last executing test programs: 56.061244639s ago: executing program 2 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x10000000}, 0x2}, [{}, {0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {0xe1d8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) 56.060952954s ago: executing program 2 (id=121): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000500f8ffffff000000000000000000007302d0bf00000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000182c2000000000000000000000084000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f0000e1ab14140000000000000000000084300400000000000000000000000041554449540000bcdc2dfff07fca000000466ef58f5dc8438b0000f2000000000800"/376]}, 0x1f0) r1 = socket(0x2a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x48) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x400, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={[{@dyn}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r4, r3, 0x0, 0x80000000) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0xfffffffffffffd20) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7ff8, 0xe}, {0xd, 0xb}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48004) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r5, {0x3, 0x5}, {0xfff1}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 55.952450698s ago: executing program 2 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="66b82e018ec866baf80cb854c15584ef66bafc0c66ed66baf80cc4e149611de4a80000ef66bafc0cb83e000000ef65c105d4e4b0b022c5b9800000c0c4e37d6a57000035002000000f30650f786705660f3a156f0300c4e3a16d5e0d01c4e10d5dcd", 0x62}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0fb3162f00760c66360f09ded926f36df30f7fed66b9630300000f320f01c90fc75e00ba430066b84b00000066ef", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 55.773511111s ago: executing program 2 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000300)=[{&(0x7f0000000940)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/227, 0xe3}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) geteuid() r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 55.773201447s ago: executing program 2 (id=126): r0 = io_uring_setup(0x3c93, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x490420, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 55.44379381s ago: executing program 2 (id=129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110060", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 55.374638062s ago: executing program 32 (id=129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110060", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 51.673712255s ago: executing program 3 (id=165): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)=ANY=[], 0x54}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a38000000000a01010000000000000000050000000900010073797a30000300000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0002400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c00014000000000000000090900030073797a32000000000b00070066696c7465720000300004"], 0x130}}, 0x0) 51.563168003s ago: executing program 3 (id=166): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x1) get_robust_list(r0, &(0x7f0000000180)=&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f00000001c0)=0x18) (async) get_robust_list(r0, &(0x7f0000000180)=&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f00000001c0)=0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000011400040076657468315f766972745f77696669000800024000000000090003"], 0x9c}}, 0x0) 51.562491147s ago: executing program 3 (id=168): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r0, &(0x7f0000000380)='./mnt\x00', r0, &(0x7f0000000340)='./file0\x00', 0x5) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00000002c0)=""/236, &(0x7f0000000000)=0xec) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f00000002c0)=@ethtool_cmd={0x26, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) 51.371141944s ago: executing program 3 (id=171): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r1 = fanotify_init(0x20, 0x40000) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400000, 0x80) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0x0, 0x9}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xfde687b65d606dd1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xe9}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}]}}]}, 0x44}}, 0x4008805) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1, 0x100, 0x2}, 0x18) linkat(r2, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000200)='./file0/../file0\x00', 0x1000) fanotify_mark(r1, 0x20, 0x1020, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe83, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r8}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2}, {@in=@remote, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, {0x0, 0x1}, {0x0, 0x400}, 0x0, 0x4, 0xa, 0x3, 0x0, 0x90}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x6, 0x2, 0xfffffffd, 0x0, "000000ff00070000000900", "0f19b8b2", "050c1000", "e859ad33", ['\x00', "00000008000906000000da00", "0c000004dd372a9000", "0700000000000000000067c3"]}) 51.293889421s ago: executing program 3 (id=174): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)=ANY=[], 0x54}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a38000000000a01010000000000000000050000000900010073797a30000500000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0002400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c00014000000000000000090900030073797a32000000000b00070066696c7465720000300004"], 0x130}}, 0x0) 51.081444153s ago: executing program 3 (id=184): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000003000040"]) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000700000000000a"], 0x18) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) r4 = socket$inet6(0xa, 0x80002, 0x88) ioctl$sock_TIOCINQ(r4, 0x541b, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000080)={0xffff, 0x5}) close(r6) 51.050073196s ago: executing program 33 (id=184): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000003000040"]) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000700000000000a"], 0x18) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) r4 = socket$inet6(0xa, 0x80002, 0x88) ioctl$sock_TIOCINQ(r4, 0x541b, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000080)={0xffff, 0x5}) close(r6) 2.212544485s ago: executing program 1 (id=1169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70002000000010dd00000c00060001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r2}, 0x18) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 2.209091293s ago: executing program 1 (id=1171): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x69) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r3, 0x0, 0x0) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.82102553s ago: executing program 4 (id=1185): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x8, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b2c, &(0x7f0000000040)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x1ff, 0x6, 0x4, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 1.558491042s ago: executing program 0 (id=1188): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r3 = dup(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) sendfile(r3, r4, 0x0, 0x8000fffffffe) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') write$FUSE_OPEN(r5, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x20) read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) 1.558246159s ago: executing program 0 (id=1189): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x2a, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000013"], 0x188}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121c82, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '', 0x3a, 'syz\x00', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x46, 0x4f]}, 0x2f) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close_range(r1, r1, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20}, 0xfdef) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/203, 0xcb) 1.402974666s ago: executing program 0 (id=1190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}], {0x95, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x40000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x40000000, 0x0, 0x99e6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00'}, 0x18) r2 = signalfd4(r0, &(0x7f0000000300)={[0x2]}, 0x8, 0x80000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) copy_file_range(r1, &(0x7f0000000500)=0x4, r2, &(0x7f0000000540)=0x5, 0x0, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000b00)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048840}, 0x24000004) write$cgroup_devices(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="61202a3aaa207277009318c9"], 0x9) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x5, 0xfffffffffffffffe, 0x4, 0x7, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r8}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @cb_func={0x18, 0xd, 0x4, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x101, 0x6c, &(0x7f0000000180)=""/108, 0x41000, 0x8, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0, r1, r2, 0xffffffffffffffff, r9, 0xffffffffffffffff], 0x0, 0x10, 0xffffffd7, @void, @value}, 0x94) 1.232688606s ago: executing program 4 (id=1191): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2c, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x2, 0x40, 0x4}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 1.232044553s ago: executing program 0 (id=1192): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="f20f38f1b2de000f07660fae7d0026f264f2f623640fae0564660fe3f10f2027baa10066ed2e0fc75f000f4e47c6", 0x2e}], 0x1, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) sendto$packet(r1, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r11) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)={0x44, r12, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x66}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, [{0xc}, {0x24, 0x1}, {0xfaea4e27786d0b50, 0x1}, {0x4}, {0x18, 0x1}, {0x3}, {0x18, 0x1}, {0x4}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x7, 0x24, [{0x1b, 0x1}, {0x12}, {0x5}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0x0, 0xed57, 0x8, @mcast1, @empty, 0x10, 0x7, 0xfffff800, 0x8}}) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) 1.231717865s ago: executing program 4 (id=1193): r0 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r0, 0x1003ff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x5}, 0x8) preadv(r1, &(0x7f0000001480)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000240)=""/186, 0xba}, {&(0x7f0000000300)}, {&(0x7f00000013c0)=""/134, 0x86}], 0x5, 0x6, 0x5) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'new '}, 0x1a, 0xfffffffffffffffc) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff015f00000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x10) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x850}, 0x1c) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x1, 0x13, r1, 0x8000000) 1.113046193s ago: executing program 4 (id=1194): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003700010324bd70028ae79ca907"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}]}, 0x3c}}, 0x4000000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 32) 1.112852703s ago: executing program 4 (id=1195): r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000080), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r2, 0x12, 0x0, @val=@target_btf_id=r3}, 0x14) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8) 861.480066ms ago: executing program 1 (id=1196): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x0, 0x0, 0x4000}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020}, 0x2020) bind$rxrpc(r0, &(0x7f0000000a00)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010100}}, 0x24) 658.905223ms ago: executing program 5 (id=1198): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0xffe4}, {0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {0xe1d8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) 591.982008ms ago: executing program 5 (id=1199): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000400)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x2400c050) 513.188149ms ago: executing program 5 (id=1200): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800202", 0x1001, r2) (async) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800202", 0x1001, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 403.068427ms ago: executing program 5 (id=1201): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000140)=0x32, 0x4) socket$packet(0x11, 0x2, 0x300) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r3, &(0x7f00000000c0)=[@t={0x81, 0x3, 0x0, 0x0, @generic}], 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4404, 0x4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$unix(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="f1e05c4c8c39", 0x6}], 0x1, 0x0, 0x0, 0x20008004}, 0x0) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10) sendto$inet6(r9, &(0x7f00000002c0)="952da61d5c1af369bce1be73340530029bf16ed5b06aa10166200a2837f81c5c0f7b4e09cf5f8a3728599a75858b2281e5e8e7c12dbc8f2b159cc058f03feab6c90dd9831102d2ead0f7639fb5a03c4ef5be429f64a75c7007faed35c484168f3c51d2bb549821c331f4f081662f082a81d886d4aebd638505d76694a0635c5bceefe983d48037154c", 0x89, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) sendmmsg$inet(r0, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) 343.269457ms ago: executing program 5 (id=1202): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2c, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x2, 0x40, 0x4}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 342.645142ms ago: executing program 5 (id=1203): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a440000000010109024a0001010000000904000000020600000b240600008f99ee593a5705240000000d240f01bd000000000000000009058103400000000009058202ff34f90000090503026806000000"], 0x0) setreuid(0x0, 0xee01) chdir(0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f2babb95936415d219753d982b3e6ab52070adabe6f61dce71ee97249cf86cdd7b9a6b4b3d24ddebcf8ea9f1ae197c9a9cd65f15210181d736b2d3da7d24857a899b7c335", 0xfffffc78) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0xa02, 0x9], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800, 0x0, 0x1}, 0x20) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x15, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) syz_usb_disconnect(r1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) 282.857345ms ago: executing program 0 (id=1204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0xaa33d46a29d21f6f, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x6b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) syz_usb_disconnect(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002000010000000000000000000000000000050019003c00"/36], 0x24}}, 0x48850) 223.222537ms ago: executing program 4 (id=1205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8088) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000200)=0x1, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x150, 0x0, 0x148, 0x0, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) recvmmsg$unix(r2, &(0x7f00000001c0), 0x4000000000000bd, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x200) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r5) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xfffffffffffffde6, &(0x7f00000005c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @tcp={0x1, 0x6, "be8394", 0x0, 0x6, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x3a, 0x0, '\x00', [@calipso={0x7, 0x0, {0x0, 0x0, 0xab, 0xff, [0x34]}}]}, @srh={0x2c, 0x0, 0x4, 0x0, 0x6b, 0x30, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x25}]}, @fragment={0x29, 0x0, 0x6, 0x0, 0x0, 0x7, 0x68}, @srh={0x87, 0x0, 0x4, 0x0, 0x15, 0x38, 0xb, [@dev={0xfe, 0x80, '\x00', 0xd}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty]}, @fragment={0x5e, 0x0, 0x0, 0x1, 0x0, 0x8, 0x66}], {{0x4e20, 0x4e22, 0x41424344, r7, 0x0, 0x0, 0x0, 0xc6, 0xfff, 0x0, 0x9, {[@exp_smc, @mptcp=@add_addr={0x1e, 0x0, 0x0, 0x0, 0x4, @loopback, 0x4}]}}, {"b832662ce931a9f63a7148c74a8ebcf0d5b071ec663ef76a9546e0119840a51698e06a92ad6903d907e2ca4e36a81f84154c8c252444bc3e95c98762423f79a43098effa913b571690bf13ae07d8f8c9cbd5c3304826ca9273f5a8869688686072ec2967c2d1cd21a483bd30cb332db11ba01e65954274644c773a7bc2b7b4e95efd592b70a25e755c7d54adfde467b9fd23d7a431bfff73ddcc11aba589d1d70058252af8e272b6940f"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="24020000", @ANYRES16=r9, @ANYRES16=r9, @ANYRES32=r8, @ANYBLOB="0800050000006000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='net/xfrm_stat\x00') preadv(r10, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) r11 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r11, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r12, 0x40045b0a, &(0x7f0000000040)) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010200000000000000000800000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x700}, 0x0) 1.531529ms ago: executing program 1 (id=1206): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) recvfrom$packet(r0, 0x0, 0x0, 0x40000102, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x8}, 0x14) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) chdir(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x92000, 0x87) 1.120932ms ago: executing program 0 (id=1207): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xe9) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 505.704µs ago: executing program 1 (id=1208): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x1}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x41) getdents64(r1, &(0x7f00000000c0)=""/233, 0xe9) getdents(r1, &(0x7f00000001c0)=""/159, 0x9f) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x1c) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000300)={r3}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x10, 0x20, 0x7, 0xc0000000, {{0x2e, 0x4, 0x2, 0x6, 0xb8, 0x67, 0x0, 0x3, 0x4, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x3c, 0x4e, 0x1, 0x9, [{@rand_addr=0x64010102, 0x5}, {@broadcast, 0x1}, {@empty, 0x8}, {@rand_addr=0x64010101, 0xe0}, {@broadcast, 