last executing test programs: 39m29.65510274s ago: executing program 32 (id=3345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x7}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={r1, r6}, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000500)={&(0x7f00000003c0), 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x48000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 6m51.235028468s ago: executing program 33 (id=9692): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x2, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x11}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}]}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa, 0x73, 0x5, 0x1000000, 0xb, "88bd91aa28528000000000007500000400"}) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(0x0, r7) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x64, r8, 0xd05, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x488c1}, 0x811) 3m22.531779392s ago: executing program 6 (id=10715): r0 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)) 3m22.129666014s ago: executing program 6 (id=10718): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 3m21.891910168s ago: executing program 6 (id=10719): r0 = syz_open_procfs(0x0, &(0x7f0000000a40)='smaps_rollup\x00') r1 = fanotify_init(0x20, 0x101000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/176, 0xb0}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000001600)={0x2020}, 0x2020) 3m21.754300948s ago: executing program 6 (id=10722): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) 3m21.632886836s ago: executing program 6 (id=10725): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) 3m20.487760975s ago: executing program 6 (id=10731): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x83) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='\x00\x00\x00\x00\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0xc000) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x5f) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x7803, 0x2, {"00000000000000000000000000000001"}, 0x8000, 0x100005, 0x101}}}, 0xd4) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000540)=[{0x2c, 0x0, [0x9, 0x13, 0x8, 0x8, 0x5, 0x9, 0x2, 0x1ff, 0x1, 0x5, 0x7fff, 0x7, 0x100, 0x9, 0xfffffff1, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x7, 0x3, 0xe, 0x7588, 0x40, 0xfffffffc, 0x7}, &(0x7f0000000140)=0x9c) 3m20.048309468s ago: executing program 34 (id=10731): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x83) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='\x00\x00\x00\x00\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0xc000) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x5f) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x7803, 0x2, {"00000000000000000000000000000001"}, 0x8000, 0x100005, 0x101}}}, 0xd4) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000540)=[{0x2c, 0x0, [0x9, 0x13, 0x8, 0x8, 0x5, 0x9, 0x2, 0x1ff, 0x1, 0x5, 0x7fff, 0x7, 0x100, 0x9, 0xfffffff1, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x7, 0x3, 0xe, 0x7588, 0x40, 0xfffffffc, 0x7}, &(0x7f0000000140)=0x9c) 1m18.168037636s ago: executing program 5 (id=11415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000004400c00023005050c54f0b4c8bd4000000001b00ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0xfffffc8d, 0x3}, {0x0, [0x61]}}, &(0x7f0000000100)=""/141, 0x2e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1m17.887334817s ago: executing program 5 (id=11419): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x5}, 0x18) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000280)=0x8001) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {0x1}, {0x80}, @connect={{0x40, 0x5}, {0x80, 0xf}}}], 0x38) 1m16.336697356s ago: executing program 5 (id=11427): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x6187, 0x4) sendto$inet(r0, &(0x7f0000000600)="e2", 0x1, 0x0, 0x0, 0x0) 1m15.959768186s ago: executing program 0 (id=11433): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000210001050000000800000000000000010000850000000000000000020000000000000000000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019300)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r3}, 0x10) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) socket$kcm(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x159) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10008, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x4008af13, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x73}, {@in6=@mcast2, 0x4c4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81, 0xe02}, {0xffffffffffffffff, 0x0, 0x1d, 0x5b}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd28, 0xd2eb}}]}, 0x148}}, 0x8c4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006300)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 1m15.596387287s ago: executing program 0 (id=11435): socket$inet6_icmp(0xa, 0x2, 0x3a) pipe(&(0x7f00000001c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000002d40)=""/4095, 0xfff) 1m15.44656164s ago: executing program 5 (id=11438): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, 0x0, &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) 1m15.328613191s ago: executing program 0 (id=11439): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x5}, 0x18) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000280)=0x8001) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {0x1}, {0x80}, @connect={{0x40, 0x5}, {0x80, 0xf}}}], 0x38) 1m15.327705017s ago: executing program 5 (id=11440): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0xc800000000000000, 0x54000, 0x46, 0x0, 0x1a}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x12, 0x9, 0x2, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x7, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xaf, 0x8d], 0xeeee8000, 0x2014d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0c5}, 0x200000d0) 1m14.944655757s ago: executing program 5 (id=11443): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) shutdown(r0, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f00003f6000/0x3000)=nil, 0x3000, 0x1000009, 0x810, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0xd, 0x62, 0x7, 0x8, 0xe, 0xe3, 0x9, 0xa, 0x0, [0x4e, 0x9, 0xd2, 0x7, 0x401, 0x4, 0x9, 0xfffffffb], [0x7f]}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r5 = dup(r2) r6 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f0000000240)) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) socket$pppoe(0x18, 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 1m14.482582174s ago: executing program 35 (id=11443): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) shutdown(r0, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f00003f6000/0x3000)=nil, 0x3000, 0x1000009, 0x810, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0xd, 0x62, 0x7, 0x8, 0xe, 0xe3, 0x9, 0xa, 0x0, [0x4e, 0x9, 0xd2, 0x7, 0x401, 0x4, 0x9, 0xfffffffb], [0x7f]}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r5 = dup(r2) r6 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f0000000240)) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) socket$pppoe(0x18, 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 1m13.648482364s ago: executing program 0 (id=11450): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, 0x0, &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) 1m13.589149559s ago: executing program 7 (id=11451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@wrmsr={0x65, 0x20, {0x40000022, 0x80000000da71}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m13.421089509s ago: executing program 0 (id=11452): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000004400c00023005050c54f0b4c8bd4000000001b00ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0xfffffc8d, 0x3}, {0x0, [0x61]}}, &(0x7f0000000100)=""/141, 0x2e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1m13.277360093s ago: executing program 7 (id=11453): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0xc800000000000000, 0x54000, 0x46, 0x0, 0x1a}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x12, 0x9, 0x2, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x7, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xaf, 0x8d], 0xeeee8000, 0x2014d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0c5}, 0x200000d0) 1m13.07567135s ago: executing program 0 (id=11455): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000200)="b9f20800000f3226660fc7330f07f30fc7b7000000000f01cfc4e27925b719d77a0a98b8080000000f23c80f21f8350c0070000f23f8660f2f8664f44e4f0f004d01", 0x42}], 0x1, 0x1e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="260f01c32e36260f212366b9090b000066b87a0a000066ba000000000f30b823018ee8ba610066ed0f01c2660f38810f2e0f656c7ff2e3090fa5800500", 0xffffffffffffff96}], 0x1, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.687635869s ago: executing program 36 (id=11455): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000200)="b9f20800000f3226660fc7330f07f30fc7b7000000000f01cfc4e27925b719d77a0a98b8080000000f23c80f21f8350c0070000f23f8660f2f8664f44e4f0f004d01", 0x42}], 0x1, 0x1e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="260f01c32e36260f212366b9090b000066b87a0a000066ba000000000f30b823018ee8ba610066ed0f01c2660f38810f2e0f656c7ff2e3090fa5800500", 0xffffffffffffff96}], 0x1, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.23213226s ago: executing program 7 (id=11460): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000600)="e2", 0x1, 0x0, 0x0, 0x0) 1m12.077701542s ago: executing program 7 (id=11461): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 1m11.732651885s ago: executing program 7 (id=11462): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0", 0x50}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)}], 0x4}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m10.944040072s ago: executing program 7 (id=11467): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x100}, {r2}], 0x2, 0x0, 0x0, 0x0) 1m10.631468941s ago: executing program 37 (id=11467): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x100}, {r2}], 0x2, 0x0, 0x0, 0x0) 1m10.203313212s ago: executing program 4 (id=11473): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000f4003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000001a0005400000002120000000020a01010000000000000000010000060c000440000000000000000114000000100001000000"], 0xa4}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x802, 0x1) 1m9.074373632s ago: executing program 4 (id=11475): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021"], 0x54}}, 0x4004850) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 1m8.971509548s ago: executing program 4 (id=11476): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_notify(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x199c, &(0x7f0000000400)={0x0, 0xd3df, 0x100, 0x2, 0x138, 0x0, r0}, 0x0, &(0x7f00000003c0)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x42, [0x9, 0x0, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x223, 0xfffffb9a, 0xdffffffc, 0x5, 0xfffffffb, 0x2004, 0x10000001, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x2, 0x2000006, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x101, 0x5, 0xcb5, 0x400, 0x6, 0x3, 0x1, 0x36, 0x5, 0x0, 0x100, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xffffffe9, 0xfffffffd, 0x5, 0x1, 0x1, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x6, 0x37a, 0x9, 0x7fe, 0x5, 0x7, 0x6, 0xfffffffe, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x8001, 0x7, 0x9, 0x800e8b, 0x5, 0x3, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x1, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x0, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0xffffffff, 0x7fff, 0x4, 0x2, 0x6d7e, 0x4, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xf5c1, 0x3fd, 0x3, 0xcac, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x8001, 0x5], [0x108e, 0xffff, 0x3, 0x101, 0x88, 0x2, 0x7ff, 0x4, 0x50, 0x2, 0x760, 0xb, 0x402, 0x800, 0x8320fb05, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x8, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x28008, 0x8a8, 0x6, 0x8, 0x409, 0x1, 0x744, 0x4, 0x12, 0x4, 0x10, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x13, 0x200, 0x7, 0x4edf, 0x4, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) fstatfs(r5, &(0x7f0000000200)=""/117) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x4, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) socket$inet(0x2, 0x1, 0x6) close(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) 1m8.867670901s ago: executing program 4 (id=11478): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 1m8.712747581s ago: executing program 4 (id=11480): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="a8b15e07b6ea23cb4f64594dc6cf2ee1476a45e91f518c217b1f20486317a8bd40a5ad3a5951252be61fa87c733578bf4a983b1b5902c0", 0x37}], 0x1) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000800)={0x2020}, 0x2020) 1m8.383808363s ago: executing program 4 (id=11482): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in6={0xa, 0x4e20, 0x1, @private2, 0x740}]}, &(0x7f00000002c0)=0x10) 1m8.178812022s ago: executing program 38 (id=11482): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in6={0xa, 0x4e20, 0x1, @private2, 0x740}]}, &(0x7f00000002c0)=0x10) 5.068331627s ago: executing program 2 (id=11973): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={r1, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18) 4.877616912s ago: executing program 2 (id=11976): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.790258968s ago: executing program 3 (id=11993): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20600d0}, 0x20000054) 3.697517633s ago: executing program 3 (id=11995): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}}}, 0x84) 3.686661718s ago: executing program 2 (id=11996): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000001c0)=0x81, 0x4) syz_emit_ethernet(0x72, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x12, 0x4, 0x1, 0x3, 0x7, 0x65, 0x1, 0xa3, 0x1, 0xd, @loopback, @loopback, {[@rr={0x7, 0xf, 0xda, [@multicast2, @remote, @remote]}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x7, [{@broadcast, 0x2}, {@multicast2, 0x10}, {@multicast2, 0x2f3}, {@multicast2, 0x7}]}]}}}}}}}, 0x0) 3.582448148s ago: executing program 2 (id=11998): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e80)="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", 0x423, 0x6d91fb6102d8910c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.58181615s ago: executing program 3 (id=11999): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20, 0x3e, 0x4, 0x8}, {0x6, 0x4, 0xe, 0x3}]}) 3.419820772s ago: executing program 2 (id=12002): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae49, 0x2) 3.419297465s ago: executing program 3 (id=12004): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000f4003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000001a0005400000002120000000020a01010000000000000000010000060c000440000000000000000114000000100001000000"], 0xa4}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x802, 0x1) 3.331417902s ago: executing program 2 (id=12006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.58300249s ago: executing program 9 (id=12013): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x4) r0 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x40000a0) 2.579151636s ago: executing program 8 (id=12014): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x6, 0x8, 0x6}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e23, 0x4, @private1, 0xa0}}, 0x0, 0x0, 0x4, 0x0, "16804fdfb6d3f4433a869614494121d7ad22e74fc5aca17d64b2fb307d081903b36a7a46380bc328dd135be4303e29e9c484e3e34989f128b4a7822f0eb9feeca2a304d9309ac88100be7bf30824de17"}, 0xd8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) 2.439847857s ago: executing program 8 (id=12016): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xb4b, @local, 0xd}, 0x1c, 0x0}}], 0x1, 0x24004041) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) recvfrom(r1, 0x0, 0x0, 0x72, 0x0, 0x0) 2.439307701s ago: executing program 9 (id=12017): r0 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0xff6c, 0x3) 2.36783771s ago: executing program 8 (id=12018): syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00=\x00', 0x14, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x1, 0x0, 0x3}}}}}}}, 0x0) 2.366323979s ago: executing program 9 (id=12019): syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000004300)=""/4129, &(0x7f0000000080)=0x1021) 2.159936978s ago: executing program 8 (id=12020): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4) getdents64(r3, 0x0, 0x0) 2.111593324s ago: executing program 9 (id=12021): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010500000080ffff", 0x8) 2.101759643s ago: executing program 1 (id=12022): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYRES32, @ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000118", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x400, 0x0, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7]}}]}}]}, 0x8c}}, 0x8000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.464710855s ago: executing program 9 (id=12023): mkdir(&(0x7f0000000000)='./file1\x00', 0x74) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) 1.410818996s ago: executing program 