cf8031fff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004da8031fffffff f808004da0030a04 004d9c031004004d 98030008004d9003 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08004dc0030e0400 4dbc031004004db8 033ffe08004db003 0804004dac031004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000f800401 0000040806060167 bc2080a3da08000f e0030010000fd003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000fc0030210 000fb00301e81000 1090030c08004de0 031804004ddc0310 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04004dd803080800 4dd0030c04004dcc 031004004dc80308 08004dc0030e0400 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4dbc031004004db8 033ffe08004db003 0804004dac031004 004da8031fffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b5315 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc90003c2f360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000049 R14=ffffffff9b088360 R15=ffffffff855b52b0 RIP=ffffffff855b533f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6854000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe87f5726e0 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000004e6a DR2=0000000000000007 DR3=00000000000002d5 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000006000 Opmask03=0000000000000000 Opmask04=00000000ffffdfff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa8d1fbfb 00007fffa8d1fbfb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa8d20100 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa8d20100 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 75646f7250203a31 2d3720627375205d 3538393554205b5d 3637383231342e00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7564657250203031 2737206273752057 3532333554205157 3637323231342400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7669726420687469 772065626f727020 3a302e313a312d37 206d64775f636463 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31203a65756c6176 207327726f747069 7263736564206563 61667265746e6920 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656874206d6f7266 20746e6572656666 6964202c73726f74 7069726373656420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e696f70646e65 2030207361682030 20676e6974746573 746c612030206563 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61667265746e6920 31206769666e6f63 203a312d37206273 75205d3538393554 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f723d747865746e 6f63732032306334 78303d646d636c74 636f6920343d6f6e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000026bc41 RBX=0000000000000002 RCX=ffffffff8b7fbc99 RDX=0000000000000000 RSI=ffffffff8de18f45 RDI=ffffffff8c156fe0 RBP=ffffed1003c55910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801e2ac880 R14=ffffffff90a80c50 R15=0000000000000000 RIP=ffffffff8b7fa7ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6954000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2901c28fb8 CR3=000000004930f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4289a8e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2900e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2900e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2900e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2900e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2900e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2900e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff888057772440 RBX=ffffffff8e2167c8 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8df0af4c RDI=ffffffff8c156fe0 RBP=0000000000000002 RSP=ffffc90003fdfcd8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90a80c57 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b7fc428 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555580b6500 ffffffff 00c00000 GS =0000 ffff8880d6a54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f96ffa5ae9c CR3=0000000049ba3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef30472b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe934c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe934c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe934c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe934c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe934c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe934c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000