0x19}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x15, 0x1, [{0x6, 0xf, "97d51f04967c4d323ca43340ea"}]}, @timestamp_prespec={0x44, 0x4c, 0x95, 0x3, 0xa, [{@empty, 0x7fffffff}, {@broadcast, 0x4}, {@local, 0x100}, {@local, 0x2}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x73a}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xaa}, {@local, 0x6}]}]}}}}}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x18, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x279}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcc9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000700)='syzkaller\x00', 0x6, 0x4e, &(0x7f0000000740)=""/78, 0x40f00, 0x50, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000007c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x16750, 0xffffffffffffffff, 0x5, &(0x7f0000000800)=[r1, r3], &(0x7f0000000840)=[{0x0, 0x2, 0xb, 0xb}, {0x3, 0x2, 0x2, 0x9}, {0x4, 0x3, 0xc, 0x7}, {0x3, 0x4, 0xd, 0x2}, {0x1, 0x2, 0x2, 0x7}], 0x10, 0xfffffff9, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r7 = creat(&(0x7f0000000a00)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xcdf000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x6, 0x7b76, 0xfd, 0x4004, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0xb, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x3, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x0, 0xd, 0x0, 0x3, 0x100, 0x10}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], &(0x7f0000000380)='GPL\x00', 0x7fff, 0x99, &(0x7f00000003c0)=""/153, 0x41100, 0x50, '\x00', r4, @fallback=0x2b, r3, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x8, 0x2, 0x3}, 0x10, 0xffffffffffffffff, r5, 0x5, &(0x7f0000000c00)=[r6, r7, r8, r9, r10, r11], &(0x7f0000000c40)=[{0x5, 0x5, 0x3, 0xb}, {0x0, 0x5, 0x6, 0x3}, {0x2, 0x4, 0x3}, {0x0, 0x4, 0x8, 0x16}, {0x4, 0x5, 0xb, 0xb}], 0x10, 0x3, @void, @value}, 0x94) r12 = getpgrp(0x0) read$FUSE(r7, &(0x7f0000003080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000005140)={0x2, 0xa, {}, {0xffffffffffffffff}, 0x6, 0x7}) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000005280)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000005380)=0xe8) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f00000053c0)=0x0) read$FUSE(r7, &(0x7f0000005400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000007440)=0x0, &(0x7f0000007480), &(0x7f00000074c0)) lstat(&(0x7f0000007700)='./file0\x00', &(0x7f0000007740)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000077c0)='./file0\x00', &(0x7f0000007800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000007980)='./file0\x00', &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000007a40)='./file0\x00', &(0x7f0000007a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000000d80)="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", 0x2000, &(0x7f0000007c40)={&(0x7f0000002d80)={0x50, 0xfffffffffffffffe, 0xd6a, {0x7, 0x29, 0x8, 0x2000000, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x100}}, &(0x7f0000002e00)={0x18, 0x0, 0x1, {0x6}}, &(0x7f0000002e40)={0x18, 0x0, 0x78, {0x8ae1}}, &(0x7f0000002e80)={0x18, 0x0, 0x826, {0x5}}, &(0x7f0000002ec0)={0x18, 0xffffffffffffffda, 0x6, {0x93}}, &(0x7f0000002f00)={0x28, 0xfffffffffffffff5, 0x5, {{0xffffffffd3b28cab, 0x0, 0x2, r12}}}, &(0x7f0000002f40)={0x60, 0x0, 0x2, {{0x100, 0x1000, 0x6, 0x8000000000000001, 0x0, 0xc8, 0xfffffff8, 0x7}}}, &(0x7f0000002fc0)={0x18, 0xfffffffffffffffe, 0x10000, {0x7916}}, &(0x7f0000003000)={0x11, 0xffffffffffffffda, 0x9, {'\x00'}}, &(0x7f0000003040)={0x20, 0x0, 0x2, {0x0, 0x4}}, &(0x7f00000050c0)={0x78, 0xffffffffffffffda, 0x101, {0xc, 0x401, 0x0, {0x0, 0x6, 0x40, 0x7, 0x9, 0x7, 0xcb7, 0x100, 0xfffffffb, 0xc000, 0x10001, r13, 0xee01, 0x7, 0xb8e}}}, &(0x7f0000005180)={0x90, 0xfffffffffffffff5, 0x6, {0x0, 0x3, 0x2, 0x8, 0x5, 0x1, {0x4, 0x5, 0x7, 0x4, 0x8000000000000001, 0x1, 0x4, 0x5, 0xa90, 0x4000, 0x4, r14, 0xee00, 0x7f, 0x9}}}, &(0x7f0000005240)={0x30, 0x0, 0x6, [{0x0, 0x1, 0x4, 0x788e, 'GPL\x00'}]}, &(0x7f0000007500)={0x1f0, 0x0, 0x3, [{{0x4, 0x2, 0xfffffffffffffff9, 0x1, 0x7ff, 0x8, {0x6, 0x5, 0x1, 0x1, 0x4, 0x3, 0x3, 0x6, 0x68792485, 0xa000, 0x4, r15, 0xffffffffffffffff, 0x6, 0x4}}, {0x0, 0x76, 0x7, 0x10000, ':\xfb/](&\''}}, {{0x4, 0x1, 0x9, 0xc, 0x9, 0x10, {0x2, 0x8, 0x401, 0x1, 0x0, 0x1, 0x7, 0x581f, 0x3, 0xa000, 0x9, r16, r17, 0x1f7, 0x8}}, {0x6, 0x6, 0x4, 0x800, 'GPL\x00'}}, {{0x2, 0x3, 0x8, 0x80000001, 0xedf, 0x1, {0x6, 0x6, 0x18, 0x7, 0xff, 0x2, 0xffff, 0xffff8001, 0x3, 0x8000, 0x8, 0xee00, r18, 0x3, 0x681}}, {0x5, 0x6, 0x8, 0x10000, 'gretap0\x00'}}]}, &(0x7f0000007880)={0xa0, 0x0, 0x10001, {{0x6, 0x2, 0x5, 0x8, 0x1, 0x401, {0x2, 0xffff, 0x3, 0x81, 0x5, 0x7, 0x1, 0x1, 0x48, 0x6000, 0x4, r19, r20, 0x8, 0x7}}, {0x0, 0x2}}}, &(0x7f0000007940)={0x20, 0x0, 0x0, {0x3, 0x0, 0x2, 0x800}}, &(0x7f0000007b00)={0x130, 0xffffffffffffffda, 0x2, {0x6d, 0x6, 0x0, '\x00', {0x9ae2b66bd5cbdd8b, 0xffffffff, 0x2, 0xfffffffb, r21, r22, 0x1000, '\x00', 0xed40, 0x5, 0x10, 0x6, {0x1000, 0x1}, {0xe, 0x3}, {0xc, 0xe}, {0x3, 0xb}, 0x6, 0x2, 0x1, 0x200}}}}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000007dc0)={r10, &(0x7f0000007d00)="c1732bb223b66019e29fb8c6293b95a5117639afd47cf54156b27461706009205323283c8b6e71f623f2a9576ad0e9f402567dbcd45007861a0f9be2f09c28924ffc0c17f35c3d625036ecf7200a475d462d17ad91704332ffdbf516c5051b1b677fb872bdfcaf4f0e3fc5716a4f0bd9fc05c30b3947f0aae1fa64a3aadc9fea7b7c0f6be6b44ed569d7cf30168ed974015876296e8d7a22b25a97c7ef265997e83ddb26472399c0444640365d58"}, 0x20) 0s ago: executing program 1 (id=1209): r0 = add_key$keyring(&(0x7f000000fa80), &(0x7f000000fac0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f000000fb00), &(0x7f000000fb40)={'syz', 0x1}, &(0x7f000000fb80)="37480ccb54", 0x5, r0) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1400000032000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) (async) keyctl$instantiate(0xc, r0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e28910c96b6657720f67365723a73ae86241330303030303030203030303030303032302fba2d52377dd14405c09ef0b3fb92b7b5634ca7282a382f89664bc0da9c03f56387154ccc4f07defe6e6495e67fd3ea462e98ae4a6505fa9fb71c952e3a8d63a6fbd171457db06150901154c78503be27d402d6ba661fd4aa3c2ad9c0b85788da6d09557a100be90754d89bb2c747f65cf74302f57a76d23ccad0f68f261e13b35d7eb9c981e278f703fe5b10c757c5d179782300a1ca7e"], 0x2a, 0xfffffffffffffffc) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}}}}, 0x9) (rerun: 64) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$link(0x8, r1, r3) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) (async) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'dns_resolver\x00'}, 0x25, r0) kernel console output (not intermixed with test programs): -71 [ 57.034569][ T1138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.077279][ T5291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.082617][ T5291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.085694][ T5291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.087768][ T56] usb usb5-port1: unable to enumerate USB device [ 57.090762][ T5291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.097475][ T5291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.107361][ T5291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.113842][ T39] kauditd_printk_skb: 113 callbacks suppressed [ 57.113860][ T39] audit: type=1400 audit(1733937337.557:361): avc: denied { mounton } for pid=6426 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 57.125522][ T1138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.218728][ T6426] chnl_net:caif_netlink_parms(): no params data found [ 57.230317][ T39] audit: type=1400 audit(1733937337.677:362): avc: denied { search } for pid=5653 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.263066][ T1138] bridge_slave_1: left allmulticast mode [ 57.265139][ T1138] bridge_slave_1: left promiscuous mode [ 57.268683][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.281272][ T1138] bridge_slave_0: left allmulticast mode [ 57.283569][ T1138] bridge_slave_0: left promiscuous mode [ 57.286961][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.554144][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.560359][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.564163][ T1138] bond0 (unregistering): Released all slaves [ 57.608303][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.611011][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.612922][ T6426] bridge_slave_0: entered allmulticast mode [ 57.615833][ T6426] bridge_slave_0: entered promiscuous mode [ 57.620367][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.623066][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.625706][ T6426] bridge_slave_1: entered allmulticast mode [ 57.628568][ T6426] bridge_slave_1: entered promiscuous mode [ 57.636946][ T39] audit: type=1400 audit(1733937338.077:363): avc: denied { read } for pid=6452 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.642875][ T39] audit: type=1400 audit(1733937338.077:364): avc: denied { open } for pid=6452 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.649371][ T39] audit: type=1400 audit(1733937338.077:365): avc: denied { getattr } for pid=6452 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.655960][ T39] audit: type=1400 audit(1733937338.097:366): avc: denied { write } for pid=6450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.662290][ T39] audit: type=1400 audit(1733937338.097:367): avc: denied { add_name } for pid=6450 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.685005][ T6426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.692853][ T6426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.692949][ T39] audit: type=1400 audit(1733937338.137:368): avc: denied { remove_name } for pid=6455 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2495 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.744152][ T39] audit: type=1400 audit(1733937338.187:369): avc: denied { read append } for pid=6451 comm="syz.1.139" name="v4l-subdev7" dev="devtmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.752173][ T39] audit: type=1400 audit(1733937338.187:370): avc: denied { open } for pid=6451 comm="syz.1.139" path="/dev/v4l-subdev7" dev="devtmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.769160][ T6426] team0: Port device team_slave_0 added [ 57.772374][ T6426] team0: Port device team_slave_1 added [ 57.801178][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.803046][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.809876][ T6426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.813844][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.815741][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.822575][ T6426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.905465][ T6426] hsr_slave_0: entered promiscuous mode [ 57.909294][ T6426] hsr_slave_1: entered promiscuous mode [ 57.911696][ T6426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.913908][ T6426] Cannot create hsr debugfs directory [ 57.976242][ T1138] hsr_slave_0: left promiscuous mode [ 57.979078][ T1138] hsr_slave_1: left promiscuous mode [ 57.981676][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.984302][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.992066][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.995163][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.013273][ T1138] veth1_macvtap: left promiscuous mode [ 58.015256][ T1138] veth0_macvtap: left promiscuous mode [ 58.016925][ T1138] veth1_vlan: left promiscuous mode [ 58.018557][ T1138] veth0_vlan: left promiscuous mode [ 58.287918][ T1340] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.447332][ T1340] usb 6-1: Using ep0 maxpacket: 32 [ 58.451555][ T1340] usb 6-1: config 0 has no interfaces? [ 58.453546][ T1340] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 58.456971][ T1340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.469769][ T1340] usb 6-1: config 0 descriptor?? [ 58.598629][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 58.658836][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 58.688364][ T56] usb 6-1: USB disconnect, device number 3 [ 59.182871][ T56] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 59.187626][ T6426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.189798][ T5941] Bluetooth: hci2: command tx timeout [ 59.196796][ T6426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.208194][ T6426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.213752][ T6426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.242916][ T6482] team0: Device wg2 is of different type [ 59.298914][ T6487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.311417][ T6426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.321100][ T6426] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.325358][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.327919][ T3709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.338104][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.340452][ T3821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.349289][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.352161][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.354875][ T56] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.358495][ T56] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 59.360806][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.364992][ T56] usb 6-1: config 0 descriptor?? [ 59.435105][ T6426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.542447][ T6426] veth0_vlan: entered promiscuous mode [ 59.546661][ T6426] veth1_vlan: entered promiscuous mode [ 59.560327][ T6426] veth0_macvtap: entered promiscuous mode [ 59.563356][ T6426] veth1_macvtap: entered promiscuous mode [ 59.570559][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.573346][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.575964][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.579329][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.582730][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.586268][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.590656][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.596041][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.599955][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.602709][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.605540][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.608174][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.610943][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.614120][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.620029][ T6426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.622425][ T6426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.624911][ T6426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.627561][ T6426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.663771][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.665892][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.683200][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.685421][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.779182][ T56] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0003/input/input5 [ 59.861401][ T56] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0003/input/input6 [ 59.870483][ T56] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0003/input/input7 [ 59.876515][ T56] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0003/input/input8 [ 59.929983][ T56] hid-udraw 0003:20D6:CB17.0003: hidraw1: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 59.977118][ T6543] netlink: 36 bytes leftover after parsing attributes in process `syz.0.151'. [ 60.060005][ T6564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.079017][ T56] usb 6-1: USB disconnect, device number 4 [ 60.134326][ T6572] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 60.322911][ T6596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.162'. [ 60.428131][ T6600] xt_hashlimit: size too large, truncated to 1048576 [ 60.666534][ T6606] netlink: 44 bytes leftover after parsing attributes in process `syz.3.165'. [ 60.771126][ T6617] vlan3: entered allmulticast mode [ 60.773595][ T6617] bond0: entered allmulticast mode [ 60.775478][ T6617] bond_slave_0: entered allmulticast mode [ 60.777980][ T6617] bond_slave_1: entered allmulticast mode [ 60.781320][ T6617] bond0: left allmulticast mode [ 60.783213][ T6617] bond_slave_0: left allmulticast mode [ 60.785257][ T6617] bond_slave_1: left allmulticast mode [ 60.863296][ T6621] program syz.0.170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.932078][ T6631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6631 comm=syz.0.173 [ 60.948809][ T6631] netlink: 'syz.0.173': attribute type 7 has an invalid length. [ 60.950864][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 60.999506][ T6633] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 61.135380][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 61.271837][ T5941] Bluetooth: hci2: command tx timeout [ 61.291730][ T6663] netlink: 'syz.4.188': attribute type 13 has an invalid length. [ 61.304253][ T6663] veth0_macvtap: left promiscuous mode [ 61.306742][ T6663] macvtap0: entered allmulticast mode [ 61.310596][ T6663] macvtap0: refused to change device tx_queue_len [ 61.361397][ T5291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.364844][ T5291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.370866][ T5291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.373922][ T5291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.377232][ T5291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.382799][ T5291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.419998][ T6684] netlink: 44 bytes leftover after parsing attributes in process `syz.0.193'. [ 61.508592][ T6698] batadv_slave_1: entered promiscuous mode [ 61.520008][ T6697] batadv_slave_1: left promiscuous mode [ 61.533401][ T6691] ebtables: ebtables: counters copy to user failed while replacing table [ 61.569236][ T3821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.580751][ T6675] chnl_net:caif_netlink_parms(): no params data found [ 61.581076][ T6691] ebtables: ebtables: counters copy to user failed while replacing table [ 61.638439][ T3821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.668645][ T6675] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.670702][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.677097][ T6675] bridge_slave_0: entered allmulticast mode [ 61.679847][ T6675] bridge_slave_0: entered promiscuous mode [ 61.683469][ T6675] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.685489][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.688072][ T6675] bridge_slave_1: entered allmulticast mode [ 61.690170][ T6675] bridge_slave_1: entered promiscuous mode [ 61.705161][ T3821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.721204][ T6724] netlink: 44 bytes leftover after parsing attributes in process `syz.0.203'. [ 61.722543][ T6722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.202'. [ 61.743033][ T6675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.749478][ T6675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.817569][ T3821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.824074][ T6675] team0: Port device team_slave_0 added [ 61.827136][ T6675] team0: Port device team_slave_1 added [ 61.850655][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.852610][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.862032][ T6675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.870634][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.873010][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.882229][ T6675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.924552][ T6675] hsr_slave_0: entered promiscuous mode [ 61.926689][ T6675] hsr_slave_1: entered promiscuous mode [ 62.006389][ T3821] bridge_slave_1: left allmulticast mode [ 62.008504][ T3821] bridge_slave_1: left promiscuous mode [ 62.011302][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.020912][ T3821] bridge_slave_0: left allmulticast mode [ 62.022538][ T3821] bridge_slave_0: left promiscuous mode [ 62.024180][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.047512][ T833] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.134626][ T39] kauditd_printk_skb: 61 callbacks suppressed [ 62.134642][ T39] audit: type=1400 audit(1733937342.577:432): avc: denied { audit_write } for pid=6748 comm="syz.4.210" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.179012][ T6752] netlink: 44 bytes leftover after parsing attributes in process `syz.4.211'. [ 62.217893][ T833] usb 6-1: Using ep0 maxpacket: 16 [ 62.223740][ T833] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 62.227874][ T833] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 62.231195][ T833] usb 6-1: config 1 interface 0 has no altsetting 0 [ 62.235543][ T833] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 62.238901][ T833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.241708][ T833] usb 6-1: Product: 䭡ঌ낏즽㧂㸶켯澁ꖯຮᵖ耚앁뀷쐎櫠鷓熋擛䂭⢏뇆ˋ쟹挻⏰㵖糩䈕W꽢瑃쿹莰繈ꤨ嘛량篤⇪ [ 62.247441][ T833] usb 6-1: Manufacturer: 㾫馉েꆯꕫ⃆덩༭툕픖倦㆙츾섺ꀆ쯝ꮕ鲹锭攋쨸뤩妖ᩮ〤ᯢ瓬φ⦷팹ҁ⻱莣풺㰡샀赟篬鉒밭隷箓盏㸖콦ﺮ츀礼춀垗陯睶쬣鮆坳著䥯桽ﰠ湕䅢㝳裧쐻해繺ⶄ樄㉕靱㎾㓼躴굓쪟禔‚೦׊屖ᖋőኴᦁ䳪ͦ㓸ﾃ楜 [ 62.258049][ T833] usb 6-1: SerialNumber: ᐄ떒嵉ག靐쨼凘Ԩ諈⣿窲䚣턨冷鯦ꋴ殈촢뽥伥좡䳩④촊첚䣊ꥍ힙ℝ [ 62.269789][ T6727] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.281068][ T6727] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.314892][ T39] audit: type=1400 audit(1733937342.767:433): avc: denied { bind } for pid=6755 comm="syz.4.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.417757][ T3821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.424984][ T3821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.432040][ T3821] bond0 (unregistering): Released all slaves [ 62.499467][ T39] audit: type=1400 audit(1733937342.947:434): avc: denied { getopt } for pid=6726 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.519556][ T3821] tipc: Left network mode [ 62.534471][ T833] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 1 proto 2 vid 0x0525 pid 0xA4A8 [ 62.545947][ T833] usb 6-1: USB disconnect, device number 5 [ 62.565056][ T833] usblp0: removed [ 62.595626][ T39] audit: type=1400 audit(1733937343.037:435): avc: denied { append } for pid=6767 comm="syz.4.217" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 62.612066][ T6675] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.632600][ T6675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.637418][ T6675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.641696][ T6675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.724582][ T6675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.730708][ T6675] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.736486][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.736533][ T3709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.741895][ T3709] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.747169][ T3709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.770280][ T39] audit: type=1400 audit(1733937343.217:436): avc: denied { read } for pid=6779 comm="syz.0.219" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.775481][ T39] audit: type=1400 audit(1733937343.217:437): avc: denied { open } for pid=6779 comm="syz.0.219" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.781093][ T39] audit: type=1400 audit(1733937343.217:438): avc: denied { ioctl } for pid=6779 comm="syz.0.219" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.781141][ T3821] hsr_slave_0: left promiscuous mode [ 62.790678][ T3821] hsr_slave_1: left promiscuous mode [ 62.797944][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.799845][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.801986][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.803821][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.817806][ T3821] veth1_macvtap: left promiscuous mode [ 62.819236][ T3821] veth0_macvtap: left promiscuous mode [ 62.820640][ T3821] veth1_vlan: left promiscuous mode [ 62.821968][ T3821] veth0_vlan: left promiscuous mode [ 62.867460][ T3821] team0 (unregistering): Port device vlan2 removed [ 63.172419][ T6795] SELinux: syz.4.222 (6795) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 63.256329][ T39] audit: type=1400 audit(1733937343.697:439): avc: denied { accept } for pid=6794 comm="syz.4.222" lport=55200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.261643][ T39] audit: type=1400 audit(1733937343.707:440): avc: denied { getopt } for pid=6794 comm="syz.4.222" lport=55200 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 63.348109][ T5941] Bluetooth: hci2: command tx timeout [ 63.439249][ T5941] Bluetooth: hci1: command tx timeout [ 63.460762][ T3821] team0 (unregistering): Port device team_slave_1 removed [ 63.522855][ T3821] team0 (unregistering): Port device team_slave_0 removed [ 64.086808][ T6798] batman_adv: batadv0: Adding interface: erspan1 [ 64.093125][ T6798] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 64.163227][ T39] audit: type=1400 audit(1733937344.607:441): avc: denied { connect } for pid=6802 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 64.243184][ T6815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6815 comm=syz.4.228 [ 64.250079][ T6815] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 64.275218][ T6815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.283636][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 64.293790][ T6815] bond1: (slave batadv1): making interface the new active one [ 64.299983][ T6815] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 64.428649][ T6815] bond1 (unregistering): (slave batadv1): Releasing active interface [ 64.434558][ T6815] bond1 (unregistering): Released all slaves [ 64.481733][ T6675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.626311][ T6675] veth0_vlan: entered promiscuous mode [ 64.636128][ T6675] veth1_vlan: entered promiscuous mode [ 64.648122][ T6675] veth0_macvtap: entered promiscuous mode [ 64.653417][ T6675] veth1_macvtap: entered promiscuous mode [ 64.668771][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.672475][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.679045][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.682305][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.684861][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.687672][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.693338][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.696669][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.699893][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.702407][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.705317][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.707991][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.711150][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.714336][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.721619][ T6675] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.723967][ T6675] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.726175][ T6675] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.729617][ T6675] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.776334][ T3709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.786963][ T3709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.792167][ T6867] netlink: 44 bytes leftover after parsing attributes in process `syz.0.239'. [ 64.811643][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.813613][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.884036][ T6881] overlayfs: failed to resolve './bus': -2 [ 64.931890][ T6886] fuse: Unknown parameter '184467440737095516150x0000000000000007' [ 65.044388][ T6906] __nla_validate_parse: 1 callbacks suppressed [ 65.044400][ T6906] netlink: 44 bytes leftover after parsing attributes in process `syz.4.250'. [ 65.064996][ T6912] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 65.108762][ T6918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6918 comm=syz.4.252 [ 65.162078][ T6924] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 65.190978][ T6929] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 65.194802][ T6929] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 65.199823][ T6929] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 65.330557][ T6950] netlink: 32 bytes leftover after parsing attributes in process `syz.5.262'. [ 65.383394][ T6962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.265'. [ 65.427071][ T5941] Bluetooth: hci2: command tx timeout [ 65.503400][ T6978] hpfs: Bad magic ... probably not HPFS [ 65.507621][ T5941] Bluetooth: hci1: command tx timeout [ 65.624942][ T6991] sctp: [Deprecated]: syz.5.273 (pid 6991) Use of int in max_burst socket option. [ 65.624942][ T6991] Use struct sctp_assoc_value instead [ 65.841474][ T6994] kvm: emulating exchange as write [ 66.277582][ T35] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 66.289896][ T7032] netlink: 44 bytes leftover after parsing attributes in process `syz.4.286'. [ 66.439458][ T35] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.442012][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 66.444635][ T35] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 66.455511][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.455942][ T7043] netlink: 'syz.0.289': attribute type 23 has an invalid length. [ 66.474074][ T35] usb 10-1: config 0 descriptor?? [ 66.479399][ T35] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 66.481344][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 66.487869][ T35] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 66.499125][ T35] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 66.501807][ T35] usb 10-1: media controller created [ 66.506384][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.522616][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 66.524567][ T35] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 66.537480][ T35] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input11 [ 66.554042][ T35] dvb-usb: schedule remote query interval to 150 msecs. [ 66.555974][ T35] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 66.593738][ T7051] netlink: 48 bytes leftover after parsing attributes in process `syz.0.291'. [ 66.683272][ T7010] dibusb: i2c wr: len=68 is too big! [ 66.683272][ T7010] [ 66.708691][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 66.711188][ T35] dvb-usb: error while querying for an remote control event. [ 66.809474][ T35] usb 10-1: USB disconnect, device number 2 [ 66.842359][ T35] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 66.890506][ T7069] netlink: 2 bytes leftover after parsing attributes in process `syz.0.295'. [ 67.018553][ T7092] netlink: 44 bytes leftover after parsing attributes in process `syz.0.297'. [ 67.059219][ T7094] Invalid ELF header magic: != ELF [ 67.075749][ T7095] syz.0.298: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 67.083535][ T7095] CPU: 1 UID: 0 PID: 7095 Comm: syz.0.298 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 67.085967][ T7099] netlink: 'syz.1.299': attribute type 23 has an invalid length. [ 67.086504][ T7095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.091490][ T7095] Call Trace: [ 67.091503][ T7095] [ 67.091509][ T7095] dump_stack_lvl+0x16c/0x1f0 [ 67.091543][ T7095] warn_alloc+0x24d/0x3a0 [ 67.096119][ T7095] ? __pfx_warn_alloc+0x10/0x10 [ 67.097647][ T7095] ? __get_vm_area_node+0x1b0/0x2f0 [ 67.099302][ T7095] ? __get_vm_area_node+0x1dc/0x2f0 [ 67.100926][ T7095] __vmalloc_node_range_noprof+0x1105/0x1530 [ 67.102826][ T7095] ? avc_has_perm+0x11b/0x1c0 [ 67.104132][ T7095] ? kernel_read_file+0x682/0x7f0 [ 67.105440][ T7095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 67.107082][ T7095] ? __pfx_selinux_kernel_read_file+0x10/0x10 [ 67.108634][ T7095] ? ima_read_file+0x13a/0x1a0 [ 67.109866][ T7095] ? __pfx_ima_read_file+0x10/0x10 [ 67.111166][ T7095] ? kernel_read_file+0x682/0x7f0 [ 67.112412][ T7095] vmalloc_noprof+0x6b/0x90 [ 67.113525][ T7095] ? kernel_read_file+0x682/0x7f0 [ 67.114995][ T7095] kernel_read_file+0x682/0x7f0 [ 67.116420][ T7095] ? __pfx_kernel_read_file+0x10/0x10 [ 67.118002][ T7095] ? __pfx___lock_acquire+0x10/0x10 [ 67.119450][ T7095] ? hlock_class+0x4e/0x130 [ 67.120737][ T7095] ? __lock_acquire+0xcc5/0x3c40 [ 67.122069][ T7095] init_module_from_file+0xa0/0x120 [ 67.123391][ T7095] ? __pfx_init_module_from_file+0x10/0x10 [ 67.124980][ T7095] ? lock_acquire+0x2f/0xb0 [ 67.126200][ T7095] ? idempotent_init_module+0x118/0x750 [ 67.127653][ T7095] ? do_raw_spin_unlock+0x172/0x230 [ 67.129111][ T7095] idempotent_init_module+0x228/0x750 [ 67.130551][ T7095] ? __pfx_lock_release+0x10/0x10 [ 67.131878][ T7095] ? __pfx_idempotent_init_module+0x10/0x10 [ 67.134364][ T7095] ? __fget_files+0x206/0x3a0 [ 67.135763][ T7095] __x64_sys_finit_module+0xbd/0x140 [ 67.137358][ T7095] do_syscall_64+0xcd/0x250 [ 67.138859][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.140584][ T7095] RIP: 0033:0x7fcfa5985d19 [ 67.142073][ T7095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.147057][ T7095] RSP: 002b:00007fcfa37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 67.149068][ T7095] RAX: ffffffffffffffda RBX: 00007fcfa5b76080 RCX: 00007fcfa5985d19 [ 67.151275][ T7095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 67.153249][ T7095] RBP: 00007fcfa5a01a20 R08: 0000000000000000 R09: 0000000000000000 [ 67.155327][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.157342][ T7095] R13: 0000000000000000 R14: 00007fcfa5b76080 R15: 00007ffcd0198848 [ 67.159394][ T7095] [ 67.169622][ T7095] Mem-Info: [ 67.170677][ T7095] active_anon:7549 inactive_anon:0 isolated_anon:0 [ 67.170677][ T7095] active_file:10851 inactive_file:38417 isolated_file:0 [ 67.170677][ T7095] unevictable:1768 dirty:677 writeback:0 [ 67.170677][ T7095] slab_reclaimable:7059 slab_unreclaimable:71594 [ 67.170677][ T7095] mapped:23892 shmem:2463 pagetables:876 [ 67.170677][ T7095] sec_pagetables:306 bounce:0 [ 67.170677][ T7095] kernel_misc_reclaimable:0 [ 67.170677][ T7095] free:475398 free_pcp:3380 free_cma:0 [ 67.183314][ T7095] Node 0 active_anon:28000kB inactive_anon:0kB active_file:43384kB inactive_file:153596kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:95548kB dirty:2708kB writeback:0kB shmem:6316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12624kB pagetables:3504kB sec_pagetables:1224kB all_unreclaimable? no [ 67.194514][ T7095] Node 1 active_anon:2196kB inactive_anon:0kB active_file:20kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 67.202625][ T7095] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 67.210131][ T7095] lowmem_reserve[]: 0 1212 0 0 0 [ 67.211432][ T7095] Node 0 DMA32 free:301664kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:28000kB inactive_anon:0kB active_file:43384kB inactive_file:153596kB unevictable:3536kB writepending:2708kB present:2080628kB managed:1269912kB mlocked:0kB bounce:0kB free_pcp:9600kB local_pcp:216kB free_cma:0kB [ 67.218912][ T7095] lowmem_reserve[]: 0 0 0 0 0 [ 67.220128][ T7095] Node 1 Normal free:1585808kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:2196kB inactive_anon:0kB active_file:20kB inactive_file:72kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:3140kB local_pcp:176kB free_cma:0kB [ 67.228304][ T7095] lowmem_reserve[]: 0 0 0 0 0 [ 67.229669][ T7095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 67.237081][ T7095] Node 0 DMA32: 36*4kB (UE) 234*8kB (UE) 386*16kB (UME) 479*32kB (UME) 368*64kB (UME) 37*128kB (UME) 22*256kB (UME) 10*512kB (UME) 6*1024kB (UME) 6*2048kB (UME) 54*4096kB (M) = 302176kB [ 67.242237][ T7095] Node 1 Normal: 8*4kB (UE) 26*8kB (UME) 24*16kB (UE) 161*32kB (UME) 56*64kB (UE) 16*128kB (UME) 6*256kB (UE) 6*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 382*4096kB (M) = 1585808kB [ 67.248250][ T7095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.251449][ T7095] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 67.254700][ T7095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.257374][ T7095] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 67.259892][ T7095] 51731 total pagecache pages [ 67.261123][ T7095] 0 pages in swap cache [ 67.267029][ T7095] Free swap = 124728kB [ 67.268314][ T7095] Total swap = 124996kB [ 67.269381][ T7095] 1048443 pages RAM [ 67.270348][ T7095] 0 pages HighMem/MovableOnly [ 67.271535][ T7095] 281644 pages reserved [ 67.272649][ T7095] 0 pages cma reserved [ 67.304952][ T7111] warning: `syz.1.304' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.308498][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 67.357071][ T7121] netlink: 44 bytes leftover after parsing attributes in process `syz.0.306'. [ 67.415634][ T7124] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 67.597251][ T5941] Bluetooth: hci1: command tx timeout [ 67.649161][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 67.649174][ T39] audit: type=1400 audit(1733937348.097:479): avc: denied { create } for pid=7134 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 67.655650][ T39] audit: type=1400 audit(1733937348.097:480): avc: denied { ioctl } for pid=7134 comm="syz.0.309" path="socket:[16844]" dev="sockfs" ino=16844 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 67.698119][ T39] audit: type=1400 audit(1733937348.147:481): avc: denied { accept } for pid=7134 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 67.919394][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 67.942303][ T7160] devtmpfs: Cannot change global quota limit on remount [ 67.945629][ T39] audit: type=1400 audit(1733937348.387:482): avc: denied { remount } for pid=7159 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 68.064085][ T7174] binder: 7167:7174 ioctl 40046109 20000300 returned -22 [ 68.109754][ T39] audit: type=1400 audit(1733937348.557:483): avc: denied { map } for pid=7167 comm="syz.1.319" path="/proc/235/task/237/statm" dev="proc" ino=16003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 68.231178][ T39] audit: type=1400 audit(1733937348.677:484): avc: denied { relabelfrom } for pid=7185 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 68.240652][ T39] audit: type=1400 audit(1733937348.687:485): avc: denied { relabelto } for pid=7185 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 68.263253][ T39] audit: type=1400 audit(1733937348.707:486): avc: denied { ioctl } for pid=7185 comm="syz.1.326" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.274662][ T39] audit: type=1400 audit(1733937348.717:487): avc: denied { map } for pid=7185 comm="syz.1.326" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.292349][ T7192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.395282][ T39] audit: type=1400 audit(1733937348.837:488): avc: denied { mount } for pid=7195 comm="syz.1.329" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.525043][ T7209] program syz.0.