last executing test programs: 2.468801148s ago: executing program 3 (id=694): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x109080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000002c0)={0xf000000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x980901, 0xa, '\x00', @p_u16=0x0}}) 2.369930304s ago: executing program 3 (id=696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000040)={@remote, @loopback, 0x1, "fbbd7552b485b080453f520abb340551bdfb696fc3d776da88528d512f9c53d6", 0x9, 0x1, 0x0, 0x95a}, 0x3c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022abd7000fcdbdf250900000008000300", @ANYRES32=r5, @ANYBLOB="08003700010000000500080004"], 0x2c}, 0x1, 0x0, 0x0, 0x29045}, 0x8000) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000100)={0x0, 0x1a000, 0x8}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') close_range(r1, r1, 0x2) rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f0000000080)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002100df"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x144, 0x30, 0xb, 0x5, 0x0, {}, [{0x130, 0x1, [@m_skbedit={0x64, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb, 0x7, 0x3, 0x800, 0xfffffff7}}]}, {0x1e, 0x6, "8a1070d955048d23bf9f9e44b6392bce48af8316703570622e1d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0xc8, 0x5, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x10001, 0x7, 0x1, 0x7}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x10, 0x3, '-%\\\\(a[:^}@\x00'}, @TCA_DEF_DATA={0x7, 0x3, '%:\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'skbedit\x00'}]}, {0x56, 0x6, "ef7e6092f0644f0f9b6842089522cb2ce291280b25cc0cdeb70b885b5b7d464d4797d33036c864924204b96217fb170b98df5f4623bd8055197b81f0b054ce5b6129efd10b086a483a9d911c85e52f686495"}, {0xc}, {0xc}}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r9 = syz_io_uring_complete(0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bind(r0, &(0x7f0000000180)=@ethernet={0x0, @multicast}, 0x80) openat2(r9, &(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000100)={0x101040, 0x90, 0x7}, 0x18) 2.367816002s ago: executing program 3 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1335f0a6) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregs(0xc, r4, 0x5, &(0x7f00000024c0)=""/185) bind$inet6(r1, &(0x7f0000002580)={0xa, 0x4e24, 0x9, @empty, 0x2}, 0x1c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x54}}, 0x2) 2.36673313s ago: executing program 3 (id=702): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRESOCT], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000440)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv6={0x86dd, @tcp={0x3, 0x6, "54f023", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x6, 0x0}, {[], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x9}}}}}}}}, 0x4e) r4 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000001840)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r5}, 0x0, 0x0, 0x100000}) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @empty}, {0x1, @random="9b499754bb98"}, 0x2c, {0x2, 0x4e20, @empty}, 'lo\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7, 0x0}, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000eb0000000001000000940000930600003e5f0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x1010, 0x464, 0x300, 0x70bd27, 0x25dfdbfe, "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", [""]}, 0x1010}, 0x1, 0x0, 0x0, 0x10}, 0x4040) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@ipv6_getaddr={0x18, 0x16, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) 2.17112825s ago: executing program 3 (id=705): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000180)={0xfffffffffffffcd2, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x28000000000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000080)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x30, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000010}, 0x4) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) (async) r11 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r12, 0x0) r13 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r13, 0xee01, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) 1.722213976s ago: executing program 1 (id=718): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0xd5e9296c934db807}, "f37abd650ebfb659", "da39b3d4cfa9858d26a57869ef135a0f5b25edf25acafe8687a23bcfd34ad0de", "f0878280", "30a57f3988341379"}, 0x38) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x1507, 0x400700) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) msgget$private(0x0, 0x1b0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) ioctl$int_in(r1, 0x5452, &(0x7f0000000340)=0xf) keyctl$reject(0x13, 0x0, 0x0, 0x204, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) landlock_restrict_self(r0, 0x0) fcntl$getown(r0, 0x9) msgget$private(0x0, 0x21) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) syz_emit_ethernet(0x96, &(0x7f0000000040)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x7f000001, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x1b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x1f, 0xfa, [@multicast1, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x24, 0xd7, 0x1, 0x3, [{@broadcast, 0xfffffff8}, {@multicast2, 0x2a}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @timestamp={0x44, 0xc, 0x80, 0x0, 0xe, [0x0, 0x3]}, @rr={0x7, 0x7, 0x3b, [@multicast1]}]}}}}}}}, 0x0) msgctl$IPC_RMID(0x0, 0x0) 1.721582186s ago: executing program 1 (id=719): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000180)={0x6, 0x3, 0x1, 'queue0\x00', 0x2}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="010000002000fedbdf251000000008000600090000001800018014000200776c616e3000"/46], 0x34}}, 0x8006) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000180)={0x6, 0x3, 0x1, 'queue0\x00', 0x2}) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="010000002000fedbdf251000000008000600090000001800018014000200776c616e3000"/46], 0x34}}, 0x8006) (async) 1.719799258s ago: executing program 0 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0xee00, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/247, 0x1a, 0xf7, 0x1}, 0x28) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480) 1.651703366s ago: executing program 1 (id=721): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100000000080005"], 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x7, 0x9, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x64, 0x0, 0x3, 0x2f, 0x0, @loopback, @private=0xa010100}}}}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r1}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x100, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x48) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r11, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000100)={0x60, 0x0, r11, {{0x5, 0xc9, 0x1000, 0x3d6, 0xff, 0x3, 0x1, 0x80000001}}}, 0x60) 1.542409748s ago: executing program 1 (id=722): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000754000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000088a000/0x1000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b800005e19000100fcfffffffcdbdf1b00000000000000000000000000000000fe8000000000000000000000000000bb000000004e2000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000080000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x24010001}, 0x0) syz_emit_ethernet(0x111b, &(0x7f0000000900)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x18, 0x4, 0x3, 0x1e, 0x110d, 0x66, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x27, 0x0, 0xe, [0x5fe]}, @lsrr={0x83, 0x23, 0x70, [@rand_addr=0x64010102, @loopback, @loopback, @remote, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}]}, @noop, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x6, 0x8, "69efb1eecced"}, {0x2, 0xd, "f8cece67a5dae2a5adc7c3"}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa, 0x1, [], "0726494127f50ed3d67e"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x2], "a022e19772602a28ec15"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0xfffd], "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"}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x1, 0x3, 0x0, 0x0, 0x2, 0x5}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x9, 0x2, 0x1, 0x1, 0x1, 0x7}, 0x2, {0x6, 0x3, 0x0, 0x8, 0x0, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x0, "c67b92f945c128aebb023f444ac07fa09435f075cccfe31286d17253c707d79bf44d040eb5530b4f5f7a32f111656976e75a692e6646e4e0dd1d642f7f9977e41f477c3cce7f4dc1ee83c104f3f96c"}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21000200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x343f, 0x31}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040840}, 0x20040000) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, r2, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x3c}}, 0x40000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x484}, 0x40080) 1.221605552s ago: executing program 3 (id=723): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc769}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r2 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="6e0c9b6b38d8854d85727d43ce556eb22c5cb5fc81ee9f9941ba0c6c60c1ab528285e82284ed3c1478e8aea7dc02172e3a9755e16789af43f35444c503b905f0f48c295eead1cb90085023fb1d3546e33e6107011b1d3963eff1de242c4d51df88ffa9ef6dded54bd702fc891616a60466b0771476907653531caff22970069d23a621056e995789b2d6982d03f9c70ccf029dbb31868224a803744fe50b1497de47c94a58b49784ac42a2a16cb020fe53504bef26a4bc09df87bd132ff20d29544352f2ccc6ab2fb5ab1bbf820fec0af6b091e26d0f4af751a4cec7c5ec739b29aba620d4854355ad12b4177e4792b90c005f7b4fba056e5211236d95be73f601c5186ac23f672db56762cf54bcb034f8d485103661412189d5919fe63b0179465a5026cac8a590f6b49d35e2bce1876cef5625e99d3d5dbda46431f10a1e772465704e64d919ed70c0f085e74d9a9acb92dd0e85c66d1ef0681205b9b09ebec13b243bc18a0a912f3a511ada1d78030f8437f97674b02f3181b33d43cba3004bf9aa25d02bbbacec283716fd18773e3b75e431f340d11313c8689283501b78087f848ca54a3016ea180443e3e08c7fee7b1222bf36713d9468508086c8f6bef47fab5603321739203565512ff0c4d247673b6b7cb0a6644e13003fad2b8dd5db73676dd6864fe8fedbbe88ce48a52565cf476404238f4798c3464f45107a8ea93bf0c8b29bbe8c9ed55eb98891fadd2eece5c8e604472ea44a578aece6876980f880d431e5783a476ffbcadc4658f4761357333668ff890d8b33a583f61fe774cb05c93bc223742046832ac9de4f7e2f3dec915f1092174c7e1908bd155d08a666fd16e60b14f2906eace05a2763cb1b7638a52a60234c4c3ca6b2dc866ffa89f8a7bce7b3882918e028903f5bfadd98a1da11ae806faf0031ee3bcf02086bca65d3ce02bed0d96437c386c7ca345ad91080a0aadeae1f08c83c319134bf157f986a7f019581493f91f267972ccc5c6f6c9422e679866b56cf278ec2358ee779696caa04d439583be641043874375dd7782e98f359aaf7eb722aa393e3e0846c2f199f189ca83c8a3a64b3ff650fcedef52b366c6fa49e135ce98eac96ba4e2081dfb28e9234fdd9c00ad99ad9f07e1912dbede37cdccade1536c1b64f62321b40648faab1e282a01c342cb879bead9cc1a2b1ec15af2be7d34755834030768643b318e83cd4514448a8aed0c73e477eae4d6dc46e4a56e52c773377282c9dc7210e921b5ca0aa256c9d026ed0f11a00ea72896ebe0ddceae01d915a251045cd7c111a9a5ed31e4309ef3febc86ddf70f1b6d588699cd4fea874599570ddc142773c7c376688f696fd4c412bb570de5959e3174e0938cf99b791e1f4b1c5b3caf3ce36333a2d18561992644da22673938ee524a73974ca5d5d9b5fead6e84d20a479c45454ec40dc5c05d4e3236f950ff0b50d842062cfff7f51d9d68ad93ca5dbbbeb7bf624044d8a4b2e4a83a9c4d378ae187f706802b55ced5c6334f78210daffb70527aeccf1807fb2743264daa59d9e040a5c744851e880395048c15670e311e7c267a45966d89cf9f042cccf4be4fd3ca9e21a033d2a108fb318f5e392d5393a544cd7ca4e6500a819f062740cc3ecead9745116be7c9fd46b6e5afea5348ff5808ea582a8efa958537d99318c50a6dbf9eadd035c309a4f4f7ddfb95e89fa73eae672423bfbbe5b64a9626d30ee5797a49b31a46dcea377a24e02bc1a000bc09ebe03c1c7417379957cdadd93f3830e912d18c6ba302a41e5bc5127a482c9b426afa53f30302b9e1ebbaf4c85e42b418f89afc5515cfcb0b29143785e4c2146424335e16769ff526e57d419ce9742521748539371e1ac32a7d0eeff94fb07704e0d58e26c2206f1309c8d326952de382b3d8485442019730b1e2a504dd04131e7eae0e1776b8799d5f8844c90d596104dd235834e92ef086995e0e02b3472a9d264313a851ddc9f21e715cea39cafd31345caf1dc2a53e425f5bb41894285a339bcf6f233f2a9584e291bf6c047e57c0b2fba8d56f0452c9984f31f743f", 0x5c2, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000001b40)=""/4096, 0x1000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x1}, &(0x7f0000000a00)="ae126b76c53db477340bed284b128d6d65d81f0c469bcba8dbe37f5e91ae51c922d6568a45920c011e783ae0f78f142b76e2aef8411d55d760a63ff81819c2fc263e4ac08a534d69b283a94a81632479b50b8a38d4d59626a8b8630dfc1c94c5da72b1251ceba7a1b8c71aaf77b7643efcfe06c47c50e61d98cfd6ec93706b40d4b573cb24165136f785814b580a2c2ae3dba48f6892badce929576ff67003e8d498a1aa1cdef80d26fb83f4cffeb5aa4a469f528f93efc06d206e13d0323bed43aabd1f7dbc51", 0xc7, 0xfffffffffffffffb) ioctl$PPPIOCGL2TPSTATS(r5, 0x40047452, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000004c0)={0x18}, 0x18) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x0, r7, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_fscache}]}}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file1\x00', 0x28842, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="f00000001a00010026bd70c4623ee8000a01010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000033000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000200090000060000000000000000"], 0xf0}}, 0x0) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x15c, &(0x7f0000000800)={[{}, {0x69, 0x4e00, "fd53489a8f04b2d6e7968ef4f6b326474658887cb5f77e62002e1f0d7c348e98b5fc2582c7391b746d3a982f3d1e0dc3247d5911395bb2931ab6e9df0f67dcba89c8bcbbffcd4b275a1a69400335602d1513908dad71071bc674611817bc8ecfb3700345073b17b086"}, {0xe3, 0x4e00, "e552c659455067da029368ced4cc8f1582b7f63666b313fcc1f91135a8572071978e5857e8ba9647958355e816986c6ed46d6acadfaacb76d2b9ad4ffcd384bb18c7ba757615104055d5502afca5f9d039046fba299dfee4d31b05d8b2bbf9dcf635cbf93bf60b1f9d34044065b3a73b4d42fd32c4d2b0df58a5d1eeb0ec2f63e785422ffcc94ac9f74bf52dc7c624e2f0d2be9b613f40cdb8987535b5916424b88e9ca384a863314aa7b8f7c235f9fe2ba7358b249e4771ce9f9808c38967af1b1b549ec2f0cae426509e7fc3060f4aefa37bd54089fa4171c247185eb0837710f9b6"}]}) 681.968141ms ago: executing program 1 (id=724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000000), 0x4) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0xffffffff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x4}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) (async) r6 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"]) 596.486921ms ago: executing program 1 (id=726): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x200008d4}, 0x4008001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x4, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) write(r1, &(0x7f00000000c0)="b068", 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000001c00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000600)={&(0x7f0000356000/0x9000)=nil, 0x9000}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000000)) 472.179654ms ago: executing program 0 (id=729): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x5}]}, {0x0, [0x61]}}, &(0x7f00000004c0)=""/180, 0x27, 0xb4, 