last executing test programs: 1m15.139137565s ago: executing program 3 (id=121): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0x8, &(0x7f0000000000)) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)=@updsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {0xfffffffe}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @lifetime_val={0x24, 0x9, {0x1, 0x1, 0x0, 0x7}}]}, 0x15c}}, 0x0) 1m15.137866356s ago: executing program 3 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2}, 0x18) sendmmsg$unix(r1, &(0x7f000000a5c0)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f000000a540)="b4", 0x1}], 0x1}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket(0x10, 0x2, 0xfffffffc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 1m15.070462841s ago: executing program 3 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB='\t'], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) creat(&(0x7f0000000740)='./bus\x00', 0x100) 1m15.069194907s ago: executing program 3 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x144000, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r4, 0x0, 0x20000000}, 0x20) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{}, {@remote}, {@multicast1}, {@dev}, {}]}]}}}}}}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) accept4$alg(r5, 0x0, 0x0, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x80800, 0x8) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f0000000a00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x5b8, r2, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x75, 0x27}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xd2, 0xfa, "a57ff37cf304465a2b6d0a40f4a7872134fa7c404d9a8659edff1c69edc39d08da8c6dff61888e4cb1c4cfd25dd79fb09a34de3f914d45aa11e1446bf9a8a766aed616c192f1d951e8528f8f4cb4934204507b6579b249190e6ea0f902e91b311739c1e072c5994740666e5b20e73e6a5d00faef0343437e0a64644619366d211966bef5ba361a4309f8d51c5249e359ed7364d90f3e27d27fc5109462964e0557d805be35e3338212b303781cad209daee34febda53baa251a1c53778fe3ce064140933e6a05962a840da0193c1"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "2fe3e1da8c68b2ebdb16fdfba2fa"}, @NL80211_ATTR_FILS_ERP_RRK={0xdc, 0xfc, "9b6d15cd56809ee01f92c26f7cf7af9ef85ce9a559aeedbe1ea7663e913001babdede67b0350b98b9cb96f16250eadc4d3b30310bb4841360322f1e287e2be691eafc4414599a64cd3f8c004c4e26f49e9748933055da2f62f61b01a1bfcd4dfc63fd133e34614de20c31355634c24429eb8271e8d517b3871341e28044928f30172306fdefb95b6ca2150384dcf8c52247ecf28b0274b0474d89aec1de2d29a8f9b7cb3f2816e75fd250e11c2941e6cacdbf5d2f055a7fcab9cf87eb77bf658729faad7b5780602b6996752ed9a6a0396cbdb23279ad3d8"}, @NL80211_ATTR_FILS_ERP_REALM={0x1d, 0xfa, "9be3b9b8cd72c56825311caf69a31aadc2539103388721d1bd"}, @NL80211_ATTR_FILS_ERP_RRK={0xe7, 0xfc, "175331cb993602c6a883c569d19463084e039a58af3811c152b0bef41b055c22911d47405c7e79a042b99f4ed13b65f320b2ca6feaf44d8dd83a9c8f3b0cb4c667e5e2805c7df9a852d5dd3d41c6319a230e47e78cf756fe72748663d8209b42115fdca6eb070a3f062e634ee9d0ec74eebaa2d2c505fb70b2ec93d29cb6179bbd77924cdfadcea5af8575b5b181b9af5e3727106b60f30de6d62123ca83d8c799815021f7dba6c860c280e2b36ae731c7f3b3dffb95255a5930448cbfb700eb147c71fb3c28aa66325af7771116abc8d08964f96ba293f3e68f40c3970b2deb34dad0"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x400}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "04e0"}, @NL80211_ATTR_FILS_ERP_RRK={0x6e, 0xfc, "9fbe5eb7ba28ae55826b7abf31eb010a52c1b59619425ffbcd50cb005ccb280777978b60b69dd1cce5325e01940ddff55917c5e3bf0d77d57db681a7cea981b8dbbe56c8f2a4707eb5e7aee1ba08d3df3c98a742724a33485910a64d77d79b9b4ebdb1fba9b4fd594ed7"}, @NL80211_ATTR_FILS_ERP_REALM={0x4c, 0xfa, "9c93f2af58388f9060b82dc54d0ab528621c75a87890b841094b293d894d41b2dc2549824a4550ef6817e7e58897a694099c6ec755d7d4aca68cb433aa19e4ce47bb37e36ac5aa2a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_RRK={0xf7, 0xfc, "b02f796c6f3850089f141a4c10561a2a225ab5fbe16bcb2c96391af4f1c48bd629db808f889d596113d058fd7786fe4f421b9ce9ad976dac6c3ae2279202b39cc4b3c4864e5d80b1fd222d33ddca64961e8046d812776acde480c1cdb70e08b9ed37b14557ceb6f5327af411018ff78278f4f48006375f550f5cdf72b2a89c78dae99ae5dbb2c37e1225d28981a95af6ddf89f87a53509b41b6dc253ebd90d0c81350e02946bb7496cffa49cc14b5359ec0f1ba1875b47af1f836a2eb13aefb4b70931a372cd131f461b1b83cf4018638506cee185c6ccc459f679430b2b02a7c34998bbecc423ca5ed82f2caab5afe1cf2bab"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xeb80}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}], @NL80211_ATTR_IE={0x38, 0x2a, [@chsw_timing={0x68, 0x4, {0xfcf0, 0x485}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0xe, @broadcast, 0x81, @value=@broadcast, 0x43cae203, 0xb, @device_b, 0x6}}, @challenge={0x10, 0x1, 0xa2}, @ibss={0x6, 0x2}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x52, 0xfa, "c6a0bec9e678330aef7be3904991571b07745b812a97d597914e01606628ecd201ea6e3b568678d90aad1a541c4896b3f09b4adec9826867a2d4e8b1e330413cd2084b5f631a46d6210bbf6e2e78"}, @NL80211_ATTR_FILS_ERP_REALM={0x52, 0xfa, "85da02f136e050e39630fd77e92425d2417aa21b6826a5789a2f117147678934bfb24a407695d721da714cc2e589e13aee7dc240cea0a4958e21867d7635ef1d5a3e09649bbf66ad95e1275369ad"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bccad713"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, 'n'}]]}, 0x5b8}, 0x1, 0x0, 0x0, 0x44801}, 0x20000080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000001680)=ANY=[@ANYBLOB="cc080000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf258900000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x8cc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x0, 0x25dfdbfe, {{0x53}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1m14.930762745s ago: executing program 3 (id=126): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000540)=[{}], 0x1, 0x283, &(0x7f00000005c0), 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000180)=0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$CDROM_GET_CAPABILITY(r3, 0x5331) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000017f00000100186371ae9b1c033fab242f8057041c0f8a16bc46215b1ee0e21407c334c52fbafc3754dae6b93866bbd7c77d20de7a48c8587d790a8bd01ad1e4fc5099092ee81015bc0407e840b711eb6e3cd444b19e18"], 0x0) 1m14.729306655s ago: executing program 3 (id=128): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x180) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) (async) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x6, &(0x7f0000000080)={0x21, "cbc19de8d51fc1a057020ccfd7da422ceb02449515512b2bde3ea4bdb44a7af50b"}}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 1m14.719435124s ago: executing program 32 (id=128): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x180) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) (async) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x6, &(0x7f0000000080)={0x21, "cbc19de8d51fc1a057020ccfd7da422ceb02449515512b2bde3ea4bdb44a7af50b"}}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 34.769954188s ago: executing program 2 (id=506): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x1f7203) fcntl$setstatus(r1, 0x4, 0x42c00) r2 = socket$inet6(0xa, 0x5, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x442, 0x1080}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) (async) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x80) (async) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) listen(r8, 0x3) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000740)="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", 0x141}], 0x1) 34.479092266s ago: executing program 2 (id=508): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 34.477665177s ago: executing program 2 (id=509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x3) (async, rerun: 32) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @random="a6dde6557137", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x8, 0x20, 0x4, "d6d7c6c8"}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) (rerun: 32) 34.430400761s ago: executing program 2 (id=510): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="360f3366b9800000c00f326635000100000f30debb26ac0f09baf80c66efbafc0cb8f1ffef63aa2161f80466b8ebb83488bafc0cec0fc74a5e260fc75d042e3e0f1bd00f32", 0x4c}], 0x34, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20000ffffff}]}}}]}, 0x40}}, 0x0) 34.426895441s ago: executing program 1 (id=511): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) syz_clone3(&(0x7f0000000480)={0x200001000, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000200), {0x2f}, &(0x7f0000000240)=""/148, 0x94, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) write$cgroup_pid(r0, &(0x7f0000000500)=r1, 0x12) syz_emit_ethernet(0xd2, &(0x7f0000000300)={@random="9de05b7bd0c8", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@generic={0xf7, "b2541bb423a38fa5579c08137639642d509e885f133302126e3709031fdfc39fac8f9fa88574ee2f3dcac42c0b0e3672fffd3ba9967f7c0744c7973c971ecc4d0e265b4bdba1291809564bd22aa1e02a1c8c9b47a636a3b9fb5c5411f0a6a92598107785ce299ac26af7c27f7441b203366ddc5cae2a4d2207770ec0b8421d0f249932b930c87a2a7f374ac587a9aa380ed16381b0f2289193d1f1ba62f36ce85d10b1ad6de253620c62ef884fc14d620c7eda9f41da658d1554a98e3ff70ce13a32b470"}}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 34.300270834s ago: executing program 2 (id=512): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) set_mempolicy(0x6, &(0x7f0000000980)=0x3, 0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x0, @link_local}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x2, @multicast, 'macvlan1\x00'}}, 0x1e) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) unshare(0x2a000600) r8 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index}) io_uring_enter(r8, 0x1, 0x0, 0x1, 0x0, 0x1000000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="441000001000010000000000982a202e9c505bf400000010fb16e35a1e0a4f9653de6574001c", @ANYRES32=r12, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058006001f0002000000"], 0x44}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000003100)="0f20e0450f00906d4b000066f30f0966baa00066ed0f01d1440f07c4423af7a60648000066ba4200b86b000000efc4639168aa000000007cb9ca0a0000b8a6154811ba29988a2f0f30", 0x49}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) 34.299641336s ago: executing program 1 (id=513): ioprio_get$pid(0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a80)) umount2(0x0, 0x0) userfaultfd(0x801) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuseblk(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x6b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x9, &(0x7f0000000100)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socket(0xb, 0x3, 0x9) socket$packet(0x11, 0x2, 0x300) select(0x40, &(0x7f00000000c0)={0x9, 0xca3, 0xfffffffffffffffb, 0x8d, 0x8000, 0x200, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) ioctl$FIBMAP(r7, 