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.525075][ T7210] program syz.0.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.571953][ T7215] cifs: Unknown parameter 'mode' [ 68.571953][ T7214] cifs: Unknown parameter 'mode' [ 68.574631][ T7215] netlink: 'syz.0.335': attribute type 15 has an invalid length. [ 69.428069][ T7246] overlayfs: conflicting lowerdir path [ 69.668143][ T5941] Bluetooth: hci1: command tx timeout [ 69.754525][ T7270] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 69.761768][ T7270] CIFS mount error: No usable UNC path provided in device string! [ 69.761768][ T7270] [ 69.764770][ T7270] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 69.821633][ T7268] SELinux: policydb string does not match my string SE Linux [ 69.824169][ T7268] SELinux: failed to load policy [ 69.922852][ T7282] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 70.222919][ T7300] mmap: syz.4.359 (7300): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 70.240309][ T7301] overlay: ./file0 is not a directory [ 70.500346][ T7320] Illegal XDP return value 1676431195 on prog (id 25) dev syz_tun, expect packet loss! [ 70.586605][ T7331] 9pnet_fd: Insufficient options for proto=fd [ 70.621660][ T7335] netlink: 'syz.0.366': attribute type 2 has an invalid length. [ 70.624147][ T7335] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 70.629666][ T7335] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 70.730155][ T7347] __nla_validate_parse: 5 callbacks suppressed [ 70.730166][ T7347] netlink: 277 bytes leftover after parsing attributes in process `syz.4.370'. [ 70.923976][ T7360] veth1_macvtap: left promiscuous mode [ 70.925674][ T7360] macsec0: entered promiscuous mode [ 70.928355][ T7360] macsec0: entered allmulticast mode [ 70.943109][ T7360] veth1_macvtap: entered promiscuous mode [ 70.944833][ T7360] veth1_macvtap: entered allmulticast mode [ 70.947337][ T7360] macsec0: left promiscuous mode [ 70.949274][ T7360] macsec0: left allmulticast mode [ 70.950762][ T7360] veth1_macvtap: left allmulticast mode [ 71.432401][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.434813][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.497162][ T5981] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 71.599795][ T7428] netlink: 44 bytes leftover after parsing attributes in process `syz.4.393'. [ 71.602810][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 71.606050][ T7428] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 71.667109][ T5981] usb 6-1: Using ep0 maxpacket: 32 [ 71.678196][ T5981] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.681724][ T5981] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.690125][ T5981] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 71.692713][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.694970][ T5981] usb 6-1: Product: syz [ 71.696203][ T5981] usb 6-1: Manufacturer: syz [ 71.697806][ T5981] usb 6-1: SerialNumber: syz [ 71.904336][ T5981] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 71.927644][ T25] usb 6-1: USB disconnect, device number 6 [ 71.952235][ T25] usblp0: removed [ 72.128517][ T7474] vxcan1: tx address claim with dlc 1 [ 72.325711][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'. [ 72.400942][ T7495] wireguard: wg0: Could not create IPv4 socket [ 72.442723][ T7500] netlink: 'syz.0.419': attribute type 1 has an invalid length. [ 72.445366][ T7500] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.419'. [ 72.455214][ T7500] netlink: 165 bytes leftover after parsing attributes in process `syz.0.419'. [ 72.743339][ T7527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.749379][ T7528] syz.0.422: attempt to access beyond end of device [ 72.749379][ T7528] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 72.753160][ T7528] gfs2: error -5 reading superblock [ 72.770363][ T7528] netlink: 'syz.0.422': attribute type 4 has an invalid length. [ 72.820822][ T39] kauditd_printk_skb: 31 callbacks suppressed [ 72.820836][ T39] audit: type=1400 audit(1733937353.267:520): avc: denied { connect } for pid=7529 comm="syz.5.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.830296][ T39] audit: type=1400 audit(1733937353.267:521): avc: denied { read } for pid=7529 comm="syz.5.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.867081][ T5941] Bluetooth: hci2: command tx timeout [ 72.878176][ T35] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 72.932271][ T39] audit: type=1400 audit(1733937353.377:522): avc: denied { map } for pid=7541 comm="syz.0.426" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.010472][ T35] usb 9-1: device descriptor read/64, error -71 [ 73.064472][ T7547] kvm: user requested TSC rate below hardware speed [ 73.070453][ T7547] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=257231385 (16462808640 ns) > initial count (3499436608 ns). Using initial count to start timer. [ 73.179757][ T7563] netlink: 160 bytes leftover after parsing attributes in process `syz.5.430'. [ 73.182232][ T7563] netlink: 108 bytes leftover after parsing attributes in process `syz.5.430'. [ 73.184654][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.430'. [ 73.247074][ T35] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 73.254488][ T7569] netlink: 44 bytes leftover after parsing attributes in process `syz.1.432'. [ 73.255838][ T7566] nfs: Unknown parameter 'g' [ 73.260488][ T7566] nfs: Unknown parameter 'g' [ 73.261961][ T7566] nfs: Unknown parameter 'g' [ 73.263656][ T7566] nfs: Unknown parameter 'g' [ 73.265323][ T7566] nfs: Unknown parameter 'g' [ 73.266820][ T7566] nfs: Unknown parameter 'g' [ 73.269367][ T7566] nfs: Unknown parameter 'g' [ 73.270701][ T7566] nfs: Unknown parameter 'g' [ 73.272042][ T7566] nfs: Unknown parameter 'g' [ 73.273694][ T7566] nfs: Unknown parameter 'g' [ 73.275040][ T7566] nfs: Unknown parameter 'g' [ 73.278027][ T7566] nfs: Unknown parameter 'g' [ 73.279401][ T7566] nfs: Unknown parameter 'g' [ 73.281190][ T7566] nfs: Unknown parameter 'g' [ 73.283233][ T7566] nfs: Unknown parameter 'g' [ 73.285534][ T7566] nfs: Unknown parameter 'g' [ 73.290001][ T7566] nfs: Unknown parameter 'g' [ 73.292543][ T7566] nfs: Unknown parameter 'g' [ 73.294926][ T7566] nfs: Unknown parameter 'g' [ 73.297975][ T7566] nfs: Unknown parameter 'g' [ 73.300011][ T7566] nfs: Unknown parameter 'g' [ 73.301922][ T7566] nfs: Unknown parameter 'g' [ 73.304043][ T7566] nfs: Unknown parameter 'g' [ 73.378188][ T35] usb 9-1: device descriptor read/64, error -71 [ 73.381623][ T39] audit: type=1400 audit(1733937353.827:523): avc: denied { create } for pid=7577 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 73.392180][ T39] audit: type=1400 audit(1733937353.827:524): avc: denied { write } for pid=7577 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 73.401045][ T39] audit: type=1400 audit(1733937353.847:525): avc: denied { create } for pid=7574 comm="syz.5.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 73.406301][ T39] audit: type=1326 audit(1733937353.847:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.435" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb61f85d19 code=0x7fc00000 [ 73.488283][ T35] usb usb9-port1: attempt power cycle [ 73.501686][ T7584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.735831][ T7608] netlink: 'syz.5.446': attribute type 5 has an invalid length. [ 73.827396][ T35] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 73.838615][ T39] audit: type=1400 audit(1733937354.287:527): avc: denied { write } for pid=7614 comm="syz.5.450" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.848394][ T35] usb 9-1: device descriptor read/8, error -71 [ 74.058151][ T39] audit: type=1400 audit(1733937354.507:528): avc: denied { audit_read } for pid=7646 comm="syz.5.460" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.086977][ T35] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 74.108910][ T35] usb 9-1: device descriptor read/8, error -71 [ 74.169590][ T39] audit: type=1400 audit(1733937354.617:529): avc: denied { watch watch_reads } for pid=7661 comm="syz.0.465" path="/123/file0" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.217279][ T35] usb usb9-port1: unable to enumerate USB device [ 74.233935][ T7666] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 74.285529][ T7672] program syz.0.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.292574][ T7672] ata1.00: non-matching transfer count (2097152/0) [ 74.309628][ T7668] overlay: ./bus is not a directory [ 74.479242][ T7689] i2c i2c-1: Invalid block write size 34 [ 74.513151][ T7691] 9pnet_virtio: no channels available for device [ 74.513204][ T7692] 9pnet_virtio: no channels available for device [ 74.551352][ T7694] fuse: Bad value for 'fd' [ 74.557088][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 74.687643][ T7696] team0 (unregistering): Port device team_slave_0 removed [ 74.695313][ T7696] team0 (unregistering): Port device team_slave_1 removed [ 74.729093][ T7701] can0: slcan on ptm0. [ 74.814068][ T7709] bridge0: port 2(bridge_slave_1) entered learning state [ 74.935806][ T7724] new mount options do not match the existing superblock, will be ignored [ 74.989853][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 74.992160][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 74.994463][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 74.996778][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 74.999988][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.000430][ T7704] can0 (unregistered): slcan off ptm0. [ 75.002186][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.006117][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.008578][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.010680][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.012765][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.015220][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.018227][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.020310][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.022396][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.024660][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.026799][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.029157][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.031286][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.033419][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.035581][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.037987][ T7729] tun0: tun_chr_ioctl cmd 1074025675 [ 75.040125][ T7729] tun0: persist enabled [ 75.042040][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.043714][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.045329][ T7729] tun0: tun_chr_ioctl cmd 1074025675 [ 75.047679][ T7729] tun0: persist disabled [ 75.049421][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.051506][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.053450][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.055471][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.057573][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.059754][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.062021][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.064076][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.065984][ T7730] tun0: tun_chr_ioctl cmd 1074025673 [ 75.786717][ T7750] tipc: Started in network mode [ 75.788608][ T7750] tipc: Node identity ac14142f, cluster identity 4711 [ 75.792518][ T7750] tipc: Enabling of bearer rejected, failed to enable media [ 76.047184][ T30] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 76.186850][ T7771] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 76.208954][ T30] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 76.212265][ T30] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.217784][ T30] usb 9-1: New USB device found, idVendor=0f10, idProduct=1021, bcdDevice=86.66 [ 76.221911][ T30] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 76.225835][ T30] usb 9-1: Product: syz [ 76.227808][ T30] usb 9-1: Manufacturer: syz [ 76.230068][ T30] usb 9-1: SerialNumber: syz [ 76.233820][ T30] usb 9-1: config 0 descriptor?? [ 76.332375][ T7784] netlink: 'syz.0.495': attribute type 3 has an invalid length. [ 76.335553][ T7784] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 76.340569][ T7784] __nla_validate_parse: 6 callbacks suppressed [ 76.340585][ T7784] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.495'. [ 76.347214][ T7784] nbd: couldn't find device at index 63 [ 76.441054][ T7795] netlink: 44 bytes leftover after parsing attributes in process `syz.0.496'. [ 76.623184][ T62] usb 9-1: USB disconnect, device number 6 [ 76.666861][ T7799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.099331][ T7842] mmap: syz.4.505 (7842) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.108747][ T7842] syzkaller1: entered promiscuous mode [ 77.110767][ T7842] syzkaller1: entered allmulticast mode [ 77.337250][ T7846] 9pnet_fd: p9_fd_create_unix (7846): problem connecting socket: qY3aK: -111 [ 77.500605][ T7867] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 77.502981][ T7867] netlink: 44 bytes leftover after parsing attributes in process `syz.0.513'. [ 77.532366][ T7868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.677122][ T7882] netlink: 'syz.0.518': attribute type 10 has an invalid length. [ 77.680384][ T7882] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.682804][ T7882] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.685084][ T7882] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.687670][ T7882] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.690536][ T7882] geneve0: entered promiscuous mode [ 77.693999][ T7882] bond0: (slave geneve0): Opening slave failed [ 77.742469][ T7877] deleting an unspecified loop device is not supported. [ 77.748940][ T7877] batadv0: entered promiscuous mode [ 78.093300][ T7924] 9pnet_fd: p9_fd_create_unix (7924): problem connecting socket: qY3aK: -111 [ 78.114191][ T7930] vxfs: WRONG superblock magic 00000000 at 1 [ 78.114483][ T7932] netlink: 44 bytes leftover after parsing attributes in process `syz.4.532'. [ 78.116836][ T7930] vxfs: WRONG superblock magic 00000000 at 8 [ 78.122969][ T7930] vxfs: can't find superblock. [ 78.177915][ T7936] Bluetooth: hci4: Frame reassembly failed (-84) [ 78.180661][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 78.180670][ T39] audit: type=1400 audit(1733937358.627:542): avc: denied { create } for pid=7935 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.181406][ T68] Bluetooth: hci4: Frame reassembly failed (-84) [ 78.183635][ T39] audit: type=1400 audit(1733937358.627:543): avc: denied { bind } for pid=7935 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.192437][ T7936] Bluetooth: hci4: Frame reassembly failed (-84) [ 78.195584][ T39] audit: type=1400 audit(1733937358.627:544): avc: denied { write } for pid=7935 comm="syz.0.534" path="socket:[21946]" dev="sockfs" ino=21946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.207812][ T39] audit: type=1400 audit(1733937358.657:545): avc: denied { read write } for pid=7935 comm="syz.0.534" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.214234][ T39] audit: type=1400 audit(1733937358.657:546): avc: denied { open } for pid=7935 comm="syz.0.534" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.234900][ T7942] netlink: 412 bytes leftover after parsing attributes in process `syz.5.537'. [ 78.266024][ T39] audit: type=1400 audit(1733937358.707:547): avc: denied { bind } for pid=7946 comm="syz.5.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.302854][ T7951] netlink: 16 bytes leftover after parsing attributes in process `syz.5.541'. [ 78.305384][ T7951] netlink: 92 bytes leftover after parsing attributes in process `syz.5.541'. [ 78.330838][ T7953] netlink: 44 bytes leftover after parsing attributes in process `syz.4.542'. [ 78.405576][ T7963] misc userio: Begin command sent, but we're already running [ 78.408158][ T39] audit: type=1400 audit(1733937358.857:548): avc: denied { shutdown } for pid=7962 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.536482][ T39] audit: type=1400 audit(1733937358.977:549): avc: denied { setopt } for pid=7964 comm="syz.5.