1 (id=12024): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000100)={0x88, 0x6, 0x4, 0x0, 0x0, [@private2, @private1, @remote]}, 0x38) 1.387596378s ago: executing program 9 (id=12025): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000080ff010000000000000009000000000a14000000000a010200000000000000000100000014000000100001c202000000000000000000000a"], 0x3c}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r2, &(0x7f0000004400), 0x3fffffffffffff2, 0x6000000, 0x0) 1.307445191s ago: executing program 1 (id=12026): mkdir(&(0x7f0000000440)='./file1\x00', 0x12) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r0 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x140f, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file1\x00'}) syz_open_dev$I2C(0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file1\x00') write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, 0x80002}}, 0x2e) write$UHID_INPUT(r3, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2300414, &(0x7f0000001280)={[{@metacopy_off}, {@xino_off}, {@xino_auto}, {@redirect_dir_nofollow}, {@xino_off}], [{@subj_user={'subj_user', 0x3d, 'cpuacct.usage_percpu_sys\x00'}}]}) 1.268322664s ago: executing program 8 (id=12027): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) open_tree(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), 0x0}, 0x20) 1.20324753s ago: executing program 1 (id=12028): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/196], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) poll(&(0x7f00000000c0)=[{r0, 0x2050}, {r0, 0x80}, {0xffffffffffffffff, 0x400}], 0x3, 0xe) 523.832473ms ago: executing program 8 (id=12029): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) fchdir(r0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) 274.018293ms ago: executing program 1 (id=12030): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0xe21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf9b3}], 0x1d) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x2, 0x805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 138.464787ms ago: executing program 1 (id=12031): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f000009f000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f00000004c0)=[@code={0xa, 0x67, {"460fa2c462c145edc744240032000000c744240236f50000ff1c24b97a080000b8806a0000ba000000000f30672e420f1a01b982050000b86c000000ba000000000f3026c90f20e035000020000f22e0450f08f2406f"}}], 0x67}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x0, 0x0, 0x7, 0x14, 0x625, 0x3, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0x6c62d000) 136.518453ms ago: executing program 3 (id=12041): mkdir(&(0x7f0000000000)='./file1\x00', 0x74) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) 0s ago: executing program 3 (id=12032): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0)=@x86={0x0, 0x0, 0x3, 0x0, 0xffffffff, 0xe, 0x8, 0xf2, 0xd5, 0x5, 0x6, 0x9, 0x0, 0xc9b, 0x2, 0x6e, 0x7, 0x6, 0x9, '\x00', 0x9, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ci_device speed not set [ 3187.949857][T15966] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 3187.972280][T11950] kvm: user requested TSC rate below hardware speed [ 3188.140526][ T5108] Bluetooth: hci3: command 0x0c1a tx timeout [ 3188.148675][T10065] Bluetooth: hci4: command 0x0c1a tx timeout [ 3188.155403][ T9729] Bluetooth: hci0: command 0x0c1a tx timeout [ 3188.323843][T11935] vhci_hcd: connection reset by peer [ 3188.334116][ T4154] vhci_hcd: stop threads [ 3188.338375][ T4154] vhci_hcd: release socket [ 3188.349601][ T4154] vhci_hcd: disconnect device [ 3188.540379][T11955] siw: device registration error -23 [ 3189.052776][T11967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10422'. [ 3189.081186][T11967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10422'. [ 3189.092101][T30258] usb 5-1: USB disconnect, device number 118 [ 3190.264695][T10065] Bluetooth: hci4: command 0x0c1a tx timeout [ 3190.319655][T31541] vhci_hcd: vhci_device speed not set [ 3190.691223][T11993] binder: 11990:11993 ioctl c0306201 200000000300 returned -11 [ 3191.362796][T12004] kvm: kvm [12001]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 3191.372856][T12004] kvm: kvm [12001]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 3191.459415][T10280] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 3192.086873][ T30] audit: type=1400 audit(1764745504.503:1372): avc: denied { listen } for pid=12011 comm="syz.4.10438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3192.177344][T12013] ntfs3(nullb0): Primary boot signature is not NTFS. [ 3192.184961][T12013] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 3192.271348][T10280] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3192.329604][T10065] Bluetooth: hci4: command 0x0c1a tx timeout [ 3192.373591][T10280] usb 7-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 3192.408112][T10280] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3193.009056][T10280] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3193.077186][T10280] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3193.087056][T10280] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3193.099775][T10280] usb 7-1: Product: syz [ 3193.099983][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10440'. [ 3193.103938][T10280] usb 7-1: Manufacturer: syz [ 3193.121209][T28274] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 3193.130035][T15966] vhci_hcd: vhci_device speed not set [ 3193.143777][T28274] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3193.155741][T10280] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3193.478409][T12026] fido_id[12026]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3195.080180][ T6212] usb 7-1: USB disconnect, device number 14 [ 3196.290153][T12067] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 3196.296682][T12067] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3196.305289][T12067] vhci_hcd vhci_hcd.0: Device attached [ 3196.481565][T12074] vhci_hcd: connection closed [ 3196.481781][T10750] vhci_hcd: stop threads [ 3196.504609][T10750] vhci_hcd: release socket [ 3196.521244][T10750] vhci_hcd: disconnect device [ 3196.568892][T10280] usb 38-1: enqueue for inactive port 0 [ 3197.139136][T10280] usb usb38-port1: attempt power cycle [ 3197.338073][T12099] i2c i2c-0: Invalid block write size 58 [ 3197.574029][T12112] syzkaller0: entered promiscuous mode [ 3198.040377][T10280] usb usb38-port1: unable to enumerate USB device [ 3198.047300][T12112] syzkaller0: entered allmulticast mode [ 3198.137142][T12112] tipc: Started in network mode [ 3198.144681][T12112] tipc: Node identity 12832bc1440a, cluster identity 4711 [ 3198.152162][T12112] tipc: Enabled bearer , priority 0 [ 3198.160997][T12111] tipc: Resetting bearer [ 3198.178165][T12111] tipc: Disabling bearer [ 3198.365458][T12124] ntfs3(nullb0): Primary boot signature is not NTFS. [ 3198.374601][T12124] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 3198.724342][T12132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10475'. [ 3199.199453][T12142] siw: device registration error -23 [ 3200.662310][T12168] fuse: Unknown parameter 'user_i00000000000000000000' [ 3200.872760][T12175] ntfs3(nullb0): Primary boot signature is not NTFS. [ 3200.880327][T12175] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 3201.298582][T12182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10491'. [ 3201.310684][T12182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10491'. [ 3201.514999][T12190] 9pnet_virtio: no channels available for device syz [ 3203.009233][T12210] ntfs3(nullb0): Primary boot signature is not NTFS. [ 3203.016577][T12210] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 3203.952338][T12235] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 3203.958864][T12235] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3204.002015][T12235] vhci_hcd vhci_hcd.0: Device attached [ 3204.060153][T12238] vhci_hcd: connection closed [ 3204.064394][T32710] vhci_hcd: stop threads [ 3204.085679][T32710] vhci_hcd: release socket [ 3204.098899][T32710] vhci_hcd: disconnect device [ 3204.155703][T12243] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10509'. [ 3204.216419][T12245] fuse: Unknown parameter 'grou00000000000000000000' [ 3204.300756][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.307141][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.516016][T12272] fuse: Unknown parameter 'grou00000000000000000000' [ 3207.169818][T12300] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 3207.176340][T12300] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3207.567594][T12308] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10530'. [ 3207.752554][T12300] vhci_hcd vhci_hcd.0: Device attached [ 3207.757823][T12303] vhci_hcd: connection closed [ 3207.764328][T16665] vhci_hcd: stop threads [ 3207.777843][T16665] vhci_hcd: release socket [ 3207.783566][T16665] vhci_hcd: disconnect device [ 3207.926851][T12315] fuse: Unknown parameter 'group_i00000000000000000000' [ 3208.426601][T12323] team0: No ports can be present during mode change [ 3208.616265][T10279] IPVS: starting estimator thread 0... [ 3208.717464][T12320] IPVS: using max 47 ests per chain, 112800 per kthread [ 3208.828353][T12324] syzkaller0: entered promiscuous mode [ 3208.846020][T12324] syzkaller0: entered allmulticast mode [ 3208.996405][T12326] tipc: Enabled bearer , priority 0 [ 3209.025735][T12322] tipc: Resetting bearer [ 3209.053697][T12331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3209.089088][T12322] tipc: Disabling bearer [ 3209.957718][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10542'. [ 3210.261875][T12353] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10545'. [ 3210.595052][T12363] i2c i2c-0: Invalid block write size 58 [ 3210.693844][T12370] syzkaller0: entered promiscuous mode [ 3210.717349][T12370] syzkaller0: entered allmulticast mode [ 3210.743815][T12372] 9pnet_virtio: no channels available for device syz [ 3210.781636][T12370] tipc: Enabled bearer , priority 0 [ 3210.807233][T12367] tipc: Resetting bearer [ 3210.870775][T12367] tipc: Disabling bearer [ 3210.887889][T12376] binder: 12373:12376 ioctl c0306201 200000000300 returned -11 [ 3210.998457][T12381] team0: Unable to change to the same mode the team is in [ 3211.822556][ T30] audit: type=1400 audit(1764745524.245:1373): avc: denied { unmount } for pid=10234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 3214.419712][T12452] fuse: Bad value for 'fd' [ 3214.856904][T10280] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 3215.049616][T10280] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3215.072791][T10280] usb 6-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 3215.101341][T10280] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3215.119964][T10280] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3215.149972][T10280] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3215.173169][T10280] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3215.187737][T10280] usb 6-1: Product: syz [ 3215.192059][T10280] usb 6-1: Manufacturer: syz [ 3215.203205][T10280] cdc_wdm 6-1:1.0: skipping garbage [ 3215.211677][T10280] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3216.478003][T12492] fuse: Unknown parameter '0x0000000000000003' [ 3217.382304][ T9643] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 3217.577769][T12509] binder: 12508:12509 ioctl c0306201 200000000300 returned -11 [ 3217.646769][ T9643] usb 1-1: Using ep0 maxpacket: 8 [ 3217.660108][ T9643] usb 1-1: config 0 has an invalid interface number: 24 but max is 0 [ 3217.694348][ T9643] usb 1-1: config 0 has no interface number 0 [ 3217.725164][ T9643] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65 [ 3217.737534][ T9643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3217.748107][ T9643] usb 1-1: Product: syz [ 3217.752275][ T9643] usb 1-1: Manufacturer: syz [ 3217.757620][ T9643] usb 1-1: SerialNumber: syz [ 3217.768191][ T9643] usb 1-1: config 0 descriptor?? [ 3217.899570][T12523] ntfs3(nullb0): Primary boot signature is not NTFS. [ 3217.906824][T12523] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 3218.406682][ T6212] usb 6-1: USB disconnect, device number 55 [ 3218.762576][T12545] binder: 12544:12545 ioctl c0306201 200000000300 returned -11 [ 3219.360387][ T9643] pegasus 1-1:0.24: probe with driver pegasus failed with error -32 [ 3219.672242][T10280] usb 1-1: USB disconnect, device number 94 [ 3219.826327][ T6212] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 3220.001461][ T6212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3220.073645][ T6212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3220.118205][ T6212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 3220.161451][ T6212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 3220.240295][ T6212] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 3220.279653][ T6212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3220.326927][ T6212] usb 6-1: Product: syz [ 3220.341323][ T6212] usb 6-1: Manufacturer: syz [ 3220.356042][ T6212] usb 6-1: SerialNumber: syz [ 3220.416398][ T6212] usb 6-1: config 0 descriptor?? [ 3220.995182][T12585] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 3221.001701][T12585] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3221.014332][ T6212] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 3221.031434][T12585] vhci_hcd vhci_hcd.0: Device attached [ 3221.053496][ T6212] usb 6-1: USB disconnect, device number 56 [ 3221.244952][T12586] vhci_hcd: connection closed [ 3221.245223][T16659] vhci_hcd: stop threads [ 3221.264370][T16659] vhci_hcd: release socket [ 3221.270145][T16659] vhci_hcd: disconnect device [ 3221.747664][ T6212] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 3221.766394][ T6212] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3221.823080][T12594] fuse: Bad value for 'user_id' [ 3221.828333][T12594] fuse: Bad value for 'user_id' [ 3221.946180][T12600] fuse: Bad value for 'fd' [ 3222.309481][ T6212] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 3222.488517][ T6212] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3222.501801][ T6212] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3222.519666][ T6212] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3222.532769][ T6212] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3222.547126][ T6212] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3222.585607][ T6212] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3222.593736][ T6212] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3222.664414][ T6212] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3222.665792][T12629] fuse: Bad value for 'fd' [ 3222.686864][ T6212] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3222.699231][ T6212] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3222.767103][ T6212] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3222.774741][ T6212] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3222.792521][ T6212] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3222.804406][ T6212] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3222.823005][ T6212] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3222.838687][ T6212] usb 5-1: string descriptor 0 read error: -22 [ 3222.847791][ T6212] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3222.859209][ T6212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3222.879796][ T6212] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3223.157436][ T6212] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 3223.350964][ T6212] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3223.889961][T12653] syzkaller0: entered promiscuous mode [ 3223.912224][T12653] syzkaller0: entered allmulticast mode [ 3224.846746][T12687] debugfs: 'ttyS3' already exists in 'caif_serial' [ 3225.372813][T15966] usb 5-1: USB disconnect, device number 119 [ 3225.445306][T12690] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3228.202468][T12741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3228.209754][T12741] IPv6: NLM_F_CREATE should be set when creating new route [ 3228.270334][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10678'. [ 3231.254909][T12761] md: superblock version 12389 not known [ 3231.264047][ T30] audit: type=1400 audit(1764745543.688:1374): avc: denied { map } for pid=12768 comm="syz.0.10688" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 3231.267904][T12761] md: couldn't set array info. -22 [ 3231.318574][T12774] fuse: Bad value for 'fd' [ 3232.501089][ T9643] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 3232.655923][T12794] autofs: Unknown parameter '0x0000000000000000' [ 3232.675500][ T30] audit: type=1400 audit(1764745545.108:1375): avc: denied { map } for pid=12803 comm="syz.6.10700" path="socket:[194822]" dev="sockfs" ino=194822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 3232.710319][ T9643] usb 1-1: Using ep0 maxpacket: 8 [ 3232.717778][ T9643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3232.731835][ T9643] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3232.741116][ T9643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3232.760169][ T9643] usb 1-1: config 0 descriptor?? [ 3232.827270][T12808] fuse: Bad value for 'fd' [ 