0x1, &(0x7f00000000c0)=0x5) 34.110047949s ago: executing program 2 (id=514): r0 = socket(0x6, 0x5, 0x5) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x418280, 0x1, 0x4}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x719, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x29, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x91}, {}, {}, [@call={0x85, 0x0, 0x0, 0x14}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @ldst={0x3, 0x1, 0x2, 0x6, 0x7, 0xfffffffffffffffe, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x1, 0x3, 0x6, 0x18, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0xbe0, 0xa1, &(0x7f0000000200)=""/161, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[r2, r3, r4, r5, r6, r7], &(0x7f00000006c0)=[{0x2, 0x1, 0x3, 0x5}, {0x4, 0x2, 0xe, 0x9}, {0x0, 0x1, 0x10, 0x8}, {0x0, 0x5, 0x7, 0xa}], 0x10, 0xa, @void, @value}, 0x94) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @multicast2, @private}, &(0x7f0000000a00)=0xc) r9 = syz_io_uring_complete(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x12, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xce6a, 0x0, 0x0, 0x0, 0xcb3a}, [@jmp={0x5, 0x1, 0x4, 0x1, 0x2, 0x30, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x1, 0x0, 0x4, 0xb, 0x20, 0xffffffffffffffff}]}, &(0x7f0000000880)='GPL\x00', 0xc2, 0xd6, &(0x7f00000008c0)=""/214, 0x40f00, 0x53, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x2, 0xa, 0xf}, 0x10, 0x26d6f, r6, 0x1, &(0x7f0000000ac0)=[r7, r3, r1, r3, r9, r5], &(0x7f0000000b00)=[{0x5, 0x2, 0xb, 0x7}], 0x10, 0xfffffff7, @void, @value}, 0x94) r10 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r13 = memfd_create(&(0x7f0000000c40)='\'*}$\\h$:\x00', 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000c80)={0x0, 0x7, 0x0, [0x3, 0x4, 0x400000000000000, 0x3ce, 0xd], [0x0, 0x6, 0x7, 0x0, 0x2, 0x87c3, 0xfffffffffffffff8, 0x200, 0x3ff, 0x5de59668, 0x1, 0x3, 0x8, 0x0, 0xb7e, 0x2, 0xea, 0x7ff, 0x1, 0xa49, 0x3, 0x400, 0x8000, 0x9, 0x2, 0x8, 0x7, 0x7, 0x2, 0x9, 0x0, 0x3, 0x4, 0x8, 0x1, 0x8, 0x6, 0x7, 0xffffffffffff238c, 0xffffffffffffffff, 0x43, 0x2, 0x0, 0x4, 0x7b0, 0x0, 0xfffffffffffffffb, 0x1000, 0x67d0, 0x9, 0x401, 0x2, 0x2, 0x9, 0x34, 0x8, 0xfffffffffffffffc, 0x8000, 0x8, 0xd, 0x8, 0xed2, 0x1f, 0x4, 0x40, 0x9, 0x0, 0x4, 0x127f, 0x3, 0xfffffffffffffffb, 0xffff, 0x2, 0xfffffffffffffffa, 0x1ff, 0x1, 0x5fd, 0x4, 0x8001, 0x3, 0x40000, 0x8, 0x0, 0x7fffffff, 0x9, 0x6, 0x4, 0x40, 0x6, 0xfd, 0x7, 0x8, 0x3, 0x3, 0x0, 0x5, 0x77f9c5e9, 0x6, 0x0, 0x6, 0x1c2583f1, 0x8, 0xc, 0x7fffffffffffffff, 0xc4, 0x8, 0x6, 0x3, 0x8, 0x6, 0x55, 0x4, 0x2, 0x6, 0x3d, 0x0, 0x9636, 0xffff, 0xffffffffffffffff, 0x4]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r11, 0x50009417, &(0x7f00000010c0)={{r13}, 0x0, 0x10, @unused=[0x7, 0x9, 0x7fff, 0x3], @devid=r14}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x18, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000021c0)={0x7}, 0x8) memfd_create(&(0x7f0000002200)='#/$^$/\x00', 0x4) r15 = socket$netlink(0x10, 0x3, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000002240)={0x0, r4, 0xc1c, 0x3, 0x4, 0x814}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000002280), 0xc0101, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000022c0)={r9, 0x0, 0x25, 0x1, @val=@netfilter={0x1, 0x0, 0x4}}, 0x20) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), r1) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000002380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, r16, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r17}, @val={0xc, 0x99, {0xcfb7, 0x45}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x60000000}, 0x20044800) r18 = openat$full(0xffffffffffffff9c, &(0x7f0000002480), 0x40000, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r18, 0xc0109428, &(0x7f00000024c0)={0x3, 0x6ff}) sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0xe96447e63e440dba}, 0xc, &(0x7f0000002600)={&(0x7f0000002540)={0xb8, 0x2, 0x6, 0xc5bfefb020729d96, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x55}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x748e0000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4010) 33.723055123s ago: executing program 1 (id=516): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x0, 0x0, &(0x7f0000000140)}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) (async) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r1}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x2, 0x26, &(0x7f0000000680)="892f6f9771bb2d20524a37f801290e399d8fd083748b04440a36866f43845b3f17898c95eaec"}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0xffca, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000)}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1001, 0x7ffffffd}) (async) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f0000000000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000d40)={0x48, 0x8, r5, 0x0, 0x0, 0x29, &(0x7f0000000140)="4c4c4c4c8d5a4c4c4c4c4c2c4c4c4c4c4c4c4c3882e400"/41}) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6}) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) (async) close(r5) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f00000000c0)={0x8}) (async) close(r0) 33.655366068s ago: executing program 1 (id=517): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000002940)=ANY=[@ANYBLOB="b445f1a7c77fe0bf3e6468dd6cf5ce218dda5d86e92ceebdcf06dbd0dd533adc0cead7100de71807e58a7b2b9cbccdd05f99424d8f124b7e48f300161df43c0d9f4e175c05"], 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r3, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0xfe43, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x40040045) syz_usb_connect(0x4, 0x63d, &(0x7f0000002280)={{0x12, 0x1, 0x250, 0xb1, 0x65, 0xc5, 0x8, 0x12d1, 0x1420, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62b, 0x2, 0x3, 0x9, 0x80, 0x6, [{{0x9, 0x4, 0x7d, 0x5, 0x5, 0xda, 0x89, 0x92, 0xd, [], [{{0x9, 0x5, 0x7, 0x3, 0x10, 0x6, 0x8, 0xff, [@generic={0x7a, 0x2, "84e3688a979a2b596603ffb5beecdcaf658ff871e5a4e6a44497f2e9d156e72859ddbf86eb2965120556da3794e6b161e6ec40cee1fdf17ccfea11bbccaeef34476e5023247030ce309a90ee882242de0583cc761225ec06659cf6a733717807806356a89298bc6bcbedcd5713e1d633af37812b94001ca8"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x0, 0x1, 0x9}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x8, 0x6, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x9, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x2}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x5, 0x3, 0x40, [@generic={0x57, 0xe, "a17a58bcd200b079fdbceb3962d475434250a7581d85b07c9bdd43dcb593db121a59071dfaecd69f7a6f59c7868719491e31e2f8f4528b4ada1885c1291ebc81d6a04563a6abb925913e3842fd21ca2684c640397d"}]}}]}}, {{0x9, 0x4, 0xac, 0xc, 0xf, 0xb8, 0x9b, 0x44, 0xa2, [], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0x2}}, {{0x9, 0x5, 0xa85c904cb27f6cd2, 0x0, 0x20, 0x4, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x9, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0x80, 0x1, 0x200, 0x5, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x18}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x1, 0x5, 0x2, [@generic={0xf6, 0x19, "78adcc11156c1636c83c877c380e5fd0418ad195f4d1a3a3900cb48773627171685bfb2067ed1c1413c7c363954724a92f9d8e1bd5d26d5688ce263a842d162d76acc400b5c126892fd13de779afafb1e815f7ad8e24fd6ec47812c37e72199b13f15121a93d2e41a5510e1700773c5e5d620fd1fc4abdfc94888a65a73d1b3e940c73afab9d51c273285e7334beb900fc9df8b64ed78d3db58f700f11916711876171e1fb7a1c25cdcdac8b6f4cf3b1f9061c9a9a284da1d0bcde91ebfe9635f970aa3a86ce689b8330423ee3e6d37a4f414777c0f97a5623a0d49a05746430436cde398f1ef1c3c01e5de86e668961287faf95"}]}}, {{0x9, 0x5, 0xf, 0x12, 0x418, 0x5, 0x3b, 0x10}}, {{0x9, 0x5, 0x80, 0x4, 0x0, 0x6, 0x12, 0x2, [@generic={0xf8, 0x22, "a1b2c7aa128907dc6a54019c492b4404739b85516285507514ac17b8e2aaf5bc73c5a4e5ed09d7e2d25ceac37cf1537aa623f584eea14814f96b8723184ecb9f254e390a22dc8fee90878b0d71d0b73bbd4df1382440f34eaa96b0754179fb784bbe6c23da29b11dc04f84222a0175d79a62e870a7def626c98c3b9c47dbf96a4b8c1edc320922a042dbf4034f30907fdd620d1d5dfc864892e31bf9db9e842be34c8e20f9d358390dc221252bd3fad6be862008f2a196b71edc1669ecf0ce99110e8382147cc1fc408cd040c1f8791d00c0339897b1a72a401a439b7fc7e9d39386e2630d4e4126a52ee082c558f89e3ec019340fde"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xd, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf7, 0x800}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xe, 0x7, 0x8, [@generic={0xc4, 0x22, "b653c4e5ce2391501519b65d4a584966eb6f350730d2ce184c195a298805f86e92e7d15d75fbd2ef4b02f5d6314101ed14f9c04a8079db40e4c520c327ad8337868a212a4fe1b4c0f1044e1c62c3644f39de5faa15134b5ed5cf99aa69ebb01593f5d4f091dacfd2563390efd1b64346ca708026258c3cbf05bfacd3477edccc2f4707f32d4f038f64dc100083ffdc60f17b0f75df0e72a0a4963ee36f19cc5d38c4c94f4246de601768efffdfadc75e27a0e998e4a40a5e155479bdf84e7b8aa912"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x90}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x6, 0xe3, 0x0, [@generic={0xc, 0xe, "8f5dbd0270c0988c8148"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x6, 0x3b, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x2}, @generic={0x9a, 0x21, "051bb3054b405cf4ae41e927594d2339fc4fef456b58e05f31147fb9c3fe986d7166560483c0901982f345b0aac7e4c2229a80ec23398d1bd3d98486e548a8db397a5b283b2bbd66aec7e88d992c946c47a854ea9825c195d894361b5596d17ca09640ec8a7e9bad68f5747c926986c2af0bd3393461a5c7af553605c6f5743d32941cee60c83178a7aabafcb6301e454b13474e2aea330b"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0xff, 0x4, 0x4}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x0, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3e, 0xfff}, @generic={0xf4, 0xe, "ad0f4fafcce01cd3f5e3a65d8daaec31429217b187fcf234a2d669fd61a2e05b97ca6c0483a232786fb27a78731ab10fe14aba7442239663b99823a9ae81bdc42bd31c6af9053309d8a57eb7769df26cd61fb3285fd216204ef6666fce68753961e8e8ff05e48a9317d5a020c1bc4a37b8c6a8264595b4f52897640bb18a1236e583c8620ac73553ad405cb8c9088e6beba12461847576b45ea6b08d58e23df33142da862ac72335640e0efb069df51f9ccfffcb4e2473364a38c7c6e08ba77e86f4cb63627baef868e5b53f498f250c24859e57e5d76ef7b12f7eb58ae2f6c977f3b7e1ddee503f04cf6ae2891c1a12a475"}]}}, {{0x9, 0x5, 0xe, 0x0, 0xf2be4feb554d0ea5, 0x1, 0xff}}]}}]}}]}}, &(0x7f00000028c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x70, 0x0, 0x8, 0x20, 0x4}, 0x75, &(0x7f0000000100)={0x5, 0xf, 0x75, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0xd4, 0x23, 0xbb, 0x4, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "e016baa513e2e5fe0ce5fd74251fdb64"}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x3, 0xf0f, 0x5, [0xc0f0, 0x0, 0xff00c0]}, @generic={0x32, 0x10, 0x4, "f02a8ad26b77ef54635e41852a66073a0e74bea7a4bce71ffee4294024308988a94cf634eeaf2e9d63683d8fa91cb6"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x8, 