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.595777][ T39] audit: type=1400 audit(1733937359.037:550): avc: denied { remount } for pid=7969 comm="syz.5.549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.617052][ T35] psmouse serio2: Failed to reset mouse on : -5 [ 78.691617][ T39] audit: type=1400 audit(1733937359.137:551): avc: denied { sqpoll } for pid=7976 comm="syz.5.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.885877][ T7987] netlink: 44 bytes leftover after parsing attributes in process `syz.5.554'. [ 80.227140][ T5941] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 80.334821][ T8002] netfs: Couldn't get user pages (rc=-14) [ 80.336458][ T8002] netfs: Zero-sized read [R=5] [ 80.779475][ T8022] Failed to initialize the IGMP autojoin socket (err -2) [ 80.929701][ T8039] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 81.100381][ T8061] netlink: 44 bytes leftover after parsing attributes in process `syz.0.580'. [ 81.133130][ T8063] : renamed from bond_slave_0 (while UP) [ 81.326416][ T8085] syz.0.586: attempt to access beyond end of device [ 81.326416][ T8085] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 81.330885][ T8085] syz.0.586: attempt to access beyond end of device [ 81.330885][ T8085] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 81.587445][ T7080] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 81.750189][ T7080] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.754238][ T7080] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.757831][ T7080] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.762476][ T7080] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.765651][ T7080] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.773080][ T7080] usb 6-1: config 0 descriptor?? [ 81.917858][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 81.990546][ T8108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.592'. [ 82.181309][ T7080] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.183399][ T7080] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.184372][ T8090] binder: BINDER_SET_CONTEXT_MGR already set [ 82.185270][ T7080] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.186844][ T8090] binder: 8087:8090 ioctl 4018620d 20000080 returned -16 [ 82.188953][ T7080] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.193330][ T7080] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.195378][ T7080] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.197388][ T7080] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.199402][ T7080] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.201446][ T7080] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.203445][ T7080] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.207213][ T7080] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 82.214834][ T7080] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 82.221376][ T7080] usb 6-1: USB disconnect, device number 7 [ 82.399195][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 82.459220][ T35] misc userio: Buffer overflowed, userio client isn't keeping up [ 82.803549][ T8137] netlink: 44 bytes leftover after parsing attributes in process `syz.1.599'. [ 83.137690][ T8154] netlink: 'syz.1.605': attribute type 2 has an invalid length. [ 83.143881][ T8154] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 83.145780][ T8154] overlayfs: failed to set xattr on upper [ 83.147628][ T8154] overlayfs: ...falling back to redirect_dir=nofollow. [ 83.149469][ T8154] overlayfs: ...falling back to index=off. [ 83.151065][ T8154] overlayfs: ...falling back to uuid=null. [ 83.157168][ T8154] netlink: 'syz.1.605': attribute type 1 has an invalid length. [ 83.224085][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.607'. [ 83.229180][ T8159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.607'. [ 83.311381][ T8165] netlink: 44 bytes leftover after parsing attributes in process `syz.1.610'. [ 83.410824][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 83.410835][ T39] audit: type=1400 audit(1733937363.857:571): avc: denied { accept } for pid=8170 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 83.524425][ T39] audit: type=1400 audit(1733937363.967:572): avc: denied { setopt } for pid=8176 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.529485][ T35] input: PS/2 Generic Mouse as /devices/serio2/input/input13 [ 83.532334][ T39] audit: type=1400 audit(1733937363.977:573): avc: denied { write } for pid=8176 comm="syz.1.615" path="socket:[21488]" dev="sockfs" ino=21488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.641075][ T39] audit: type=1400 audit(1733937364.087:574): avc: denied { read } for pid=8179 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.649916][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 83.653068][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'. [ 83.656230][ T8180] netlink: 'syz.1.616': attribute type 11 has an invalid length. [ 83.757136][ T35] psmouse serio2: Failed to enable mouse on [ 83.784803][ T8187] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 83.833377][ T8192] netlink: 44 bytes leftover after parsing attributes in process `syz.1.619'. [ 83.836237][ T8187] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 83.880431][ T39] audit: type=1400 audit(1733937364.327:575): avc: denied { append } for pid=8194 comm="syz.0.621" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.057829][ T8206] nfs: Unknown parameter 'V?' [ 84.059271][ T8205] netlink: 'syz.4.625': attribute type 1 has an invalid length. [ 84.061294][ T8205] netlink: 'syz.4.625': attribute type 4 has an invalid length. [ 84.209607][ T39] audit: type=1400 audit(1733937364.657:576): avc: denied { ioctl } for pid=8230 comm="syz.1.632" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 84.260935][ T8240] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 84.265628][ T39] audit: type=1400 audit(1733937364.707:577): avc: denied { relabelto } for pid=8239 comm="syz.1.635" name="cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 84.274323][ T39] audit: type=1400 audit(1733937364.707:578): avc: denied { associate } for pid=8239 comm="syz.1.635" name="cgroup.procs" dev="cgroup" ino=120 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 84.332118][ T8247] CIFS mount error: No usable UNC path provided in device string! [ 84.332118][ T8247] [ 84.335498][ T8247] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 84.343823][ T8249] netlink: 'syz.4.636': attribute type 21 has an invalid length. [ 84.350245][ T39] audit: type=1400 audit(1733937364.797:579): avc: denied { map } for pid=8241 comm="syz.4.636" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.359345][ T39] audit: type=1400 audit(1733937364.797:580): avc: denied { execute } for pid=8241 comm="syz.4.636" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.493697][ T8255] loop2: detected capacity change from 0 to 7 [ 84.500340][ T8255] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 84.503003][ T8255] loop2: partition table partially beyond EOD, truncated [ 84.507142][ T8255] loop2: p1 size 276741282 extends beyond EOD, truncated [ 84.511204][ T8255] loop2: p2 start 579963744 is beyond EOD, truncated [ 84.562195][ T6162] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 84.564200][ T6162] loop2: partition table partially beyond EOD, truncated [ 84.565974][ T6162] loop2: p1 size 276741282 extends beyond EOD, truncated [ 84.570300][ T6162] loop2: p2 start 579963744 is beyond EOD, truncated [ 84.604666][ T8260] loop6: detected capacity change from 0 to 524287999 [ 84.609818][ C2] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.613334][ C2] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.618786][ T1138] loop: Write error at byte offset 1, length 4096. [ 84.621450][ C2] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 84.624075][ C2] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 84.626717][ C2] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.630147][ C3] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.643175][ T1138] loop: Write error at byte offset 1, length 4096. [ 84.645189][ C3] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 84.648200][ C3] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 84.697435][ T6162] udevd[6162]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 84.736770][ T8271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8271 comm=syz.1.646 [ 84.740512][ T8271] netlink: 'syz.1.646': attribute type 1 has an invalid length. [ 84.750050][ T8271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.756572][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 84.761205][ T8271] bond1: (slave batadv1): making interface the new active one [ 84.764170][ T8271] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 84.861183][ T8271] bond1 (unregistering): (slave batadv1): Releasing active interface [ 84.864877][ T8271] bond1 (unregistering): Released all slaves [ 84.877842][ T8273] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 84.977028][ T35] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 85.020206][ T8285] syz.1.648: attempt to access beyond end of device [ 85.020206][ T8285] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 85.024778][ T8285] MINIX-fs: unable to read superblock [ 85.140753][ T35] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 85.142963][ T35] usb 5-1: config 0 has no interface number 0 [ 85.144628][ T35] usb 5-1: config 0 interface 120 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.148222][ T35] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 85.150754][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.153929][ T35] usb 5-1: config 0 descriptor?? [ 85.212785][ T8298] netlink: 'syz.4.654': attribute type 1 has an invalid length. [ 85.361661][ T8] usb 5-1: USB disconnect, device number 7 [ 85.899186][ T8308] binder: 8307:8308 ioctl 40046205 0 returned -22 [ 86.757080][ T8316] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 86.770171][ T8320] afs: Unknown parameter 'dyn' [ 86.853357][ T8325] loop7: detected capacity change from 0 to 16384 [ 86.891774][ T8331] syzkaller0: entered promiscuous mode [ 86.893952][ T8331] syzkaller0: entered allmulticast mode [ 86.937158][ T8325] loop7: detected capacity change from 16384 to 16383 [ 87.299238][ T5980] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 87.447122][ T5980] usb 10-1: Using ep0 maxpacket: 32 [ 87.450828][ T5980] usb 10-1: config 0 has no interfaces? [ 87.454964][ T5980] usb 10-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 87.459121][ T5980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.462088][ T5980] usb 10-1: Product: syz [ 87.463722][ T5980] usb 10-1: Manufacturer: syz [ 87.465531][ T5980] usb 10-1: SerialNumber: syz [ 87.477651][ T5980] usb 10-1: config 0 descriptor?? [ 87.703346][ T35] usb 10-1: USB disconnect, device number 3 [ 88.434515][ T8357] __nla_validate_parse: 9 callbacks suppressed [ 88.434555][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.673'. [ 88.452370][ T8357] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 88.463092][ T8356] uprobe: syz.5.673:8356 failed to unregister, leaking uprobe [ 88.498158][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 88.498168][ T39] audit: type=1400 audit(1733937368.947:589): avc: denied { map } for pid=8363 comm="syz.1.675" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.589941][ T8373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.679'. [ 88.670891][ T8383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8383 comm=syz.4.683 [ 88.674392][ T39] audit: type=1400 audit(1733937369.117:590): avc: denied { read } for pid=8382 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.722166][ T39] audit: type=1400 audit(1733937369.167:591): avc: denied { read } for pid=8386 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.776724][ T8397] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.688'. [ 88.829369][ T8404] netlink: 44 bytes leftover after parsing attributes in process `syz.4.691'. [ 88.895378][ T8412] Failed to initialize the IGMP autojoin socket (err -2) [ 88.988271][ T8426] fuse: Bad value for 'user_id' [ 88.989603][ T8426] fuse: Bad value for 'user_id' [ 89.085044][ T8434] netlink: 44 bytes leftover after parsing attributes in process `syz.1.703'. [ 89.133629][ T39] audit: type=1400 audit(1733937369.577:592): avc: denied { nlmsg_read } for pid=8442 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.191319][ T8448] siw: device registration error -23 [ 89.191586][ T8423] lo speed is unknown, defaulting to 1000 [ 89.194373][ T8423] lo speed is unknown, defaulting to 1000 [ 89.197869][ T8423] lo speed is unknown, defaulting to 1000 [ 89.201564][ T8423] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.205486][ T8423] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 89.223246][ T8423] lo speed is unknown, defaulting to 1000 [ 89.225598][ T8423] lo speed is unknown, defaulting to 1000 [ 89.228401][ T8423] lo speed is unknown, defaulting to 1000 [ 89.230316][ T8423] lo speed is unknown, defaulting to 1000 [ 89.285788][ T39] audit: type=1400 audit(1733937369.727:593): avc: denied { bind } for pid=8458 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.394455][ T8469] loop2: detected capacity change from 0 to 7 [ 89.396528][ T8469] Dev loop2: unable to read RDB block 7 [ 89.398605][ T8469] loop2: unable to read partition table [ 89.400692][ T8469] loop2: partition table beyond EOD, truncated [ 89.402305][ T8469] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 89.408427][ T8469] (syz.1.712,8469,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 89.411007][ T8469] (syz.1.712,8469,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 89.592714][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 89.619625][ T8479] netlink: 44 bytes leftover after parsing attributes in process `syz.4.714'. [ 89.630621][ T8481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.715'. [ 89.753513][ T8491] tap0: tun_chr_ioctl cmd 1074025678 [ 89.755123][ T8491] tap0: group set to 0 [ 90.035137][ T8509] syz.5.725: attempt to access beyond end of device [ 90.035137][ T8509] loop5: rw=0, sector=16, nr_sectors = 1 limit=0 [ 90.039619][ T8509] qnx6: unable to read the first superblock [ 90.041216][ T8511] netlink: 44 bytes leftover after parsing attributes in process `syz.1.724'. [ 90.041377][ T8509] syz.5.725: attempt to access beyond end of device [ 90.041377][ T8509] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 90.049782][ T8509] qnx6: unable to read the first superblock [ 90.051521][ T8509] qnx6: unable to read the first superblock [ 90.100381][ T8515] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 90.424917][ T8543] netlink: 44 bytes leftover after parsing attributes in process `syz.5.735'. [ 90.429761][ T39] audit: type=1400 audit(1733937370.877:594): avc: denied { ioctl } for pid=8530 comm="syz.1.732" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 90.468727][ T8549] geneve2: entered promiscuous mode [ 90.470173][ T8549] geneve2: entered allmulticast mode [ 90.673494][ T39] audit: type=1400 audit(1733937371.117:595): avc: denied { bind } for pid=8569 comm="syz.5.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.729358][ T8574] fuse: Bad value for 'fd' [ 90.764955][ T8581] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 90.777760][ T39] audit: type=1400 audit(1733937371.227:596): avc: denied { getopt } for pid=8579 comm="syz.1.