3233.849810][ T9643] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3233.893361][T12815] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 3233.899894][T12815] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3234.061434][T12815] vhci_hcd vhci_hcd.0: Device attached [ 3234.251719][T12816] vhci_hcd: connection closed [ 3234.254639][T10533] vhci_hcd: stop threads [ 3234.267371][T10533] vhci_hcd: release socket [ 3234.272298][T10533] vhci_hcd: disconnect device [ 3235.520942][ T6212] usb 1-1: USB disconnect, device number 95 [ 3235.684645][ T30] audit: type=1400 audit(1764745548.118:1376): avc: denied { ioctl } for pid=12847 comm="syz.6.10715" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3236.207705][ T30] audit: type=1400 audit(1764745548.638:1377): avc: denied { mounton } for pid=12868 comm="syz.6.10722" path="/191/file1" dev="autofs" ino=194166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 3236.248054][ T30] audit: type=1400 audit(1764745548.678:1378): avc: denied { unmount } for pid=9728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 3237.324061][T15966] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 3237.486098][T11276] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3237.503960][T15966] usb 6-1: Using ep0 maxpacket: 8 [ 3237.526862][T15966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3237.571975][T15966] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3237.602453][T15966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3237.658350][T15966] usb 6-1: config 0 descriptor?? [ 3237.659902][T11276] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3237.784854][T11276] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3237.894780][T15966] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3237.926385][T11276] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3238.365649][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3238.390937][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3238.399456][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3238.407427][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3238.415580][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3238.866448][T11276] bond0 (unregistering): Released all slaves [ 3238.953146][T12907] ªªªªªª speed is unknown, defaulting to 1000 [ 3239.297902][T12907] lo speed is unknown, defaulting to 1000 [ 3239.591369][T11276] hsr_slave_0: left promiscuous mode [ 3239.605984][T11276] hsr_slave_1: left promiscuous mode [ 3239.698519][T11276] veth1_macvtap: left promiscuous mode [ 3239.726615][T11276] veth0_macvtap: left promiscuous mode [ 3239.748659][T11276] veth1_vlan: left promiscuous mode [ 3239.776817][T11276] veth0_vlan: left promiscuous mode [ 3240.185542][T10880] usb 6-1: USB disconnect, device number 57 [ 3240.468740][ T5108] Bluetooth: hci1: command tx timeout [ 3240.869179][ T6212] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 3240.896752][ T6212] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3241.049887][T12947] input: syz1 as /devices/virtual/input/input52 [ 3241.774648][T12944] fido_id[12944]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3241.856536][T12947] Falling back ldisc for ttyprintk. [ 3242.005783][T12959] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3242.012307][T12959] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3242.026819][T12959] vhci_hcd vhci_hcd.0: Device attached [ 3242.318752][T10280] usb 42-1: SetAddress Request (22) to port 0 [ 3242.325408][T10280] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 3242.534670][ T5108] Bluetooth: hci1: command tx timeout [ 3242.709485][T12968] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3242.720325][T12968] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3242.746621][T12968] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3243.145064][T12907] chnl_net:caif_netlink_parms(): no params data found [ 3243.265219][ T30] audit: type=1400 audit(1764745555.139:1379): avc: denied { mounton } for pid=12962 comm="syz.2.10751" path="/171/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 3243.288686][T12960] vhci_hcd: connection reset by peer [ 3243.305925][ T7469] vhci_hcd: stop threads [ 3243.310923][T12971] ubi: mtd0 is already attached to ubi0 [ 3243.319420][ T30] audit: type=1400 audit(1764745555.159:1380): avc: denied { read } for pid=12962 comm="syz.2.10751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 3243.341949][ T30] audit: type=1400 audit(1764745555.159:1381): avc: denied { read } for pid=12962 comm="syz.2.10751" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 3243.392014][ T30] audit: type=1400 audit(1764745555.159:1382): avc: denied { read } for pid=12962 comm="syz.2.10751" name="/" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 3243.395333][ T7469] vhci_hcd: release socket [ 3243.447496][ T7469] vhci_hcd: disconnect device [ 3243.473333][ T30] audit: type=1400 audit(1764745555.159:1383): avc: denied { open } for pid=12962 comm="syz.2.10751" path="/171/file0" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 3243.512551][ T30] audit: type=1400 audit(1764745555.159:1384): avc: denied { read } for pid=12962 comm="syz.2.10751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 3243.591297][ T30] audit: type=1400 audit(1764745555.159:1385): avc: denied { read } for pid=12962 comm="syz.2.10751" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 3243.617758][ T30] audit: type=1400 audit(1764745555.159:1386): avc: denied { read } for pid=12962 comm="syz.2.10751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 3243.659202][ T30] audit: type=1400 audit(1764745555.159:1387): avc: denied { read } for pid=12962 comm="syz.2.10751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 3243.684195][T12907] bridge0: port 1(bridge_slave_0) entered blocking state [ 3243.691288][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 3243.701123][T12907] bridge_slave_0: entered allmulticast mode [ 3243.710279][T12907] bridge_slave_0: entered promiscuous mode [ 3243.716496][ T30] audit: type=1400 audit(1764745555.159:1388): avc: denied { read } for pid=12962 comm="syz.2.10751" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 3243.749488][T12907] bridge0: port 2(bridge_slave_1) entered blocking state [ 3243.756914][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 3243.764408][T12907] bridge_slave_1: entered allmulticast mode [ 3243.771644][T12907] bridge_slave_1: entered promiscuous mode [ 3243.803364][T10880] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3243.822525][T12907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3243.843070][T12907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3243.935465][T12907] team0: Port device team_slave_0 added [ 3243.942785][T12907] team0: Port device team_slave_1 added [ 3243.963305][T10880] usb 3-1: Using ep0 maxpacket: 8 [ 3243.996685][T10880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3244.015852][T12907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3244.023932][T10880] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3244.033078][T12907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3244.063562][T10880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3244.075022][T12907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3244.089297][T10880] usb 3-1: config 0 descriptor?? [ 3244.098256][T12907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3244.105674][T12907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3244.132052][T12907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3244.208055][T12907] hsr_slave_0: entered promiscuous mode [ 3244.209233][T12984] picdev_read: 77 callbacks suppressed [ 3244.209245][T12984] kvm: pic: non byte read [ 3244.214825][T12907] hsr_slave_1: entered promiscuous mode [ 3244.232343][T12984] kvm: pic: non byte read [ 3244.241595][T12984] kvm: pic: single mode not supported [ 3244.300270][T10880] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3244.494381][T12907] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3244.508743][T12907] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3244.531024][T12907] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3244.555791][T12907] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3244.560594][T12984] kvm: pic: non byte write [ 3244.567109][T12984] kvm: pic: non byte write [ 3244.571576][T12984] kvm: pic: non byte write [ 3244.576459][T12984] kvm: pic: non byte write [ 3244.581074][T12984] kvm: pic: non byte write [ 3244.586815][T12984] kvm: pic: non byte write [ 3244.591666][T12984] kvm: pic: non byte write [ 3244.596737][T12984] kvm: pic: non byte write [ 3244.601567][T12984] kvm: pic: non byte write [ 3244.606322][T12984] kvm: pic: non byte write [ 3244.615456][ T5108] Bluetooth: hci1: command tx timeout [ 3244.769129][T12907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3244.817118][T12907] 8021q: adding VLAN 0 to HW filter on device team0 [ 3244.841591][T31842] bridge0: port 1(bridge_slave_0) entered blocking state [ 3244.848733][T31842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3244.886758][T31842] bridge0: port 2(bridge_slave_1) entered blocking state [ 3244.893918][T31842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3245.103200][ T9643] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 3245.207348][ T9643] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3245.556392][T12907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3245.679356][T13009] input: syz1 as /devices/virtual/input/input53 [ 3245.756338][T13009] sp0: Synchronizing with TNC [ 3246.455617][T13006] [U] è [ 3246.693040][ T5108] Bluetooth: hci1: command tx timeout [ 3246.918326][T10880] usb 3-1: USB disconnect, device number 40 [ 3247.154895][T12907] veth0_vlan: entered promiscuous mode [ 3247.198031][T12907] veth1_vlan: entered promiscuous mode [ 3247.284079][T12907] veth0_macvtap: entered promiscuous mode [ 3247.297748][T12907] veth1_macvtap: entered promiscuous mode [ 3247.351969][T12907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3247.379510][T12907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3247.405403][T31842] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3247.420552][T31842] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3247.430528][T10280] usb 42-1: device descriptor read/8, error -110 [ 3247.453134][T31842] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3247.478988][T31842] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3247.517938][T13042] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 3247.524462][T13042] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3247.545721][T13044] syzkaller0: entered promiscuous mode [ 3247.561408][T13044] syzkaller0: entered allmulticast mode [ 3247.579858][T13042] vhci_hcd vhci_hcd.0: Device attached [ 3247.682840][T10280] usb 42-1: SetAddress Request (23) to port 0 [ 3247.724719][T10280] usb 42-1: new SuperSpeed USB device number 23 using vhci_hcd [ 3247.989949][T13043] vhci_hcd: connection reset by peer [ 3247.994684][T11109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3248.167025][ T7469] vhci_hcd: stop threads [ 3248.171427][T11109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3248.183531][ T7469] vhci_hcd: release socket [ 3248.194481][ T7469] vhci_hcd: disconnect device [ 3248.240687][T13052] debugfs: 'ttyS3' already exists in 'caif_serial' [ 3248.312012][T10372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3248.320440][T10372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3249.971865][T13080] syzkaller0: entered promiscuous mode [ 3249.992700][T13080] syzkaller0: entered allmulticast mode [ 3250.129342][T13091] IPv6: addrconf: prefix option has invalid lifetime [ 3250.313975][T13102] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 3250.320492][T13102] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3250.428725][T13102] vhci_hcd vhci_hcd.0: Device attached [ 3250.450860][T13104] vhci_hcd: connection closed [ 3250.450961][T10750] vhci_hcd: stop threads [ 3250.492762][T10750] vhci_hcd: release socket [ 3250.497212][T10750] vhci_hcd: disconnect device [ 3250.683096][T13118] fuse: Unknown parameter 'use00000000000000000000' [ 3250.843923][T13130] IPv6: addrconf: prefix option has invalid lifetime [ 3251.201367][T13151] fuse: Unknown parameter 'use00000000000000000000' [ 3251.451373][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 3251.451389][ T30] audit: type=1400 audit(1764745563.880:1393): avc: denied { link } for pid=13157 comm="syz.5.10810" name="#4e" dev="tmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3251.538574][ T30] audit: type=1400 audit(1764745563.910:1394): avc: denied { rename } for pid=13157 comm="syz.5.10810" name="#4f" dev="tmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3251.634041][T13169] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3251.640564][T13169] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3251.666021][T13169] vhci_hcd vhci_hcd.0: Device attached [ 3251.699421][T13170] vhci_hcd: connection closed [ 3251.699531][T16659] vhci_hcd: stop threads [ 3251.717614][T16659] vhci_hcd: release socket [ 3251.729252][T16659] vhci_hcd: disconnect device [ 3252.852262][T10280] usb 42-1: device descriptor read/8, error -110 [ 3253.114979][T10280] usb usb42-port1: attempt power cycle [ 3253.690755][T13227] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 3253.697259][T13227] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3253.735246][T13227] vhci_hcd vhci_hcd.0: Device attached [ 3253.754931][T10280] usb usb42-port1: unable to enumerate USB device [ 3253.778930][T13228] vhci_hcd: connection closed [ 3253.779104][T16659] vhci_hcd: stop threads [ 3253.792631][T16659] vhci_hcd: release socket [ 3253.797099][T16659] vhci_hcd: disconnect device [ 3254.645444][T13250] fuse: Unknown parameter 'user_i00000000000000000000' [ 3255.415697][T13268] ALSA: mixer_oss: invalid OSS volume '' [ 3255.422742][T13268] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 3255.429225][T13268] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3255.436817][T13268] vhci_hcd vhci_hcd.0: Device attached [ 3255.444479][T13270] vhci_hcd: connection closed [ 3255.444579][T11276] vhci_hcd: stop threads [ 3255.462552][T11276] vhci_hcd: release socket [ 3255.472043][T11276] vhci_hcd: disconnect device [ 3255.999280][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10849'. [ 3256.205722][T13288] sp0: Synchronizing with TNC [ 3256.727223][T13291] fuse: Bad value for 'fd' [ 3256.865988][T13283] [U] è [ 3256.945668][T13278] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3256.966100][T13278] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3256.983391][T13278] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3257.000115][T13278] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3257.009233][T13278] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3257.017747][T13278] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3257.044019][T13278] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3257.177792][T13300] fuse: Unknown parameter 'user_i00000000000000000000' [ 3257.421424][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10858'. [ 3257.614303][T13315] syzkaller0: entered promiscuous mode [ 3257.620543][T13315] syzkaller0: entered allmulticast mode [ 3257.907804][T13319] ALSA: mixer_oss: invalid OSS volume '' [ 3257.917082][T13319] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 3257.923569][T13319] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3257.931674][T13319] vhci_hcd vhci_hcd.0: Device attached [ 3257.942167][T13322] vhci_hcd: connection closed [ 3257.942391][T10750] vhci_hcd: stop threads [ 3257.963103][T10750] vhci_hcd: release socket [ 3257.973418][T10750] vhci_hcd: disconnect device [ 3258.135029][ T5108] Bluetooth: hci6: command 0x0c1a tx timeout [ 3258.297601][T13330] input: syz1 as /devices/virtual/input/input54 [ 3258.451916][T13332] sp0: Synchronizing with TNC [ 3259.011707][ T5108] Bluetooth: hci1: command 0x0c1a tx timeout [ 3259.018013][ T5108] Bluetooth: hci4: command 0x0c1a tx timeout [ 3259.025068][ T5108] Bluetooth: hci3: command 0x0c1a tx timeout [ 3259.031563][ T5108] Bluetooth: hci0: command 0x0c1a tx timeout [ 3259.402935][T13327] [U] è [ 3259.593503][T13341] fuse: Unknown parameter 'user_id00000000000000000000' [ 3259.735551][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10869'. [ 3260.950977][T13372] fuse: Unknown parameter 'user_id00000000000000000000' [ 3261.091269][T10065] Bluetooth: hci1: command 0x0c1a tx timeout [ 3261.288749][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10884'. [ 3261.294289][T13387] IPv6: addrconf: prefix option has invalid lifetime [ 3262.349142][T13397] debugfs: 'ttyS3' already exists in 'caif_serial' [ 3263.171197][T10065] Bluetooth: hci1: command 0x0c1a tx timeout [ 3263.789902][T13427] IPv6: addrconf: prefix option has invalid lifetime [ 3263.842699][T13429] No control pipe specified [ 3265.073249][T13448] debugfs: 'ttyS3' already exists in 'caif_serial' [ 3265.734357][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3265.740736][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.080864][T13468] fuse: Unknown parameter 'group_i00000000000000000000' [ 3267.240942][ T30] audit: type=1326 