0x4}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100c}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xb, "1f4b"}]}}, 0x0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008a356c1a6fbf9deabfa2a496e32f7a343a8ac434fc9e2412302703c64ef7acbd0d5b0430f44c23bd00373d5af840290e7da7033452fbc3a30c4ffdfab46b7248351daaa024c421d29086d61e7ff8a26cd1c1571dee422a66625ad51b3d942d0830e3fd8ad301ec60b2b5ed04fd33a155fb74d16beae58dab"], 0x48) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) r11 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r10, 0x4008af21, &(0x7f0000000300)={0x0, r11}) close_range(r9, 0xffffffffffffffff, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) r13 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r13, 0xc1086201, &(0x7f0000000980)={'binder0\x00'}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r12, 0xf50f, 0x0) read$FUSE(r12, &(0x7f0000000240)={0x2020}, 0x2020) 30.56036364s ago: executing program 1 (id=538): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) (async) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0xa02, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x8010) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 30.500252629s ago: executing program 1 (id=539): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_eee={0x45, 0x80000001, 0x9, 0x7, 0x4, 0x1, 0x7, 0x400, [0xbdf8e1, 0x4]}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x21) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000006c0), 0x12) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) write$cgroup_freezer_state(r2, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 19.133404495s ago: executing program 33 (id=514): r0 = socket(0x6, 0x5, 0x5) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x418280, 0x1, 0x4}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x719, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x29, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x91}, {}, {}, [@call={0x85, 0x0, 0x0, 0x14}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @ldst={0x3, 0x1, 0x2, 0x6, 0x7, 0xfffffffffffffffe, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x1, 0x3, 0x6, 0x18, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0xbe0, 0xa1, &(0x7f0000000200)=""/161, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[r2, r3, r4, r5, r6, r7], &(0x7f00000006c0)=[{0x2, 0x1, 0x3, 0x5}, {0x4, 0x2, 0xe, 0x9}, {0x0, 0x1, 0x10, 0x8}, {0x0, 0x5, 0x7, 0xa}], 0x10, 0xa, @void, @value}, 0x94) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @multicast2, @private}, &(0x7f0000000a00)=0xc) r9 = syz_io_uring_complete(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x12, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xce6a, 0x0, 0x0, 0x0, 0xcb3a}, [@jmp={0x5, 0x1, 0x4, 0x1, 0x2, 0x30, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x1, 0x0, 0x4, 0xb, 0x20, 0xffffffffffffffff}]}, &(0x7f0000000880)='GPL\x00', 0xc2, 0xd6, &(0x7f00000008c0)=""/214, 0x40f00, 0x53, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x2, 0xa, 0xf}, 0x10, 0x26d6f, r6, 0x1, &(0x7f0000000ac0)=[r7, r3, r1, r3, r9, r5], &(0x7f0000000b00)=[{0x5, 0x2, 0xb, 0x7}], 0x10, 0xfffffff7, @void, @value}, 0x94) r10 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r13 = memfd_create(&(0x7f0000000c40)='\'*}$\\h$:\x00', 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000c80)={0x0, 0x7, 0x0, [0x3, 0x4, 0x400000000000000, 0x3ce, 0xd], [0x0, 0x6, 0x7, 0x0, 0x2, 0x87c3, 0xfffffffffffffff8, 0x200, 0x3ff, 0x5de59668, 0x1, 0x3, 0x8, 0x0, 0xb7e, 0x2, 0xea, 0x7ff, 0x1, 0xa49, 0x3, 0x400, 0x8000, 0x9, 0x2, 0x8, 0x7, 0x7, 0x2, 0x9, 0x0, 0x3, 0x4, 0x8, 0x1, 0x8, 0x6, 0x7, 0xffffffffffff238c, 0xffffffffffffffff, 0x43, 0x2, 0x0, 0x4, 0x7b0, 0x0, 0xfffffffffffffffb, 0x1000, 0x67d0, 0x9, 0x401, 0x2, 0x2, 0x9, 0x34, 0x8, 0xfffffffffffffffc, 0x8000, 0x8, 0xd, 0x8, 0xed2, 0x1f, 0x4, 0x40, 0x9, 0x0, 0x4, 0x127f, 0x3, 0xfffffffffffffffb, 0xffff, 0x2, 0xfffffffffffffffa, 0x1ff, 0x1, 0x5fd, 0x4, 0x8001, 0x3, 0x40000, 0x8, 0x0, 0x7fffffff, 0x9, 0x6, 0x4, 0x40, 0x6, 0xfd, 0x7, 0x8, 0x3, 0x3, 0x0, 0x5, 0x77f9c5e9, 0x6, 0x0, 0x6, 0x1c2583f1, 0x8, 0xc, 0x7fffffffffffffff, 0xc4, 0x8, 0x6, 0x3, 0x8, 0x6, 0x55, 0x4, 0x2, 0x6, 0x3d, 0x0, 0x9636, 0xffff, 0xffffffffffffffff, 0x4]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r11, 0x50009417, &(0x7f00000010c0)={{r13}, 0x0, 0x10, @unused=[0x7, 0x9, 0x7fff, 0x3], @devid=r14}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x18, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000021c0)={0x7}, 0x8) memfd_create(&(0x7f0000002200)='#/$^$/\x00', 0x4) r15 = socket$netlink(0x10, 0x3, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000002240)={0x0, r4, 0xc1c, 0x3, 0x4, 0x814}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000002280), 0xc0101, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000022c0)={r9, 0x0, 0x25, 0x1, @val=@netfilter={0x1, 0x0, 0x4}}, 0x20) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), r1) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000002380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, r16, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r17}, @val={0xc, 0x99, {0xcfb7, 0x45}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x60000000}, 0x20044800) r18 = openat$full(0xffffffffffffff9c, &(0x7f0000002480), 0x40000, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r18, 0xc0109428, &(0x7f00000024c0)={0x3, 0x6ff}) sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0xe96447e63e440dba}, 0xc, &(0x7f0000002600)={&(0x7f0000002540)={0xb8, 0x2, 0x6, 0xc5bfefb020729d96, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x55}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x748e0000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4010) 15.519847026s ago: executing program 34 (id=539): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_eee={0x45, 0x80000001, 0x9, 0x7, 0x4, 0x1, 0x7, 0x400, [0xbdf8e1, 0x4]}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x21) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000006c0), 0x12) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) write$cgroup_freezer_state(r2, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 6.239418575s ago: executing program 5 (id=665): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f000000dd00), 0x82000, 0x0) ioctl$CDROMEJECT_SW(r0, 0x127e, 0x300000000000000) 6.239175017s ago: executing program 5 (id=666): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) (async) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000080), 0x0, 0x4) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) (async) r4 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000140)={'\x00', 0x0, 0x2, 0x4}) 6.170226333s ago: executing program 5 (id=667): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 6.166864745s ago: executing program 5 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000004"], 0x78}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x2}) r2 = syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x4, 0x0, 0x2) fchdir(r0) 6.109762733s ago: executing program 5 (id=670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000280)="b8010000000f01c1cfb9800000c00f3235008000000f30f00fb3a96b00000067660f38f604b9920200000f320f320f1c9e00000000660f3882638e66baf80cb844900f89ef66bafc0cb0fcee", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.829391101s ago: executing program 5 (id=678): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 5.794969548s ago: executing program 35 (id=678): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 3.064532705s ago: executing program 0 (id=693): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000f00)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000380)=0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x48, 0x0, &(0x7f0000000700)=[@enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000004c0)='Q'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0x208e24b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x80100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0c00000000000000000000100000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000060000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='sched_wake_idle_without_ipi\x00', r5}, 0x10) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000680)={0xff, 0x800, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x1c, "3a9a0776000000a807000000000000000043e546e2a10623a160582b8e188537", "665859255eb415c5d7fc9358bde6aad0c732fc0da70b2c739d7ae7b27138321b", "cee02dfab7706502033b6659d60d02aacf7df23ae2e157ee2732fe2ecc4ff2db", "5e46bbbff12e9792e15d323a8b29c38d6d2eee75849677983d1590f423f83489", "bfbf225fe83b5d0f4862bd61b8ae16e312911fa3a6c9ccd5720e46868c2ed2a0", "04aa000000032d4d28f700"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc400, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x86) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000b40), &(0x7f0000000b80), 0x2c, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x4, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}, {@uuid_auto}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) 3.063672928s ago: executing program 4 (id=695): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYRES8=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000003c00), &(0x7f0000003c80)=0x68) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000210001042dbd7000fedbdf250a2010cc020000011000000014000100fe8000000000000000000000000000aa08000f00ff1400eb130002"], 0x54}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r8, r5, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$nl_route(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1c, 0x200, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x40, 0x3a}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_FLAGS_EXT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x0) 2.959988584s ago: executing program 4 (id=696): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6}, @TCA_CT_LABELS={0x14, 0x7, "3c69a0a7123acbf35d628196cc1da7c2"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r2 = socket$kcm(0x11, 0xa, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYBLOB='\b'], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3400000010003904000000040000000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000001400128008000100677265000800028004001200"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x2f, 0xfd, 0x1, 0xcb, 0x0, @mcast1, @empty, 0x80, 0x7800, 0x1, 0xf25c}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0xe, 0x4592dd89, 0x8, @mcast2, @remote, 0xf898, 0x700, 0x4, 0x11c7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x40, 0x40, 0x4, 0x7, {{0x45, 0x4, 0x0, 0x6, 0x114, 0x67, 0x0, 0x5e, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xb8, 