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.825733][ T8591] fuse: Unknown parameter ' [default11JrKions' [ 91.227049][ T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 91.388206][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.391194][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.394585][ T8] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.399674][ T8] usb 9-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 91.402831][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.407037][ T8] usb 9-1: config 0 descriptor?? [ 91.618462][ T39] audit: type=1400 audit(1733937372.067:597): avc: denied { write } for pid=8601 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.819326][ T8633] devtmpfs: Cannot change global quota limit on remount [ 91.832402][ T8] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:20D6:CB17.0005/input/input16 [ 91.841478][ T8] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:20D6:CB17.0005/input/input17 [ 91.851161][ T8] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:20D6:CB17.0005/input/input18 [ 91.856794][ T8] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:20D6:CB17.0005/input/input19 [ 91.902301][ T8] hid-udraw 0003:20D6:CB17.0005: hidraw1: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.4-1/input0 [ 92.021434][ T8658] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQINd%CT535h [ 92.032669][ T39] audit: type=1400 audit(1733937373.475:598): avc: denied { mount } for pid=8659 comm="syz.5.772" name="/" dev="rpc_pipefs" ino=24344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 92.166063][ T8673] netlink: 'syz.1.780': attribute type 32 has an invalid length. [ 92.170791][ T8673] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 92.975068][ T8686] SELinux: policydb string SE Kظ^ does not match my string SE Linux [ 92.978568][ T8686] SELinux: failed to load policy [ 93.067709][ T7080] usb 9-1: reset high-speed USB device number 7 using dummy_hcd [ 93.341230][ T8734] 9pnet_virtio: no channels available for device syz [ 93.510254][ T8754] __nla_validate_parse: 13 callbacks suppressed [ 93.510276][ T8754] netlink: 48 bytes leftover after parsing attributes in process `syz.0.806'. [ 93.524112][ T8754] netlink: 'syz.0.806': attribute type 10 has an invalid length. [ 93.528746][ T8754] syz_tun: entered promiscuous mode [ 93.537577][ T8754] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 93.544120][ T8754] 9pnet_virtio: no channels available for device syz [ 93.790603][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.812'. [ 93.794830][ T8773] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 93.797769][ T8773] netlink: 224 bytes leftover after parsing attributes in process `syz.0.812'. [ 94.004877][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 94.004894][ T39] audit: type=1400 audit(1733937375.445:608): avc: denied { getattr } for pid=8775 comm="syz.0.813" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.042548][ T39] audit: type=1400 audit(1733937375.485:609): avc: denied { read write } for pid=8779 comm="syz.4.814" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.051520][ T39] audit: type=1400 audit(1733937375.495:610): avc: denied { ioctl open } for pid=8779 comm="syz.4.814" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.095028][ T39] audit: type=1400 audit(1733937375.535:611): avc: denied { mount } for pid=8785 comm="syz.4.817" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 94.096707][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.817'. [ 94.103478][ T39] audit: type=1400 audit(1733937375.535:612): avc: denied { mounton } for pid=8785 comm="syz.4.817" path="/142/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 94.130747][ T39] audit: type=1400 audit(1733937375.575:613): avc: denied { unmount } for pid=6426 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 94.536315][ T39] audit: type=1400 audit(1733937375.975:614): avc: denied { bind } for pid=8815 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 94.537553][ T8817] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 94.543516][ T39] audit: type=1400 audit(1733937375.985:615): avc: denied { setopt } for pid=8815 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 94.777207][ T7080] usb 9-1: device descriptor read/64, error -71 [ 94.791775][ T8829] cgroup: No subsys list or none specified [ 94.866300][ T8834] netlink: 44 bytes leftover after parsing attributes in process `syz.1.828'. [ 94.899326][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.829'. [ 94.929768][ T39] audit: type=1400 audit(1733937376.375:616): avc: denied { write } for pid=8837 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.937930][ T39] audit: type=1400 audit(1733937376.385:617): avc: denied { read } for pid=8837 comm="syz.1.830" dev="sockfs" ino=26247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.987108][ T8843] netlink: 52 bytes leftover after parsing attributes in process `syz.1.831'. [ 95.037205][ T7080] usb 9-1: reset high-speed USB device number 7 using dummy_hcd [ 95.041456][ T7080] usb 9-1: device reset changed ep0 maxpacket size! [ 95.045974][ T35] usb 9-1: USB disconnect, device number 7 [ 95.166484][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 95.172209][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 95.175218][ T8854] netlink: 'syz.1.836': attribute type 13 has an invalid length. [ 95.177787][ T8854] netlink: 'syz.1.836': attribute type 11 has an invalid length. [ 95.197037][ T35] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 95.246171][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 95.369970][ T35] usb 9-1: Using ep0 maxpacket: 16 [ 95.374667][ T35] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 95.377571][ T35] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 95.379772][ T35] usb 9-1: Product: syz [ 95.380876][ T35] usb 9-1: Manufacturer: syz [ 95.382099][ T35] usb 9-1: SerialNumber: syz [ 95.385548][ T35] usb 9-1: config 0 descriptor?? [ 95.417718][ T8866] capability: warning: `syz.1.840' uses 32-bit capabilities (legacy support in use) [ 95.457867][ T5981] hid (null): invalid report_size -182932479 [ 95.459711][ T8879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.460328][ T5981] hid (null): unknown global tag 0xe [ 95.472651][ T5981] hid-generic 0009:80000001:04C9.0006: invalid report_size -182932479 [ 95.475679][ T5981] hid-generic 0009:80000001:04C9.0006: item 0 4 1 7 parsing failed [ 95.477591][ T8879] batadv_slave_1: entered allmulticast mode [ 95.480179][ T5981] hid-generic 0009:80000001:04C9.0006: probe with driver hid-generic failed with error -22 [ 95.599623][ T62] usb 9-1: USB disconnect, device number 8 [ 95.787079][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.938525][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 95.942681][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 95.946654][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.951428][ T30] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.954361][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.970276][ T30] usb 5-1: config 0 descriptor?? [ 95.972191][ T8889] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.220141][ T8924] geneve2: entered promiscuous mode [ 96.222002][ T8924] geneve2: entered allmulticast mode [ 96.383065][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.386959][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.390542][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.392608][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.394664][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.396693][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.399677][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.401855][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.403993][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.406020][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.408631][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.410755][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.412784][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.414889][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.418577][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 96.421924][ T30] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 96.428169][ T30] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 96.499513][ T8951] "syz.5.868" (8951) uses obsolete ecb(arc4) skcipher [ 96.511752][ T8950] "syz.5.868" (8950) uses obsolete ecb(arc4) skcipher [ 96.651463][ T62] usb 5-1: USB disconnect, device number 8 [ 96.775616][ T8974] netlink: zone id is out of range [ 96.777192][ T8974] netlink: zone id is out of range [ 96.778561][ T8974] netlink: zone id is out of range [ 96.779923][ T8974] netlink: zone id is out of range [ 96.781282][ T8974] netlink: zone id is out of range [ 96.782636][ T8974] netlink: zone id is out of range [ 96.784153][ T8974] netlink: zone id is out of range [ 96.785576][ T8974] netlink: zone id is out of range [ 96.787381][ T8974] netlink: zone id is out of range [ 96.789024][ T8974] netlink: zone id is out of range [ 97.084512][ T8992] overlayfs: failed to resolve './file0': -2 [ 97.108027][ T8987] loop7: detected capacity change from 16383 to 0 [ 97.197565][ T9003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9003 comm=syz.4.884 [ 97.829735][ T9101] ERROR: device name not specified. [ 97.831900][ T9101] netlink: 'syz.0.908': attribute type 21 has an invalid length. [ 97.917121][ T7080] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 98.048290][ T7080] usb 6-1: device descriptor read/64, error -71 [ 98.288208][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 98.307128][ T7080] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 98.457182][ T7080] usb 6-1: device descriptor read/64, error -71 [ 98.459508][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.462615][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 98.465415][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.468385][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.471860][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.473986][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.478613][ T8] usb 5-1: config 0 descriptor?? [ 98.480456][ T9147] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 98.577170][ T7080] usb usb6-port1: attempt power cycle [ 98.673375][ T9190] __nla_validate_parse: 19 callbacks suppressed [ 98.673391][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.936'. [ 98.678994][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.936'. [ 98.753708][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.937'. [ 98.894699][ T9147] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 98.896545][ T9147] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.900514][ T9147] vhci_hcd vhci_hcd.0: Device attached [ 98.903763][ T9195] vhci_hcd: cannot find the pending unlink 5 [ 98.905924][ T9147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.910286][ T9147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.913625][ T9195] vhci_hcd: connection closed [ 98.916806][ T11] vhci_hcd: stop threads [ 98.920553][ T11] vhci_hcd: release socket [ 98.921793][ T11] vhci_hcd: disconnect device [ 98.923916][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 98.926013][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 98.927080][ T7080] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 98.935844][ T8] usb 5-1: USB disconnect, device number 9 [ 98.947813][ T7080] usb 6-1: device descriptor read/8, error -71 [ 99.047340][ T9198] binder: 9197:9198 ioctl c0306201 0 returned -14 [ 99.102768][ T9202] trusted_key: syz.4.938 sent an empty control message without MSG_MORE. [ 99.197103][ T7080] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 99.218790][ T7080] usb 6-1: device descriptor read/8, error -71 [ 99.236489][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.940'. [ 99.239794][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 99.305824][ T9209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.941'. [ 99.327863][ T7080] usb usb6-port1: unable to enumerate USB device [ 99.539948][ T9217] netlink: 'syz.0.945': attribute type 8 has an invalid length. [ 99.541966][ T9217] netlink: 244 bytes leftover after parsing attributes in process `syz.0.945'. [ 99.632633][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 99.632681][ T39] audit: type=1400 audit(1733937381.075:639): avc: denied { getopt } for pid=9226 comm="syz.5.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.667091][ T5291] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.669894][ T5941] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 99.689153][ T9230] netlink: 44 bytes leftover after parsing attributes in process `syz.0.950'. [ 99.796333][ T9232] sg_write: data in/out 1815377419/50 bytes for SCSI command 0x87-- guessing data in; [ 99.796333][ T9232] program syz.5.951 not setting count and/or reply_len properly [ 99.859740][ T39] audit: type=1326 audit(1733937381.305:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa5985d19 code=0x7fc00000 [ 99.870125][ T39] audit: type=1326 audit(1733937381.305:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.952" exe="/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fcfa5985d19 code=0x7fc00000 [ 99.878523][ T39] audit: type=1326 audit(1733937381.305:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa5985d19 code=0x7fc00000 [ 99.884993][ T39] audit: type=1326 audit(1733937381.305:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa5985d19 code=0x7fc00000 [ 99.893400][ T39] audit: type=1326 audit(1733937381.305:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa5985d19 code=0x7fc00000 [ 99.901650][ T39] audit: type=1326 audit(1733937381.305:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa5985d19 code=0x7fc00000 [ 99.910239][ T39] audit: type=1326 audit(1733937381.305:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa5985d19 code=0x7fc00000 [ 99.919655][ T39] audit: type=1326 audit(1733937381.305:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa5985d19 code=0x7fc00000 [ 99.927815][ T39] audit: type=1326 audit(1733937381.305:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa5985d19 code=0x7fc00000 [ 99.991691][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 100.157485][ T9257] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 100.163835][ T9257] geneve2: entered promiscuous mode [ 100.165352][ T9257] geneve2: entered allmulticast mode [ 100.295881][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 100.437108][ T25] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 100.608772][ T25] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.612896][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 100.616761][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.621520][ T25] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.625981][ T25] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.629837][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.640402][ T25] usb 9-1: config 0 descriptor?? [ 100.644446][ T9259] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 100.859760][ T9298] netlink: 'syz.1.971': attribute type 6 has an invalid length. [ 100.970653][ T9303] Failed to initialize the IGMP autojoin socket (err -2) [ 100.974995][ T9305] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 101.104456][ T25] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 101.114664][ T25] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 101.129980][ T25] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 101.421412][ T9323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9323 comm=syz.5.977 [ 101.559222][ T9326] binder: 9325:9326 ioctl c0306201 0 returned -14 [ 101.980098][ T9352] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 101.982155][ T9352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.986105][ T833] usb 9-1: USB disconnect, device number 9 [ 101.986109][ T9352] vhci_hcd vhci_hcd.0: Device attached [ 101.987859][ T9355] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 101.996080][ T1138] vhci_hcd: stop threads [ 101.998269][ T1138] vhci_hcd: release socket [ 101.999452][ T1138] vhci_hcd: disconnect device [ 102.028918][ T9364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=9364 comm=syz.5.992 [ 102.091239][ T9361] kvm: kvm [9360]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0xffff96f600000003 [ 102.257278][ T9383] kvm: kvm [9381]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x100000000000000 [ 102.258359][ T9382] Bluetooth: (null): Non-link packet received in non-active state [ 102.459104][ T9395] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 102.477012][ T9395] geneve2: entered promiscuous mode [ 102.479252][ T9395] geneve2: entered allmulticast mode [ 102.572465][ T9405] macsec0: entered promiscuous mode [ 102.576123][ T9405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9405 comm=syz.5.1006 [ 102.592514][ T5941] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 102.615776][ T9407] can: request_module (can-proto-0) failed. [ 102.731540][ T9426] netlink: 'syz.4.1012': attribute type 29 has an invalid length. [ 102.736062][ T9426] netlink: 'syz.4.1012': attribute type 29 has an invalid length. [ 102.741202][ T9426] netlink: 'syz.4.1012': attribute type 29 has an invalid length. [ 102.802523][ T9439] geneve3: entered promiscuous mode [ 102.805011][ T9439] geneve3: entered allmulticast mode [ 103.070230][ T9453] veth1_to_batadv: entered promiscuous mode [ 103.072191][ T9453] macsec1: entered promiscuous mode [ 103.109382][ T9456] net_ratelimit: 9 callbacks suppressed [ 103.109400][ T9456] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 103.179070][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.302092][ T9486] mkiss: ax0: crc mode is auto. [ 103.340907][ T9492] lo speed is unknown, defaulting to 1000 [ 103.344060][ T9492] lo speed is unknown, defaulting to 1000 [ 103.346297][ T9492] lo speed is unknown, defaulting to 1000 [ 103.402999][ T9492] infiniband sz1: set down [ 103.406568][ T834] lo speed is unknown, defaulting to 1000 [ 103.407101][ T9492] infiniband sz1: added lo [ 103.411854][ T9492] sz1: rxe_create_qp: returned err = -2 [ 103.413983][ T9492] infiniband sz1: Couldn't create ib_mad QP1 [ 103.416464][ T9492] infiniband sz1: Couldn't open port 1 [ 103.430377][ T9492] RDS/IB: sz1: added [ 103.432798][ T9492] smc: adding ib device sz1 with port count 1 [ 103.435550][ T9492] smc: ib device sz1 port 1 has pnetid [ 103.441467][ T834] lo speed is unknown, defaulting to 1000 [ 103.445130][ T9492] lo speed is unknown, defaulting to 1000 [ 103.486773][ T9496] netlink: 'syz.5.1032': attribute type 18 has an invalid length. [ 103.507113][ T9492] lo speed is unknown, defaulting to 1000 [ 103.551584][ T9492] lo speed is unknown, defaulting to 1000 [ 103.563200][ T9501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=9501 comm=syz.5.1034 [ 103.598217][ T9492] lo speed is unknown, defaulting to 1000 [ 103.647064][ T833] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 103.792325][ T9508] program syz.0.1036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.795698][ T9508] ata1.00: invalid command format 0 [ 103.807023][ T833] usb 9-1: Using ep0 maxpacket: 16 [ 103.811277][ T833] usb 9-1: config 1 interface 0 altsetting 243 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.815073][ T833] usb 9-1: config 1 interface 0 has no altsetting 0 [ 103.818995][ T833] usb 9-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.40 [ 103.821483][ T833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.823733][ T833] usb 9-1: Product: Ц [ 103.824934][ T833] usb 9-1: Manufacturer: 罤隁ᯖ苖ꈙ肎縛涪뿕섥뫧㥒렪ꨠڄ㆗ݬ伂ꇇ᫇㩔⚙꟬퓋 [ 103.830419][ T833] usb 9-1: SerialNumber: ⷶ䉛ጊ蒂菈짊㵰⪅盪韹ʑ츻搴䣮炝㙀偀Ủ뒃蟶ᕩ烵鿮昢ⷠ⫭䔄ಎ偊鴬㳒ꑎ㨿⾿堅䀳ຳ右ᣯ䁄룅꺊퀟䅌鴙蹽蹝Ӏ䲅圐㸇ፚ⧜츆掖⣲㲜Ⴙ쨕 [ 103.912149][ T9515] __nla_validate_parse: 8 callbacks suppressed [ 103.912168][ T9515] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1038'. [ 104.051622][ T9522] ALSA: mixer_oss: invalid OSS volume '' [ 104.061549][ T833] usbhid 9-1:1.0: can't add hid device: -71 [ 104.063257][ T833] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 104.066638][ T833] usb 9-1: USB disconnect, device number 10 [ 104.141750][ T9534] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=9534 comm=syz.1.1045 [ 104.220023][ T9543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1048'. [ 104.223321][ T9543] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1048'. [ 104.227457][ T9543] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1048'. [ 104.261187][ T9549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1049'. [ 104.273064][ T9550] bond2: entered promiscuous mode [ 104.274869][ T9550] bond2: entered allmulticast mode [ 104.276860][ T9550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.281166][ T9553] ucma_write: process 524 (syz.4.1050) changed security contexts after opening file descriptor, this is not allowed. [ 104.349122][ T9562] netlink: 'syz.4.1052': attribute type 5 has an invalid length. [ 104.520124][ T9583] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1059'. [ 104.799281][ T39] kauditd_printk_skb: 1145 callbacks suppressed [ 104.799293][ T39] audit: type=1400 audit(1733937386.245:1794): avc: denied { create } for pid=9608 comm="syz.4.