0x0, 0x5}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8, '\x00', 0x0, r3, 0x5, 0x3, 0x3}, 0x50) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x3b, 0x0, &(0x7f0000000180)) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 402.101935ms ago: executing program 0 (id=731): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x1b, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0x7, 0x0, 0x0, 0x0, 0x40, 0xe4, 0x9}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x49783, 0x0) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0) 401.584991ms ago: executing program 0 (id=732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)=@dellinkprop={0x7dc, 0x6d, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x22020}, [@IFLA_MTU={0x8, 0x4, 0x9}, @IFLA_VFINFO_LIST={0x440, 0x16, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x87e7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x6}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xcbd, 0x0, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x68, 0x6}}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x8447, 0x1279}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8000, 0xfffffffd}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xbbe, 0x74}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0xd}}, @IFLA_VF_MAC={0x28, 0x1, {0xd4a}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x200}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x64, 0x5}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x97, 0x4, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xf, 0xfff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfff, 0x6}}, @IFLA_VF_TRUST={0xc, 0x9, {0xffffffff, 0x7ff}}, @IFLA_VF_RATE={0x10, 0x6, {0x800, 0x6, 0x84}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0xd}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x200, 0x7}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0xfffffeff}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x100, 0x8868}}, @IFLA_VF_MAC={0x28}, @IFLA_VF_MAC={0x28, 0x1, {0x81, @broadcast}}]}, {0x184, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0xffffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7ba0, 0x2c0, 0x4}}, {0x14, 0x1, {0x61da, 0x16f, 0x7ff00000, 0x8100}}, {0x14, 0x1, {0x5, 0x973, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0xffff2559, 0x51a, 0x0, 0x8100}}, {0x14, 0x1, {0x0, 0xb, 0x1, 0x8100}}, {0x14, 0x1, {0x7, 0xdcd, 0x1, 0x88a8}}, {0x14, 0x1, {0x3, 0xdb6, 0xc9, 0xa55d07fd86fbb3c0}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf, 0x687, 0x5, 0x88a8}}, {0x14, 0x1, {0x1, 0xcdf, 0x1, 0x8100}}, {0x14, 0x1, {0x5, 0x2ec, 0x4, 0x88a8}}, {0x14, 0x1, {0x82ff, 0x4eb, 0x0, 0xad59fc5112218be8}}, {0x14, 0x1, {0x4678, 0x330, 0x6, 0x8100}}, {0x14, 0x1, {0x9, 0x1df, 0x6, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0xc2, @random="eb00ae4fe9d1"}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x81}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0xf}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffffffff, 0x100000000}}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x5, @remote}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xe5, 0x9}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffff3e1, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x800, 0xfffffffffffeffff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x5}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x10001, 0x80, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x80000001, 0x9}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x248ead5a}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x40}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xfe3, 0x200}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_VF_PORTS={0x294, 0x18, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "40d7105f460723367de79fc6e76f1f08"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x5d}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f597934874d6072b80e45fab988dd314"}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7255743573d9ab459b662dc658fdf597"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "dbf256224d979092eb734c933bbedb1d"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a028b9ec024d15e3fe350697487166d0"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "44913be8f1303bf384a7c4027f4b581c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cbbd67663cc76dd84e7c11bb2920458c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a12e9a8b5e65440ab40bae56c5533f3d"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "0761b269c6ec71aa5e76a614082b34eb"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2b4b207d4aa88b7461bb7d4539d5c506"}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5cfff3eced525ac8c6b61b28cf8f38b6"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5f2a5c268df302687ed3bacea966ff92"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "df6aa2dd4441e624df83803617cab128"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6487c4b2fa85b5876ec37847d867ee4d"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "233cae139e7886b2dba74b1152aefd64"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4587ecfb60e476b8ba34b3387c409a81"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "66520fbbbbcf5827c600d9a55b94f880"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ecabea198d33075f74cd0e538accb860"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "807b47aebd1a836d693752d6730beac9"}, @IFLA_PORT_PROFILE={0xb, 0x2, '-+(^/@\x00'}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xd2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0b39d247bba3d7b07241887a63020b84"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f94707180dab3de4f0d6d0beafd8d630"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x68}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7d70cbc509699bc536cdbb0ddbc8f877"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "537809fdf5e3a1e49a70b0313ae68a23"}]}]}, @IFLA_NET_NS_FD={0x8}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}, @IFLA_AF_SPEC={0xb0, 0x1a, 0x0, 0x1, [@AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}]}, 0x7dc}, 0x1, 0x0, 0x0, 0x4c080}, 0x4004080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="001200000f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000b0e00000000000000008000003700000500000000000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 401.385545ms ago: executing program 0 (id=733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x10, 0x3}, {0xf, 0xffff}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4, 0x2) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) recvmmsg(r5, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000940)}, 0xb}], 0x1, 0x40012163, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$dri(&(0x7f0000000040), 0xff, 0x101142) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200), &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000340)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r10}) syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000000000000, 0x141781) 251.974148ms ago: executing program 2 (id=736): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') munlockall() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) (async) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r3, 0x0, 0x0) dup2(r3, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061100c007800000095000000000000002b4ef0ae9a6dc162efce7f6015284795318774d21a036a5d0ae160cb2bb7b0cedc371c810db7c3c4d6670b36354fc88c29dee00eefe3359875502a9a60b1150e681bd69a7bfb1f14fbbcd4c3afbaf301c912c35b93519ccd5b6bef3beeba48f8c23ea3a43b8b8cee836027600d1ccab0dd37"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 250.701036ms ago: executing program 0 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r1, 0x7, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x8080) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x3, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x6, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x800a9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0xd7, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc) ioctl$TCXONC(r4, 0x560b, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r7 = dup2(r2, r3) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r5, &(0x7f00000003c0)='ns/uts\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911053000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(r7, &(0x7f0000000880)={'syz0\x00', {0x2, 0x0, 0x1000, 0x9}, 0x2, [0x3, 0x1, 0xea6e, 0x4, 0x7, 0x1, 0x2, 0x1, 0x3, 0xd8d7, 0x1, 0x1, 0x3, 0x1ff, 0x0, 0x7, 0x4, 0xfffffffb, 0xfffffffb, 0x8, 0x7, 0x0, 0x0, 0x401, 0x36e, 0x80000000, 0x1, 0x7, 0x7, 0xaa23, 0x100, 0x0, 0x3ff, 0x5, 0x4, 0x8, 0x3, 0x1000000, 0x5, 0x4, 0x200, 0x8, 0x137, 0x5, 0x1, 0x3, 0x80000001, 0x5, 0x5, 0x5, 0x4, 0xffffffff, 0x9, 0x2, 0x8, 0x0, 0xbe, 0x1ff, 0x7ca, 0x5, 0x7a, 0x25, 0x1, 0x3ff], [0x710, 0x3, 0x10, 0x4, 0x9, 0xffff0000, 0x5, 0x9, 0x8, 0x4, 0xc5, 0x5, 0x4, 0x6080, 0x4, 0x40, 0x7, 0x3, 0x7, 0x9ef, 0xe15, 0x48, 0xffffffff, 0xffffffa1, 0xf, 0x5, 0xb921, 0x9, 0x3, 0x4bca3428, 0xd0, 0xffff, 0x3, 0x10000, 0x8, 0x5, 0x7816, 0x1, 0x3, 0x2, 0x3, 0x0, 0x401, 0xa, 0x5, 0x3, 0x4, 0x1000, 0x7f, 0x7, 0x7, 0x16, 0x4, 0x80000000, 0x6a, 0x3, 0x6, 0x6, 0x7fffffff, 0x0, 0x1, 0x3346, 0x6, 0x3], [0x8, 0x7, 0x0, 0x81, 0x0, 0x400, 0x5d0, 0x8001, 0x4, 0x2, 0x40, 0x80000000, 0x9, 0x5, 0x5, 0xffffffff, 0x80, 0x9, 0x1, 0x7ff, 0x651, 0xcd, 0xffff, 0x1, 0x2, 0x26, 0x401, 0x1, 0x5, 0x2, 0x6, 0xfffffffa, 0xd12, 0x60000000, 0x3ff, 0x81, 0x2, 0x0, 0x7, 0x6, 0x8, 0x80000000, 0x2, 0xce, 0x2, 0x7, 0xbc1a, 0x7f800, 0x9, 0xfffffffa, 0x4, 0x0, 0x1, 0x5, 0x200, 0x3, 0xffffffff, 0x5, 0x8001, 0xfffffffe, 0x7, 0x9707, 0x6db1, 0x34], [0x3, 0xa, 0x9, 0xffffffff, 0x6, 0x0, 0x8, 0x545, 0x0, 0x7, 0x2, 0x3, 0xb, 0xffff, 0x8, 0xe9f, 0x1, 0xf6, 0xffff3f3b, 0x401, 0xff, 0x101, 0x17a, 0x5, 0x9, 0x7, 0x1, 0x5a, 0xa, 0x7, 0x5, 0x2, 0x7, 0x8f60, 0x26, 0x5, 0xfff, 0x8, 0x100, 0x9, 0xfffffffc, 0x4, 0x6, 0x7c1, 0x6, 0x0, 0x5, 0x3ff, 0xc, 0xffff, 0x1000, 0x80, 0x3, 0x4, 0x3, 0x6ad0, 0x2, 0x9, 0xaa, 0x1, 0x8, 0x1, 0x10000]}, 0x45c) 247.025295ms ago: executing program 2 (id=738): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x2c, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f0000000080)={{r6}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0x10001, 0x3, 0x5, 0x8, 0xed4}) setsockopt$rose(r7, 0x104, 0x5, &(0x7f0000001080)=0x6, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000180)="f3", 0x1}, {&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f00000004c0)="bca10de145", 0x5}], 0x6}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="c9", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000280)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) write$selinux_validatetrans(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x84, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x3, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@random={0xbf, 0xc, "579c524a1c5751d4d58ec71c"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 246.246584ms ago: executing program 2 (id=739): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x47e00, 0x19) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x6, 0x1, 0x9}, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]) 12.517087ms ago: executing program 2 (id=740): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x1b, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0x7, 0x0, 0x0, 0x0, 0x40, 0xe4, 0x9}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x49783, 0x0) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0) 11.74377ms ago: executing program 2 (id=741): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xb4, 0xffffff71, 0x9}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xb4, 0xffffff71, 0x9}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x9}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x81, @private1, 0xffff997f}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x9}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x81, @private1, 0xffff997f}]}, &(0x7f0000000180)=0x10) syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0xa800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x0, 0x68, 0x1000, &(0x7f0000000200)="34dc234c75f0c4c2fb9de6cab29ae7a55a5ef499aa80a7ef597c1ab5e075e204894c2a265bf73ea141cb7d916828259e6ef20a0f087555e98a9785f5fc919ef867775e52a3b7ad68f95658735786aadec98c468733ce2fb528060ba36e77708347392e0ac735c8b3", &(0x7f0000000280)=""/4096, 0x3ff, 0x0, 0x19, 0x25, &(0x7f0000001280)="5988bdd2ee86ddabddefda735290f840c61ca6ad5fcb5d3424", &(0x7f00000012c0)="e07d6906a297e8c08089f91b003aea7ddc4b0c9b17917a2ab136d57cf8bbe13a9658c19d9d", 0x2, 0x0, 0xffff0000}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x0, 0x68, 0x1000, &(0x7f0000000200)="34dc234c75f0c4c2fb9de6cab29ae7a55a5ef499aa80a7ef597c1ab5e075e204894c2a265bf73ea141cb7d916828259e6ef20a0f087555e98a9785f5fc919ef867775e52a3b7ad68f95658735786aadec98c468733ce2fb528060ba36e77708347392e0ac735c8b3", &(0x7f0000000280)=""/4096, 0x3ff, 0x0, 0x19, 0x25, &(0x7f0000001280)="5988bdd2ee86ddabddefda735290f840c61ca6ad5fcb5d3424", &(0x7f00000012c0)="e07d6906a297e8c08089f91b003aea7ddc4b0c9b17917a2ab136d57cf8bbe13a9658c19d9d", 0x2, 0x0, 0xffff0000}, 0x50) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000001380)={0x2, 0x0, @pic={0x10, 0xfa, 0xf8, 0x1, 0xa, 0x2, 0x9, 0x4, 0x55, 0x1, 0x7, 0x5, 0x92, 0x0, 0x8}}) ioctl$TCXONC(r1, 0x540a, 0x0) getpeername$tipc(r1, &(0x7f00000015c0)=@id, &(0x7f0000001600)=0x10) shmget$private(0x0, 0x1000, 0x62e3bb773a4634d3, &(0x7f0000ffc000/0x1000)=nil) (async) shmget$private(0x0, 0x1000, 0x62e3bb773a4634d3, &(0x7f0000ffc000/0x1000)=nil) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000001640)) mlockall(0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000016c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000017c0)={&(0x7f0000001680), 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000001d00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001840)={0x448, 0x3f4, 0x200, 0x70bd2b, 0x25dfdbff, {0x6, 0x1, 0x18, [0x7, 0x8, 0x8001, 0x0, 0x3ff, 0x5, 0x4, 0x93, 0x1, 0x800, 0x2, 0xbc2, 0x7, 0xfffffffd, 0x1c8, 0x10001, 0x4, 0x3, 0x7, 0x10000000, 0x1, 0x2, 0x10001, 0x200, 0x4, 0x6, 0xa07, 0x9, 0x6, 0x2, 0x4, 0xfffffff8, 0x1b, 0x1, 0x200, 0x1, 0x16d, 0x5, 0x7fff, 0x7, 0x400, 0x0, 0x8, 0x4, 0x7, 0xb, 0x4f, 0x10001, 0x0, 0x4, 0x0, 0x4, 0x7, 0xff, 0x8, 0x2, 0x800, 0x0, 0x9, 0x2, 0xe, 0x1000, 0xfff, 0x3], [0x5, 0x4, 0x3ff, 0x6, 0x4, 0x8b, 0x6, 0x5, 0x3, 0x1, 0x8, 0xff, 0x8, 0xea0, 0x0, 0x5, 0x7, 0x5c1, 0x1, 0xd0d6, 0x100, 0x7, 0x101, 0x685, 0x648c3831, 0x9, 0x0, 0xa, 0xffffffff, 0x8, 0x75, 0x2, 0x4, 0xfffffffc, 0x7fff, 0x8, 0xb, 0x3, 0x9, 0x4949, 0x6, 0x1, 0xa6, 0x2, 0x400, 0x3, 0x2f, 0x8, 0x4, 0x3000000, 0xfffffffc, 0x8, 0x2, 0x9, 0x7, 0x1, 0xfffffff7, 0x9, 0x3, 0xe3, 0xfffffffa, 0x0, 0x0, 0xffffffff], [0x0, 0x8, 0x4, 0x2, 0x8, 0x3, 0x401, 0xf, 0x9, 0xb31d, 0xfffffffe, 0x5, 0x7, 0x7, 0xb89, 0x5, 0xffff, 0x2, 0xb, 0x2441, 0x1, 0x6, 0x1ff, 0x8, 0x7fffffff, 0x2, 0x200, 