audit(1764745579.682:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.2.10915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05618f749 code=0x7ffc0000 [ 3267.428872][ T30] audit: type=1326 audit(1764745579.682:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.2.10915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05618f749 code=0x7ffc0000 [ 3267.453217][ T30] audit: type=1326 audit(1764745579.682:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.2.10915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05618f749 code=0x7ffc0000 [ 3267.489124][ T30] audit: type=1326 audit(1764745579.682:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.2.10915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc05618f749 code=0x7ffc0000 [ 3267.576671][T13490] debugfs: 'ttyS3' already exists in 'caif_serial' [ 3267.701324][ T30] audit: type=1326 audit(1764745579.702:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.2.10915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05618f749 code=0x7ffc0000 [ 3268.049385][ T30] audit: type=1326 audit(1764745579.702:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.2.10915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05618f749 code=0x7ffc0000 [ 3268.350410][ T30] audit: type=1326 audit(1764745579.722:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.2.10915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05618f749 code=0x7ffc0000 [ 3268.489304][ T30] audit: type=1326 audit(1764745579.722:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.2.10915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05618f749 code=0x7ffc0000 [ 3268.489629][T13501] fuse: Unknown parameter 'group_id00000000000000000000' [ 3268.517043][ T30] audit: type=1326 audit(1764745579.722:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.2.10915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc05618f749 code=0x7ffc0000 [ 3268.545842][ T30] audit: type=1326 audit(1764745579.732:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.2.10915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05618f749 code=0x7ffc0000 [ 3268.798727][T13516] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3268.805241][T13516] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3268.814560][T13516] vhci_hcd vhci_hcd.0: Device attached [ 3268.831843][T13518] vhci_hcd: connection closed [ 3268.831973][ T4154] vhci_hcd: stop threads [ 3268.842986][ T4154] vhci_hcd: release socket [ 3268.934011][T10880] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 3269.276895][ T4154] vhci_hcd: disconnect device [ 3269.282119][T10880] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3270.411557][T13540] syzkaller0: entered promiscuous mode [ 3270.417113][T13540] syzkaller0: entered allmulticast mode [ 3270.461051][T13542] fuse: Unknown parameter 'group_id00000000000000000000' [ 3270.563708][T13546] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3271.069266][T31541] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 3271.249260][T31541] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3271.675239][T13579] fuse: Unknown parameter 'group_id00000000000000000000' [ 3271.859459][T13583] syzkaller0: entered promiscuous mode [ 3271.878679][T13583] syzkaller0: entered allmulticast mode [ 3271.981405][T13588] debugfs: 'ttyS3' already exists in 'caif_serial' [ 3273.015563][T13594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10950'. [ 3273.071229][T13597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3273.375773][T13619] fuse: Bad value for 'user_id' [ 3273.381291][T13619] fuse: Bad value for 'user_id' [ 3273.707241][T10880] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 3273.780902][T10880] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3274.404844][T13643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3274.412102][T13643] IPv6: NLM_F_CREATE should be set when creating new route [ 3274.929400][T10880] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 3274.956670][T13640] ubi: mtd0 is already attached to ubi0 [ 3275.017801][T10880] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3275.427984][T13658] 9pnet_virtio: no channels available for device syz [ 3275.935689][T13651] fido_id[13651]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3276.249949][T13659] input: syz1 as /devices/virtual/input/input55 [ 3277.494136][T13663] Falling back ldisc for ttyprintk. [ 3278.168433][T10880] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 3278.328370][T10880] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3278.675184][T13687] fido_id[13687]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3279.153855][T13703] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 3279.160376][T13703] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3279.174564][T13703] vhci_hcd vhci_hcd.0: Device attached [ 3279.200213][T13704] 9pnet_virtio: no channels available for device syz [ 3279.220476][T13705] vhci_hcd: connection closed [ 3279.220670][T11109] vhci_hcd: stop threads [ 3279.231694][T11109] vhci_hcd: release socket [ 3279.236168][T11109] vhci_hcd: disconnect device [ 3279.601231][T13717] kAFS: No cell specified [ 3281.632996][T13754] overlayfs: overlapping lowerdir path [ 3281.689212][T13755] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 3281.697531][T13755] overlayfs: overlapping lowerdir path [ 3282.303249][T13759] 9pnet_virtio: no channels available for device syz [ 3282.413409][T13761] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 3282.419915][T13761] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3282.453838][T13761] vhci_hcd vhci_hcd.0: Device attached [ 3282.581942][T13764] vhci_hcd: connection closed [ 3282.582189][T10372] vhci_hcd: stop threads [ 3282.595381][T10372] vhci_hcd: release socket [ 3282.605055][T10372] vhci_hcd: disconnect device [ 3283.861190][T13806] overlayfs: overlapping lowerdir path [ 3283.872767][T13806] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 3283.881080][T13806] overlayfs: overlapping lowerdir path [ 3284.379592][T13802] afs: Unknown parameter 'dy' [ 3284.778239][T13817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3284.785493][T13817] IPv6: NLM_F_CREATE should be set when creating new route [ 3284.821571][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11022'. [ 3286.055532][T13853] afs: Unknown parameter 'dy' [ 3286.620363][T13867] fuse: Bad value for 'fd' [ 3287.119499][T31541] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 3287.172180][T31541] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3287.244362][T13877] autofs: Bad value for 'fd' [ 3287.370288][T13878] fido_id[13878]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3287.660043][T13887] 9pnet_virtio: no channels available for device syz [ 3288.241833][T13894] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 3288.248338][T13894] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3288.280960][T13894] vhci_hcd vhci_hcd.0: Device attached [ 3288.323015][T13898] vhci_hcd: connection closed [ 3288.323239][T10881] vhci_hcd: stop threads [ 3288.326829][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11045'. [ 3288.427839][T10881] vhci_hcd: release socket [ 3288.446022][T10881] vhci_hcd: disconnect device [ 3288.669133][T13906] sp0: Synchronizing with TNC [ 3288.976035][T13897] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3288.996906][T13897] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3289.011457][T13897] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3289.031355][T13897] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3289.047171][T13897] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3289.335969][T13902] [U] è [ 3289.347393][T13908] fuse: Bad value for 'fd' [ 3289.848551][T13915] fuse: Bad value for 'fd' [ 3290.528851][T10065] Bluetooth: hci6: command 0x0c1a tx timeout [ 3290.539804][T13922] autofs: Bad value for 'fd' [ 3290.556770][T31541] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 3290.585487][T31541] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3291.028007][T10065] Bluetooth: hci0: command 0x0c1a tx timeout [ 3291.086907][T31541] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 3291.095218][T10065] Bluetooth: hci1: command 0x0c1a tx timeout [ 3291.102591][T10065] Bluetooth: hci4: command 0x0c1a tx timeout [ 3291.108950][T10065] Bluetooth: hci3: command 0x0c1a tx timeout [ 3291.294802][T31541] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3291.321977][T13929] fido_id[13929]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3291.389597][T13936] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3291.396102][T13936] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3291.422775][T13936] vhci_hcd vhci_hcd.0: Device attached [ 3291.531473][T13937] vhci_hcd: connection closed [ 3291.531585][T16659] vhci_hcd: stop threads [ 3291.564194][T16659] vhci_hcd: release socket [ 3291.578068][T16659] vhci_hcd: disconnect device [ 3291.666488][T13944] fido_id[13944]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3292.590918][T13952] input: syz1 as /devices/virtual/input/input56 [ 3292.687610][T13952] sp0: Synchronizing with TNC [ 3293.024825][T13956] fuse: Invalid rootmode [ 3294.202005][T13948] [U] è [ 3295.411162][T31541] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 3295.444980][T13984] syzkaller0: entered promiscuous mode [ 3295.461300][T31541] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3295.473808][T13984] syzkaller0: entered allmulticast mode [ 3295.654731][T13986] fido_id[13986]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3295.658515][T13984] tipc: Enabling of bearer rejected, failed to enable media [ 3295.709646][T13990] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 3295.716160][T13990] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3295.752513][T13990] vhci_hcd vhci_hcd.0: Device attached [ 3295.816002][T13994] vhci_hcd: connection closed [ 3295.816285][T10881] vhci_hcd: stop threads [ 3295.838897][T10881] vhci_hcd: release socket [ 3295.847862][T10881] vhci_hcd: disconnect device [ 3296.441929][T14003] fuse: Invalid rootmode [ 3297.101485][T14022] input: syz1 as /devices/virtual/input/input57 [ 3297.226837][T14024] sp0: Synchronizing with TNC [ 3297.976384][T14015] [U] è [ 3298.423007][T14034] autofs: Unknown parameter '0x0000000000000000' [ 3298.522848][T14037] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3298.627093][T14044] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 3298.633674][T14044] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3298.693817][T14044] vhci_hcd vhci_hcd.0: Device attached [ 3298.736282][T14045] vhci_hcd: connection closed [ 3298.743147][T16659] vhci_hcd: stop threads [ 3298.967274][T15966] usb 44-1: SetAddress Request (18) to port 0 [ 3298.981233][T15966] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 3299.426959][T16659] vhci_hcd: release socket [ 3299.454155][T16659] vhci_hcd: disconnect device [ 3299.667019][T14054] fuse: Invalid rootmode [ 3299.994131][T14066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3300.015182][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11098'. [ 3300.290332][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11099'. [ 3300.418557][T14078] autofs: Unknown parameter '0x0000000000000000' [ 3300.433091][T14071] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3300.447385][T14071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3300.466294][T14071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3300.499666][T14071] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3300.523853][T14071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3300.786396][T14082] input: syz1 as /devices/virtual/input/input58 [ 3300.880080][T14082] sp0: Synchronizing with TNC [ 3302.072039][T14080] [U] è [ 3302.446573][ T5108] Bluetooth: hci6: command 0x0c1a tx timeout [ 3302.526697][ T5108] Bluetooth: hci4: command 0x0c1a tx timeout [ 3302.536505][T10065] Bluetooth: hci3: command 0x0c1a tx timeout [ 3302.536509][ T9729] Bluetooth: hci0: command 0x0c1a tx timeout [ 3302.606688][T10065] Bluetooth: hci1: command 0x0c1a tx timeout [ 3303.226861][T14101] fuse: Bad value for 'rootmode' [ 3304.029010][T14119] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3304.129839][T15966] usb 44-1: device descriptor read/8, error -110 [ 3304.538689][T15966] usb usb44-port1: attempt power cycle [ 3305.537021][T15966] usb usb44-port1: unable to enumerate USB device [ 3306.003693][T14163] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3306.022265][T14163] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3306.070122][T14163] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3306.077693][T14163] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3306.121969][T14163] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3307.601658][T14190] input: syz1 as /devices/virtual/input/input59 [ 3307.673596][T14190] sp0: Synchronizing with TNC [ 3308.006420][T10065] Bluetooth: hci6: command 0x0c1a tx timeout [ 3308.064455][T10065] Bluetooth: hci0: command 0x0c1a tx timeout [ 3308.168552][ T5108] Bluetooth: hci3: command 0x0c1a tx timeout [ 3308.174636][T10065] Bluetooth: hci4: command 0x0c1a tx timeout [ 3308.205995][ T9729] Bluetooth: hci1: command 0x0c1a tx timeout [ 3308.475984][T14186] [U] è [ 3309.567649][T14212] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3309.582833][T14212] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3309.650685][T14212] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3310.234273][T14218] fuse: Unknown parameter 'use00000000000000000000' [ 3311.568066][T14259] fuse: Bad value for 'fd' [ 3311.677132][T14250] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3311.694047][T14250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3311.709624][T14250] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3311.725536][T14250] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3311.740535][T14250] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3311.872667][T14261] input: syz1 as /devices/virtual/input/input60 [ 3311.893558][T14261] sp0: Synchronizing with TNC [ 3311.918761][T14260] [U] è [ 3312.136574][T14271] autofs: Unknown parameter 'fd0x0000000000000000' [ 3312.716512][T14288] fuse: Unknown parameter 'use00000000000000000000' [ 3312.983298][T14299] input: syz1 as /devices/virtual/input/input61 [ 3313.002509][T14299] sp0: Synchronizing with TNC [ 3313.027889][T14298] [U] è [ 3313.565323][ T9729] Bluetooth: hci6: command 0x0c1a tx timeout [ 3313.726053][ T5108] Bluetooth: hci0: command 0x0c1a tx timeout [ 3313.732225][ T9729] Bluetooth: hci3: command 0x0c1a tx timeout [ 3313.744258][T10880] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 3313.776253][T10880] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3313.805560][ T9729] Bluetooth: hci1: command 0x0c1a tx timeout [ 3313.805874][ T5108] Bluetooth: hci4: command 0x0c1a tx timeout [ 3314.291683][T14312] fido_id[14312]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3315.707299][T10291] usb 1-1: new low-speed USB device number 96 using dummy_hcd [ 3315.793524][T14347] syzkaller0: entered promiscuous mode [ 3315.818700][T14347] syzkaller0: entered allmulticast mode [ 3315.866496][T10291] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3315.877294][T10291] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 3315.887460][T10291] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3315.897971][T10291] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 3316.050630][T14356] fuse: Bad value for 'fd' [ 3316.237928][T10291] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3316.248402][T10291] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 3316.260466][T10291] usb 1-1: string descriptor 0 read error: -22 [ 3316.266757][T10291] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3316.275827][T10291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3316.769514][T10291] usb 1-1: rejected 3 configurations due to insufficient available bus power [ 3316.778378][T10291] usb 1-1: no configuration chosen from 3 choices [ 3316.781007][ T6212] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 3316.808923][ T6212] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3317.556588][T14370] debugfs: 'ttyS3' already exists in 'caif_serial' [ 3317.566814][T10291] usb 1-1: USB disconnect, device number 96 [ 3317.625645][T14367] fido_id[14367]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3318.106364][T14386] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3318.116657][T14386] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3318.135607][T14386] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3318.249064][T14386] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3318.269142][T14386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3319.628363][ T6212] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 3319.655483][ T6212] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3319.964504][ T5108] Bluetooth: hci6: command 0x0c1a tx timeout [ 3320.087577][T14427] debugfs: 'ttyS3' already exists in 'caif_serial' [ 3320.124624][ T5108] Bluetooth: hci0: command 0x0c1a tx timeout [ 3320.204533][ T5108] Bluetooth: hci3: command 0x0c1a tx timeout [ 3320.284678][ T9729] Bluetooth: hci4: command 0x0c1a tx timeout [ 3320.284715][ T5108] Bluetooth: hci1: command 0x0c1a tx timeout [ 