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.806627][ T9609] "syz.4.1067" (9609) uses obsolete ecb(arc4) skcipher [ 104.992533][ T9622] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.1072' resets device [ 105.003346][ T9624] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1073'. [ 105.287047][ T5981] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 105.322533][ T39] audit: type=1400 audit(1733937386.765:1795): avc: denied { setopt } for pid=9634 comm="syz.0.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.393349][ T9637] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.393385][ T39] audit: type=1400 audit(1733937386.835:1796): avc: denied { getattr } for pid=9636 comm="syz.0.1079" name="/" dev="9p" ino=38535292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.406751][ T39] audit: type=1400 audit(1733937386.845:1797): avc: denied { read write } for pid=9636 comm="syz.0.1079" name="file1" dev="overlay" ino=38535302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.421603][ T39] audit: type=1400 audit(1733937386.845:1798): avc: denied { open } for pid=9636 comm="syz.0.1079" path="/269/bus/file1" dev="overlay" ino=38535302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.431041][ T39] audit: type=1400 audit(1733937386.855:1799): avc: denied { setattr } for pid=9636 comm="syz.0.1079" name="#1453" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.437057][ T5981] usb 6-1: Using ep0 maxpacket: 8 [ 105.439100][ T39] audit: type=1400 audit(1733937386.855:1800): avc: denied { link } for pid=9636 comm="syz.0.1079" name="#1453" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.441801][ T5981] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 105.451070][ T5981] usb 6-1: can't read configurations, error -22 [ 105.499558][ T39] audit: type=1400 audit(1733937386.945:1801): avc: denied { unlink } for pid=5937 comm="syz-executor" name="file1" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.528982][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1081'. [ 105.532280][ T9640] bridge_slAve_0: renamed from lo (while UP) [ 105.577045][ T5981] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 105.591152][ T9643] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1080'. [ 105.670626][ T9651] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1085'. [ 105.727361][ T5981] usb 6-1: Using ep0 maxpacket: 8 [ 105.733302][ T5981] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 105.735870][ T5981] usb 6-1: can't read configurations, error -22 [ 105.738226][ T5981] usb usb6-port1: attempt power cycle [ 105.831099][ T9665] syzkaller1: entered promiscuous mode [ 105.832776][ T9665] syzkaller1: entered allmulticast mode [ 105.841081][ T9665] syzkaller1: left promiscuous mode [ 105.842693][ T9665] syzkaller1: left allmulticast mode [ 105.845576][ T9665] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 105.848525][ T9665] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 106.059817][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804fa24400: rx timeout, send abort [ 106.065139][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804fa24400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.077252][ T5981] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 106.102264][ T5981] usb 6-1: Using ep0 maxpacket: 8 [ 106.107779][ T5981] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 106.110431][ T5981] usb 6-1: can't read configurations, error -22 [ 106.161913][ T9687] netlink: 'syz.5.1098': attribute type 2 has an invalid length. [ 106.247050][ T5981] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 106.277814][ T5981] usb 6-1: Using ep0 maxpacket: 8 [ 106.280386][ T5981] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 106.282603][ T5981] usb 6-1: can't read configurations, error -22 [ 106.285683][ T5981] usb usb6-port1: unable to enumerate USB device [ 106.298438][ T9696] Failed to initialize the IGMP autojoin socket (err -2) [ 106.367002][ T9703] block device autoloading is deprecated and will be removed. [ 106.647177][ T834] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 106.797443][ T834] usb 5-1: Using ep0 maxpacket: 8 [ 106.804118][ T834] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.806735][ T834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.810241][ T834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.813939][ T834] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.819921][ T834] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.823254][ T834] usb 5-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 106.826342][ T834] usb 5-1: Product: syz [ 107.035358][ T834] usb 5-1: GET_CAPABILITIES returned 0 [ 107.037000][ T834] usbtmc 5-1:16.0: can't read capabilities [ 107.237499][ T834] usb 5-1: USB disconnect, device number 10 [ 107.473636][ T39] audit: type=1400 audit(1733937388.915:1802): avc: denied { listen } for pid=9732 comm="syz.5.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 107.592294][ T5941] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 107.596368][ T5941] CPU: 2 UID: 0 PID: 5941 Comm: kworker/u33:2 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 107.599315][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.602148][ T5941] Workqueue: hci1 hci_rx_work [ 107.603570][ T5941] Call Trace: [ 107.604529][ T5941] [ 107.605407][ T5941] dump_stack_lvl+0x16c/0x1f0 [ 107.606945][ T5941] sysfs_warn_dup+0x7f/0xa0 [ 107.608412][ T5941] sysfs_create_dir_ns+0x24d/0x2b0 [ 107.610135][ T5941] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 107.612077][ T5941] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 107.613725][ T5941] ? kobject_add_internal+0x12d/0x990 [ 107.615308][ T5941] ? do_raw_spin_unlock+0x172/0x230 [ 107.616770][ T5941] kobject_add_internal+0x2c8/0x990 [ 107.618204][ T5941] kobject_add+0x16f/0x240 [ 107.619434][ T5941] ? __pfx_kobject_add+0x10/0x10 [ 107.620748][ T5941] ? class_to_subsys+0x3e/0x160 [ 107.622052][ T5941] ? do_raw_spin_unlock+0x172/0x230 [ 107.623468][ T5941] ? kobject_put+0xab/0x5a0 [ 107.624676][ T5941] device_add+0x289/0x1a70 [ 107.625862][ T5941] ? __pfx_dev_set_name+0x10/0x10 [ 107.627215][ T5941] ? __pfx_device_add+0x10/0x10 [ 107.628534][ T5941] ? mgmt_send_event_skb+0x2f2/0x460 [ 107.629937][ T5941] hci_conn_add_sysfs+0x17e/0x230 [ 107.631273][ T5941] le_conn_complete_evt+0x1077/0x1d60 [ 107.632684][ T5941] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 107.634223][ T5941] ? __mutex_lock+0x1cc/0xa60 [ 107.635489][ T5941] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 107.637039][ T5941] ? skb_pull_data+0x166/0x210 [ 107.638281][ T5941] hci_le_meta_evt+0x2e2/0x5d0 [ 107.639890][ T5941] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 107.641788][ T5941] hci_event_packet+0x666/0x1180 [ 107.643339][ T5941] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 107.644943][ T5941] ? __pfx_hci_event_packet+0x10/0x10 [ 107.646334][ T5941] ? mark_held_locks+0x9f/0xe0 [ 107.647615][ T5941] ? kcov_remote_start+0x3cf/0x6e0 [ 107.648975][ T5941] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.650345][ T5941] hci_rx_work+0x2c5/0x16b0 [ 107.651553][ T5941] ? process_one_work+0x921/0x1ba0 [ 107.652889][ T5941] process_one_work+0x9c5/0x1ba0 [ 107.654256][ T5941] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 107.655743][ T5941] ? __pfx_process_one_work+0x10/0x10 [ 107.657203][ T5941] ? rcu_is_watching+0x12/0xc0 [ 107.658549][ T5941] ? assign_work+0x1a0/0x250 [ 107.659821][ T5941] worker_thread+0x6c8/0xf00 [ 107.661097][ T5941] ? __pfx_worker_thread+0x10/0x10 [ 107.662606][ T5941] kthread+0x2c1/0x3a0 [ 107.663804][ T5941] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.665259][ T5941] ? __pfx_kthread+0x10/0x10 [ 107.666534][ T5941] ret_from_fork+0x45/0x80 [ 107.667711][ T5941] ? __pfx_kthread+0x10/0x10 [ 107.668952][ T5941] ret_from_fork_asm+0x1a/0x30 [ 107.670219][ T5941] [ 107.671513][ T5941] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 107.675433][ T5941] Bluetooth: hci1: failed to register connection device [ 107.963080][ T9750] loop2: detected capacity change from 0 to 7 [ 107.965705][ T9750] Dev loop2: unable to read RDB block 7 [ 107.967929][ T9750] loop2: AHDI p1 p2 [ 107.969381][ T9750] loop2: partition table partially beyond EOD, truncated [ 107.972330][ T9750] loop2: p1 size 150995200 extends beyond EOD, truncated [ 107.983167][ T8654] udevd[8654]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 108.082186][ T9758] netlink: 'syz.1.1123': attribute type 6 has an invalid length. [ 108.105981][ T9759] input: syz0 as /devices/virtual/input/input24 [ 108.202875][ T39] audit: type=1400 audit(1733937389.645:1803): avc: denied { setopt } for pid=9767 comm="syz.0.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 108.332148][ T9801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.336471][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.367818][ T9807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9807 comm=syz.4.1136 [ 108.489448][ T9810] : renamed from hsr0 (while UP) [ 108.577557][ T9818] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2583264762 (82664472384 ns) > initial count (69758225504 ns). Using initial count to start timer. [ 108.633598][ T9824] pim6reg1: entered promiscuous mode [ 108.635162][ T9824] pim6reg1: entered allmulticast mode [ 108.946734][ T9838] xfrm1: entered allmulticast mode [ 108.950562][ T1340] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 109.117091][ T833] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 109.123953][ T1340] usb 6-1: not running at top speed; connect to a high speed hub [ 109.148255][ T1340] usb 6-1: config 9 has an invalid interface number: 209 but max is 0 [ 109.151489][ T1340] usb 6-1: config 9 has an invalid descriptor of length 157, skipping remainder of the config [ 109.155938][ T1340] usb 6-1: config 9 has no interface number 0 [ 109.158176][ T1340] usb 6-1: config 9 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 2319, setting to 64 [ 109.161967][ T1340] usb 6-1: config 9 interface 209 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 109.166279][ T1340] usb 6-1: config 9 interface 209 has no altsetting 0 [ 109.175276][ T1340] usb 6-1: New USB device found, idVendor=2019, idProduct=1201, bcdDevice=4e.38 [ 109.178509][ T1340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.180841][ T1340] usb 6-1: Product: syz [ 109.181988][ T1340] usb 6-1: Manufacturer: ࠡ [ 109.183283][ T1340] usb 6-1: SerialNumber: syz [ 109.238025][ T9865] __nla_validate_parse: 10 callbacks suppressed [ 109.238045][ T9865] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1157'. [ 109.282811][ T833] usb 10-1: Using ep0 maxpacket: 16 [ 109.288766][ T833] usb 10-1: config 1 interface 0 altsetting 51 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.291660][ T833] usb 10-1: config 1 interface 0 altsetting 51 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.294980][ T833] usb 10-1: config 1 interface 0 has no altsetting 0 [ 109.298240][ T9865] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1157'. [ 109.298994][ T833] usb 10-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.40 [ 109.303081][ T833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.305224][ T833] usb 10-1: Product: 듡噬횭ꖵಉ測汭듒ⴋ棂壼魮Ⳝ문⸏ఎ劰颈ኞ帑鉱댾㵹鴦瞤⫥ࣞ뗎༞⼦䀾㈜址ዋ漳᷎졌ਧ⹤䰋繿着븓壼⇗ᣱ㘈Ⅱ䲬殈䏭ᅄ縄ᨐ椆ﾎ퀡┺콑얏茈노꺩꿇鄬ꦻ쩯叜爉닁㕩炱溛ᡢ쒄眽㪪늶牫蛊ꪜ쾍ꜞ⛱펑 [ 109.312846][ T833] usb 10-1: Manufacturer: ᐇ [ 109.314067][ T833] usb 10-1: SerialNumber:  [ 109.320919][ T9872] befs: Unknown parameter 'syzkaller' [ 109.499988][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 109.532731][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.535953][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.547031][ T1340] usb 6-1: USB disconnect, device number 16 [ 109.560607][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.563026][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.671075][ T9893] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1164'. [ 109.679063][ T9893] Mount JFS Failure: -22 [ 109.680531][ T9893] jfs_mount failed w/return code = -22 [ 109.747010][ T5291] Bluetooth: hci1: command 0x0405 tx timeout [ 110.013722][ T9909] netlink: 'syz.4.1168': attribute type 4 has an invalid length. [ 110.023241][ T834] lo speed is unknown, defaulting to 1000 [ 110.027763][ T9909] netlink: 'syz.4.1168': attribute type 4 has an invalid length. [ 110.031663][ T25] lo speed is unknown, defaulting to 1000 [ 110.052307][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 110.070407][ T9913] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 110.095456][ T9913] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1170'. [ 110.099802][ T9915] loop2: detected capacity change from 0 to 7 [ 110.103484][ T833] usbhid 10-1:1.0: can't add hid device: -71 [ 110.105187][ T833] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 110.110244][ T9915] Dev loop2: unable to read RDB block 7 [ 110.111505][ T833] usb 10-1: USB disconnect, device number 4 [ 110.112792][ T9915] loop2: unable to read partition table [ 110.119403][ T9915] loop2: partition table beyond EOD, truncated [ 110.121068][ T9915] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 110.124742][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 110.124751][ T39] audit: type=1400 audit(1733937391.565:1811): avc: denied { getopt } for pid=9916 comm="syz.5.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.168184][ T9915] Dev loop2: unable to read RDB block 7 [ 110.171682][ T9915] loop2: unable to read partition table [ 110.174363][ T9915] loop2: partition table beyond EOD, truncated [ 110.187100][ T9915] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 110.251645][ T39] audit: type=1400 audit(1733937391.695:1812): avc: denied { create } for pid=9928 comm="syz.4.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.261527][ T39] audit: type=1400 audit(1733937391.705:1813): avc: denied { ioctl } for pid=9928 comm="syz.4.1177" path="socket:[33145]" dev="sockfs" ino=33145 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.317564][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1179'. [ 110.321517][ T9936] xfrm1: entered promiscuous mode [ 110.322764][ T9936] xfrm1: entered allmulticast mode [ 110.358457][ T39] audit: type=1400 audit(2000000000.000:1814): avc: denied { mount } for pid=9939 comm="syz.4.1180" name="/" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 110.365299][ T9940] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 110.368606][ T39] audit: type=1400 audit(2000000000.000:1815): avc: denied { read } for pid=9939 comm="syz.4.1180" name="/" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.376617][ T39] audit: type=1400 audit(2000000000.000:1816): avc: denied { open } for pid=9939 comm="syz.4.1180" path="/224/file0" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.377778][ T9940] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1180'. [ 110.389937][ T39] audit: type=1400 audit(2000000000.020:1817): avc: denied { search } for pid=9939 comm="syz.4.1180" name="/" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.407023][ T39] audit: type=1400 audit(2000000000.020:1818): avc: denied { write } for pid=9939 comm="syz.4.1180" name="/" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.428744][ T39] audit: type=1400 audit(2000000000.070:1819): avc: denied { unmount } for pid=6426 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 110.447132][ T7080] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 110.455342][ T9952] overlayfs: missing 'lowerdir' [ 110.460778][ T5291] Bluetooth: hci0: unexpected event for opcode 0x080f [ 110.546752][ T39] audit: type=1400 audit(2000000000.180:1820): avc: denied { write } for pid=9959 comm="syz.0.1187" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 110.577108][ T833] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 110.611593][ T7080] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 110.614137][ T7080] usb 6-1: config 0 has no interface number 0 [ 110.615985][ T7080] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.620915][ T7080] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 110.623464][ T7080] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.625693][ T7080] usb 6-1: Product: syz [ 110.627186][ T7080] usb 6-1: Manufacturer: syz [ 110.628500][ T7080] usb 6-1: SerialNumber: syz [ 110.632057][ T7080] usb 6-1: config 0 descriptor?? [ 110.638272][ T7080] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 110.727064][ T833] usb 10-1: Using ep0 maxpacket: 16 [ 110.730508][ T833] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.734206][ T833] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.738032][ T833] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.742593][ T833] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 110.745324][ T833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.748848][ T833] usb 10-1: config 0 descriptor?? [ 110.752228][ T833] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input25 [ 110.759970][ T5338] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 110.765420][ T5338] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 110.765788][ T9985] netlink: 173 bytes leftover after parsing attributes in process `syz.0.1189'. [ 110.771216][ T5338] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 110.780631][ T5338] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 110.800681][ T5338] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 110.808455][ T6162] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 110.814234][ T5338] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 110.823396][ T5338] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 110.826591][ T5338] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 110.855973][ T834] usb 6-1: USB disconnect, device number 17 [ 110.860422][ T834] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 110.953240][ T9931] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 110.960042][ T25] usb 10-1: USB disconnect, device number 5 [ 