0x0, 0x198, 0x9, 0x80000001, 0xfffffffe, 0x200, 0x37, 0xf, 0xffff, 0xa, 0x2, 0x2, 0x8, 0x813, 0x0, 0xfffffffd, 0x0, 0x9abc, 0x9, 0x6, 0x7, 0x6, 0xaf, 0x33e5, 0xfffffff9, 0x0, 0x2, 0xc47e, 0x0, 0x0, 0x10000, 0x2ea, 0x10000, 0x9, 0x0, 0x1b, 0x6a], [0x8, 0x6, 0xeba, 0x9, 0x7, 0x0, 0x7f, 0x2, 0xfffffffa, 0x5, 0x101, 0x80000001, 0xe7dd, 0x5, 0x3, 0x8, 0x7, 0x10, 0xacf3, 0x9, 0xfffffff9, 0x5, 0x9, 0x0, 0x4, 0x8, 0x80000000, 0x6, 0x7fffffff, 0x12e5, 0x10000, 0x7, 0x8, 0x4c9e, 0x401, 0x5, 0xe3fe, 0x240000, 0x7, 0x4, 0x40, 0x9, 0x3, 0x4, 0x37, 0x3, 0x1, 0x7, 0x1, 0x2, 0x9b6e, 0x3, 0x2, 0x2, 0x3, 0x3, 0x1, 0x1, 0x83f21b2, 0xe, 0xb905, 0x9, 0xe4, 0x4], 0x25, ['mptcp_pm\x00', '/{@\x00', 'mptcp_pm\x00', '/dev/dri/card#\x00']}, ["", "", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000001d40)={0x1, 0x0, @pic={0x4, 0x8, 0x83, 0xc, 0x9, 0xb4, 0x4, 0x10, 0x0, 0x53, 0x5, 0x80, 0x3, 0x64, 0x1, 0x5}}) (async) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000001d40)={0x1, 0x0, @pic={0x4, 0x8, 0x83, 0xc, 0x9, 0xb4, 0x4, 0x10, 0x0, 0x53, 0x5, 0x80, 0x3, 0x64, 0x1, 0x5}}) r6 = syz_open_dev$vcsu(&(0x7f0000001f80), 0xfffffffffffff801, 0x100) ioctl$KVM_CAP_STEAL_TIME(r6, 0x4068aea3, &(0x7f0000001fc0)) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000002040)) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000002040)) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000020c0)={'\x00', 0xee2b, 0x480, 0xbbd6, 0xf24, 0x101, 0x0}) capset(&(0x7f0000002140)={0x20080522, r7}, &(0x7f0000002180)={0x0, 0x10001, 0x2, 0x7, 0x4, 0x1}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002200), &(0x7f0000002240)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002200)={0x0, 0x0}, &(0x7f0000002240)=0xc) sendmsg$nl_route(r1, &(0x7f0000002380)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002340)={&(0x7f0000002280)=@ipv6_getroute={0xa8, 0x1a, 0x300, 0x70bd2b, 0x25dfdbfb, {0xa, 0x10, 0x80, 0xf3, 0xff, 0x4, 0xfe, 0xa}, [@RTA_PRIORITY={0x8, 0x6, 0xfff}, @RTA_UID={0x8, 0x19, r8}, @RTA_METRICS={0x7a, 0x8, 0x0, 0x1, "4469aaaba375045c5e602bb2e4fc078da78be993c9b70b9e707b0466507dd895b236bc9f2a3e5ebd03d4d8b67bc9dcf06f31f7ec12159975a88a0ae2cfd4dec13a31fc43d9f3e26dabf19e7b04ca8033fa3d3d69c39479f266484f2638ef5467ba7d2944da0e66414c53abc65352082996d0c8c9d6f3"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000002380)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002340)={&(0x7f0000002280)=@ipv6_getroute={0xa8, 0x1a, 0x300, 0x70bd2b, 0x25dfdbfb, {0xa, 0x10, 0x80, 0xf3, 0xff, 0x4, 0xfe, 0xa}, [@RTA_PRIORITY={0x8, 0x6, 0xfff}, @RTA_UID={0x8, 0x19, r8}, @RTA_METRICS={0x7a, 0x8, 0x0, 0x1, "4469aaaba375045c5e602bb2e4fc078da78be993c9b70b9e707b0466507dd895b236bc9f2a3e5ebd03d4d8b67bc9dcf06f31f7ec12159975a88a0ae2cfd4dec13a31fc43d9f3e26dabf19e7b04ca8033fa3d3d69c39479f266484f2638ef5467ba7d2944da0e66414c53abc65352082996d0c8c9d6f3"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$KDADDIO(r6, 0x4b34, 0xa630) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000023c0)={0x2d, 0x6, 0x0, {0x5, 0x6, 0x4, 0x0, '/{@\x00'}}, 0x2d) close(r1) (async) close(r1) accept$nfc_llcp(r6, &(0x7f0000002400), &(0x7f0000002480)=0x60) 0s ago: executing program 2 (id=742): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0x80000001) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x37, 0x2007, @fd=r0, 0x80, 0x0, 0x0, 0x0, 0x1, {0x5}}) io_uring_enter(r0, 0x4a5a, 0x2ae5, 0x2, 0x0, 0x0) (async) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 43.697566][ T40] audit: type=1400 audit(1757077676.554:61): avc: denied { siginh } for pid=5889 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:64709' (ED25519) to the list of known hosts. [ 44.760424][ T40] audit: type=1400 audit(1757077677.644:62): avc: denied { name_bind } for pid=5923 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.781857][ T40] audit: type=1400 audit(1757077677.664:63): avc: denied { write } for pid=5924 comm="sh" path="pipe:[1842]" dev="pipefs" ino=1842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.793676][ T40] audit: type=1400 audit(1757077677.674:64): avc: denied { execute } for pid=5924 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.800563][ T40] audit: type=1400 audit(1757077677.674:65): avc: denied { execute_no_trans } for pid=5924 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.844483][ T40] audit: type=1400 audit(1757077679.724:66): avc: denied { mounton } for pid=5924 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.847456][ T5924] cgroup: Unknown subsys name 'net' [ 47.021130][ T5924] cgroup: Unknown subsys name 'cpuset' [ 47.025193][ T5924] cgroup: Unknown subsys name 'rlimit' [ 47.262976][ T5958] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.970241][ T5924] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.586428][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.586438][ T40] audit: type=1400 audit(1757077684.464:80): avc: denied { execmem } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.765037][ T40] audit: type=1400 audit(1757077684.644:81): avc: denied { create } for pid=5966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.774511][ T40] audit: type=1400 audit(1757077684.644:82): avc: denied { read write } for pid=5966 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.781906][ T40] audit: type=1400 audit(1757077684.644:83): avc: denied { open } for pid=5966 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.790754][ T40] audit: type=1400 audit(1757077684.654:84): avc: denied { ioctl } for pid=5966 comm="syz-executor" path="socket:[1859]" dev="sockfs" ino=1859 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.809811][ T5978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.810094][ T5975] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.813665][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.816277][ T5979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.817637][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.819774][ T5979] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.822205][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.823073][ T5976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.823696][ T5976] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.824745][ T5979] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.825010][ T5979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.825409][ T5979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.825705][ T5979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.826561][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.829996][ T5975] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.840265][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.843108][ T40] audit: type=1400 audit(1757077684.704:85): avc: denied { read } for pid=5980 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.845318][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.846847][ T40] audit: type=1400 audit(1757077684.714:86): avc: denied { open } for pid=5980 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.855435][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.856465][ T40] audit: type=1400 audit(1757077684.714:87): avc: denied { mounton } for pid=5980 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.868463][ T5975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.876164][ T5975] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.037954][ T40] audit: type=1400 audit(1757077684.914:88): avc: denied { module_request } for pid=5980 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.092551][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 52.106494][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 52.212127][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 52.274620][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.277127][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.280895][ T5980] bridge_slave_0: entered allmulticast mode [ 52.284276][ T5980] bridge_slave_0: entered promiscuous mode [ 52.329492][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.332264][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.334472][ T5980] bridge_slave_1: entered allmulticast mode [ 52.337145][ T5980] bridge_slave_1: entered promiscuous mode [ 52.345202][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 52.349673][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.351936][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.354156][ T5970] bridge_slave_0: entered allmulticast mode [ 52.356737][ T5970] bridge_slave_0: entered promiscuous mode [ 52.408723][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.411736][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.414740][ T5970] bridge_slave_1: entered allmulticast mode [ 52.418793][ T5970] bridge_slave_1: entered promiscuous mode [ 52.449998][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.461119][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.576493][ T5980] team0: Port device team_slave_0 added [ 52.603667][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.606700][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.610424][ T5966] bridge_slave_0: entered allmulticast mode [ 52.614340][ T5966] bridge_slave_0: entered promiscuous mode [ 52.627462][ T5980] team0: Port device team_slave_1 added [ 52.652704][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.655840][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.658940][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.662100][ T5966] bridge_slave_1: entered allmulticast mode [ 52.665938][ T5966] bridge_slave_1: entered promiscuous mode [ 52.691535][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.693877][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.704584][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.713352][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.763964][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.766819][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.777547][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.857435][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.860659][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.863614][ T5967] bridge_slave_0: entered allmulticast mode [ 52.867453][ T5967] bridge_slave_0: entered promiscuous mode [ 52.898124][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.904273][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.924690][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.927810][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.931134][ T5967] bridge_slave_1: entered allmulticast mode [ 52.935063][ T5967] bridge_slave_1: entered promiscuous mode [ 52.942738][ T5970] team0: Port device team_slave_0 added [ 52.948041][ T5970] team0: Port device team_slave_1 added [ 53.067452][ T5966] team0: Port device team_slave_0 added [ 53.122623][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.125592][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.135734][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.146908][ T5966] team0: Port device team_slave_1 added [ 53.176530][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.186154][ T5980] hsr_slave_0: entered promiscuous mode [ 53.189097][ T5980] hsr_slave_1: entered promiscuous mode [ 53.192219][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.195128][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.204900][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.225676][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.287070][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.289372][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.297520][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.303221][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.305409][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.313615][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.336832][ T5967] team0: Port device team_slave_0 added [ 53.345553][ T5967] team0: Port device team_slave_1 added [ 53.471490][ T5970] hsr_slave_0: entered promiscuous mode [ 53.474612][ T5970] hsr_slave_1: entered promiscuous mode [ 53.477489][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 53.480422][ T5970] Cannot create hsr debugfs directory [ 53.487328][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.490730][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.501394][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.561011][ T5966] hsr_slave_0: entered promiscuous mode [ 53.564100][ T5966] hsr_slave_1: entered promiscuous mode [ 53.566947][ T5966] debugfs: 'hsr0' already exists in 'hsr' [ 53.569586][ T5966] Cannot create hsr debugfs directory [ 53.572488][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.575321][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.585411][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.798231][ T5967] hsr_slave_0: entered promiscuous mode [ 53.800897][ T5967] hsr_slave_1: entered promiscuous mode [ 53.803446][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 53.805272][ T5967] Cannot create hsr debugfs directory [ 53.888651][ T5971] Bluetooth: hci2: command tx timeout [ 53.888658][ T5975] Bluetooth: hci0: command tx timeout [ 53.888937][ T5975] Bluetooth: hci1: command tx timeout [ 53.891351][ T5971] Bluetooth: hci3: command tx timeout [ 54.024573][ T5980] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.034894][ T5980] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.042320][ T5980] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.051231][ T5980] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.106715][ T5970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.113820][ T5970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.120616][ T5970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.126592][ T5970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.201931][ T5967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.206936][ T5967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.224304][ T5967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.231078][ T5967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.295046][ T5966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.302116][ T5966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.308796][ T5966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.318580][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.327045][ T5966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.354512][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.379595][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.383199][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.391999][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.395051][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.410191][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.433477][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.452936][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.456024][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.473584][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.476888][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.516121][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.555473][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.566788][ T40] audit: type=1400 audit(1757077687.444:89): avc: denied { sys_module } for pid=5980 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.568526][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.578139][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.591517][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.594413][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.611239][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.629877][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.641151][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.644029][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.661817][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.664220][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.717765][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.745666][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.764487][ T5980] veth0_vlan: entered promiscuous mode [ 54.774752][ T5980] veth1_vlan: entered promiscuous mode [ 54.791584][ T5970] veth0_vlan: entered promiscuous mode [ 54.798028][ T5970] veth1_vlan: entered promiscuous mode [ 54.820145][ T5980] veth0_macvtap: entered promiscuous mode [ 54.825288][ T5980] veth1_macvtap: entered promiscuous mode [ 54.836570][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.842987][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.856497][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.872568][ T1150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.879932][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.885608][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.889728][ T5970] veth0_macvtap: entered promiscuous mode [ 54.896634][ T5970] veth1_macvtap: entered promiscuous mode [ 54.901028][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.926158][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.933700][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.948475][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.984701][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.984915][ T5967] veth0_vlan: entered promiscuous mode [ 54.990302][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.992047][ T1150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.996343][ T1150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.009145][ T1150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.012873][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.027330][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.031698][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.036930][ T5967] veth1_vlan: entered promiscuous mode [ 55.082793][ T5980] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.103892][ T5967] veth0_macvtap: entered promiscuous mode [ 55.105380][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.108721][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.111382][ T5966] veth0_vlan: entered promiscuous mode [ 55.120238][ T5967] veth1_macvtap: entered promiscuous mode [ 55.125810][ T6056] usb usb8: usbfs: process 6056 (syz.2.3) did not claim interface 0 before use [ 55.140462][ T5966] veth1_vlan: entered promiscuous mode [ 55.150895][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 55.196566][ T6056] hsr_slave_1 (unregistering): left promiscuous mode [ 55.203612][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.206242][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.209475][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.222012][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.234806][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.238526][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.242808][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.248828][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.255345][ T5966] veth0_macvtap: entered promiscuous mode [ 55.270504][ T5966] veth1_macvtap: entered promiscuous mode [ 55.311656][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.314851][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.321601][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.340470][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.350192][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.352245][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.352703][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.355949][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.365428][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.369877][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.435495][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.436126][ T6069] Bluetooth: MGMT ver 1.23 [ 55.440324][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.466788][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.469663][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.475926][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6'. [ 55.479526][ T6071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 55.511678][ T6072] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5'. [ 55.515124][ T6074] input: syz1 as /devices/virtual/input/input5 [ 55.548542][ T6078] vlan2: entered promiscuous mode [ 55.550504][ T6078] vlan2: entered allmulticast mode [ 55.552440][ T6078] hsr_slave_1: entered allmulticast mode [ 55.577698][ T6080] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 55.606816][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 55.968154][ T63] Bluetooth: hci3: command tx timeout [ 55.978353][ T63] Bluetooth: hci1: command tx timeout [ 55.978449][ T5975] Bluetooth: hci2: command tx timeout [ 55.978958][ T5979] Bluetooth: hci0: command tx timeout [ 56.533781][ T6101] Zero length message leads to an empty skb [ 56.550578][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 56.551324][ T6101] overlayfs: upper fs does not support file handles, falling back to index=off. [ 56.553198][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 56.609421][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 56.609431][ T40] audit: type=1400 audit(1757077689.484:171): avc: denied { create } for pid=6102 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.745510][ T40] audit: type=1400 audit(1757077689.624:172): avc: denied { create } for pid=6117 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.751681][ T40] audit: type=1400 audit(1757077689.634:173): avc: denied { bind } for pid=6117 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.758912][ T40] audit: type=1400 audit(1757077689.644:174): avc: denied { setopt } for pid=6117 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.765103][ T40] audit: type=1400 audit(1757077689.644:175): avc: denied { accept } for pid=6117 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.799359][ T40] audit: type=1400 audit(1757077689.684:176): avc: denied { create } for pid=6125 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.805382][ T40] audit: type=1400 audit(1757077689.684:177): avc: denied { connect } for pid=6125 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.812279][ T40] audit: type=1400 audit(1757077689.684:178): avc: denied { ioctl } for pid=6125 comm="syz.1.23" path="socket:[11335]" dev="sockfs" ino=11335 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.819530][ T40] audit: type=1326 audit(1757077689.684:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.1.23" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc713b8ebe9 code=0xffff0000 [ 56.826838][ T40] audit: type=1400 audit(1757077689.694:180): avc: denied { ioctl } for pid=6127 comm="syz.2.24" path="socket:[10324]" dev="sockfs" ino=10324 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.858863][ T6133] erspan0: entered promiscuous mode [ 56.923035][ T6136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.007580][ T6145] comedi comedi0: Minor 3 could not be opened [ 57.436183][ T6159] process 'syz.2.33' launched '/dev/fd/3' with NULL argv: empty string added [ 57.447145][ T6161] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 57.449330][ T6161] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.455281][ T6159] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 57.457377][ T6159] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.463545][ T6161] vhci_hcd vhci_hcd.0: Device attached [ 57.465467][ T6159] vhci_hcd vhci_hcd.0: Device attached [ 57.467248][ T6165] vhci_hcd: unknown pdu 2 [ 57.470941][ T1150] vhci_hcd: stop threads [ 57.472304][ T1150] vhci_hcd: release socket [ 57.473676][ T1150] vhci_hcd: disconnect device [ 57.521318][ T6161] 9pnet_fd: Insufficient options for proto=fd [ 57.525727][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 57.530473][ T6166] vhci_hcd: connection closed [ 57.530772][ T93] vhci_hcd: stop threads [ 57.533767][ T93] vhci_hcd: release socket [ 57.535154][ T93] vhci_hcd: disconnect device [ 57.734611][ T6181] netlink: 'syz.1.36': attribute type 4 has an invalid length. [ 58.033173][ T6191] futex_wake_op: syz.1.41 tries to shift op by -1; fix this program [ 58.037749][ T6191] futex_wake_op: syz.1.41 tries to shift op by -1; fix this program [ 58.045811][ T6191] futex_wake_op: syz.1.41 tries to shift op by -1; fix this program [ 58.048723][ T5975] Bluetooth: hci0: command tx timeout [ 58.058038][ T5975] Bluetooth: hci2: command tx timeout [ 58.058285][ T63] Bluetooth: hci1: command tx timeout [ 58.059781][ T5975] Bluetooth: hci3: command 0x040f tx timeout [ 58.109448][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 58.283153][ T6205] netlink: 'syz.3.45': attribute type 12 has an invalid length. [ 58.286372][ T6205] netlink: 32 bytes leftover after parsing attributes in process `syz.3.45'. [ 58.368321][ T952] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.497978][ T952] usb 6-1: device descriptor read/64, error -71 [ 58.695881][ T6219] vlan2: entered promiscuous mode [ 58.697653][ T6219] vlan2: entered allmulticast mode [ 58.699686][ T6219] hsr_slave_1: entered allmulticast mode [ 58.768014][ T952] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.905106][ T6238] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.922432][ T952] usb 6-1: device descriptor read/64, error -71 [ 59.048201][ T952] usb usb6-port1: attempt power cycle [ 59.407960][ T952] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 59.439352][ T952] usb 6-1: device descriptor read/8, error -71 [ 59.557813][ T6245] syz.2.58 (6245): drop_caches: 2 [ 59.650777][ T6254] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 59.697959][ T952] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 59.710618][ T6257] ipvlan0: entered promiscuous mode [ 59.712854][ T6257] ipvlan0: entered allmulticast mode [ 59.715036][ T6257] veth0_vlan: entered allmulticast mode [ 59.719431][ T952] usb 6-1: device descriptor read/8, error -71 [ 59.828074][ T952] usb usb6-port1: unable to enumerate USB device [ 59.831496][ T6267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6267 comm=syz.3.62 [ 59.873839][ T6284] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.904141][ T6289] overlayfs: failed to resolve './file1': -2 [ 59.980279][ T6296] tty tty27: ldisc open failed (-12), clearing slot 26 [ 60.078261][ T6332] iso9660: Unknown parameter 'discard*‡[Qеﲞ؉ÏnñNˆYé A‚ï¤÷¸H9' [ 60.127595][ T6341] SELinux: ebitmap: truncated map [ 60.129792][ T5975] Bluetooth: hci2: command tx timeout [ 60.136905][ T6341] SELinux: failed to load policy [ 60.138204][ T5975] Bluetooth: hci3: command 0x040f tx timeout [ 60.138409][ T5971] Bluetooth: hci0: command tx timeout [ 60.139113][ T5971] Bluetooth: hci1: command tx timeout [ 60.461255][ T6359] __nla_validate_parse: 16 callbacks suppressed [ 60.461269][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.75'. [ 60.474244][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.75'. [ 60.761881][ T6394] netlink: 32 bytes leftover after parsing attributes in process `syz.3.80'. [ 60.765909][ T6293] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 60.905320][ T6422] block nbd3: Attempted send on invalid socket [ 60.908027][ T6422] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.908490][ T6427] overlayfs: failed to resolve './file1': -2 [ 60.911310][ T6422] exFAT-fs (nbd3): unable to read boot sector [ 60.915008][ T6422] exFAT-fs (nbd3): failed to read boot sector [ 60.916941][ T6422] exFAT-fs (nbd3): failed to recognize exfat type [ 60.932249][ T6422] mmap: syz.3.85 (6422) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.935035][ T6430] ======================================================= [ 60.935035][ T6430] WARNING: The mand mount option has been deprecated and [ 60.935035][ T6430] and is ignored by this kernel. Remove the mand [ 60.935035][ T6430] option from the mount to silence this warning. [ 60.935035][ T6430] ======================================================= [ 60.946988][ T6430] cgroup: name respecified [ 60.990600][ T6430] 9pnet_virtio: no channels available for device syz [ 60.992925][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.88'. [ 60.996321][ T6430] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 61.076446][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 61.168920][ T6475] sp0: Synchronizing with TNC [ 61.188003][ T6321] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 61.192410][ T6321] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 61.196267][ T6016] hid (null): bogus close delimiter [ 61.208688][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 61.211976][ T6016] hid-generic 1A47:0003:0006.0002: bogus close delimiter [ 61.214374][ T6016] hid-generic 1A47:0003:0006.0002: item 0 0 2 10 parsing failed [ 61.217029][ T6016] hid-generic 1A47:0003:0006.0002: probe with driver hid-generic failed with error -22 [ 61.308035][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 61.341958][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 61.475052][ T6536] netlink: 360 bytes leftover after parsing attributes in process `syz.1.100'. [ 61.561312][ T6550] bridge_slave_0: left allmulticast mode [ 61.563236][ T6550] bridge_slave_0: left promiscuous mode [ 61.565276][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.572221][ T6550] bridge_slave_1: left allmulticast mode [ 61.574068][ T6550] bridge_slave_1: left promiscuous mode [ 61.576740][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.584351][ T6550] bond0: (slave bond_slave_0): Releasing backup interface [ 61.590310][ T6550] bond0: (slave bond_slave_1): Releasing backup interface [ 61.597804][ T6550] team0: Port device team_slave_0 removed [ 61.606813][ T6550] team0: Port device team_slave_1 removed [ 61.609476][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.611755][ T6550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.615284][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.617586][ T6550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.633125][ T6563] team0: Mode changed to "broadcast" [ 61.642254][ T6550] vlan0: entered promiscuous mode [ 61.648360][ T6005] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 61.649196][ T6550] team0: Port device vlan0 added [ 61.654706][ T6550] tipc: Started in network mode [ 61.656323][ T6550] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 61.659453][ T6550] tipc: Enabled bearer , priority 0 [ 61.714631][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 61.717999][ T6005] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 61.788866][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.853854][ T6589] dummy0: entered allmulticast mode [ 61.860357][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 61.860370][ T40] audit: type=1400 audit(1757077950.739:296): avc: denied { read } for pid=6586 comm="syz.1.109" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.918647][ T10] usb 7-1: device descriptor read/64, error -71 [ 61.920596][ T40] audit: type=1400 audit(1757077950.799:297): avc: denied { mount } for pid=6577 comm="syz.0.107" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 61.923552][ T6591] devpts: Bad value for 'max' [ 61.931267][ T40] audit: type=1400 audit(1757077950.799:298): avc: denied { remount } for pid=6577 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 62.167952][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.203820][ T40] audit: type=1400 audit(1757077951.079:299): avc: denied { connect } for pid=6595 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.210010][ T5971] Bluetooth: hci3: command 0x040f tx timeout [ 62.212053][ T5975] Bluetooth: hci2: command 0x0401 tx timeout [ 62.212125][ T40] audit: type=1400 audit(1757077951.079:300): avc: denied { write } for pid=6595 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.299641][ T10] usb 7-1: device descriptor read/64, error -71 [ 62.418590][ T10] usb usb7-port1: attempt power cycle [ 62.500228][ T6604] xt_limit: Overflow, try lower: 271964/0 [ 62.583991][ T6617] Invalid ELF header type: 0 != 1 [ 62.586437][ T40] audit: type=1400 audit(1757077951.459:301): avc: denied { module_load } for pid=6614 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 62.591366][ T6617] capability: warning: `syz.3.114' uses 32-bit capabilities (legacy support in use) [ 62.623086][ T40] audit: type=1400 audit(1757077951.499:302): avc: denied { create } for pid=6619 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.624154][ T6620] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 62.630565][ T40] audit: type=1400 audit(1757077951.499:303): avc: denied { setopt } for pid=6619 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.637774][ T40] audit: type=1400 audit(1757077951.509:304): avc: denied { map } for pid=6619 comm="syz.3.115" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.645099][ T40] audit: type=1400 audit(1757077951.509:305): avc: denied { call } for pid=6619 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.689987][ T9] tipc: Node number set to 11578026 [ 62.768028][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.789624][ T10] usb 7-1: device descriptor read/8, error -71 [ 62.823781][ T6651] ieee802154 phy0 wpan0: encryption failed: -22 [ 62.827198][ T6651] Unsupported ieee802154 address type: 0 [ 62.883489][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 62.957369][ T6661] syz.3.122 (6661): drop_caches: 2 [ 62.964362][ T6668] mkiss: ax0: crc mode is auto. [ 62.969005][ T6668] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.972272][ T6668] MINIX-fs: unable to read superblock [ 63.038415][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 63.061364][ T6677] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 63.070105][ T6677] CIFS: Unable to determine destination address [ 63.072336][ T10] usb 7-1: device descriptor read/8, error -71 [ 63.094937][ T6684] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 63.097013][ T6684] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.099929][ T6684] vhci_hcd vhci_hcd.0: Device attached [ 63.104439][ T6687] vhci_hcd: unknown pdu 2 [ 63.106150][ T1145] vhci_hcd: stop threads [ 63.107531][ T1145] vhci_hcd: release socket [ 63.112373][ T1145] vhci_hcd: disconnect device [ 63.137724][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 63.188037][ T10] usb usb7-port1: unable to enumerate USB device [ 63.234459][ T6719] Bluetooth: MGMT ver 1.23 [ 63.241156][ T6720] vcan1: entered allmulticast mode [ 63.370067][ T6747] hpfs: hpfs_map_sector(): read error [ 63.465251][ T6740] validate_nla: 1 callbacks suppressed [ 63.465262][ T6740] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 63.470310][ T6740] veth0_macvtap: left promiscuous mode [ 64.156152][ T6794] netlink: 'syz.3.150': attribute type 16 has an invalid length. [ 64.157021][ T6796] netlink: 'syz.3.150': attribute type 16 has an invalid length. [ 64.159283][ T6794] netlink: 'syz.3.150': attribute type 17 has an invalid length. [ 64.161497][ T6796] netlink: 'syz.3.150': attribute type 17 has an invalid length. [ 64.191033][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.193707][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.254079][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.261404][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.424322][ T6794] vlan2: left promiscuous mode [ 64.425979][ T6794] vlan2: left allmulticast mode [ 64.427527][ T6794] hsr_slave_1: left allmulticast mode [ 64.429992][ T6794] vcan1: left allmulticast mode [ 64.431960][ T1145] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.434852][ T1145] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.443000][ T6813] bridge2: entered promiscuous mode [ 64.447378][ T1145] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.450274][ T6813] random: crng reseeded on system resumption [ 64.454303][ T1145] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.465064][ T6825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37136 sclass=netlink_route_socket pid=6825 comm=syz.3.155 [ 64.516992][ T6835] binder_alloc: binder_alloc_mmap_handler: 6834 200000ffe000-200000fff000 already mapped failed -16 [ 64.589951][ T6854] IPv6: NLM_F_CREATE should be specified when creating new route [ 65.488055][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 65.600980][ T5975] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 65.601018][ T5975] Bluetooth: hci3: Malformed LE Event: 0x02 [ 65.640707][ T6937] sp0: Synchronizing with TNC [ 65.665124][ T6937] openvswitch: netlink: Missing key (keys=40, expected=100) [ 65.711953][ T6950] __nla_validate_parse: 6 callbacks suppressed [ 65.711964][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 65.718517][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 65.769515][ T6960] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 65.773474][ T6960] VFS: Can't find a romfs filesystem on dev nullb0. [ 65.773474][ T6960] [ 65.905879][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 65.908075][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 65.918723][ T6990] bond2: entered promiscuous mode [ 65.920615][ T6990] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.930624][ T6992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.933024][ T6992] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 65.937224][ T6992] bond2: (slave vcan2): Error -95 calling set_mac_address [ 65.948982][ T6990] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 65.953146][ T6990] bond2: (slave vcan2): Error -95 calling set_mac_address [ 66.002033][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.190'. [ 66.156138][ T7059] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.193'. [ 66.203184][ T7073] trusted_key: syz.3.195 sent an empty control message without MSG_MORE. [ 66.252190][ T7077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7077 comm=syz.3.196 [ 66.342328][ T7085] kvm: pic: non byte write [ 66.591422][ T7136] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.594664][ T7136] overlayfs: failed to set xattr on upper [ 66.596459][ T7136] overlayfs: ...falling back to redirect_dir=nofollow. [ 66.599505][ T7136] overlayfs: ...falling back to index=off. [ 66.601354][ T7136] overlayfs: ...falling back to uuid=null. [ 66.603195][ T7136] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 66.719883][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 66.730430][ T7186] /dev/sg0: Can't lookup blockdev [ 66.734466][ T7185] /dev/sg0: Can't lookup blockdev [ 66.749088][ T7191] binder: 7189:7191 ioctl 4010640d 200000000000 returned -22 [ 66.753834][ T7191] binder: 7189:7191 ioctl 80086601 200000000180 returned -22 [ 66.769976][ T7191] netlink: 92 bytes leftover after parsing attributes in process `syz.1.221'. [ 66.791643][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 66.794767][ T7199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.798665][ T7199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.834877][ T7215] netlink: 56 bytes leftover after parsing attributes in process `syz.1.226'. [ 66.838876][ T7215] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 66.842195][ T7215] netlink: 'syz.1.226': attribute type 2 has an invalid length. [ 66.844591][ T7215] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 66.846941][ T7215] netlink: 'syz.1.226': attribute type 2 has an invalid length. [ 66.850508][ T7215] netlink: 'syz.1.226': attribute type 2 has an invalid length. [ 66.881656][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 66.881666][ T40] audit: type=1804 audit(1757077955.759:370): pid=7219 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.227" name="/newroot/64/file0" dev="tmpfs" ino=367 res=1 errno=0 [ 66.890690][ T40] audit: type=1800 audit(1757077955.759:371): pid=7219 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.227" name="file0" dev="tmpfs" ino=367 res=0 errno=0 [ 66.899244][ T40] audit: type=1400 audit(1757077955.769:372): avc: denied { map } for pid=7222 comm="syz.2.228" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.906693][ T40] audit: type=1400 audit(1757077955.769:373): avc: denied { execute } for pid=7222 comm="syz.2.228" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.916506][ T40] audit: type=1400 audit(1757077955.779:374): avc: denied { block_suspend } for pid=7203 comm="syz.0.224" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.919912][ T7231] fuse: Bad value for 'fd' [ 66.965964][ T40] audit: type=1400 audit(1757077955.839:375): avc: denied { mounton } for pid=7233 comm="syz.1.230" path="/66/file0" dev="9p" ino=35913919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.204881][ T40] audit: type=1400 audit(1757077956.079:376): avc: denied { create } for pid=7265 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 67.214269][ T7266] vlan2: entered promiscuous mode [ 67.215983][ T7266] bridge0: entered promiscuous mode [ 67.216244][ T40] audit: type=1400 audit(1757077956.079:377): avc: denied { connect } for pid=7265 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 67.255849][ T40] audit: type=1400 audit(1757077956.129:378): avc: denied { ioctl } for pid=7271 comm="syz.2.238" path="socket:[13829]" dev="sockfs" ino=13829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.264281][ T7272] vxlan0: entered promiscuous mode [ 67.266970][ T7272] vxlan0: entered allmulticast mode [ 67.286503][ T1145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.289672][ T1145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.296474][ T1145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.302920][ T1145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.314058][ T7291] tmpfs: Bad value for 'mpol' [ 67.352508][ T40] audit: type=1400 audit(1757077956.229:379): avc: denied { map } for pid=7302 comm="syz.2.244" path="socket:[15755]" dev="sockfs" ino=15755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 67.670560][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.675099][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.679551][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.682815][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.686517][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.690646][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.694273][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.698879][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.702984][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.706892][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.760374][ T7384] tty tty3: ldisc open failed (-12), clearing slot 2 [ 67.829592][ T7397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.837946][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 67.987951][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 67.990096][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 67.994722][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 67.997119][ T24] usb 7-1: can't read configurations, error -61 [ 68.127941][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 68.207836][ T7309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.277921][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 68.280029][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 68.283545][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 68.285950][ T24] usb 7-1: can't read configurations, error -61 [ 68.288227][ T24] usb usb7-port1: attempt power cycle [ 68.387960][ T6016] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.451960][ T7417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.540526][ T6016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.543569][ T6016] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 68.546425][ T6016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.551876][ T6016] usb 5-1: config 0 descriptor?? [ 68.558423][ T6016] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 68.628009][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 68.649052][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 68.652021][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 68.656783][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 68.660302][ T24] usb 7-1: can't read configurations, error -61 [ 68.797175][ T6334] Bluetooth: hci4: Frame reassembly failed (-90) [ 68.797975][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 68.829487][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 68.832307][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 68.837219][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 68.840468][ T24] usb 7-1: can't read configurations, error -61 [ 68.842651][ T24] usb usb7-port1: unable to enumerate USB device [ 69.373866][ T7446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7446 comm=syz.3.267 [ 69.631163][ T7508] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 70.820315][ T7554] qnx4: no qnx4 filesystem (no root dir). [ 70.826848][ T7555] __nla_validate_parse: 16 callbacks suppressed [ 70.826862][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 70.833458][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.282'. [ 