0x1, 0x3, [{@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast1, 0x3}, {@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x4a2}, {@broadcast, 0xe817}, {@remote, 0x76}]}, @lsrr={0x83, 0x7, 0x7f, [@dev={0xac, 0x14, 0x14, 0x9}]}, @generic={0x83, 0x10, "b413ef53cf1f4aa28cc6440313ee"}, @ssrr={0x89, 0x1f, 0x82, [@broadcast, @broadcast, @multicast1, @loopback, @empty, @private=0xa010100, @empty]}, @ssrr={0x89, 0x23, 0x46, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @timestamp={0x44, 0x24, 0x5e, 0x0, 0xb, [0x3, 0x3f4, 0x7, 0x9, 0x3, 0x6, 0x10000, 0x1]}, @cipso={0x86, 0x44, 0x0, [{0x0, 0xe, "e27ce06efabf7122beaa1b42"}, {0x1, 0x3, "a7"}, {0x4, 0xe, "7d43e1f1976283473b5d1971"}, {0x7, 0xe, "4abd438af5bd1b69a55517ac"}, {0x2, 0xf, "a2d782ad3048c12c9e92f312d9"}, {0x0, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=ANY=[@ANYBLOB="8800000086ede757", @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf25130000002000018008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468315f746f5f627269646765004000018008000100", @ANYRES32=r7, @ANYBLOB="080003000200000008000100", @ANYRES32=r8, @ANYBLOB="1400020076657468310000000000000000000000080003000200000008000300010000001400018008000100", @ANYRES8=r8, @ANYBLOB="0800030000000000", @ANYRESHEX=r4], 0x88}, 0x1, 0x0, 0x0, 0x810}, 0x4048000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a00)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="2f0000000000000004000000", @ANYRES32, @ANYBLOB="f6a4957d1a2e12edf1ba7d0b3f4ef00d2c954d4c62aadb29eef990eb284726b5bc8564943b7b", @ANYRES64=0x0], 0x20) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4e4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x41, 0x6, "1af222accd4fef379f4a09c9efd515c0b99cb78d21b02aa551ba7faddac180095a181b41b3655fd4b0309d05cd48da37e8125a41c311d4ad113e025768"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x24004810}, 0x4000000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 2.380148268s ago: executing program 6 (id=700): r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r4, 0x80045439, 0x40bea7b87a0000) syz_clone(0x0, 0x0, 0xf5ff, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x80000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000001c0)="ba30a945e46b03d7dd459192252b6e3c518d8badd03bee30080487b36c9dc92d57f60c92e675acf419e99d5ca8758bdc1e0ddc04ee8d370e9e5c1faa5b4fefed59d0931c498f0c7a38aeae2c26014b38"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000700)=[@dead_binder_done], 0x0, 0x0, 0x0}) ioprio_get$pid(0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) io_uring_enter(r0, 0x4e67, 0x0, 0x0, 0x0, 0xa2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x5c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x34, 0x51, 0x0, 0x1, [{0xffffffffffffff73, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x7, 0x4, "e57546"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x5c}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000a00)=""/124, 0x7c, 0xd) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f0000000140)={0x1, r10}) ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f0000000540)={0x1, r10}) r11 = socket(0x28, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r11, 0x1, 0x1c, &(0x7f0000000000), 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) 2.24018005s ago: executing program 6 (id=701): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x2}, 0x8) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 2.139693877s ago: executing program 6 (id=702): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) (async) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000ee4e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) getdents64(r0, &(0x7f00000041c0)=""/4111, 0x100f) 2.085938414s ago: executing program 4 (id=704): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x41}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x437, 0xfffe, 0x0, {0x0, 0x0, 0x0, r4, 0x5120b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="558d7acda0b2", 0x0, 0x0, 0x0, 0x4, 0x0}) 2.039825938s ago: executing program 6 (id=705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x101, &(0x7f0000000240)=0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000140), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x8008550e, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000280)=""/239, 0xef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$char_usb(r5, 0x0, 0x0) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) 2.039559293s ago: executing program 4 (id=706): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000006000)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000180)=""/104, 0x68}], 0x3, &(0x7f0000000280)=""/59, 0x3b}}, {{&(0x7f00000002c0)=@phonet, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/181, 0xb5}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/169, 0xa9}], 0x3, &(0x7f0000000540)=""/190, 0xbe}, 0xbd}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000680)=""/99, 0x63}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000800)=""/243, 0xf3}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/24, 0x18}, {&(0x7f0000001980)=""/144, 0x90}], 0x7, &(0x7f0000001ac0)=""/229, 0xe5}, 0x571e}, {{&(0x7f0000001bc0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c40)=""/181, 0xb5}, {&(0x7f0000001d00)=""/57, 0x39}, {&(0x7f0000001d40)=""/39, 0x27}, {&(0x7f0000001d80)=""/147, 0x93}, {&(0x7f0000001e40)=""/79, 0x4f}], 0x5}, 0x8ecf}, {{&(0x7f0000001f40)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000001fc0)=""/137, 0x89}, {&(0x7f0000002080)=""/246, 0xf6}, {&(0x7f0000002180)=""/174, 0xae}, {&(0x7f0000002240)=""/94, 0x5e}, {&(0x7f00000022c0)=""/60, 0x3c}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/232, 0xe8}, {&(0x7f0000003400)=""/148, 0x94}], 0x8, &(0x7f0000003540)=""/17, 0x11}, 0x7}, {{&(0x7f0000003580)=@nfc, 0x80, &(0x7f0000004700)=[{&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/2, 0x2}, {&(0x7f0000004640)=""/153, 0x99}], 0x3}, 0xc}, {{&(0x7f0000004740)=@phonet, 0x80, &(0x7f0000004840)=[{&(0x7f00000047c0)=""/83, 0x53}], 0x1, &(0x7f0000004880)=""/69, 0x45}, 0x9}, {{&(0x7f0000004900)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000004980)=""/242, 0xf2}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/158, 0x9e}, {&(0x7f0000005b40)=""/252, 0xfc}], 0x4}, 0x6d0}, {{&(0x7f0000005c80)=@can, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005d00)=""/46, 0x2e}, {&(0x7f0000005d40)=""/43, 0x2b}, {&(0x7f0000005d80)=""/105, 0x69}, {&(0x7f0000005e00)=""/83, 0x53}, {&(0x7f0000005e80)=""/63, 0x3f}, {&(0x7f0000005ec0)=""/118, 0x76}], 0x6, &(0x7f0000005fc0)=""/24, 0x18}, 0x10000}], 0x9, 0x41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x1000, 0x11b000}) (async) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x1000, 0x11b000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1.768941354s ago: executing program 4 (id=707): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="31030000efffffffffff04"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) r4 = fanotify_init(0x0, 0x8000) fanotify_mark(r4, 0x249, 0x48000000, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf25060000004c0001800800030002000000140002007663616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020003001400020070b90e00006731000000000000000000040001800400018018000180140002007465616d5f736c6176655f3000000000"], 0x80}, 0x1, 0x0, 0x0, 0x2692a523fa1fb60c}, 0x400c884) 1.439687841s ago: executing program 0 (id=708): r0 = socket$packet(0x11, 0x9, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_macvtap\x00'}) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x90009427, &(0x7f0000000200)) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x58, 0xa, 0x0, "3258c546dacccfae1e008faa022c1e00f4bf40074000000200", 0x59455247}) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x169802, 0x0) r5 = dup(r4) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) (async) syz_open_procfs(0x0, 0x0) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) r6 = openat$drirender128(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (rerun: 32) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 1.350092471s ago: executing program 0 (id=709): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 1.349075559s ago: executing program 0 (id=710): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 1.190022038s ago: executing program 7 (id=711): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x2c, r0, 0x1, 0xffffffff, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x2c, r0, 0x1, 0xffffffff, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) 1.188775786s ago: executing program 7 (id=712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) (async) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000340)={0x18}, 0x18) (async, rerun: 32) write$FUSE_ENTRY(r4, &(0x7f0000000380)={0x90}, 0x90) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@metacopy_off, 0x3a}], [], 0x2f}) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0xa, 0x7, 0x0, "5748d20a0500cb623d994e004bb255c9912a9c050099d8cdd2183b76c78176568e7ffdffffffffc60911194649d33d00", "e5d755ed8dc712c710eaf7a158e7425902d092eae9849a21a601141d546c89ae9edc3443d78840023f6b31e677978f71d1408c73027bf3a182f6d8b48ea2d940", "02f19ebd0f58e3bf691bd5476d1ac7ae9997e063067d19d99652c4a5a777405e", [0x0, 0x1]}) timer_create(0x6, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x4242, 0x0) (rerun: 32) r6 = socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'bridge_slave_1\x00'}}, 0x1e) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r7 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f0000000200)={0x0, "80a246be445c94f43a16d380ec570000aa2e5a00", 0x3, 0x0, 0x4, 0x7, 0x606020a, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000100), 0x4) connect$pppoe(r6, 0x0, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.080080108s ago: executing program 7 (id=713): io_uring_setup(0x1e15, &(0x7f0000001300)={0x0, 0x0, 0x1046, 0x0, 0x25c}) 1.079536739s ago: executing program 7 (id=714): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@getroute={0x14, 0x1a, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x32) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 900.096061ms ago: executing program 4 (id=715): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000840)='(', 0x1, 0x200080d1, &(0x7f0000000240)={0x2, 0x2, @empty}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000240)="a4", 0x1) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff5, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x48}}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x0, r4}) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x8c80, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x281c0, 