3321.047873][T14433] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3321.392223][T14450] fuse: Bad value for 'fd' [ 3322.193070][ T6212] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 3322.347695][T28274] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 3322.485955][ T6212] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3322.506028][T28274] hid-generic 0000:0000:0000.0041: hidraw1: HID v0.00 Device [syz1] on syz0 [ 3322.763767][T14462] fido_id[14462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3322.768946][T14461] fido_id[14461]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3323.873896][T14482] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3324.347370][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11231'. [ 3324.398242][T14494] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 3324.404752][T14494] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3324.439949][T14494] vhci_hcd vhci_hcd.0: Device attached [ 3324.477565][T14496] vhci_hcd: connection closed [ 3324.479179][T32710] vhci_hcd: stop threads [ 3324.494559][T32710] vhci_hcd: release socket [ 3324.545498][T32710] vhci_hcd: disconnect device [ 3325.171262][T14505] sp0: Synchronizing with TNC [ 3325.284627][T14495] [U] è [ 3325.532253][T14510] fuse: Bad value for 'fd' [ 3326.443786][T14487] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 3326.445662][ T5108] Bluetooth: hci6: command 0x0c1a tx timeout [ 3326.952073][T14487] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3326.958531][T14487] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3326.965218][T14487] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3326.971329][T14487] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3327.168923][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.178665][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.750213][T14538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3327.803154][T14541] fuse: Bad value for 'fd' [ 3328.316505][T14545] fuse: Unknown parameter 'grou00000000000000000000' [ 3328.619802][ T5108] Bluetooth: hci0: command 0x0c1a tx timeout [ 3329.003696][T10065] Bluetooth: hci3: command 0x0c1a tx timeout [ 3329.009816][ T9729] Bluetooth: hci4: command 0x0c1a tx timeout [ 3329.015882][ T5108] Bluetooth: hci1: command 0x0c1a tx timeout [ 3329.156264][T14550] input: syz1 as /devices/virtual/input/input62 [ 3329.227579][T14550] sp0: Synchronizing with TNC [ 3329.321727][T14547] [U] è [ 3329.380741][T14559] fuse: Bad value for 'fd' [ 3330.012955][T14579] fuse: Unknown parameter 'grou00000000000000000000' [ 3330.398904][T14598] input: syz1 as /devices/virtual/input/input63 [ 3330.468345][T14598] sp0: Synchronizing with TNC [ 3330.830896][T14605] fuse: Bad value for 'fd' [ 3331.111468][T14591] [U] è [ 3331.865490][T14628] fuse: Unknown parameter 'group_i00000000000000000000' [ 3332.127784][T14636] No control pipe specified [ 3332.305048][T14643] fuse: Unknown parameter '0x0000000000000003' [ 3332.857731][T14657] input: syz1 as /devices/virtual/input/input64 [ 3332.961207][T14657] sp0: Synchronizing with TNC [ 3334.358354][T14664] fuse: Unknown parameter 'group_i00000000000000000000' [ 3334.403836][T14651] [U] è [ 3334.653263][T14678] fuse: Unknown parameter '0x0000000000000003' [ 3334.773292][T14683] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3334.782347][T14683] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3334.803436][T14683] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3335.928445][T14703] debugfs: 'ttyS3' already exists in 'caif_serial' [ 3336.701853][T14699] syzkaller0: entered promiscuous mode [ 3336.753719][T14699] syzkaller0: entered allmulticast mode [ 3337.008737][T14713] input: syz1 as /devices/virtual/input/input65 [ 3338.017919][T14713] sp0: Synchronizing with TNC [ 3338.022907][T14713] [U] è [ 3338.065202][T14725] fuse: Unknown parameter '0x0000000000000003' [ 3338.783605][T14738] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3338.792624][T14738] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3338.813352][T14738] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3339.221973][T16665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3339.233605][T16665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3339.249190][T16665] bond0 (unregistering): Released all slaves [ 3339.445395][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11312'. [ 3339.553104][T16665] bond1 (unregistering): Released all slaves [ 3340.110006][T16665] bond2 (unregistering): Released all slaves [ 3340.226449][T14764] debugfs: 'ttyS3' already exists in 'caif_serial' [ 3340.427583][T14748] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3340.459058][T14748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3340.475625][T14748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3340.491501][T14748] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3340.507691][T14748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3340.536599][T16665] tipc: Left network mode [ 3340.606489][T16665] IPVS: stopping backup sync thread 2522 ... [ 3341.176242][T28274] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 3341.178129][T14784] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3341.194801][T14784] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3341.216099][T14784] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3341.548217][T16665] hsr_slave_0: left promiscuous mode [ 3341.566908][T28274] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3341.578235][T28274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3341.589091][T16665] hsr_slave_1: left promiscuous mode [ 3341.589278][T28274] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3341.615723][T28274] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3341.630524][T28274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3341.648618][T28274] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3341.684162][T28274] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3341.697775][T28274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3341.748378][T28274] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3341.794102][T28274] usb 6-1: string descriptor 0 read error: -22 [ 3341.826356][T28274] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3341.856861][T28274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3341.930571][T28274] adutux 6-1:168.0: interrupt endpoints not found [ 3342.090454][T14798] fuse: Bad value for 'user_id' [ 3342.104612][T14798] fuse: Bad value for 'user_id' [ 3342.430923][T28274] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 3342.445716][ T5108] Bluetooth: hci6: command 0x0c1a tx timeout [ 3342.548911][ T5108] Bluetooth: hci1: command 0x0c1a tx timeout [ 3342.555221][T10065] Bluetooth: hci3: command 0x0c1a tx timeout [ 3342.561287][ T9729] Bluetooth: hci4: command 0x0c1a tx timeout [ 3342.567602][T10065] Bluetooth: hci0: command 0x0c1a tx timeout [ 3342.894494][T28274] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3343.237590][T14805] fido_id[14805]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3344.220105][T10280] usb 6-1: USB disconnect, device number 58 [ 3344.840858][T16665] team0 (unregistering): Port device team_slave_1 removed [ 3344.885004][T16665] team0 (unregistering): Port device team_slave_0 removed [ 3347.054880][T14852] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 3347.061415][T14852] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3347.098413][T14852] vhci_hcd vhci_hcd.0: Device attached [ 3347.181471][T10280] usb 5-1: new low-speed USB device number 120 using dummy_hcd [ 3347.231004][T14858] vhci_hcd: connection closed [ 3347.231262][T13261] vhci_hcd: stop threads [ 3347.249420][T13261] vhci_hcd: release socket [ 3347.253009][T16665] IPVS: stop unused estimator thread 0... [ 3347.262332][T13261] vhci_hcd: disconnect device [ 3347.377475][T28274] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 3347.762382][T28274] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3347.814207][T10280] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3347.831760][T10280] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3347.863080][T10280] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3347.906689][T10280] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3347.927330][T10280] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3347.938580][T10280] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3348.011805][T14872] ubi: mtd0 is already attached to ubi0 [ 3348.043466][T10280] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3348.053363][T14874] syzkaller0: entered promiscuous mode [ 3348.054170][T10280] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3348.070516][T10280] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3348.074117][T14874] syzkaller0: entered allmulticast mode [ 3348.097087][T10280] usb 5-1: string descriptor 0 read error: -22 [ 3348.105459][T10280] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3348.114908][T10280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3348.115263][T14876] fuse: Bad value for 'group_id' [ 3348.127271][T10280] adutux 5-1:168.0: interrupt endpoints not found [ 3348.161283][T14876] fuse: Bad value for 'group_id' [ 3349.518196][T14903] fuse: Bad value for 'fd' [ 3350.213162][T14913] input: syz1 as /devices/virtual/input/input66 [ 3350.276631][T14913] sp0: Synchronizing with TNC [ 3350.596724][T14899] [U] è [ 3350.735211][T10280] usb 5-1: USB disconnect, device number 120 [ 3350.805170][T14915] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 3350.811689][T14915] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3350.850484][T14915] vhci_hcd vhci_hcd.0: Device attached [ 3350.870168][T14920] vhci_hcd: connection closed [ 3350.870370][T10750] vhci_hcd: stop threads [ 3350.904830][T10750] vhci_hcd: release socket [ 3350.909274][T10750] vhci_hcd: disconnect device [ 3351.048069][T14935] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3351.078579][T14929] debugfs: 'ttyS3' already exists in 'caif_serial' [ 3351.091939][T14935] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3351.158489][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11361'. [ 3351.245980][T14935] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3351.367121][T14933] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3351.393837][T14933] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3351.434121][T14933] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3351.462972][T14933] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3351.506793][T14933] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3351.525411][T14950] fuse: Bad value for 'fd' [ 3352.573661][T14952] input: syz1 as /devices/virtual/input/input67 [ 3352.794149][T14952] sp0: Synchronizing with TNC [ 3352.842504][T14951] [U] è [ 3353.162548][T10280] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 3353.343733][T10280] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3353.366942][T10280] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3353.390785][T14971] ubi: mtd0 is already attached to ubi0 [ 3353.400930][ T9729] Bluetooth: hci6: command 0x0c1a tx timeout [ 3353.404990][T10280] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3353.407006][T10065] Bluetooth: hci0: command 0x0c1a tx timeout [ 3353.446544][T10280] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3353.461933][T10280] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3353.480866][ T9729] Bluetooth: hci3: command 0x0c1a tx timeout [ 3353.485976][T10280] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3353.486933][T10065] Bluetooth: hci4: command 0x0c1a tx timeout [ 3353.507465][T10280] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3353.559062][T10280] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3353.560760][T10065] Bluetooth: hci1: command 0x0c1a tx timeout [ 3353.589129][T10280] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3353.647621][T10280] usb 1-1: string descriptor 0 read error: -22 [ 3353.757795][T10280] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3353.784994][T10280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3353.828698][T10280] adutux 1-1:168.0: interrupt endpoints not found [ 3354.551292][T10880] usb 1-1: USB disconnect, device number 97 [ 3357.080610][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11391'. [ 3357.272293][T15027] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3357.279611][T15027] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3357.298634][T15027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3357.305986][T15027] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3357.319354][T15027] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3358.000300][T15966] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 3358.231693][T15966] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3358.276839][T15966] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3358.309683][T15966] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3358.342442][T15966] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3358.399098][T15966] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3358.425560][T15966] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3358.471427][T15069] input: syz1 as /devices/virtual/input/input68 [ 3358.484939][T15069] sp0: Synchronizing with TNC [ 3358.493955][T15067] [U] è [ 3358.499348][T15966] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3358.525793][T15966] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3358.558549][T15966] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3358.608861][T15966] usb 5-1: string descriptor 0 read error: -22 [ 3358.621332][T15966] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3358.645969][T15966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3358.674007][T15966] adutux 5-1:168.0: interrupt endpoints not found [ 3358.767130][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11406'. [ 3358.801079][T15072] bridge0: port 2(bridge_slave_1) entered disabled state [ 3359.240071][T10065] Bluetooth: hci6: command 0x0c1a tx timeout [ 3359.299541][T15081] fuse: Invalid rootmode [ 3359.320590][T10065] Bluetooth: hci1: command 0x0c1a tx timeout [ 3359.320654][ T747] Bluetooth: hci3: command 0x0c1a tx timeout [ 3359.326794][T10065] Bluetooth: hci0: command 0x0c1a tx timeout [ 3359.333318][ T9729] Bluetooth: hci4: command 0x0c1a tx timeout [ 3359.512000][T15091] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 3360.240081][T15090] ubi: mtd0 is already attached to ubi0 [ 3360.720076][T15966] usb 5-1: USB disconnect, device number 121 [ 3361.153708][T15134] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 3362.399783][T15159] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3362.729748][T10280] usb 5-1: new low-speed USB device number 122 using dummy_hcd [ 3362.914751][T10280] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3362.916888][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 3362.916902][ T30] audit: type=1326 audit(1764745675.353:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.2.11442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc05618f749 code=0x0 [ 3362.952699][T10280] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3362.976561][T10280] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3363.009690][T10280] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3363.031129][T10280] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3363.070066][T10280] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3363.125616][T15179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11442'. [ 3363.126390][T10280] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 3363.155925][T15179] bridge_slave_0: default FDB implementation only supports local addresses [ 3363.182448][T10280] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3363.220664][T10280] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3363.249031][T10280] usb 5-1: string descriptor 0 read error: -22 [ 3363.260330][T10280] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3363.279089][T10280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3363.324994][T11109] bond0: (slave netdevsim0): Releasing backup interface [ 3363.341732][T10280] adutux 5-1:168.0: interrupt endpoints not found [ 3363.579026][T28274] usb 5-1: USB disconnect, device number 122 [ 3364.234009][T15084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3364.246402][T15084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3364.258807][T15084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3364.267180][T15084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3364.275743][T15084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3364.658053][T11109] bond0 (unregistering): Released all slaves [ 3364.712325][T11109] tipc: Left network mode [ 3364.744684][T11109] IPVS: stopping master sync thread 10495 ... [ 3364.800453][T15214] input: syz1 as /devices/virtual/input/input69 [ 3364.822816][T15214] sp0: Synchronizing with TNC [ 3364.831999][T15199] ªªªªªª speed is unknown, defaulting to 1000 [ 3364.840611][T15213] [U] è [ 3365.116684][T15199] lo speed is unknown, defaulting to 1000 [ 3365.251527][T15218] fuse: Unknown parameter 'grou00000000000000000000' [ 3365.408706][T11109] hsr_slave_0: left promiscuous mode [ 3365.428603][T11109] hsr_slave_1: left promiscuous mode [ 3365.890093][ T9729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3365.902240][ T9729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3365.910745][ T9729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3365.919968][ T9729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3365.928004][ T9729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3366.359706][ T9729] Bluetooth: hci0: command tx timeout [ 3366.833185][T15199] chnl_net:caif_netlink_parms(): no params data found [ 3366.900234][T15230] ªªªªªª speed is unknown, defaulting to 1000 [ 3366.944942][ T30] audit: type=1400 audit(1764745679.383:1462): avc: denied { append } for pid=15246 comm="syz.4.11465" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 3367.003645][T15252] input: syz1 as /devices/virtual/input/input70 [ 3367.182360][T15199] bridge0: port 1(bridge_slave_0) entered blocking state [ 3367.199224][T15199] bridge0: port 1(bridge_slave_0) entered disabled state [ 3367.206373][T15199] bridge_slave_0: entered allmulticast mode [ 3367.219813][T15199] bridge_slave_0: entered promiscuous mode [ 3367.233308][T15199] bridge0: port 2(bridge_slave_1) entered blocking state [ 3367.240442][T15199] bridge0: port 2(bridge_slave_1) entered disabled state [ 3367.247590][T15199] bridge_slave_1: entered allmulticast mode [ 3367.267354][T15199] bridge_slave_1: entered promiscuous mode [ 3367.371845][T15199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3367.400788][T15199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3367.582547][T15199] team0: Port device team_slave_0 added [ 3367.620717][T15199] team0: Port device team_slave_1 added [ 3367.690596][T15084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3367.701137][T15084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3367.710517][T15084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3367.718866][T15084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3367.729892][T15084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3367.776018][T11109] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3367.840840][T15199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3367.848075][T15199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3367.875626][T15199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3367.891228][T15199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3367.901048][T15199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3367.937128][T15199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3367.943256][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11473'. [ 3367.959120][ T9729] Bluetooth: hci2: command tx timeout [ 3368.010193][T11109] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3368.058252][T15230] chnl_net:caif_netlink_parms(): no params data found [ 3368.108037][T15268] ªªªªªª speed is unknown, defaulting to 1000 [ 3368.161528][T15199] hsr_slave_0: entered promiscuous mode [ 3368.172303][T15276] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3368.183212][T15199] hsr_slave_1: entered promiscuous mode [ 3368.198626][T15276] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3368.208201][T15276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3368.215516][T15199] debugfs: 'hsr0' already exists in 'hsr' [ 3368.225425][T15199] Cannot create hsr debugfs directory [ 3368.233014][T15276] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 3368.280926][T15276] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 3368.301228][T15276] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3368.331354][T15276] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 3368.347215][T11109] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3368.370570][T15276] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 3368.398379][T15276] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3368.426283][T15276] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3368.458852][T15276] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3368.574032][T11109] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3368.652397][T15230] bridge0: port 1(bridge_slave_0) entered blocking state [ 3368.659668][T15230] bridge0: port 1(bridge_slave_0) entered disabled state [ 3368.667891][T15230] bridge_slave_0: entered allmulticast mode [ 3368.677760][T15230] bridge_slave_0: entered promiscuous mode [ 3368.702720][T15230] bridge0: port 2(bridge_slave_1) entered blocking state [ 3368.714704][T15230] bridge0: port 2(bridge_slave_1) entered disabled state [ 3368.722170][T15230] bridge_slave_1: entered allmulticast mode [ 3368.739451][T15230] bridge_slave_1: entered promiscuous mode [ 3368.900023][T15230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3368.915189][T15292] input: syz1 as /devices/virtual/input/input71 [ 3368.985386][T15230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3369.088077][T15230] team0: Port device team_slave_0 added [ 3369.116329][T15230] team0: Port device team_slave_1 added [ 3369.313099][T15230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3369.321714][T15230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3369.373038][T15230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3369.413007][T15230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3369.420125][T15230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3369.447116][T15230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3369.470831][T15268] chnl_net:caif_netlink_parms(): no params data found [ 3369.608161][T15199] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3369.668707][T15199] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3369.759224][T15199] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3369.779540][T15199] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3369.809131][T15230] hsr_slave_0: entered promiscuous mode [ 3369.815541][T15230] hsr_slave_1: entered promiscuous mode [ 3369.829469][T15230] debugfs: 'hsr0' already exists in 'hsr' [ 3369.842234][T15230] Cannot create hsr debugfs directory [ 3369.932435][T15084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3369.943244][T15084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3369.955687][T15084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3369.965291][T15084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3369.973074][T15084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3370.059813][T15268] bridge0: port 1(bridge_slave_0) entered blocking state [ 3370.067115][T15268] bridge0: port 1(bridge_slave_0) entered disabled state [ 3370.074718][T15268] bridge_slave_0: entered allmulticast mode [ 3370.082918][T15268] bridge_slave_0: entered promiscuous mode [ 3370.108179][T15268] bridge0: port 2(bridge_slave_1) entered blocking state [ 3370.117542][T15268] bridge0: port 2(bridge_slave_1) entered disabled state [ 3370.124733][T15084] Bluetooth: hci6: command 0x0c1a tx timeout [ 3370.135468][T15268] bridge_slave_1: entered allmulticast mode [ 3370.142783][T15268] bridge_slave_1: entered promiscuous mode [ 3370.221293][T15268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3370.247965][T15313] ªªªªªª speed is unknown, defaulting to 1000 [ 3370.271817][T15268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3370.288887][T15084] Bluetooth: hci0: command 0x040f tx timeout [ 3370.359266][T15084] Bluetooth: hci2: command 0x040f tx timeout [ 3370.411090][T15268] team0: Port device team_slave_0 added [ 3370.433938][T15268] team0: Port device team_slave_1 added [ 3370.448823][T15084] Bluetooth: hci1: command 0x041b tx timeout [ 3370.533024][T15268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3370.540110][T15268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3370.567203][T15268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3370.585615][T15268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3370.592674][T15268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3370.619398][T15268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3370.681268][T11109] bridge_slave_1: left allmulticast mode [ 3370.686918][T11109] bridge_slave_1: left promiscuous mode [ 3370.692821][T11109] bridge0: port 2(bridge_slave_1) entered disabled state [ 3370.701989][T11109] bridge_slave_0: left allmulticast mode [ 3370.707630][T11109] bridge_slave_0: left promiscuous mode [ 3370.713462][T11109] bridge0: port 1(bridge_slave_0) entered disabled state [ 3370.724250][T11109] bridge_slave_1: left allmulticast mode [ 3370.730128][T11109] bridge_slave_1: left promiscuous mode [ 3370.738913][T11109] bridge0: port 2(bridge_slave_1) entered disabled state [ 3370.747662][T11109] bridge_slave_0: left promiscuous mode [ 3370.753455][T11109] bridge0: port 1(bridge_slave_0) entered disabled state [ 3371.091483][T11109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3371.102101][T11109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3371.114269][T11109] bond0 (unregistering): Released all slaves [ 3371.434568][T11109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3371.446169][T11109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3371.456623][T11109] bond0 (unregistering): Released all slaves [ 3371.491829][T15268] hsr_slave_0: entered promiscuous mode [ 3371.498329][T15268] hsr_slave_1: entered promiscuous mode [ 3371.506959][T15268] debugfs: 'hsr0' already exists in 'hsr' [ 3371.513024][T15268] Cannot create hsr debugfs directory [ 3371.682670][T15199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3371.840570][T15230] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3371.855122][T15230] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3371.914778][T15230] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3371.926777][T15344] fuse: Unknown parameter 'use00000000000000000000' [ 3371.954311][T15230] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3371.995225][T15199] 8021q: adding VLAN 0 to HW filter on device team0 [ 3372.039197][T15084] Bluetooth: hci3: command tx timeout [ 3372.064767][ T954] bridge0: port 1(bridge_slave_0) entered blocking state [ 3372.071885][ T954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3372.129676][T15313] chnl_net:caif_netlink_parms(): no params data found [ 3372.167780][ T954] bridge0: port 2(bridge_slave_1) entered blocking state [ 3372.174882][ T954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3372.359295][T15084] Bluetooth: hci0: command 0x040f tx timeout [ 3372.438964][T15084] Bluetooth: hci2: command 0x040f tx timeout [ 3372.494398][T15313] bridge0: port 1(bridge_slave_0) entered blocking state [ 3372.501666][T15313] bridge0: port 1(bridge_slave_0) entered disabled state [ 3372.509303][T15313] bridge_slave_0: entered allmulticast mode [ 3372.516433][T15313] bridge_slave_0: entered promiscuous mode [ 3372.528742][T15084] Bluetooth: hci1: command 0x041b tx timeout [ 3372.541359][T11109] hsr_slave_0: left promiscuous mode [ 3372.547199][T11109] hsr_slave_1: left promiscuous mode [ 3372.553242][T11109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3372.561145][T11109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3372.569114][T11109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3372.576540][T11109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3372.587976][T11109] hsr_slave_0: left promiscuous mode [ 3372.593969][T11109] hsr_slave_1: left promiscuous mode [ 3372.603419][T11109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3372.613768][T11109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3372.639724][T11109] veth1_macvtap: left promiscuous mode [ 3372.645847][T11109] veth0_macvtap: left promiscuous mode [ 3372.652316][T11109] veth1_vlan: left promiscuous mode [ 3372.657629][T11109] veth0_vlan: left promiscuous mode [ 3373.077660][T11109] team0 (unregistering): Port device team_slave_1 removed [ 3373.126245][T11109] team0 (unregistering): Port device team_slave_0 removed [ 3374.131212][T15084] Bluetooth: hci3: command tx timeout [ 3374.283083][T11109] team0 (unregistering): Port device team_slave_1 removed [ 3374.318689][T11109] team0 (unregistering): Port device team_slave_0 removed [ 3374.438456][T15084] Bluetooth: hci0: command 0x040f tx timeout [ 3374.528478][T15084] Bluetooth: hci2: command 0x040f tx timeout [ 3374.608365][T15084] Bluetooth: hci1: command 0x041b tx timeout [ 3374.670568][T15313] bridge0: port 2(bridge_slave_1) entered blocking state [ 3374.677696][T15313] bridge0: port 2(bridge_slave_1) entered disabled state [ 3374.684885][T15313] bridge_slave_1: entered allmulticast mode [ 3374.696538][T15313] bridge_slave_1: entered promiscuous mode [ 3374.812936][T15313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3374.850151][T15313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3375.000041][T15313] team0: Port device team_slave_0 added [ 3375.009013][T15313] team0: Port device team_slave_1 added [ 3375.075707][T15313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3375.082938][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3375.119021][T15313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3375.147425][T15313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3375.154524][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3375.201443][T15313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3375.280397][T15230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3375.299550][T15313] hsr_slave_0: entered promiscuous mode [ 3375.306044][T15313] hsr_slave_1: entered promiscuous mode [ 3375.312633][T15268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3375.321703][T15268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3375.333738][T15268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3375.342871][T15268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3375.352924][T15199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3375.438065][T15230] 8021q: adding VLAN 0 to HW filter on device team0 [ 3375.468531][T11109] IPVS: stop unused estimator thread 0... [ 3375.477724][T13261] bridge0: port 1(bridge_slave_0) entered blocking state [ 3375.484844][T13261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3375.520293][ T4154] bridge0: port 2(bridge_slave_1) entered blocking state [ 3375.527349][ T4154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3375.690499][T11109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3375.790071][T11109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3375.795022][T15393] fuse: Unknown parameter 'use00000000000000000000' [ 3375.934288][T11109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3376.037149][T11109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3376.066672][T15199] veth0_vlan: entered promiscuous mode [ 3376.090622][T15268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3376.108561][T15199] veth1_vlan: entered promiscuous mode [ 3376.190015][T15230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3376.199427][T15084] Bluetooth: hci3: command tx timeout [ 3376.243082][T15268] 8021q: adding VLAN 0 to HW filter on device team0 [ 3376.261034][T10881] bridge0: port 1(bridge_slave_0) entered blocking state [ 3376.261121][T10881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3376.262680][T10881] bridge0: port 2(bridge_slave_1) entered blocking state [ 3376.262761][T10881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3376.405991][T15199] veth0_macvtap: entered promiscuous mode [ 3376.411624][T15313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3376.444702][T15313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3376.529502][T15084] Bluetooth: hci0: command 0x040f tx timeout [ 3376.598357][T15084] Bluetooth: hci2: command 0x040f tx timeout [ 3376.688408][T15084] Bluetooth: hci1: command 0x041b tx timeout [ 3376.719916][T11109] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3376.884778][T11109] bond0 (unregistering): Released all slaves [ 3376.895154][T15199] veth1_macvtap: entered promiscuous mode [ 3376.896672][T15313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3376.933398][T15313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3376.970357][T15199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3377.013705][T15199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3377.052010][ T954] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3377.052413][ T954] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3377.121079][ T954] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3377.132003][ T954] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3377.232123][T15230] veth0_vlan: entered promiscuous mode [ 3377.324047][T15230] veth1_vlan: entered promiscuous mode [ 3377.390975][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3377.405381][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3377.418670][T15268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3377.434496][T15230] veth0_macvtap: entered promiscuous mode [ 3377.464656][T15230] veth1_macvtap: entered promiscuous mode [ 3377.475746][T15313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3377.516166][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3377.525886][T11109] hsr_slave_0: left promiscuous mode [ 3377.528693][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3377.540262][T11109] hsr_slave_1: left promiscuous mode [ 3377.554662][T11109] veth1_macvtap: left promiscuous mode [ 3377.562203][T11109] veth0_macvtap: left