70.848403][ T5975] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.919878][ T7562] netlink: 277 bytes leftover after parsing attributes in process `syz.2.283'. [ 70.929467][ T7562] futex_wake_op: syz.2.283 tries to shift op by -1; fix this program [ 71.044315][ T7562] validate_nla: 2 callbacks suppressed [ 71.044330][ T7562] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 71.050419][ T6054] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 71.054141][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.065647][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.077030][ T7562] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 71.115464][ T952] usb 5-1: USB disconnect, device number 2 [ 71.150777][ T7607] lo speed is unknown, defaulting to 1000 [ 71.153794][ T7607] lo speed is unknown, defaulting to 1000 [ 71.156426][ T7607] lo speed is unknown, defaulting to 1000 [ 71.260387][ T7607] infiniband sz1: set active [ 71.263589][ T7607] infiniband sz1: added lo [ 71.263834][ T6016] lo speed is unknown, defaulting to 1000 [ 71.298858][ T7607] RDS/IB: sz1: added [ 71.300528][ T7607] smc: adding ib device sz1 with port count 1 [ 71.302599][ T7607] smc: ib device sz1 port 1 has pnetid [ 71.306638][ T7607] lo speed is unknown, defaulting to 1000 [ 71.309619][ T952] lo speed is unknown, defaulting to 1000 [ 71.444818][ T7607] lo speed is unknown, defaulting to 1000 [ 71.559681][ T7607] lo speed is unknown, defaulting to 1000 [ 71.638065][ T7607] lo speed is unknown, defaulting to 1000 [ 72.376026][ T7665] gtp0: entered promiscuous mode [ 72.395796][ T7677] netlink: 'syz.2.308': attribute type 11 has an invalid length. [ 72.428014][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 72.428028][ T40] audit: type=1400 audit(2000000004.600:410): avc: denied { setcurrent } for pid=7680 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.438702][ T40] audit: type=1401 audit(2000000004.600:411): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 72.465649][ T40] audit: type=1400 audit(2000000004.640:412): avc: denied { unmount } for pid=5980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 72.511207][ T40] audit: type=1400 audit(2000000004.690:413): avc: denied { read } for pid=7688 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.535262][ T7696] 9pnet_virtio: no channels available for device syz [ 72.571870][ T7694] kvm: pic: non byte write [ 72.579174][ T7704] ntfs3(loop2): try to read out of volume at offset 0x0 [ 72.673720][ T40] audit: type=1400 audit(2000000004.850:414): avc: denied { ioctl } for pid=7712 comm="syz.2.316" path="socket:[15971]" dev="sockfs" ino=15971 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.713083][ T40] audit: type=1400 audit(2000000004.890:415): avc: denied { write } for pid=7719 comm="syz.2.318" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.778065][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 72.840831][ T7752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.323'. [ 72.875616][ T7774] net_ratelimit: 55 callbacks suppressed [ 72.875631][ T7774] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 72.900889][ T40] audit: type=1400 audit(2000000005.080:416): avc: denied { bind } for pid=7748 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.909632][ T40] audit: type=1400 audit(2000000005.080:417): avc: denied { write } for pid=7748 comm="syz.1.323" path="socket:[14186]" dev="sockfs" ino=14186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.930908][ T40] audit: type=1400 audit(2000000005.110:418): avc: denied { write } for pid=7800 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 72.966952][ T7799] bond1: entered allmulticast mode [ 72.969814][ T7799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.974183][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.329'. [ 72.974738][ T7799] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 72.977135][ T7838] x_tables: ip_tables: udp match: only valid for protocol 17 [ 73.017125][ T7851] fuse: Bad value for 'group_id' [ 73.020636][ T7851] fuse: Bad value for 'group_id' [ 73.036127][ T40] audit: type=1400 audit(2000000005.210:419): avc: denied { mount } for pid=7798 comm="syz.2.327" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.056819][ T7859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7859 comm=syz.1.335 [ 73.062924][ T7859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7859 comm=syz.1.335 [ 73.140276][ T7875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7875 comm=syz.2.338 [ 73.144524][ T7875] netlink: 'syz.2.338': attribute type 1 has an invalid length. [ 73.173950][ T7875] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 73.177337][ T7875] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 73.188211][ T7875] bond2: (slave wireguard0): making interface the new active one [ 73.191025][ T7875] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 73.196389][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 73.279017][ T7933] block nbd1: Device being setup by another task [ 73.422337][ T7945] fuse: Bad value for 'fd' [ 73.487355][ T7956] fuse: Bad value for 'fd' [ 73.543539][ T7962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.350'. [ 73.679160][ T8003] lo speed is unknown, defaulting to 1000 [ 73.681520][ T8003] lo speed is unknown, defaulting to 1000 [ 73.685153][ T8003] lo speed is unknown, defaulting to 1000 [ 73.691466][ T8003] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.701647][ T8003] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 73.714687][ T8003] lo speed is unknown, defaulting to 1000 [ 73.717493][ T8003] lo speed is unknown, defaulting to 1000 [ 73.720481][ T8003] lo speed is unknown, defaulting to 1000 [ 73.723094][ T8003] lo speed is unknown, defaulting to 1000 [ 73.728114][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 73.885261][ T8010] ip6tnl1: entered promiscuous mode [ 73.886926][ T8010] ip6tnl1: entered allmulticast mode [ 73.999181][ T5975] block nbd1: Receive control failed (result -32) [ 73.999745][ T7915] block nbd1: shutting down sockets [ 74.031368][ T8028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.358'. [ 74.035772][ T8028] x_tables: ip_tables: udp match: only valid for protocol 17 [ 74.062537][ T8032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 74.062920][ T8031] usb usb8: usbfs: process 8031 (syz.0.359) did not claim interface 0 before use [ 74.219959][ T8047] netem: unknown loss type 12 [ 74.221867][ T8047] netem: change failed [ 74.272233][ T8055] geneve2: entered promiscuous mode [ 74.274425][ T8055] geneve2: entered allmulticast mode [ 74.384058][ T8067] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 74.983361][ T8118] 9pnet_fd: p9_fd_create_tcp (8118): problem creating socket [ 75.064306][ T8135] gtp0: left promiscuous mode [ 75.157015][ T8147] MINIX-fs: blocksize too small for device [ 75.210121][ T8148] warning: `syz.1.393' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.299562][ T1150] tipc: Resetting bearer [ 75.467988][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.520925][ T8187] use of bytesused == 0 is deprecated and will be removed in the future, [ 75.524479][ T8187] use the actual size instead. [ 75.617032][ T8200] capability: warning: `syz.3.407' uses deprecated v2 capabilities in a way that may be insecure [ 75.630322][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.633340][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 75.636692][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.639733][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 75.643312][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 75.650295][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.653384][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.655995][ T9] usb 5-1: Product: syz [ 75.657352][ T9] usb 5-1: Manufacturer: syz [ 75.669787][ T8200] tipc: Started in network mode [ 75.672567][ T8200] tipc: Node identity ac14140f, cluster identity 4711 [ 75.676323][ T8200] tipc: Enabling of bearer rejected, failed to enable media [ 75.689668][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 75.691386][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 75.722728][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 75.724689][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 75.749044][ T8223] wireguard: wg0: Could not create IPv4 socket [ 75.953240][ T8244] __nla_validate_parse: 4 callbacks suppressed [ 75.953256][ T8244] netlink: 36 bytes leftover after parsing attributes in process `syz.3.415'. [ 75.959473][ T8243] netlink: 36 bytes leftover after parsing attributes in process `syz.3.415'. [ 76.018294][ T8273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.417'. [ 76.023774][ T8249] 8021q: adding VLAN 0 to HW filter on device bond5 [ 76.027553][ T8273] could not open pipe file descriptor [ 76.087216][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 76.120707][ T8293] kvm: pic: level sensitive irq not supported [ 76.144953][ T8302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 76.293654][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.296360][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.338007][ T8316] Failed to initialize the IGMP autojoin socket (err -2) [ 76.572845][ T8153] can: request_module (can-proto-0) failed. [ 76.578601][ T55] usb 5-1: USB disconnect, device number 3 [ 76.764744][ T8351] binder: 8350:8351 ioctl 4018620d 0 returned -22 [ 77.014315][ T8376] xfrm0 speed is unknown, defaulting to 1000 [ 77.016304][ T8376] xfrm0 speed is unknown, defaulting to 1000 [ 77.018739][ T8376] xfrm0 speed is unknown, defaulting to 1000 [ 77.023214][ T8376] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 77.034264][ T8376] xfrm0 speed is unknown, defaulting to 1000 [ 77.036927][ T8376] xfrm0 speed is unknown, defaulting to 1000 [ 77.041342][ T8376] xfrm0 speed is unknown, defaulting to 1000 [ 77.044069][ T8376] xfrm0 speed is unknown, defaulting to 1000 [ 77.247585][ T8403] geneve2: entered promiscuous mode [ 77.249356][ T8403] geneve2: entered allmulticast mode [ 77.264341][ T8402] geneve2: entered promiscuous mode [ 77.266017][ T8402] geneve2: entered allmulticast mode [ 77.343912][ T8415] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio0-cursor) [ 77.479451][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 77.481557][ T1115] ata1: failed to read log page 10h (errno=-5) [ 77.483454][ T1115] ata1.00: exception Emask 0x1 SAct 0x1000 SErr 0x0 action 0x0 [ 77.485827][ T1115] ata1.00: irq_stat 0x40000000 [ 77.487299][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 77.489553][ T1115] ata1.00: cmd 61/00:60:36:11:08/01:00:00:00:00/40 tag 12 ncq dma 131072 out [ 77.489553][ T1115] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 77.494881][ T1115] ata1.00: status: { DRDY } [ 77.499095][ T1115] ata1.00: configured for UDMA/100 [ 77.501055][ T1115] ata1: EH complete [ 77.549112][ T8435] netlink: 196 bytes leftover after parsing attributes in process `syz.0.444'. [ 77.596884][ T8437] netlink: 'syz.0.445': attribute type 2 has an invalid length. [ 77.601619][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 77.601629][ T40] audit: type=1400 audit(2000000009.780:455): avc: denied { getopt } for pid=8436 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.610875][ T40] audit: type=1400 audit(2000000009.780:456): avc: denied { connect } for pid=8436 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.704383][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 77.713473][ T8448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.800373][ T40] audit: type=1400 audit(2000000009.970:457): avc: denied { bind } for pid=8460 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.889276][ T40] audit: type=1400 audit(2000000010.070:458): avc: denied { bind } for pid=8510 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.900259][ T40] audit: type=1400 audit(2000000010.070:459): avc: denied { listen } for pid=8510 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.912324][ T40] audit: type=1400 audit(2000000010.090:460): avc: denied { write } for pid=8521 comm="syz.2.457" path="socket:[18674]" dev="sockfs" ino=18674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.918001][ T55] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 77.921454][ T8516] program syz.0.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.922400][ T55] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 77.922615][ T40] audit: type=1400 audit(2000000010.100:461): avc: denied { append } for pid=8513 comm="syz.0.454" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.926478][ T8516] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.454'. [ 77.930342][ T55] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 77.936912][ T8516] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 77.945176][ T55] hid-generic 0003:0004:0000.0003: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 77.954443][ T40] audit: type=1400 audit(2000000010.130:462): avc: denied { write } for pid=8521 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.966030][ T40] audit: type=1400 audit(2000000010.130:463): avc: denied { connect } for pid=8521 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.992970][ T40] audit: type=1400 audit(2000000010.170:464): avc: denied { setattr } for pid=8542 comm="syz.0.460" name="NETLINK" dev="sockfs" ino=18692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.000968][ T8529] fido_id[8529]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.105569][ T8573] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 78.107663][ T8573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.110293][ T8573] vhci_hcd vhci_hcd.0: Device attached [ 78.117376][ T8574] usbip_core: unknown command [ 78.120383][ T8574] vhci_hcd: unknown pdu 0 [ 78.121866][ T8574] usbip_core: unknown command [ 78.123628][ T52] vhci_hcd: stop threads [ 78.124979][ T52] vhci_hcd: release socket [ 78.126381][ T52] vhci_hcd: disconnect device [ 78.149636][ T6005] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 78.221834][ T8587] ntfs3(sr0): Primary boot signature is not NTFS. [ 78.224389][ T8587] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 78.308382][ T6005] usb 6-1: Using ep0 maxpacket: 16 [ 78.311887][ T6005] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 78.315122][ T6005] usb 6-1: config 0 has no interface number 0 [ 78.317614][ T6005] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 78.322662][ T6005] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 78.327970][ T6005] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 78.330784][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 78.333312][ T6005] usb 6-1: Product: syz [ 78.334820][ T6005] usb 6-1: SerialNumber: syz [ 78.338684][ T6005] usb 6-1: config 0 descriptor?? [ 78.343850][ T6005] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 78.346057][ T5975] Bluetooth: unknown link type 102 [ 78.348140][ T6005] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input8 [ 