0x0) sendmsg$netlink(r5, &(0x7f0000000540)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x228, 0x1e, 0x100, 0x70bd25, 0x25dfdbfc, "", [@generic="bd733555ad168601458051036b035897c24f8a0b76b4b4f96a62998f3c3a0056c25107a2e1a6b8082745b183c10e22a9cdf37ba39811b2dc1a86df1ae51faf38320163", @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x4}, @nested={0x14b, 0x38, 0x0, 0x1, [@generic="4e49aded70125f18a2d5899f2376201323e4d72e36b25b00a55ac2727889e608e32c80f4bd701b7ad83d6e9df305db34215c13e36c5b4bd3644602fd73c5294ce072dcae01df0ddf549ff5cda6c22bfa6e65abb4e8112981a5d59a820e90f2d2a928d3a9ebcb6cdb224124dd2b06a3520838357a24a6e8317c17bae9028e178704327e87744207f66bf8d43da45612866114eec3d65b5b626cbde7359a00ba4f64177fc8418599838cb70a833b6fa256b77b13e0a631", @generic="badb3782f6a79f5672d81fb5aedc3d463f3cddf6da12cd4ec56ee117d14c95deb223fe122120fe8a4b8c3452e0210fa7ccfa1808b397e91425a9e4cf89a8cb6505cde80b5b", @typed={0x49, 0x8e, 0x0, 0x0, @binary="71453146867112261df500bba4ed03f8e3fb41223202602973f5e6dc65f4355de12bad97a6b87ac4eef895f977f017b71a360c7591106d406b5899bbf50dc848e587c7dd57"}]}, @nested={0x4c, 0xf7, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @uid}, @generic="3d2dd34ab2fca757b07d795854c8e3340808ecd045a92cc0528687e96896e70e7f96002963f7d0fd6be3bf77b77a06a16ca93dd1d3c6e32652565b90c064cabf"]}, @generic="88c67a3814007601e42a311938536475947c0b2465ab6552861059203bb11428e8a37971f236b0e5540ea03bd4d7e9c9966c06f0"]}, 0x228}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r9, @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=r4, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32=r11, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r12, @ANYRES32=r4, @ANYBLOB], 0x90}, 0x20000080) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 838.71214ms ago: executing program 0 (id=716): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x509200, 0x8) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x32ac, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x26}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x1e) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002cbd7000fbdbdf257b0000000c009900f1000000170000001400fe0017210c9a87f642d1221a007b725ddccd0a000600ffffffe8ffff00001400fe00d3067e5a25b90bd7627f7ca98f3289741400fe005c314dacc78558678f6e10da66500767"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x899) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x4b5, 0x0) sendmmsg$alg(r0, &(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000280)={0x1, r5}) 540.136566ms ago: executing program 0 (id=717): r0 = syz_usb_connect$cdc_ecm(0x0, 0x60, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109024e0001015700000904000000020600000b2406000044080090e47d05240000000d240f0100000000000000000004240200030000000000000000090582020000080002090503020000000000"], 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1f, 0x4}}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xcb, 0xc, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x700, 0x80, 0x20, 0x1}}) r7 = openat$vnet(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000340)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f00000000c0)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) pipe2(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r10, r9, 0x2, 0x6, 0x4000, @void, @value}, 0x10) syz_open_dev$I2C(0x0, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r12 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r12, 0x8915, &(0x7f0000000080)={'vlan1\x00'}) 278.965556ms ago: executing program 6 (id=718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000280)='/dev/kvm\x00', 0x0, r2) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0xe8, r8, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3879f8a66f9617e9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ad00ec9c4bfac9e30061786c086aa5a097c328fd10cfeb256fc412c1754691d3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="83bdfa435fed1b75157a16d2da012d147a9b34a9a7134dfd"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="236d18a97c4c4c64e38d1c0bf04fc996"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e8e1552353ff65a7033666e14f7ce4a04c87d2981ca1ed75b8afa1496459ee64"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7f0200702ba9b491"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0e85338b8f12dfd7931a357ee45b005e"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fb24dc47ecdb4eb9"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x50}, 0x8000) 189.60006ms ago: executing program 7 (id=719): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x652e184824b7253d) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500090000000000000000000a"], 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='global_dirty_state\x00', r1}, 0x18) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) setresuid(0x0, 0xee00, 0x0) setfsuid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r6 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)) capset(0x0, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x8, 0x2, 0x0, 0x7af}) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0x20000000}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000340)={0x8, r9}) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) write$cgroup_pid(r5, &(0x7f0000000880), 0x12) 90.083885ms ago: executing program 6 (id=720): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xfffffffffffffffd, 0x513280) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x4, 0x2ec, 0x9, 0x9, 0x50e, 0x800}, {0xda, 0xb, 0x4, 0xffffffffffffffff, 0x5, 0x8}], ['\x00', '\x00', '\x00']}) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f00000002c0)=0x400) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = syz_io_uring_setup(0x543c, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x3, 0x10a5, 0x3, 0x0, 0x0) io_uring_enter(r3, 0x81e, 0xfffffff9, 0x1, 0x0, 0x0) io_uring_enter(r3, 0xde5, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cd"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 0s ago: executing program 7 (id=721): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x8000001, 0x0, 0x8, 0x0, "dadd1023b1df022dace17a32d21100000000de"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x69, 0x0, 0xa, 0x0, 0x0, 0x4e, 0xa}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)={0x0, 0x9, [@link_local, @dev, @remote, @dev, @dev, @multicast, @remote, @broadcast, @random="91b42245db54"]}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000700)={{r0}, "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"}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x17, 0x17, 0xe9, &(0x7f0000000080)="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"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) kernel console output (not intermixed with test programs): error on dev nbd0, logical block 0, async page read [ 60.277266][ T5929] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.278564][ T6790] grabbed [ 60.278573][ T6790] vivid-007: Hotplug Present: 0x00000000 [ 60.278586][ T6790] vivid-007: RxSense Present: 0x00000000 [ 60.278597][ T6790] vivid-007: EDID Present: 0x00000000 [ 60.278609][ T6790] vivid-007: ================== END STATUS ================== [ 60.281200][ T5929] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.293230][ T5929] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.295812][ T5929] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.298075][ T5929] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.301263][ T5929] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.303464][ T5929] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.305835][ T5929] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.308424][ T5929] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.313158][ T5929] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.315339][ T5929] ldm_validate_partition_table(): Disk read failed. [ 60.317482][ T5929] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.320013][ T5929] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.322151][ T5929] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.324741][ T5929] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.327259][ T5929] Dev nbd0: unable to read RDB block 0 [ 60.328013][ T39] audit: type=1400 audit(1730434943.469:616): avc: denied { ioctl } for pid=6811 comm="syz.2.189" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 60.328969][ T5929] nbd0: unable to read partition table [ 60.336101][ T5929] nbd0: partition table beyond EOD, truncated [ 60.340288][ T5929] ldm_validate_partition_table(): Disk read failed. [ 60.344921][ T6803] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 60.346017][ T5929] Dev nbd0: unable to read RDB block 0 [ 60.350682][ T6803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64000 sclass=netlink_route_socket pid=6803 comm=syz.0.182 [ 60.353112][ T5929] nbd0: unable to read partition table [ 60.356097][ T5929] nbd0: partition table beyond EOD, truncated [ 60.360437][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.362508][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.366697][ T6790] ldm_validate_partition_table(): Disk read failed. [ 60.369632][ T6790] Dev nbd0: unable to read RDB block 0 [ 60.371305][ T6790] nbd0: unable to read partition table [ 60.372814][ T6790] nbd0: partition table beyond EOD, truncated [ 60.413354][ T6822] netlink: 'syz.0.191': attribute type 8 has an invalid length. [ 60.415436][ T6822] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.191'. [ 60.598095][ T59] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 60.759309][ T59] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 60.761310][ T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 60.767655][ T59] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.770732][ T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 60.773570][ T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 60.778241][ T59] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 60.780298][ T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 60.783100][ T59] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.786098][ T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 60.789167][ T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 60.792773][ T59] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 60.794729][ T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 60.797505][ T59] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.800717][ T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 60.803586][ T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 60.808972][ T59] usb 9-1: string descriptor 0 read error: -22 [ 60.810673][ T59] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 60.813136][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.829031][ T59] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 60.853361][ T6828] netlink: 284 bytes leftover after parsing attributes in process `syz.0.193'. [ 60.943256][ T6625] syz.1.152: vmalloc error: size 3907584, failed to allocated page array size 7632, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 60.948321][ T6625] CPU: 1 UID: 0 PID: 6625 Comm: syz.1.152 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 60.951103][ T6625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.953888][ T6625] Call Trace: [ 60.954784][ T6625] [ 60.955570][ T6625] dump_stack_lvl+0x16c/0x1f0 [ 60.956958][ T6625] warn_alloc+0x24d/0x3a0 [ 60.958108][ T6625] ? __pfx_warn_alloc+0x10/0x10 [ 60.959407][ T6625] ? __get_vm_area_node+0x190/0x2d0 [ 60.960772][ T6625] ? __get_vm_area_node+0x1bc/0x2d0 [ 60.962142][ T6625] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 60.963719][ T6625] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 60.965336][ T6625] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 60.967111][ T6625] ? __get_vm_area_node+0x190/0x2d0 [ 60.968474][ T6625] ? __get_vm_area_node+0x1bc/0x2d0 [ 60.969850][ T6625] __vmalloc_node_range_noprof+0xd85/0x15a0 [ 60.971425][ T6625] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 60.973033][ T6625] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 60.974818][ T6625] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 60.976468][ T6625] ? rcu_is_watching+0x12/0xc0 [ 60.977718][ T6625] ? rcu_is_watching+0x12/0xc0 [ 60.979003][ T6625] ? trace_kmalloc+0x2d/0xe0 [ 60.980541][ T6625] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 60.982207][ T6625] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 60.983993][ T6625] __kvmalloc_node_noprof+0x14f/0x1a0 [ 60.985410][ T6625] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 60.987194][ T6625] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 60.989865][ T6625] vivid_update_format_cap+0x127b/0x2530 [ 60.991390][ T6625] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 60.993427][ T6625] ? v4l2_match_dv_timings+0x1df/0x1010 [ 60.994907][ T6625] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 60.996734][ T6625] vidioc_s_dv_timings+0xa5/0xc0 [ 60.998458][ T6625] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 61.000324][ T6625] __video_do_ioctl+0xaf0/0xf00 [ 61.002016][ T6625] ? __pfx___video_do_ioctl+0x10/0x10 [ 61.003451][ T6625] ? __might_fault+0xe3/0x190 [ 61.005742][ T6625] video_usercopy+0x4ce/0x1600 [ 61.007195][ T6625] ? __pfx___video_do_ioctl+0x10/0x10 [ 61.008790][ T6625] ? __pfx_video_usercopy+0x10/0x10 [ 61.010448][ T6625] v4l2_ioctl+0x1ba/0x250 [ 61.011743][ T6625] ? __pfx_v4l2_ioctl+0x10/0x10 [ 61.013043][ T6625] __x64_sys_ioctl+0x18f/0x220 [ 61.014324][ T6625] do_syscall_64+0xcd/0x250 [ 61.015827][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.017576][ T6625] RIP: 0033:0x7fea6557e719 [ 61.018819][ T6625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.024223][ T6625] RSP: 002b:00007fea66322038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.026319][ T6817] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 61.026605][ T6625] RAX: ffffffffffffffda RBX: 00007fea65735f80 RCX: 00007fea6557e719 [ 61.031518][ T6625] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 61.033579][ T6625] RBP: 00007fea655f132e R08: 0000000000000000 R09: 0000000000000000 [ 61.035667][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.037765][ T6625] R13: 0000000000000000 R14: 00007fea65735f80 R15: 00007ffddea8e6b8 [ 61.039848][ T6625] [ 61.041081][ T6625] Mem-Info: [ 61.042114][ T6625] active_anon:4727 inactive_anon:3660 isolated_anon:0 [ 61.042114][ T6625] active_file:18731 inactive_file:30363 isolated_file:0 [ 61.042114][ T6625] unevictable:1803 dirty:211 writeback:28 [ 61.042114][ T6625] slab_reclaimable:11214 slab_unreclaimable:67233 [ 61.042114][ T6625] mapped:17748 shmem:5332 pagetables:785 [ 61.042114][ T6625] sec_pagetables:299 bounce:0 [ 61.042114][ T6625] kernel_misc_reclaimable:0 [ 61.042114][ T6625] free:412177 free_pcp:18857 free_cma:0 [ 61.056328][ T6625] Node 0 active_anon:18908kB inactive_anon:14640kB active_file:74924kB inactive_file:121380kB unevictable:3676kB isolated(anon):0kB isolated(file):0kB mapped:70992kB dirty:596kB writeback:216kB shmem:17792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11984kB pagetables:3140kB sec_pagetables:1196kB all_unreclaimable? no [ 61.058180][ T6832] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 61.065229][ T6625] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:20kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 61.077603][ T6625] Node 0 DMA free:15300kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:56kB free_cma:0kB [ 61.086157][ T6625] lowmem_reserve[]: 0 1214 0 0 0 [ 61.089295][ T6625] Node 0 DMA32 free:73432kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:18908kB inactive_anon:14640kB active_file:74924kB inactive_file:121380kB unevictable:3676kB writepending:68kB present:2080628kB managed:1272192kB mlocked:36kB bounce:0kB free_pcp:38548kB local_pcp:1244kB free_cma:0kB [ 61.099003][ T6625] lowmem_reserve[]: 0 0 0 0 0 [ 61.100337][ T6625] Node 1 Normal free:1570760kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:20kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:25640kB local_pcp:10344kB free_cma:0kB [ 61.108349][ T6625] lowmem_reserve[]: 0 0 0 0 0 [ 61.109979][ T6625] Node 0 DMA: 1*4kB (U) 2*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 0*2048kB 3*4096kB (U) = 15300kB [ 61.114139][ T6625] Node 0 DMA32: 1*4kB (U) 3*8kB (UE) 3*16kB (UME) 24*32kB (UE) 16*64kB (UE) 14*128kB (UME) 2*256kB (ME) 2*512kB (M) 30*1024kB (UM) 14*2048kB (UM) 2*4096kB (UM) = 72780kB [ 61.118884][ T6625] Node 1 Normal: 14*4kB (UM) 40*8kB (UE) 35*16kB (UE) 103*32kB (UME) 61*64kB (UE) 18*128kB (UME) 11*256kB (UE) 8*512kB (UME) 5*1024kB (UE) 6*2048kB (UME) 375*4096kB (UM) = 1570760kB [ 61.122356][ T6836] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 61.123584][ T6625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.128823][ T6625] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.128829][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 61.131245][ T6625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.131259][ T6625] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.131268][ T6625] 54426 total pagecache pages [ 61.131272][ T6625] 0 pages in swap cache [ 61.131276][ T6625] Free swap = 124996kB [ 61.131281][ T6625] Total swap = 124996kB [ 61.131286][ T6625] 1048443 pages RAM [ 61.131290][ T6625] 0 pages HighMem/MovableOnly [ 61.131294][ T6625] 281074 pages reserved [ 61.131298][ T6625] 0 pages cma reserved [ 61.149320][ T6836] netlink: 72 bytes leftover after parsing attributes in process `syz.0.196'. [ 62.037687][ T830] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.117901][ T5953] Bluetooth: hci0: command tx timeout [ 62.207323][ T830] usb 5-1: unable to get BOS descriptor or descriptor too short [ 62.210027][ T830] usb 5-1: no configurations [ 62.211373][ T830] usb 5-1: can't read configurations, error -22 [ 62.567727][ T59] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.728932][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 62.732170][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 62.735716][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 62.741676][ T59] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 62.744923][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.748078][ T59] usb 7-1: Product: syz [ 62.749487][ T59] usb 7-1: Manufacturer: syz [ 62.750872][ T59] usb 7-1: SerialNumber: syz [ 62.755762][ T59] usb 7-1: config 0 descriptor?? [ 62.780578][ T6875] block nbd1: shutting down sockets [ 62.987418][ T6862] kvm: pic: non byte write [ 63.080879][ T6000] usb 9-1: USB disconnect, device number 2 [ 63.197661][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.347644][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 63.350611][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 63.353052][ T25] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 63.355702][ T25] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 63.358539][ T25] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 63.361458][ T25] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 63.364438][ T25] usb 6-1: config 1 interface 0 has no altsetting 0 [ 63.366258][ T25] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 63.368878][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.373561][ T25] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 63.933945][ T6913] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 63.936051][ T6913] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.938451][ T6908] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 63.940226][ T6908] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.942468][ T6908] vhci_hcd vhci_hcd.0: Device attached [ 63.942832][ T6913] vhci_hcd vhci_hcd.0: Device attached [ 64.117720][ T9] vhci_hcd: vhci_device speed not set [ 64.187735][ T9] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 64.199606][ T5953] Bluetooth: hci0: command tx timeout [ 64.536846][ T6916] vhci_hcd: connection closed [ 64.537294][ T11] vhci_hcd: stop threads [ 64.537454][ T6914] vhci_hcd: connection reset by peer [ 64.538620][ T11] vhci_hcd: release socket [ 64.542416][ T11] vhci_hcd: disconnect device [ 64.545138][ T11] vhci_hcd: stop threads [ 64.546357][ T11] vhci_hcd: release socket [ 64.548213][ T11] vhci_hcd: disconnect device [ 64.733024][ T6925] netlink: 116 bytes leftover after parsing attributes in process `syz.0.219'. [ 64.735679][ T6925] bridge_slave_1: left allmulticast mode [ 64.737051][ T6925] bridge_slave_1: left promiscuous mode [ 64.739799][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.743977][ T6925] bridge_slave_0: left allmulticast mode [ 64.745534][ T6925] bridge_slave_0: left promiscuous mode [ 64.747149][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.090653][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 65.090664][ T39] audit: type=1400 audit(1730434948.239:629): avc: denied { ioctl } for pid=6938 comm="syz.4.224" path="socket:[16406]" dev="sockfs" ino=16406 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 65.178034][ T39] audit: type=1400 audit(1730434948.329:630): avc: denied { create } for pid=6938 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.183376][ T39] audit: type=1400 audit(1730434948.329:631): avc: denied { read } for pid=6938 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.485704][ T59] adutux 7-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 65.494003][ T59] usb 7-1: USB disconnect, device number 4 [ 