111.098279][T10014] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 111.531755][T10032] netlink: 'syz.5.1197': attribute type 11 has an invalid length. [ 111.770249][T10038] PKCS8: Unsupported PKCS#8 version [ 112.207082][ T25] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 112.299527][ T56] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 112.305108][T10067] ------------[ cut here ]------------ [ 112.306663][T10067] WARNING: CPU: 0 PID: 10067 at net/core/skbuff.c:1216 sk_skb_reason_drop+0x97/0x1a0 [ 112.309230][T10067] Modules linked in: [ 112.310579][T10067] CPU: 0 UID: 0 PID: 10067 Comm: syz.0.1207 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 112.313618][T10070] trusted_key: encrypted_key: insufficient parameters specified [ 112.315599][T10067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.321390][T10067] RIP: 0010:sk_skb_reason_drop+0x97/0x1a0 [ 112.323014][T10067] Code: 5d 41 5c 41 5d 41 5e e9 a7 f8 95 f8 e8 a2 f8 95 f8 31 ff 44 89 e6 e8 d8 fa 95 f8 45 85 e4 0f 85 b2 00 00 00 e8 8a f8 95 f8 90 <0f> 0b 90 e8 81 f8 95 f8 44 89 e6 bf 01 00 00 00 e8 b4 fa 95 f8 41 [ 112.329334][T10067] RSP: 0018:ffffc90004caf228 EFLAGS: 00010287 [ 112.330967][T10067] RAX: 0000000000008409 RBX: ffff88802c76e640 RCX: ffffc90007492000 [ 112.333073][T10067] RDX: 0000000000080000 RSI: ffffffff89040af6 RDI: 0000000000000007 [ 112.335277][T10067] RBP: 000000000000ffff R08: 0000000000000007 R09: 0000000000000003 [ 112.337402][T10067] R10: 000000000000ffff R11: 0000000000000002 R12: 00000000ffffffea [ 112.339535][T10067] R13: 0000000000000000 R14: ffff88802c76e724 R15: ffff88802c76e698 [ 112.341606][T10067] FS: 00007fcfa66ee6c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 112.343952][T10067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.346024][T10067] CR2: 0000000020003000 CR3: 00000000597b2000 CR4: 0000000000352ef0 [ 112.349066][T10067] DR0: 0000000000000002 DR1: 0000000000000000 DR2: 0000000000000003 [ 112.351558][T10067] DR3: 0000000000000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.353674][T10067] Call Trace: [ 112.354583][T10067] [ 112.355451][T10067] ? __warn+0xea/0x3c0 [ 112.356496][T10067] ? sk_skb_reason_drop+0x97/0x1a0 [ 112.357904][T10067] ? report_bug+0x3c0/0x580 [ 112.359149][T10067] ? handle_bug+0x54/0xa0 [ 112.360357][T10067] ? exc_invalid_op+0x17/0x50 [ 112.361680][T10067] ? asm_exc_invalid_op+0x1a/0x20 [ 112.363120][T10067] ? sk_skb_reason_drop+0x96/0x1a0 [ 112.364603][T10067] ? sk_skb_reason_drop+0x97/0x1a0 [ 112.366114][T10067] ? sk_skb_reason_drop+0x96/0x1a0 [ 112.367049][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 112.367638][T10067] ip_rcv_finish_core.constprop.0+0x11d2/0x2290 [ 112.370922][T10067] ip_list_rcv_finish.constprop.0+0x1be/0x720 [ 112.371857][ T25] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 112.372531][T10067] ? __pfx_ip_list_rcv_finish.constprop.0+0x10/0x10 [ 112.377255][ T25] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.378122][T10067] ? __pfx_ip_rcv_finish+0x10/0x10 [ 112.380915][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.382280][T10067] ip_list_rcv+0x339/0x450 [ 112.384486][ T25] usb 10-1: SerialNumber: syz [ 112.386093][T10067] ? __pfx_ip_list_rcv+0x10/0x10 [ 112.389352][T10067] ? __pfx___lock_acquire+0x10/0x10 [ 112.390825][T10067] ? __pfx_ip_list_rcv+0x10/0x10 [ 112.391127][T10045] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 112.392214][T10067] __netif_receive_skb_list_core+0x755/0x950 [ 112.394362][T10045] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 112.396023][T10067] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 112.399965][T10067] ? rcu_is_watching+0x12/0xc0 [ 112.401304][T10067] ? ktime_get_with_offset+0x273/0x3a0 [ 112.402796][T10067] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.404240][T10067] ? lock_acquire+0x2f/0xb0 [ 112.404297][ T25] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 112.405710][T10067] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 112.405751][T10067] netif_receive_skb_list_internal+0x753/0xdb0 [ 112.412285][T10067] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 112.414167][T10067] ? __pfx_eth_type_trans+0x10/0x10 [ 112.415903][T10067] ? __build_skb_around+0x278/0x3b0 [ 112.417560][T10067] ? kmem_cache_alloc_bulk_noprof+0x405/0xb10 [ 112.419533][T10067] netif_receive_skb_list+0x4d/0x4b0 [ 112.420987][T10067] xdp_test_run_batch.constprop.0+0x1799/0x1e40 [ 112.422675][T10067] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 112.424495][T10067] ? __pfx_lock_release+0x10/0x10 [ 112.426243][T10067] ? trace_lock_acquire+0x14e/0x1f0 [ 112.428191][T10067] ? read_tsc+0x9/0x20 [ 112.429284][T10067] ? ktime_get+0x1ac/0x300 [ 112.430475][T10067] bpf_test_run_xdp_live+0x365/0x500 [ 112.431858][T10067] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 112.433524][T10067] ? find_held_lock+0x2d/0x110 [ 112.434959][T10067] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 112.436868][T10067] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 112.438700][T10067] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 112.440343][T10067] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 112.441743][T10067] ? 0xffffffffa0004340 [ 112.442854][T10067] ? 0xffffffffa0004340 [ 112.444020][T10067] ? 0xffffffffa0004340 [ 112.445233][T10067] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 112.447542][T10067] bpf_prog_test_run_xdp+0x827/0x1580 [ 112.449176][T10067] ? lock_acquire+0x2f/0xb0 [ 112.450471][T10067] ? __fget_files+0x40/0x3a0 [ 112.451666][T10067] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 112.453310][T10067] ? __fget_files+0x206/0x3a0 [ 112.454736][T10067] ? fput+0x67/0x440 [ 112.456020][T10067] ? __bpf_prog_get+0xa0/0x290 [ 112.457632][T10067] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 112.459133][T10067] __sys_bpf+0xfc6/0x49c0 [ 112.460298][T10067] ? __pfx___sys_bpf+0x10/0x10 [ 112.461685][T10067] ? vfs_write+0x80f/0x1150 [ 112.462901][T10067] ? vfs_write+0x306/0x1150 [ 112.464152][T10067] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 112.465942][T10067] ? do_futex+0x123/0x350 [ 112.467079][ T56] usb 9-1: Using ep0 maxpacket: 8 [ 112.467547][T10067] ? __pfx_do_futex+0x10/0x10 [ 112.470433][T10067] ? xfd_validate_state+0x5d/0x180 [ 112.471044][ T56] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.471899][T10067] ? rcu_is_watching+0x12/0xc0 [ 112.474822][ T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.476336][T10067] __x64_sys_bpf+0x78/0xc0 [ 112.479773][ T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.480521][T10067] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.480539][T10067] do_syscall_64+0xcd/0x250 [ 112.480553][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.483324][ T56] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.484556][T10067] RIP: 0033:0x7fcfa5985d19 [ 112.484580][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.484592][T10067] RSP: 002b:00007fcfa66ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.485801][ T56] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.487818][T10067] RAX: ffffffffffffffda RBX: 00007fcfa5b75fa0 RCX: 00007fcfa5985d19 [ 112.487832][T10067] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 112.487840][T10067] RBP: 00007fcfa5a01a20 R08: 0000000000000000 R09: 0000000000000000 [ 112.491247][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.492383][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.492397][T10067] R13: 0000000000000000 R14: 00007fcfa5b75fa0 R15: 00007ffcd0198848 [ 112.492412][T10067] [ 112.492419][T10067] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.492426][T10067] CPU: 0 UID: 0 PID: 10067 Comm: syz.0.1207 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 112.492440][T10067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.492447][T10067] Call Trace: [ 112.492451][T10067] [ 112.492455][T10067] dump_stack_lvl+0x3d/0x1f0 [ 112.492472][T10067] panic+0x71d/0x800 [ 112.492488][T10067] ? __pfx_panic+0x10/0x10 [ 112.492504][T10067] ? show_trace_log_lvl+0x29d/0x3d0 [ 112.492522][T10067] ? sk_skb_reason_drop+0x97/0x1a0 [ 112.492534][T10067] check_panic_on_warn+0xab/0xb0 [ 112.492550][T10067] __warn+0xf6/0x3c0 [ 112.492559][T10067] ? sk_skb_reason_drop+0x97/0x1a0 [ 112.492570][T10067] report_bug+0x3c0/0x580 [ 112.492583][T10067] handle_bug+0x54/0xa0 [ 112.492596][T10067] exc_invalid_op+0x17/0x50 [ 112.492610][T10067] asm_exc_invalid_op+0x1a/0x20 [ 112.492623][T10067] RIP: 0010:sk_skb_reason_drop+0x97/0x1a0 [ 112.492635][T10067] Code: 5d 41 5c 41 5d 41 5e e9 a7 f8 95 f8 e8 a2 f8 95 f8 31 ff 44 89 e6 e8 d8 fa 95 f8 45 85 e4 0f 85 b2 00 00 00 e8 8a f8 95 f8 90 <0f> 0b 90 e8 81 f8 95 f8 44 89 e6 bf 01 00 00 00 e8 b4 fa 95 f8 41 [ 112.492645][T10067] RSP: 0018:ffffc90004caf228 EFLAGS: 00010287 [ 112.492655][T10067] RAX: 0000000000008409 RBX: ffff88802c76e640 RCX: ffffc90007492000 [ 112.492662][T10067] RDX: 0000000000080000 RSI: ffffffff89040af6 RDI: 0000000000000007 [ 112.492668][T10067] RBP: 000000000000ffff R08: 0000000000000007 R09: 0000000000000003 [ 112.492675][T10067] R10: 000000000000ffff R11: 0000000000000002 R12: 00000000ffffffea [ 112.492682][T10067] R13: 0000000000000000 R14: ffff88802c76e724 R15: ffff88802c76e698 [ 112.492693][T10067] ? sk_skb_reason_drop+0x96/0x1a0 [ 112.492705][T10067] ? sk_skb_reason_drop+0x96/0x1a0 [ 112.492717][T10067] ip_rcv_finish_core.constprop.0+0x11d2/0x2290 [ 112.492731][T10067] ip_list_rcv_finish.constprop.0+0x1be/0x720 [ 112.492745][T10067] ? __pfx_ip_list_rcv_finish.constprop.0+0x10/0x10 [ 112.492755][T10067] ? __pfx_ip_rcv_finish+0x10/0x10 [ 112.492769][T10067] ip_list_rcv+0x339/0x450 [ 112.492780][T10067] ? __pfx_ip_list_rcv+0x10/0x10 [ 112.492791][T10067] ? __pfx___lock_acquire+0x10/0x10 [ 112.492803][T10067] ? __pfx_ip_list_rcv+0x10/0x10 [ 112.492814][T10067] __netif_receive_skb_list_core+0x755/0x950 [ 112.492832][T10067] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 112.492846][T10067] ? rcu_is_watching+0x12/0xc0 [ 112.492861][T10067] ? ktime_get_with_offset+0x273/0x3a0 [ 112.492873][T10067] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.492885][T10067] ? lock_acquire+0x2f/0xb0 [ 112.492896][T10067] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 112.492911][T10067] netif_receive_skb_list_internal+0x753/0xdb0 [ 112.492928][T10067] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 112.492942][T10067] ? __pfx_eth_type_trans+0x10/0x10 [ 112.492957][T10067] ? __build_skb_around+0x278/0x3b0 [ 112.492969][T10067] ? kmem_cache_alloc_bulk_noprof+0x405/0xb10 [ 112.492988][T10067] netif_receive_skb_list+0x4d/0x4b0 [ 112.493002][T10067] xdp_test_run_batch.constprop.0+0x1799/0x1e40 [ 112.493021][T10067] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 112.493033][T10067] ? __pfx_lock_release+0x10/0x10 [ 112.493045][T10067] ? trace_lock_acquire+0x14e/0x1f0 [ 112.493064][T10067] ? read_tsc+0x9/0x20 [ 112.493078][T10067] ? ktime_get+0x1ac/0x300 [ 112.493090][T10067] bpf_test_run_xdp_live+0x365/0x500 [ 112.493104][T10067] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 112.493115][T10067] ? find_held_lock+0x2d/0x110 [ 112.493131][T10067] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 112.493147][T10067] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 112.493160][T10067] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 112.493178][T10067] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 112.493191][T10067] ? 0xffffffffa0004340 [ 112.493204][T10067] ? 0xffffffffa0004340 [ 112.493212][T10067] ? 0xffffffffa0004340 [ 112.493219][T10067] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 112.493236][T10067] bpf_prog_test_run_xdp+0x827/0x1580 [ 112.493252][T10067] ? lock_acquire+0x2f/0xb0 [ 112.493263][T10067] ? __fget_files+0x40/0x3a0 [ 112.493275][T10067] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 112.493288][T10067] ? __fget_files+0x206/0x3a0 [ 112.493301][T10067] ? fput+0x67/0x440 [ 112.493314][T10067] ? __bpf_prog_get+0xa0/0x290 [ 112.493327][T10067] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 112.493340][T10067] __sys_bpf+0xfc6/0x49c0 [ 112.493356][T10067] ? __pfx___sys_bpf+0x10/0x10 [ 112.493369][T10067] ? vfs_write+0x80f/0x1150 [ 112.493378][T10067] ? vfs_write+0x306/0x1150 [ 112.493388][T10067] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 112.493404][T10067] ? do_futex+0x123/0x350 [ 112.493415][T10067] ? __pfx_do_futex+0x10/0x10 [ 112.493431][T10067] ? xfd_validate_state+0x5d/0x180 [ 112.493442][T10067] ? rcu_is_watching+0x12/0xc0 [ 112.493458][T10067] __x64_sys_bpf+0x78/0xc0 [ 112.493473][T10067] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.493484][T10067] do_syscall_64+0xcd/0x250 [ 112.493498][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.493510][T10067] RIP: 0033:0x7fcfa5985d19 [ 112.493519][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.493528][T10067] RSP: 002b:00007fcfa66ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.493538][T10067] RAX: ffffffffffffffda RBX: 00007fcfa5b75fa0 RCX: 00007fcfa5985d19 [ 112.493546][T10067] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 112.493553][T10067] RBP: 00007fcfa5a01a20 R08: 0000000000000000 R09: 0000000000000000 [ 112.493559][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.493565][T10067] R13: 0000000000000000 R14: 00007fcfa5b75fa0 R15: 00007ffcd0198848 [ 112.493578][T10067] [ 112.498376][T10067] Kernel Offset: disabled VM DIAGNOSIS: 17:16:32 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851b96d5 RDI=ffffffff9ab0ac20 RBP=ffffffff9ab0abe0 RSP=ffffc90004caeb88 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=0000000000000037 R14=ffffffff851b9670 R15=0000000000000000 RIP=ffffffff851b96ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fcfa66ee6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020003000 CR3=00000000597b2000 CR4=00352ef0 DR0=0000000000000002 DR1=0000000000000000 DR2=0000000000000003 DR3=0000000000000001 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc99955380 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c4f4e0559535905 2a2a2a2a4159434e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 754f46452a415943 4e754f4645425d05 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001b1 0000000000000000 31706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3aa8295c2303300 0000555e8f5b1930 0000000000000051 0000000000000035 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555bdaec13b0 0000555bdaec1370 0000555bdae9d260 0000555bdaeb4140 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263e393a3a263b 393a3a263a393a3a 264c383a3a264f38 3a3a264e383a3a26 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=00000000000e5157 RBX=0000000000000001 RCX=ffffffff8b28e679 RDX=0000000000000000 RSI=ffffffff8b6cd860 RDI=ffffffff8bd1d280 RBP=ffffed1003ad1910 RSP=ffffc90000187dd8 R8 =0000000000000001 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801d68c880 R14=ffffffff905f15d0 R15=0000000000000000 RIP=ffffffff8b4014b0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e8a2add908 CR3=0000000022580000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000044000001 Opmask01=000000000000001f Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc99959440 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373734042034373 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d25203a7325206b 6e696c6d79732065 7461657263206f74 2064656c69614600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4800051f5600054e 4b4c49485c560540 5144405746054a51 054140494c444600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3aa8295c2303300 0000555e8f55dbfb 0000000000000081 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000063 64755f796d6d7564 0000000000000021 0000000000000035 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0312244ef0 0000555bdae97590 0000000000000421 0037003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263e393a3a263b 393a3a263a393a3a 264c383a3a264f38 3a3a264e383a3a26 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff8175c19e RDX=fffffbfff2dc9999 RSI=0000000000000008 RDI=ffffffff96e4ccc0 RBP=0000000000000002 RSP=ffffc9000c6ef6f0 R8 =0000000000000000 R9 =fffffbfff2dc9998 R10=ffffffff96e4ccc7 R11=0000000000000b92 R12=0000000000000000 R13=ffff88802a480000 R14=0000000000000000 R15=ffff88802a480b30 RIP=ffffffff8175c1a6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbd2bbd9f98 CR3=000000004abca000 CR4=00352ef0 DR0=0000000000000002 DR1=0000000000000000 DR2=0000000000000003 DR3=0000000000000001 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2ae029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2ae029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2ae029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2ae029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2ae02a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2ae02b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2af4b488 00007fbd2af4b480 00007fbd2af4b478 00007fbd2af4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2baad100 00007fbd2af4b440 00007fbd2af4b458 00007fbd2af4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2af4b498 00007fbd2af4b490 00007fbd2af4b488 00007fbd2af4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=000000000000003d RCX=ffffffff8179b36a RDX=ffff888058124880 RSI=ffffffff8179b356 RDI=0000000000000001 RBP=1ffff92000931ee3 RSP=ffffc9000498f708 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000007 R12=0000000000000001 R13=0000000000000200 R14=ffff88804deda440 R15=ffffc9000498f7f0 RIP=ffffffff8179b358 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbd2bbfb6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbd2bbb8f98 CR3=000000004abca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2ae029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2ae029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2ae029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2ae029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2ae02a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2ae02b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2af4b488 00007fbd2af4b480 00007fbd2af4b478 00007fbd2af4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2baad100 00007fbd2af4b440 00007fbd2af4b458 00007fbd2af4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd2af4b498 00007fbd2af4b490 00007fbd2af4b488 00007fbd2af4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000