promiscuous mode [ 3377.567789][T11109] veth1_vlan: left promiscuous mode [ 3377.575054][T11109] veth0_vlan: left promiscuous mode [ 3378.241955][T15432] fuse: Unknown parameter 'use00000000000000000000' [ 3378.287986][T15084] Bluetooth: hci3: command tx timeout [ 3378.363262][T15230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3378.386357][T15313] 8021q: adding VLAN 0 to HW filter on device team0 [ 3378.423997][T15230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3378.443649][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 3378.450801][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3378.474359][T15268] veth0_vlan: entered promiscuous mode [ 3378.489850][T11276] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3378.515269][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 3378.522408][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3378.534053][T11276] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3378.583672][T11276] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3378.597894][T15084] Bluetooth: hci0: command 0x040f tx timeout [ 3378.599856][T15268] veth1_vlan: entered promiscuous mode [ 3378.623302][T11276] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3378.688075][T15084] Bluetooth: hci2: command 0x040f tx timeout [ 3378.757872][T15084] Bluetooth: hci1: command 0x041b tx timeout [ 3378.789476][T10533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3378.797533][T10533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3379.137362][T15268] veth0_macvtap: entered promiscuous mode [ 3379.194149][T11276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3379.211626][T15268] veth1_macvtap: entered promiscuous mode [ 3379.217868][T11276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3379.285058][T15268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3379.329743][T15268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3379.401298][T13261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3379.436747][T13261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3379.461120][T13261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3379.583177][T13261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3379.727791][T28274] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 3379.844561][T28274] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3380.107159][T15470] input: syz1 as /devices/virtual/input/input72 [ 3380.158006][T15470] sp0: Synchronizing with TNC [ 3380.179278][T15469] [U] è [ 3380.215728][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3380.307643][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3380.389522][T15313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3380.431332][ T7469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3380.455719][ T7469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3380.598464][T15313] veth0_vlan: entered promiscuous mode [ 3380.620270][T15313] veth1_vlan: entered promiscuous mode [ 3380.661473][T15313] veth0_macvtap: entered promiscuous mode [ 3380.671390][T15313] veth1_macvtap: entered promiscuous mode [ 3380.691896][T15313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3380.739008][T15313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3380.821071][ T1151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3380.842762][ T30] audit: type=1400 audit(1764745693.285:1463): avc: denied { write } for pid=15487 comm="syz.9.11519" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 3380.933844][T15084] Bluetooth: hci1: command 0x041b tx timeout [ 3381.195657][ T1151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3381.443570][ T1151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3381.594180][ T1151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3382.398525][ T30] audit: type=1400 audit(1764745694.845:1464): avc: denied { rename } for pid=15499 comm="syz.3.11521" name="file5" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3382.491213][T15494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3382.523372][T15494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3382.631706][T17598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3382.661913][T17598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3383.442456][T22293] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 3383.480169][T22293] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3383.621206][T15523] fido_id[15523]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3383.781817][T15536] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3383.820565][T15536] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3383.880104][T15536] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3385.335824][T15573] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3385.349069][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11538'. [ 3385.514028][T15570] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3385.521039][T15570] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3385.529577][T15570] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3385.535762][T15570] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3385.545024][T15570] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3385.558893][T15581] fuse: Bad value for 'fd' [ 3385.564683][T15570] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 3385.575159][T15570] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 3385.969800][ T30] audit: type=1400 audit(1764745698.415:1465): avc: denied { getopt } for pid=15597 comm="syz.3.11550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3385.991522][T15598] devpts: Invalid uid '0x00000000ffffffff' [ 3386.556164][T15607] input: syz1 as /devices/virtual/input/input73 [ 3386.670284][T15607] sp0: Synchronizing with TNC [ 3386.722750][T15606] [U] è [ 3386.810481][T15616] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3386.838608][T15618] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3386.859654][T15618] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3386.904539][T15618] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3387.476903][T15084] Bluetooth: hci6: command 0x0c1a tx timeout [ 3387.557132][T15084] Bluetooth: hci3: command 0x0c1a tx timeout [ 3387.557313][ T9729] Bluetooth: hci1: command 0x041b tx timeout [ 3387.564752][ T5108] Bluetooth: hci2: command 0x040f tx timeout [ 3387.569440][ T747] Bluetooth: hci0: command 0x040f tx timeout [ 3388.135018][ T30] audit: type=1400 audit(1764745700.575:1466): avc: denied { mount } for pid=15643 comm="syz.3.11566" name="/" dev="hugetlbfs" ino=218373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 3388.431150][T15657] input: syz1 as /devices/virtual/input/input74 [ 3388.497682][T15657] sp0: Synchronizing with TNC [ 3388.551152][T15655] [U] è [ 3388.571433][ T30] audit: type=1400 audit(1764745701.016:1467): avc: denied { remount } for pid=15643 comm="syz.3.11566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 3388.612898][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3388.625583][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3388.816565][ T30] audit: type=1400 audit(1764745701.256:1468): avc: denied { unmount } for pid=15268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 3388.986860][T15671] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3389.017446][T15671] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3389.060865][T15671] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3390.036159][ T9729] Bluetooth: hci3: command 0x0c1a tx timeout [ 3390.134538][T28274] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 3390.216003][T28274] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3390.401861][T15682] fido_id[15682]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3390.716851][T15701] input: syz1 as /devices/virtual/input/input75 [ 3390.781131][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11578'. [ 3390.810044][T15699] sp0: Synchronizing with TNC [ 3390.841536][T15698] [U] è [ 3390.960346][T15695] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3390.980433][T15695] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3391.002763][T15695] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3391.027502][T15695] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3391.038042][T15695] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3391.251621][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11585'. [ 3392.267167][ T9643] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 3392.465498][ T9643] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3392.908027][T15732] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 3392.914539][T15732] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3392.923366][ T9729] Bluetooth: hci6: command 0x0c1a tx timeout [ 3392.931833][T15732] vhci_hcd vhci_hcd.0: Device attached [ 3392.962243][T15733] vhci_hcd: connection closed [ 3392.962559][ T4154] vhci_hcd: stop threads [ 3392.972151][ T4154] vhci_hcd: release socket [ 3392.976847][ T4154] vhci_hcd: disconnect device [ 3393.007072][ T9729] Bluetooth: hci0: command 0x040f tx timeout [ 3393.076713][ T9729] Bluetooth: hci3: command 0x0c1a tx timeout [ 3393.078315][ T747] Bluetooth: hci1: command 0x041b tx timeout [ 3393.082866][T15084] Bluetooth: hci2: command 0x040f tx timeout [ 3393.195363][T15747] input: syz1 as /devices/virtual/input/input76 [ 3393.234757][T15747] sp0: Synchronizing with TNC [ 3393.273489][T15746] [U] è [ 3393.526236][T15966] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 3393.698889][ T30] audit: type=1400 audit(1764745706.146:1469): avc: denied { ioctl } for pid=15765 comm="syz.3.11604" path="/18/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 3393.736166][T15966] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3393.743581][T15966] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3393.798715][T15966] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3393.820663][T15966] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3393.862392][T15966] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3393.908551][T15966] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3393.936241][T15966] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3393.978059][T15966] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3394.017144][T15966] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3394.046945][T15966] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3394.068044][T15966] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3394.075627][T15966] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3394.086856][T15966] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3394.101461][T15966] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3394.113736][T15966] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3394.583846][T15788] input: syz1 as /devices/virtual/input/input77 [ 3394.598750][T15788] sp0: Synchronizing with TNC [ 3394.657733][T15787] [U] è [ 3395.172759][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11615'. [ 3395.337741][T15799] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3395.353143][T15804] fuse: Bad value for 'fd' [ 3395.354742][T15799] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3395.374246][T15799] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3395.393286][T15799] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3395.407847][T15799] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3396.099402][T15825] input: syz1 as /devices/virtual/input/input78 [ 3396.119490][T15825] sp0: Synchronizing with TNC [ 3396.144420][T15824] [U] è [ 3396.318636][T15966] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3396.342139][T15966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3396.377844][T15966] usb 2-1: can't set config #168, error -71 [ 3396.404003][T15966] usb 2-1: USB disconnect, device number 75 [ 3396.502522][T15834] fuse: Unknown parameter '0x0000000000000003' [ 3396.538990][T15836] kvm: apic: phys broadcast and lowest prio [ 3397.315881][T15084] Bluetooth: hci6: command 0x0c1a tx timeout [ 3397.406774][ T9729] Bluetooth: hci2: command 0x040f tx timeout [ 3397.406780][ T747] Bluetooth: hci0: command 0x040f tx timeout [ 3397.415776][T15084] Bluetooth: hci1: command 0x041b tx timeout [ 3397.433472][T15866] fuse: Unknown parameter '0x0000000000000003' [ 3397.475816][T15084] Bluetooth: hci3: command 0x0c1a tx timeout [ 3397.580407][T15870] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3397.586926][T15870] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3397.631790][T15870] vhci_hcd vhci_hcd.0: Device attached [ 3397.677319][T15871] vhci_hcd: connection closed [ 3397.677494][ T954] vhci_hcd: stop threads [ 3397.705467][ T954] vhci_hcd: release socket [ 3397.731195][ T954] vhci_hcd: disconnect device [ 3398.081088][T15886] input: syz1 as /devices/virtual/input/input79 [ 3398.126413][T15886] sp0: Synchronizing with TNC [ 3398.140794][T15885] [U] è [ 3398.501433][T15904] fuse: Unknown parameter '0x0000000000000003' [ 3399.283264][T15925] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 3399.289797][T15925] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3399.315653][T15925] vhci_hcd vhci_hcd.0: Device attached [ 3399.338828][T15926] vhci_hcd: connection closed [ 3399.339020][T15512] vhci_hcd: stop threads [ 3399.369168][T15512] vhci_hcd: release socket [ 3399.373804][T15512] vhci_hcd: disconnect device [ 3399.784995][T15945] fuse: Unknown parameter '0x0000000000000003' [ 3400.423184][T15967] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3400.432204][T15967] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3400.454746][T15967] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3400.855165][T15978] fuse: Unknown parameter '0x0000000000000003' [ 3401.316214][ T6212] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 3401.487437][ T6212] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 3401.499640][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3401.510821][ T6212] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3401.526454][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3401.555518][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3401.620694][ T6212] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 3401.650752][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3401.672129][ T6212] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3401.698156][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3401.745441][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3401.758654][ T6212] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 3401.767148][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3401.785768][ T6212] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3401.799580][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3401.892483][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3403.759061][T28274] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 3403.841152][T28274] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3403.940646][T16051] fido_id[16051]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3404.089843][ T6212] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3404.112637][ T6212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3404.183416][ T6212] usb 4-1: can't set config #168, error -71 [ 3404.230045][ T6212] usb 4-1: USB disconnect, device number 58 [ 3404.243943][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11705'. [ 3404.344414][T16061] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 3404.352956][T16061] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 3404.362296][T16061] kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 3404.380422][T16061] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 3404.395869][T16058] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3404.402199][T16058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3404.410412][T16061] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 3404.419311][T16058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3404.429596][T16061] kvm: requested 105600 ns i8254 timer period limited to 200000 ns [ 3404.439510][T16058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3404.445930][T16061] kvm: requested 42742 ns i8254 timer period limited to 200000 ns [ 3404.454050][T16058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3404.460697][T16061] kvm: requested 68723 ns i8254 timer period limited to 200000 ns [ 3404.478843][T16061] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 3404.497744][T16061] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 3404.669789][ T30] audit: type=1400 audit(1764745717.117:1470): avc: denied { relabelfrom } for pid=16077 comm="syz.2.11713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 3404.708285][ T30] audit: type=1400 audit(1764745717.117:1471): avc: denied { relabelto } for pid=16077 comm="syz.2.11713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 3405.145877][ T6212] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 3405.501612][ T6212] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 3405.747944][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3406.047741][ T6212] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3406.103214][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3406.287264][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3406.329049][ T6212] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 3406.354800][T15084] Bluetooth: hci6: command 0x0c1a tx timeout [ 3406.364099][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3406.409444][ T6212] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3406.435015][ T9729] Bluetooth: hci0: command 0x040f tx timeout [ 3406.441050][T15084] Bluetooth: hci2: command 0x040f tx timeout [ 3406.456963][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3406.483465][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3406.515849][T15084] Bluetooth: hci3: command 0x0c1a tx timeout [ 3406.515856][ T747] Bluetooth: hci1: command 0x041b tx timeout [ 3406.534542][ T6212] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 3406.557640][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3406.587074][ T6212] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3406.625825][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3406.639015][ T6212] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3406.657256][ T6212] usb 4-1: string descriptor 0 read error: -22 [ 3406.675064][ T6212] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3406.684273][ T6212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.761520][ T6212] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3409.458140][T16158] bridge0: port 2(bridge_slave_1) entered disabled state [ 3409.465837][T16158] bridge0: port 1(bridge_slave_0) entered disabled state [ 3409.477474][T16158] bridge0: entered allmulticast mode [ 3409.504127][T16158] bridge_slave_1: left allmulticast mode [ 3409.534372][T16158] bridge_slave_1: left promiscuous mode [ 3409.542388][T16158] bridge0: port 2(bridge_slave_1) entered disabled state [ 3409.558345][T16158] bridge_slave_0: left allmulticast mode [ 3409.564045][T16158] bridge_slave_0: left promiscuous mode [ 3409.570339][T16158] bridge0: port 1(bridge_slave_0) entered disabled state [ 3410.117339][T25898] usb 4-1: USB disconnect, device number 59 [ 3411.595174][T16219] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3411.713620][T16224] input: syz1 as /devices/virtual/input/input80 [ 3411.787190][T16224] sp0: Synchronizing with TNC [ 3411.830343][T16221] [U] è [ 3412.189438][T22293] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 3412.329067][T22293] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3412.571675][T16245] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3412.581812][T16245] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3412.602000][T16245] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3413.315096][T16279] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 3413.321618][T16279] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3413.366024][T16279] vhci_hcd vhci_hcd.0: Device attached [ 3413.451070][T16289] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3413.460076][T16289] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3413.481441][T16289] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3413.648179][T16282] vhci_hcd: connection closed [ 3413.648330][ T6001] vhci_hcd: stop threads [ 3413.671511][ T6001] vhci_hcd: release socket [ 3413.679633][ T6001] vhci_hcd: disconnect device [ 3414.729253][T16331] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3414.738260][T16331] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3414.759330][T16331] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3416.512517][T16369] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3416.521665][T16369] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3416.542382][T16369] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 3416.929225][T16373] netlink: 52 bytes leftover after parsing attributes in process `syz.9.11820'. [ 3417.953627][T28274] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 3418.136371][T28274] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3418.155120][T28274] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3418.165971][T28274] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3418.177926][T28274] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3418.189134][T28274] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3418.201587][T28274] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3418.210099][T28274] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3418.220855][T28274] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3418.233963][T28274] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3418.245197][T28274] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3418.272385][T28274] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3418.280404][T28274] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3418.291559][T28274] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3418.303595][T28274] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3418.316923][T28274] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3418.330903][T28274] usb 2-1: string descriptor 0 read error: -22 [ 3418.337454][T28274] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3418.346533][T28274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3418.366967][T28274] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3419.841031][ T30] audit: type=1400 audit(1764745732.289:1472): avc: denied { write } for pid=16443 comm="syz.8.11849" name="cgroup.subtree_control" dev="cgroup2" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3419.936682][ T30] audit: type=1400 audit(1764745732.319:1473): avc: denied { open } for pid=16443 comm="syz.8.11849" path="" dev="cgroup2" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3419.996840][ T30] audit: type=1400 audit(1764745732.349:1474): avc: denied { ioctl } for pid=16443 comm="syz.8.11849" path="" dev="cgroup2" ino=535 ioctlcmd=0x54d5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3420.732153][T16467] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11858'. [ 3420.895313][T16478] autofs: Unknown parameter '0x0000000000000000' [ 3421.167364][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11862'. [ 3421.261158][ T6212] usb 2-1: USB disconnect, device number 76 [ 3421.351546][T16485] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3421.371785][T16485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3421.389804][T16485] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3421.400749][T16504] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11872'. [ 3421.403720][T16485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3421.442711][T16485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3422.447003][T16523] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3422.453525][T16523] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3422.543879][T16523] vhci_hcd vhci_hcd.0: Device attached [ 3422.581111][T16524] vhci_hcd: connection closed [ 3422.581348][ T9931] vhci_hcd: stop threads [ 3422.611331][ T9931] vhci_hcd: release socket [ 3422.634718][ T9931] vhci_hcd: disconnect device [ 3422.711774][T16535] ubi: mtd0 is already attached to ubi0 [ 3423.317801][T16546] syzkaller0: entered promiscuous mode [ 3423.335939][T16546] syzkaller0: entered allmulticast mode [ 3423.393782][T15084] Bluetooth: hci2: command 0x040f tx timeout [ 3423.393806][ T9729] Bluetooth: hci0: command 0x040f tx timeout [ 3423.399796][ T747] Bluetooth: hci6: command 0x0c1a tx timeout [ 3423.472943][ T747] Bluetooth: hci1: command 0x041b tx timeout [ 3423.478957][T15084] Bluetooth: hci3: command 0x0c1a tx timeout [ 3425.360546][ T5193] udevd[5193]: worker [11534] terminated by signal 33 (Unknown signal 33) [ 3425.378640][ T5193] udevd[5193]: worker [11534] failed while handling '/devices/virtual/block/loop8' [ 3427.079183][T16637] fuse: Bad value for 'fd' [ 3429.900145][T16702] autofs: Unknown parameter 'fd0x0000000000000000' [ 3430.303346][T16719] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 3430.309864][T16719] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3430.337806][T16719] vhci_hcd vhci_hcd.0: Device attached [ 3430.841632][T16723] vhci_hcd: connection closed [ 3430.844635][T13274] vhci_hcd: stop threads [ 3430.862869][T13274] vhci_hcd: release socket [ 3430.872306][T13274] vhci_hcd: disconnect device [ 3432.459767][T16762] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 3432.499826][T16756] kvm: kvm [16755]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 3432.529861][T16756] kvm: kvm [16755]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 3433.968979][T16820] input: syz1 as /devices/virtual/input/input81 [ 3433.988945][T16820] sp0: Synchronizing with TNC [ 3433.998709][T16819] [U] è [ 3434.364014][ T30] audit: type=1326 audit(1764745746.821:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.3.11999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f854258f749 code=0x0 [ 3434.413400][T16845] fuse: Bad value for 'fd' [ 3434.678312][T16857] syzkaller0: entered promiscuous mode [ 3434.694738][T16857] syzkaller0: entered allmulticast mode [ 3434.740651][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12004'. [ 3434.922763][T16861] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3434.935292][T16861] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3434.949158][T16861] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3434.957783][T16861] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3434.976681][T16861] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3437.011392][T15084] Bluetooth: hci6: command 0x0c1a tx timeout [ 3437.017582][T15084] Bluetooth: hci3: command 0x0c1a tx timeout [ 3437.025263][T15084] Bluetooth: hci1: command 0x041b tx timeout [ 3437.032070][T15084] Bluetooth: hci2: command 0x040f tx timeout [ 3437.038177][T15084] Bluetooth: hci0: command 0x040f tx timeout [ 3437.809423][T16935] No control pipe specified [ 3438.068315][T16938] picdev_write: 616 callbacks suppressed [ 3438.068333][T16938] kvm: pic: non byte write [ 3438.096210][T16938] ------------[ cut here ]------------ [ 3438.101758][T16938] WARNING: arch/x86/kvm/x86.c:11571 at vcpu_run+0x1be9/0x56d0, CPU#0: syz.3.12032/16938 [ 3438.111789][T16938] Modules linked in: [ 3438.116362][T16938] CPU: 0 UID: 0 PID: 16938 Comm: syz.3.12032 Not tainted syzkaller #0 PREEMPT(full) [ 3438.125832][T16938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3438.135897][T16938] RIP: 0010:vcpu_run+0x1be9/0x56d0 [ 3438.141016][T16938] Code: c7 e8 db 5c 7c 00 be 08 00 00 00 4c 89 f7 e8 ae f9 e4 00 f0 41 80 67 38 fd 41 bd fb ff ff ff e9 a5 fa ff ff e8 b8 5c 7c 00 90 <0f> 0b 90 e9 5d ff ff ff e8 aa 5c 7c 00 e9 ab f6 ff ff e8 a0 5c 7c [ 3438.160639][T16938] RSP: 0018:ffffc9000e49faa0 EFLAGS: 00010287 [ 3438.166765][T16938] RAX: 0000000000000899 RBX: ffff88803dfe9950 RCX: ffffc90016b3c000 [ 3438.175366][T16938] RDX: 0000000000080000 RSI: ffffffff81418378 RDI: 0000000000000005 [ 3438.183848][T16938] RBP: ffffc9000e49fc10 R08: 0000000000000005 R09: 00000000fffffff0 [ 3438.191977][T16938] R10: 00000000fffffff0 R11: 00000000dc1bdd22 R12: dffffc0000000000 [ 3438.199947][T16938] R13: 00000000fffffff0 R14: ffff88803dfe8000 R15: ffff88803dfe8038 [ 3438.208052][T16938] FS: 00007f85433c36c0(0000) GS:ffff88812499c000(0000) knlGS:0000000000000000 [ 3438.217020][T16938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3438.223643][T16938] CR2: 0000000000000000 CR3: 0000000053b74000 CR4: 00000000003526f0 [ 3438.231645][T16938] Call Trace: [ 3438.234926][T16938] [ 3438.237852][T16938] ? vmx_segment_cache_test_set+0x14b/0x400 [ 3438.243772][T16938] ? __pfx_vcpu_run+0x10/0x10 [ 3438.248447][T16938] ? skip_emulated_instruction+0x20f/0x4a0 [ 3438.254292][T16938] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 3438.260452][T16938] ? kvm_pmu_trigger_event.isra.0+0x23/0x7d0 [ 3438.266482][T16938] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 3438.272738][T16938] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 3438.278754][T16938] kvm_vcpu_ioctl+0x5eb/0x1660 [ 3438.283556][T16938] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 3438.288764][T16938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3438.294703][T16938] ? do_vfs_ioctl+0x128/0x14f0 [ 3438.299469][T16938] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3438.304520][T16938] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 3438.311435][T16938] ? hook_file_ioctl_common+0x145/0x410 [ 3438.316989][T16938] ? selinux_file_ioctl+0x180/0x270 [ 3438.322209][T16938] ? selinux_file_ioctl+0xb4/0x270 [ 3438.327325][T16938] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 3438.332545][T16938] __x64_sys_ioctl+0x18e/0x210 [ 3438.337313][T16938] do_syscall_64+0xcd/0xf80 [ 3438.341843][T16938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3438.347733][T16938] RIP: 0033:0x7f854258f749 [ 3438.352229][T16938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3438.371855][T16938] RSP: 002b:00007f85433c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3438.380819][T16938] RAX: ffffffffffffffda RBX: 00007f85427e5fa0 RCX: 00007f854258f749 [ 3438.389308][T16938] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 3438.397314][T16938] RBP: 00007f8542613f91 R08: 0000000000000000 R09: 0000000000000000 [ 3438.405330][T16938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3438.413331][T16938] R13: 00007f85427e6038 R14: 00007f85427e5fa0 R15: 00007ffd292fef58 [ 3438.421338][T16938] [ 3438.424353][T16938] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3438.431621][T16938] CPU: 0 UID: 0 PID: 16938 Comm: syz.3.12032 Not tainted syzkaller #0 PREEMPT(full) [ 3438.441069][T16938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3438.451109][T16938] Call Trace: [ 3438.454376][T16938] [ 3438.457294][T16938] dump_stack_lvl+0x3d/0x1f0 [ 3438.461875][T16938] vpanic+0x640/0x6f0 [ 3438.465842][T16938] ? vcpu_run+0x1be9/0x56d0 [ 3438.470327][T16938] panic+0xca/0xd0 [ 3438.474030][T16938] ? __pfx_panic+0x10/0x10 [ 3438.478444][T16938] check_panic_on_warn+0xab/0xb0 [ 3438.483366][T16938] __warn+0x108/0x3c0 [ 3438.487334][T16938] __report_bug+0x2a0/0x520 [ 3438.491817][T16938] ? vcpu_run+0x1be9/0x56d0 [ 3438.496300][T16938] ? __pfx___report_bug+0x10/0x10 [ 3438.501305][T16938] ? find_held_lock+0x2b/0x80 [ 3438.505975][T16938] ? rcuwait_wake_up+0xdf/0x290 [ 3438.510822][T16938] ? vcpu_run+0x1be9/0x56d0 [ 3438.515318][T16938] report_bug+0xb2/0x220 [ 3438.519551][T16938] ? vcpu_run+0x1be9/0x56d0 [ 3438.524040][T16938] handle_bug+0x127/0x260 [ 3438.528358][T16938] exc_invalid_op+0x17/0x50 [ 3438.532847][T16938] asm_exc_invalid_op+0x1a/0x20 [ 3438.537682][T16938] RIP: 0010:vcpu_run+0x1be9/0x56d0 [ 3438.542777][T16938] Code: c7 e8 db 5c 7c 00 be 08 00 00 00 4c 89 f7 e8 ae f9 e4 00 f0 41 80 67 38 fd 41 bd fb ff ff ff e9 a5 fa ff ff e8 b8 5c 7c 00 90 <0f> 0b 90 e9 5d ff ff ff e8 aa 5c 7c 00 e9 ab f6 ff ff e8 a0 5c 7c [ 3438.562371][T16938] RSP: 0018:ffffc9000e49faa0 EFLAGS: 00010287 [ 3438.568432][T16938] RAX: 0000000000000899 RBX: ffff88803dfe9950 RCX: ffffc90016b3c000 [ 3438.576392][T16938] RDX: 0000000000080000 RSI: ffffffff81418378 RDI: 0000000000000005 [ 3438.584348][T16938] RBP: ffffc9000e49fc10 R08: 0000000000000005 R09: 00000000fffffff0 [ 3438.592307][T16938] R10: 00000000fffffff0 R11: 00000000dc1bdd22 R12: dffffc0000000000 [ 3438.600263][T16938] R13: 00000000fffffff0 R14: ffff88803dfe8000 R15: ffff88803dfe8038 [ 3438.608232][T16938] ? vcpu_run+0x1be8/0x56d0 [ 3438.612733][T16938] ? vmx_segment_cache_test_set+0x14b/0x400 [ 3438.618619][T16938] ? __pfx_vcpu_run+0x10/0x10 [ 3438.623277][T16938] ? skip_emulated_instruction+0x20f/0x4a0 [ 3438.629071][T16938] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 3438.635213][T16938] ? kvm_pmu_trigger_event.isra.0+0x23/0x7d0 [ 3438.641188][T16938] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 3438.646886][T16938] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 3438.652427][T16938] kvm_vcpu_ioctl+0x5eb/0x1660 [ 3438.657179][T16938] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 3438.662364][T16938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3438.668243][T16938] ? do_vfs_ioctl+0x128/0x14f0 [ 3438.672995][T16938] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3438.678002][T16938] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 3438.684843][T16938] ? hook_file_ioctl_common+0x145/0x410 [ 3438.690373][T16938] ? selinux_file_ioctl+0x180/0x270 [ 3438.695561][T16938] ? selinux_file_ioctl+0xb4/0x270 [ 3438.700660][T16938] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 3438.705843][T16938] __x64_sys_ioctl+0x18e/0x210 [ 3438.710591][T16938] do_syscall_64+0xcd/0xf80 [ 3438.715079][T16938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3438.720951][T16938] RIP: 0033:0x7f854258f749 [ 3438.725346][T16938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3438.744932][T16938] RSP: 002b:00007f85433c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3438.753324][T16938] RAX: ffffffffffffffda RBX: 00007f85427e5fa0 RCX: 00007f854258f749 [ 3438.761272][T16938] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 3438.769220][T16938] RBP: 00007f8542613f91 R08: 0000000000000000 R09: 0000000000000000 [ 3438.777170][T16938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3438.785118][T16938] R13: 00007f85427e6038 R14: 00007f85427e5fa0 R15: 00007ffd292fef58 [ 3438.793091][T16938] [ 3438.796355][T16938] Kernel Offset: disabled [ 3438.800650][T16938] Rebooting in 86400 seconds..