65.660721][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.663117][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.665040][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.666944][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.669099][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.671083][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.673005][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.674932][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.676849][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.679519][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.681597][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.683520][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.685452][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.687372][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.689495][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.691417][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.693334][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.695307][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.697240][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.699435][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.701351][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.703263][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.705171][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.707083][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.709321][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.711252][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.713161][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.715067][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.716974][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.718986][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.720920][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.722856][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.724784][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.726709][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.728979][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.731166][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.733424][ T5981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.738812][ T5981] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 65.755001][ T39] audit: type=1400 audit(1730434948.899:632): avc: denied { connect } for pid=6957 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 65.828937][ T39] audit: type=1400 audit(1730434948.979:633): avc: denied { bind } for pid=6965 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.957814][ T30] usb 6-1: USB disconnect, device number 4 [ 66.052328][ T39] audit: type=1400 audit(1730434949.199:634): avc: denied { name_bind } for pid=6974 comm="syz.1.235" src=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 66.077470][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 66.108859][ T39] audit: type=1400 audit(1730434949.249:635): avc: denied { connect } for pid=6977 comm="syz.1.236" lport=44 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.126798][ T6984] kAFS: No cell specified [ 66.156710][ T6978] xt_CT: No such helper "pptp" [ 66.174074][ T6990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.181458][ T39] audit: type=1400 audit(1730434949.329:636): avc: denied { accept } for pid=6977 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 66.190707][ T6996] netlink: 'syz.2.242': attribute type 8 has an invalid length. [ 66.192807][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 66.202134][ T39] audit: type=1400 audit(1730434949.349:637): avc: denied { bind } for pid=6995 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.233328][ T39] audit: type=1400 audit(1730434949.379:638): avc: denied { append } for pid=7002 comm="syz.1.243" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.234425][ T7005] net_ratelimit: 5 callbacks suppressed [ 66.234434][ T7005] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 66.404520][ T7031] netlink: 'syz.2.253': attribute type 2 has an invalid length. [ 66.648891][ T7043] tmpfs: User quota inode hardlimit too large. [ 66.867715][ T7053] tipc: Started in network mode [ 66.869445][ T7053] tipc: Node identity ac1414aa, cluster identity 4711 [ 66.872452][ T7053] tipc: Enabled bearer , priority 10 [ 66.874975][ T7053] tipc: Disabling bearer [ 67.382436][ T7068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.837625][ T57] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.967697][ T57] usb 6-1: device descriptor read/64, error -71 [ 68.184961][ T7091] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 68.194503][ T7091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7091 comm=syz.4.268 [ 68.212568][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'. [ 68.217880][ T57] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 68.280016][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.270'. [ 68.344371][ T7096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7096 comm=syz.4.270 [ 68.349097][ T57] usb 6-1: device descriptor read/64, error -71 [ 68.351060][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.270'. [ 68.459818][ T57] usb usb6-port1: attempt power cycle [ 68.807876][ T57] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 68.828046][ T57] usb 6-1: device descriptor read/8, error -71 [ 69.067972][ T57] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 69.088720][ T57] usb 6-1: device descriptor read/8, error -71 [ 69.199040][ T57] usb usb6-port1: unable to enumerate USB device [ 69.308381][ T9] vhci_hcd: vhci_device speed not set [ 69.397462][ T7131] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.693995][ T7151] tc_dump_action: action bad kind [ 70.303185][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 70.303197][ T39] audit: type=1400 audit(1730434953.449:671): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 70.353312][ T39] audit: type=1400 audit(1730434953.499:672): avc: denied { mounton } for pid=7187 comm="syz.0.287" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 70.353707][ T7188] tmpfs: Bad value for 'mpol' [ 70.518430][ T7190] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 70.521307][ T7190] cramfs: wrong magic [ 70.600835][ T39] audit: type=1400 audit(1730434953.749:673): avc: denied { setopt } for pid=7195 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.605811][ T39] audit: type=1400 audit(1730434953.749:674): avc: denied { bind } for pid=7195 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 70.612128][ T39] audit: type=1400 audit(1730434953.749:675): avc: denied { name_bind } for pid=7195 comm="syz.0.289" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 70.620389][ T39] audit: type=1400 audit(1730434953.749:676): avc: denied { node_bind } for pid=7195 comm="syz.0.289" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 70.665561][ T39] audit: type=1400 audit(1730434953.809:677): avc: denied { mounton } for pid=7195 comm="syz.0.289" path="/85/file0" dev="tmpfs" ino=481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 70.672510][ T39] audit: type=1400 audit(1730434953.809:678): avc: denied { mount } for pid=7195 comm="syz.0.289" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 70.732972][ T7207] netlink: 132 bytes leftover after parsing attributes in process `syz.2.291'. [ 70.792305][ T39] audit: type=1400 audit(1730434953.939:679): avc: denied { watch } for pid=7212 comm="syz.2.293" path="/77" dev="tmpfs" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.844961][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 70.938099][ T7221] hsr_slave_1 (unregistering): left promiscuous mode [ 70.997706][ T5857] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 71.072745][ T7233] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.298' sets config #0 [ 71.080745][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.082607][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.150513][ T5857] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 71.153204][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.155236][ T5857] usb 6-1: Product: syz [ 71.156376][ T5857] usb 6-1: Manufacturer: syz [ 71.157630][ T5857] usb 6-1: SerialNumber: syz [ 71.161196][ T5857] usb 6-1: config 0 descriptor?? [ 71.247844][ T59] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 71.257642][ T7237] pimreg: entered allmulticast mode [ 71.404959][ T6178] usb 6-1: USB disconnect, device number 9 [ 71.408586][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 71.413257][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.416106][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.419354][ T59] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 71.425020][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.430346][ T59] usb 7-1: config 0 descriptor?? [ 71.475452][ T7248] trusted_key: encrypted_key: insufficient parameters specified [ 71.514083][ T5953] Bluetooth: hci3: failed to read key size for handle 201 [ 71.643377][ T59] usbhid 7-1:0.0: can't add hid device: -71 [ 71.646029][ T59] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 71.650145][ T59] usb 7-1: USB disconnect, device number 5 [ 71.761732][ T7272] UBIFS error (pid: 7272): cannot open "ubifs", error -22 [ 71.784465][ T39] audit: type=1400 audit(1730500719.925:680): avc: denied { append } for pid=7273 comm="syz.0.305" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.915061][ T7279] dlm: plock device version mismatch: kernel (1.2.0), user (1.768.0) [ 71.946285][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 71.959212][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 72.065257][ T7296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.142477][ T7305] overlayfs: failed to resolve './file1': -2 [ 72.791873][ T7325] kvm: pic: non byte write [ 72.840019][ T7330] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.321'. [ 72.842477][ T7330] openvswitch: netlink: Tunnel attr 7 has unexpected len 8 expected 0 [ 72.924087][ T7334] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 73.156670][ T7357] overlayfs: workdir and upperdir must reside under the same mount [ 73.212747][ T7361] netlink: 132 bytes leftover after parsing attributes in process `syz.1.333'. [ 73.215650][ T7361] netlink: 'syz.1.333': attribute type 10 has an invalid length. [ 73.223918][ T7361] team0: Cannot enslave team device to itself [ 73.507667][ T30] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 73.667802][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 73.670658][ T30] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 73.673025][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.675676][ T30] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 73.678698][ T30] usb 6-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 