78.348960][ T5975] Bluetooth: hci0: connection err: -111 [ 78.468057][ T6054] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 78.575582][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 78.579378][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 78.582238][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 78.585103][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 78.587837][ T6005] usb 6-1: USB disconnect, device number 6 [ 78.587949][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 78.587965][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 78.598434][ T6005] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 78.608242][ T6054] usb 8-1: device descriptor read/64, error -71 [ 78.859861][ T6054] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 78.988153][ T6054] usb 8-1: device descriptor read/64, error -71 [ 78.988228][ T8645] @: renamed from vlan0 (while UP) [ 79.016559][ T5975] Bluetooth: hci3: Malformed LE Event: 0x0d [ 79.099567][ T6054] usb usb8-port1: attempt power cycle [ 79.248176][ T61] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 79.379006][ T61] usb 7-1: device descriptor read/64, error -71 [ 79.438043][ T6054] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 79.458376][ T6054] usb 8-1: device descriptor read/8, error -71 [ 79.490986][ T8676] lo: entered promiscuous mode [ 79.497566][ T8673] kvm: pic: non byte write [ 79.592322][ T8688] bridge_slave_0: left allmulticast mode [ 79.594228][ T8688] bridge_slave_0: left promiscuous mode [ 79.596140][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.602015][ T8688] bridge_slave_1: left allmulticast mode [ 79.603957][ T8688] bridge_slave_1: left promiscuous mode [ 79.606422][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.613092][ T8688] bond0: (slave bond_slave_0): Releasing backup interface [ 79.618863][ T61] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 79.622023][ T8688] bond0: (slave bond_slave_1): Releasing backup interface [ 79.628272][ T8688] team0: Port device team_slave_0 removed [ 79.633266][ T8688] team0: Port device team_slave_1 removed [ 79.635474][ T8688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.637724][ T8688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.640885][ T8688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.643210][ T8688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.664051][ T8689] team0: Mode changed to "loadbalance" [ 79.672668][ T8688] netlink: 'syz.0.484': attribute type 10 has an invalid length. [ 79.678057][ T8688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.680779][ T8688] team0: Port device bond0 added [ 79.683917][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 79.697950][ T6054] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 79.718696][ T6054] usb 8-1: device descriptor read/8, error -71 [ 79.743001][ T8688] team0 (unregistering): Port device bond0 removed [ 79.747978][ T61] usb 7-1: device descriptor read/64, error -71 [ 79.828375][ T6054] usb usb8-port1: unable to enumerate USB device [ 79.858209][ T61] usb usb7-port1: attempt power cycle [ 80.198027][ T61] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 80.218623][ T61] usb 7-1: device descriptor read/8, error -71 [ 80.467967][ T61] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 80.489930][ T61] usb 7-1: device descriptor read/8, error -71 [ 80.599659][ T61] usb usb7-port1: unable to enumerate USB device [ 80.881726][ T8741] fuse: Bad value for 'user_id' [ 80.883801][ T8741] fuse: Bad value for 'user_id' [ 80.940171][ T8745] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.943964][ T8745] block device autoloading is deprecated and will be removed. [ 80.952002][ T8745] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 81.272830][ T8759] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 81.409394][ T68] cfg80211: failed to load regulatory.db [ 81.419986][ T8769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.423855][ T8769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.961385][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 81.965388][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 81.969795][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 81.973616][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 82.070208][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 82.144778][ T8800] vlan3: entered allmulticast mode [ 82.146443][ T8800] bridge_slave_0: entered allmulticast mode [ 82.368921][ T8822] 9pnet_fd: Insufficient options for proto=fd [ 82.455126][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 82.570640][ T8830] /dev/sr0: Can't open blockdev [ 82.618126][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 82.618141][ T40] audit: type=1400 audit(2000000014.790:477): avc: denied { remount } for pid=8847 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.735354][ T8869] IPVS: Scheduler module ip_vs_sip not found [ 82.876219][ T8888] netlink: 548 bytes leftover after parsing attributes in process `syz.3.520'. [ 83.131535][ T40] audit: type=1400 audit(2000000015.310:478): avc: denied { create } for pid=8890 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 83.330732][ T5971] Bluetooth: hci0: command 0x0406 tx timeout [ 83.535703][ T8883] netlink: 'syz.3.520': attribute type 29 has an invalid length. [ 83.539218][ T8887] netlink: 'syz.3.520': attribute type 29 has an invalid length. [ 83.595353][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 83.636545][ T8924] netlink: 'syz.0.530': attribute type 2 has an invalid length. [ 83.641844][ T8924] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 83.645131][ T8924] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 83.685759][ T40] audit: type=1400 audit(2000000015.860:479): avc: denied { sqpoll } for pid=8934 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.699394][ T40] audit: type=1400 audit(2000000015.880:480): avc: denied { read } for pid=8938 comm="syz.1.533" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.727232][ T5975] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 83.730645][ T8949] program syz.3.535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.733649][ T8949] ata1.00: non-matching transfer count (-164442633/47) [ 83.754963][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 83.787264][ T8965] : Can't lookup blockdev [ 83.789348][ T8966] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 83.805583][ T8963] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 83.846253][ T40] audit: type=1400 audit(2000000016.020:481): avc: denied { execute } for pid=8959 comm="syz.2.539" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 83.854260][ T40] audit: type=1400 audit(2000000016.020:482): avc: denied { write } for pid=8959 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.856676][ T9014] netlink: 'syz.1.541': attribute type 39 has an invalid length. [ 83.885715][ T9021] tmpfs: Bad value for 'mpol' [ 83.899645][ T9026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 83.953331][ T40] audit: type=1400 audit(2000000016.130:483): avc: denied { mounton } for pid=9019 comm="syz.3.543" path="/176/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 83.960895][ T40] audit: type=1400 audit(2000000016.130:484): avc: denied { create } for pid=9096 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.088876][ T9135] Illegal XDP return value 134217734 on prog (id 111) dev syz_tun, expect packet loss! [ 84.246586][ T9162] ntfs3(sr0): Primary boot signature is not NTFS. [ 84.249361][ T9162] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 84.272027][ T9164] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.275290][ T40] audit: type=1400 audit(2000000016.450:485): avc: denied { mount } for pid=9163 comm="syz.0.563" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 84.286590][ T40] audit: type=1400 audit(2000000016.470:486): avc: denied { unmount } for pid=5966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 84.493719][ T9188] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 84.549627][ T9197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=9197 comm=syz.2.570 [ 84.617713][ T9204] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 84.659295][ T9243] support for the xor transformation has been removed. [ 84.735383][ T9246] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 84.738210][ T9246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.742205][ T9246] vhci_hcd vhci_hcd.0: Device attached [ 84.745314][ T9248] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 84.751280][ T6328] vhci_hcd: stop threads [ 84.751536][ T9252] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 84.752760][ T6328] vhci_hcd: release socket [ 84.757443][ T6328] vhci_hcd: disconnect device [ 84.927380][ T9261] 9pnet: Could not find request transport: unix`”ŠöJýâ [ 85.054454][ T9284] kvm: apic: phys broadcast and lowest prio [ 85.247383][ T9301] mkiss: ax0: crc mode is auto. [ 86.081395][ T9307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.085034][ T9307] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.092295][ T9307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.094838][ T9307] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.099107][ T9307] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.104661][ T9307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.107375][ T9307] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.113715][ T9307] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.118798][ T9307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.120714][ T9307] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.123234][ T9307] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.258112][ T9310] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.260089][ T9310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.262022][ T9310] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.263967][ T9310] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.340331][ T9373] netlink: 'syz.2.599': attribute type 13 has an invalid length. [ 86.435058][ T9389] Failed to initialize the IGMP autojoin socket (err -2) [ 86.516283][ T9404] 9pnet_virtio: no channels available for device ./file0 [ 86.922074][ T9491] syz.1.617 uses old SIOCAX25GETINFO [ 87.297959][ T55] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 87.448093][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 87.451035][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.454524][ T55] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 87.457376][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.462510][ T55] usb 6-1: config 0 descriptor?? [ 87.682191][ T55] usbhid 6-1:0.0: can't add hid device: -71 [ 87.684164][ T55] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 87.690400][ T55] usb 6-1: USB disconnect, device number 7 [ 88.250135][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 88.250151][ T40] audit: type=1400 audit(2000000020.430:510): avc: denied { execmem } for pid=9525 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 88.288083][ T5975] Bluetooth: hci3: command 0x040f tx timeout [ 88.288165][ T5971] Bluetooth: hci2: command 0x0401 tx timeout [ 88.288986][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.289032][ T5979] Bluetooth: hci0: command 0x0406 tx timeout [ 88.371561][ T40] audit: type=1400 audit(2000000020.550:511): avc: denied { create } for pid=9532 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.379991][ T40] audit: type=1400 audit(2000000020.550:512): avc: denied { setopt } for pid=9532 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.435673][ T9537] __nla_validate_parse: 11 callbacks suppressed [ 88.435684][ T9537] netlink: 48 bytes leftover after parsing attributes in process `syz.1.628'. [ 88.482935][ T40] audit: type=1400 audit(2000000020.660:513): avc: denied { append } for pid=9538 comm="syz.1.629" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.638990][ T9570] QAT: failed to copy from user. [ 88.675813][ T40] audit: type=1400 audit(2000000020.850:514): avc: denied { mount } for pid=9572 comm="syz.2.635" name="/" dev="rpc_pipefs" ino=21221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 88.685417][ T40] audit: type=1400 audit(2000000020.850:515): avc: denied { connect } for pid=9572 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.695651][ T40] audit: type=1400 audit(2000000020.850:516): avc: denied { mounton } for pid=9572 comm="syz.2.635" path="/155/file0" dev="rpc_pipefs" ino=21221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 88.705904][ T40] audit: type=1400 audit(2000000020.880:517): avc: denied { unmount } for pid=5980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 88.733265][ T40] audit: type=1400 audit(2000000020.910:518): avc: denied { write } for pid=9578 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.733662][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 88.800120][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 88.800538][ T40] audit: type=1400 audit(2000000020.970:519): avc: denied { shutdown } for pid=9583 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.893789][ T9591] bridge2: entered allmulticast mode [ 88.969585][ T9604] program syz.2.642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.010608][ T9610] random: crng reseeded on system resumption [ 89.063738][ T9615] Attempt to restore checkpoint with obsolete wellknown handles [ 89.111680][ T9615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.645'. [ 89.144289][ T9623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.646'. [ 89.153408][ T5971] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 89.309179][ T9625] validate_nla: 1 callbacks suppressed [ 89.309191][ T9625] netlink: 'syz.1.646': attribute type 1 has an invalid length. [ 89.313590][ T9625] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.646'. [ 89.439238][ T9629] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 89.475011][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 89.479198][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 89.482023][ T9644] netlink: 'syz.0.651': attribute type 11 has an invalid length. [ 89.484196][ T9643] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 89.484251][ T9639] netlink: 'syz.3.650': attribute type 3 has an invalid length. [ 89.484423][ T9639] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 89.484431][ T9639] netlink: 204 bytes leftover after parsing attributes in process `syz.3.650'. [ 89.484439][ T9639] NCSI netlink: No device for ifindex 0 [ 89.485030][ T9644] netlink: 'syz.0.651': attribute type 13 has an invalid length. [ 89.552653][ T9657] bond3: entered promiscuous mode [ 89.554640][ T9657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.557115][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 89.575236][ T9697] bond4: entered promiscuous mode [ 89.577060][ T9697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 89.645953][ T9746] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 89.648398][ T9746] overlayfs: failed to set xattr on upper [ 89.651762][ T9746] overlayfs: ...falling back to redirect_dir=nofollow. [ 89.653932][ T9746] overlayfs: ...falling back to index=off. [ 89.655789][ T9746] overlayfs: ...falling back to uuid=null. [ 89.657612][ T9746] overlayfs: ...falling back to xino=off. [ 89.716190][ T9756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=9756 comm=syz.0.662 [ 89.728066][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 90.138068][ T9821] QAT: failed to copy from user cfg_data. [ 90.368286][ T5975] Bluetooth: hci3: command 0x040f tx timeout [ 90.370556][ T63] Bluetooth: hci2: command 0x0401 tx timeout [ 90.378046][ T5975] Bluetooth: hci0: command 0x0406 tx timeout [ 90.822689][ T9884] io-wq is not configured for unbound workers [ 91.119464][ T9899] gfs2: gfs2 mount does not exist [ 91.193267][ T9914] binder: 9912:9914 ioctl c0306201 200000000640 returned -22 [ 91.501794][ T9964] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 91.505668][ T9964] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 91.683988][ T9973] bond0 (unregistering): Released all slaves [ 91.728709][ T68] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 91.872810][T10032] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 91.875741][T10032] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.879269][ T68] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 91.883460][ T68] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.888888][ T68] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 91.892358][ T68] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 91.898206][ T68] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 91.902637][ T68] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.905715][ T68] usb 8-1: Product: syz [ 91.907429][ T68] usb 8-1: Manufacturer: syz [ 91.909982][ T68] usb 8-1: SerialNumber: syz [ 91.914816][ T68] usb 8-1: config 0 descriptor?? [ 91.916447][T10041] binder: BINDER_SET_CONTEXT_MGR already set [ 91.919201][T10041] binder: 10038:10041 ioctl 4018620d 200000000100 returned -16 [ 92.122253][ T68] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 92.128180][ T61] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 92.237944][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.288029][ T61] usb 7-1: Using ep0 maxpacket: 16 [ 92.291036][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.294460][ T61] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 92.297612][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.302264][ T61] usb 7-1: config 0 descriptor?? [ 92.417999][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 92.420657][ T68] usb 8-1: USB disconnect, device number 6 [ 92.421035][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 92.425712][ T10] usb 5-1: config 179 has no interface number 0 [ 92.427717][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 92.431312][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 92.434805][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 101, changing to 10 [ 92.438596][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24697, setting to 1024 [ 92.442434][ T10] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 92.446583][ T10] usb 5-1: config 179 interface 65 has no altsetting 0 [ 92.448127][ T5971] Bluetooth: hci3: command 0x040f tx timeout [ 92.448155][ T5975] Bluetooth: hci2: command 0x0401 tx timeout [ 92.448839][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 92.452686][T10082] 9pnet_fd: Insufficient options for proto=fd [ 92.455359][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.471542][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input9 [ 92.518328][ T61] usbhid 7-1:0.0: can't add hid device: -71 [ 92.518383][ T5365] input input9: unable to receive magic message: -110 [ 92.520260][ T61] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 92.530836][ T61] usb 7-1: USB disconnect, device number 14 [ 92.532246][ T5365] input input9: unable to receive magic message: -32 [ 92.536544][ T5365] input input9: unable to receive magic message: -32 [ 92.547973][ T5365] input input9: unable to receive magic message: -32 [ 92.555104][ T5365] input input9: unable to receive magic message: -32 [ 92.558604][ T5365] input input9: unable to receive magic message: -32 [ 92.666128][T10051] input input9: unable to receive magic message: -32 [ 92.671860][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 92.675088][ T10] usb 5-1: USB disconnect, device number 4 [ 92.768072][ T68] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 92.921388][ T68] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 92.924606][ T68] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.927307][ T68] usb 8-1: Product: syz [ 92.929276][ T68] usb 8-1: Manufacturer: syz [ 92.931237][ T68] usb 8-1: SerialNumber: syz [ 92.940748][ T68] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 92.964732][ T55] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 92.988999][T10124] program syz.1.724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.172451][T10142] netlink: 'syz.2.728': attribute type 4 has an invalid length. [ 93.176728][T10142] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 93.378153][ T61] usb 8-1: USB disconnect, device number 7 [ 93.424301][T10184] binder: 10183:10184 ioctl 4018620d 0 returned -22 [ 93.427531][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 93.427540][ T40] audit: type=1400 audit(2000000025.600:542): avc: denied { connect } for pid=10183 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.436998][ T40] audit: type=1400 audit(2000000025.610:543): avc: denied { ioctl } for pid=10185 comm="syz.2.738" path="mnt:[4026532868]" dev="nsfs" ino=4026532868 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.622373][T10190] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.624388][T10190] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.626333][T10190] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.628752][T10190] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.682843][ T40] audit: type=1400 audit(2000000025.860:544): avc: denied { nlmsg_write } for pid=10196 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 93.720070][T10203] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 93.724333][T10203] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 93.728002][T10203] CPU: 2 UID: 0 PID: 10203 Comm: syz.2.742 Not tainted syzkaller #0 PREEMPT(full) [ 93.731555][T10203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.735015][T10203] RIP: 0010:h5_recv+0x104/0x950 [ 93.736633][T10203] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 71 9d 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 93.742709][T10203] RSP: 0018:ffffc9000e107c00 EFLAGS: 00010293 [ 93.744555][T10203] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887af07a [ 93.746919][T10203] RDX: ffff888038448000 RSI: ffffffff887af0bf RDI: 0000000000000005 [ 93.749404][T10203] RBP: ffffc9000e107d88 R08: 0000000000000005 R09: 0000000000000000 [ 93.751888][T10203] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 93.754353][T10203] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb47c80 [ 93.756739][T10203] FS: 00007fc62c3a36c0(0000) GS:ffff8880d68b6000(0000) knlGS:0000000000000000 [ 93.759514][T10203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.761610][T10203] CR2: 00007fc62c3a2f98 CR3: 000000003bbb5000 CR4: 0000000000352ef0 [ 93.764069][T10203] Call Trace: [ 93.765114][T10203] [ 93.766032][T10203] ? __pfx_h5_recv+0x10/0x10 [ 93.767468][T10203] hci_uart_tty_receive+0x251/0x7e0 [ 93.769084][T10203] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 93.770859][T10203] tty_ioctl+0x580/0x1680 [ 93.772265][T10203] ? __pfx_tty_ioctl+0x10/0x10 [ 93.773798][T10203] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 93.775927][T10203] ? hook_file_ioctl_common+0x145/0x410 [ 93.777722][T10203] ? selinux_file_ioctl+0x180/0x270 [ 93.779356][T10203] ? selinux_file_ioctl+0xb4/0x270 [ 93.780973][T10203] ? __pfx_tty_ioctl+0x10/0x10 [ 93.782496][T10203] __x64_sys_ioctl+0x18e/0x210 [ 93.784028][T10203] do_syscall_64+0xcd/0x4c0 [ 93.785440][T10203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.787282][T10203] RIP: 0033:0x7fc62b58ebe9 [ 93.788671][T10203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.794624][T10203] RSP: 002b:00007fc62c3a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.797193][T10203] RAX: ffffffffffffffda RBX: 00007fc62b7c6090 RCX: 00007fc62b58ebe9 [ 93.799667][T10203] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000005 [ 93.802172][T10203] RBP: 00007fc62b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 93.804612][T10203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.806994][T10203] R13: 00007fc62b7c6128 R14: 00007fc62b7c6090 R15: 00007ffdeb7d7368 [ 93.809485][T10203] [ 93.810446][T10203] Modules linked in: [ 93.811997][T10203] ---[ end trace 0000000000000000 ]--- [ 93.812374][ T40] audit: type=1400 audit(2000000026.000:545): avc: denied { read } for pid=5362 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 93.813878][T10203] RIP: 0010:h5_recv+0x104/0x950 [ 93.821981][ T40] audit: type=1400 audit(2000000026.000:546): avc: denied { search } for pid=5362 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.822011][ T40] audit: type=1400 audit(2000000026.000:547): avc: denied { search } for pid=5362 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.823545][T10203] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 71 9d 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 93.823559][T10203] RSP: 0018:ffffc9000e107c00 EFLAGS: 00010293 [ 93.823591][T10203] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887af07a [ 93.832877][ T40] audit: type=1400 audit(2000000026.000:548): avc: denied { add_name } for pid=5362 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.838569][T10203] RDX: ffff888038448000 RSI: ffffffff887af0bf RDI: 0000000000000005 [ 93.846053][ T40] audit: type=1400 audit(2000000026.000:549): avc: denied { create } for pid=5362 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.847829][T10203] RBP: ffffc9000e107d88 R08: 0000000000000005 R09: 0000000000000000 [ 93.851005][ T40] audit: type=1400 audit(2000000026.000:550): avc: denied { append open } for pid=5362 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.851027][ T40] audit: type=1400 audit(2000000026.000:551): avc: denied { getattr } for pid=5362 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.882742][T10203] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 93.885269][T10203] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb47c80 [ 93.887707][T10203] FS: 00007fc62c3a36c0(0000) GS:ffff8880d68b6000(0000) knlGS:0000000000000000 [ 93.890712][T10203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.892923][T10203] CR2: 00007fc62c3a2f98 CR3: 000000003bbb5000 CR4: 0000000000352ef0 [ 93.895499][T10203] Kernel panic - not syncing: Fatal exception [ 93.898085][T10203] Kernel Offset: disabled [ 93.899463][T10203] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:08:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000066ee4 RBX=0000000000000000 RCX=ffffffff8b942c29 RDX=ffffed100d486656 RSI=ffffffff8c162a80 RDI=ffffffff81913111 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab6190 R15=0000000000000000 RIP=ffffffff8b94178f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc62c3a3d58 CR3=000000002f486000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555592181662 0000555592180f00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055559217cef1 000055559217cb50 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555921818e4 00005555921818e0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0210000bc0030008 000bb8030008000b b0030010000ba003 028010000b900301 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001ff ffffffffffffffd7 080bd8030004000b d4030a04000bd003 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004000000041006 0000000210060601 749a000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0404100001 abca080002a9b408 000100000008060c 010dde000200070b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000fffffff ffffff0400100000 0800029fec080001 00000008060c010d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 de0010000fffffff ffffff0404100001 abca080002a9b408 000100000008060c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010dde000200070b 8004000000041006 0000000210060601 749a000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001ff ffffffffffffffd7 080bd8030004000b ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000067c7c RBX=0000000000000001 RCX=ffffffff8b942c29 RDX=ffffed100d4a6656 RSI=ffffffff8c162a80 RDI=ffffffff81913111 RBP=ffffed1003bd2488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801de92440 R14=ffffffff90ab6190 R15=0000000000000000 RIP=ffffffff8b94178f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556592f808 CR3=000000005f4a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc713d974a8 00007fc713d974a0 00007fc713d97498 00007fc713d97470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7148fd100 00007fc713d97460 00007fc713d90004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc713d974b8 00007fc713d974b0 00007fc713d974a8 00007fc713d974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85644775 RDI=ffffffff9b1140a0 RBP=ffffffff9b114060 RSP=ffffc9000e107570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b114060 R15=ffffffff85644710 RIP=ffffffff8564479f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fc62c3a36c0 ffffffff 00c00000 GS =0000 ffff8880d68b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc62c3a2f98 CR3=000000003bbb5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdeb7d7876 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdeb7d7876 00007ffdeb7d787c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b7974a8 00007fc62b7974a0 00007fc62b797498 00007fc62b797470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62c2fd100 00007fc62b797460 00007fc62b797478 00007fc62b7974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b7974b8 00007fc62b7974b0 00007fc62b7974a8 00007fc62b7974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000059b0c RBX=0000000000000003 RCX=ffffffff8b942c29 RDX=ffffed100d4e6656 RSI=ffffffff8c162a80 RDI=ffffffff81913111 RBP=ffffed1003c55000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2a8000 R14=ffffffff90ab6190 R15=0000000000000000 RIP=ffffffff8b94178f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc62c3d0f98 CR3=000000003bbb5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdeb7d7876 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdeb7d7876 00007ffdeb7d787c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b7974a8 00007fc62b7974a0 00007fc62b797498 00007fc62b797470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62c2fd100 00007fc62b797460 00007fc62b797478 00007fc62b7974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc62b7974b8 00007fc62b7974b0 00007fc62b7974a8 00007fc62b7974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000