73.681979][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 73.685172][ T30] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 73.687489][ T30] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 73.689662][ T30] usb 6-1: Product: syz [ 73.690777][ T30] usb 6-1: Manufacturer: syz [ 73.691998][ T30] usb 6-1: SerialNumber: syz [ 73.694416][ T30] usb 6-1: config 0 descriptor?? [ 73.697329][ T30] ldusb 6-1:0.0: Interrupt in endpoint not found [ 73.878949][ T5951] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 73.881338][ T5951] Bluetooth: hci1: Injecting HCI hardware error event [ 73.883816][ T5951] Bluetooth: hci1: hardware error 0x00 [ 73.953707][ T7365] @: renamed from vlan0 (while UP) [ 73.965108][ T60] usb 6-1: USB disconnect, device number 10 [ 73.997686][ T5857] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 74.092420][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.338'. [ 74.148164][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 74.150828][ T5857] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 74.153004][ T5857] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 74.156509][ T5857] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 74.159782][ T5857] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 74.163231][ T5857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.166420][ T5857] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 74.168818][ T5857] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 74.171013][ T5857] usb 5-1: Product: syz [ 74.172113][ T5857] usb 5-1: Manufacturer: syz [ 74.173334][ T5857] usb 5-1: SerialNumber: syz [ 74.175503][ T5857] usb 5-1: config 0 descriptor?? [ 74.178274][ T5857] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 74.181198][ T5857] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 74.379972][ T7376] ldusb 5-1:0.0: Write buffer overflow, 2147479232 bytes dropped [ 74.431560][ T6001] usb 5-1: USB disconnect, device number 5 [ 74.431632][ C3] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 74.436225][ T7376] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 74.447876][ T6001] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 74.512632][ T7384] dummy0: entered promiscuous mode [ 74.673681][ T7389] netlink: 256 bytes leftover after parsing attributes in process `syz.4.342'. [ 74.676106][ T7389] netlink: 56 bytes leftover after parsing attributes in process `syz.4.342'. [ 74.713934][ T7389] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.398831][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.558577][ T5953] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 75.561297][ T5953] Bluetooth: hci3: Injecting HCI hardware error event [ 75.566088][ T5953] Bluetooth: hci3: hardware error 0x00 [ 75.957783][ T5951] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 76.209726][ T1319] cfg80211: failed to load regulatory.db [ 77.637758][ T5953] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 80.824501][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 80.824512][ T39] audit: type=1400 audit(1730500728.965:697): avc: denied { create } for pid=7413 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 80.907110][ T7432] netlink: 'syz.1.349': attribute type 10 has an invalid length. [ 80.909808][ T7432] batman_adv: batadv0: Adding interface: team0 [ 80.911521][ T7432] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.919081][ T7432] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 80.925225][ T7432] netlink: 'syz.1.349': attribute type 10 has an invalid length. [ 80.927505][ T7432] netlink: 2 bytes leftover after parsing attributes in process `syz.1.349'. [ 80.928217][ T7417] ======================================================= [ 80.928217][ T7417] WARNING: The mand mount option has been deprecated and [ 80.928217][ T7417] and is ignored by this kernel. Remove the mand [ 80.928217][ T7417] option from the mount to silence this warning. [ 80.928217][ T7417] ======================================================= [ 80.930591][ T7432] team0: entered promiscuous mode [ 80.930741][ T7418] syz.0.348: attempt to access beyond end of device [ 80.930741][ T7418] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 80.930823][ T7418] syz.0.348: attempt to access beyond end of device [ 80.930823][ T7418] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 80.930852][ T7418] Mount JFS Failure: -5 [ 80.948230][ T7432] team_slave_0: entered promiscuous mode [ 80.950021][ T7432] team_slave_1: entered promiscuous mode [ 80.952794][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.954759][ T7432] batman_adv: batadv0: Interface activated: team0 [ 80.956599][ T7432] batman_adv: batadv0: Interface deactivated: team0 [ 80.967746][ T7432] batman_adv: batadv0: Removing interface: team0 [ 80.971090][ T7417] syz.0.348: attempt to access beyond end of device [ 80.971090][ T7417] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 80.973550][ T7432] bridge0: port 3(team0) entered blocking state [ 80.976362][ T7417] syz.0.348: attempt to access beyond end of device [ 80.976362][ T7417] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 80.976856][ T7432] bridge0: port 3(team0) entered disabled state [ 80.980628][ T7417] Mount JFS Failure: -5 [ 80.981835][ T7432] team0: entered allmulticast mode [ 80.984426][ T7432] team_slave_0: entered allmulticast mode [ 80.986035][ T7432] team_slave_1: entered allmulticast mode [ 81.010796][ T7432] bridge0: port 3(team0) entered blocking state [ 81.012910][ T7432] bridge0: port 3(team0) entered forwarding state [ 81.049723][ T39] audit: type=1400 audit(1730500729.195:698): avc: denied { bind } for pid=7443 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.055521][ T39] audit: type=1400 audit(1730500729.195:699): avc: denied { setopt } for pid=7443 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.119544][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'. [ 81.148621][ T39] audit: type=1400 audit(1730500729.295:700): avc: denied { ioctl } for pid=7445 comm="syz.0.354" path="socket:[15210]" dev="sockfs" ino=15210 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.417758][ T30] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 81.577723][ T30] usb 9-1: Using ep0 maxpacket: 32 [ 81.582830][ T30] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.586090][ T30] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.594662][ T30] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 81.597730][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.600039][ T30] usb 9-1: Product: syz [ 81.601251][ T30] usb 9-1: Manufacturer: syz [ 81.602666][ T30] usb 9-1: SerialNumber: syz [ 81.774284][ T7453] syz.1.355: attempt to access beyond end of device [ 81.774284][ T7453] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 81.778804][ T7453] hpfs: hpfs_map_sector(): read error [ 82.114995][ T39] audit: type=1400 audit(1730500730.255:701): avc: denied { getopt } for pid=7466 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.183933][ T39] audit: type=1400 audit(1730500730.325:702): avc: denied { remount } for pid=7466 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.186152][ T7475] overlay: filesystem on ./file0 is read-only [ 82.568293][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 82.572551][ T7479] syz.1.362[7479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.572601][ T7479] syz.1.362[7479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.575621][ T7479] syz.1.362[7479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.585511][ T39] audit: type=1326 audit(1730500730.735:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7478 comm="syz.1.362" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea6557e719 code=0x0 [ 82.972120][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 82.991600][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 82.994679][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 83.511747][ T7498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=7498 comm=syz.0.367 [ 83.511771][ T7501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=7501 comm=syz.0.367 [ 83.523238][ T39] audit: type=1400 audit(1730500731.665:704): avc: denied { call } for pid=7496 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 83.824748][ T7506] process 'syz.1.370' launched '/dev/fd/4' with NULL argv: empty string added [ 83.831412][ T39] audit: type=1400 audit(1730500731.975:705): avc: denied { execute_no_trans } for pid=7505 comm="syz.1.370" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.858282][ T7506] cgroup: No subsys list or none specified [ 83.942901][ T7512] netlink: 'syz.2.371': attribute type 2 has an invalid length. [ 83.945496][ T7512] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.371'. [ 84.062718][ T30] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 84.070341][ T30] usb 9-1: USB disconnect, device number 3 [ 84.078018][ T30] usblp0: removed [ 84.149697][ T7518] netlink: 'syz.4.372': attribute type 10 has an invalid length. [ 84.163057][ T7518] batman_adv: batadv0: Adding interface: team0 [ 84.165208][ T7518] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.172739][ T7518] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 84.184777][ T7518] netlink: 'syz.4.372': attribute type 10 has an invalid length. [ 84.187242][ T7518] netlink: 2 bytes leftover after parsing attributes in process `syz.4.372'. [ 84.190182][ T7518] team0: entered promiscuous mode [ 84.191856][ T7518] team_slave_0: entered promiscuous mode [ 84.194174][ T7518] team_slave_1: entered promiscuous mode [ 84.198446][ T7518] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.200422][ T7518] batman_adv: batadv0: Interface activated: team0 [ 84.202385][ T7518] batman_adv: batadv0: Interface deactivated: team0 [ 84.204268][ T7518] batman_adv: batadv0: Removing interface: team0 [ 84.213866][ T7518] bridge0: port 3(team0) entered blocking state [ 84.216063][ T7518] bridge0: port 3(team0) entered disabled state [ 84.219199][ T7518] team0: entered allmulticast mode [ 84.220719][ T7518] team_slave_0: entered allmulticast mode [ 84.222432][ T7518] team_slave_1: entered allmulticast mode [ 84.225270][ T7518] bridge0: port 3(team0) entered blocking state [ 84.227097][ T7518] bridge0: port 3(team0) entered forwarding state [ 84.314695][ T7520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.373'. [ 84.390939][ T39] audit: type=1400 audit(1730500732.535:706): avc: denied { setopt } for pid=7521 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.992290][ T7541] ufs: You didn't specify the type of your ufs filesystem [ 84.992290][ T7541] [ 84.992290][ T7541] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 84.992290][ T7541] [ 84.992290][ T7541] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 85.006925][ T7541] ufs: ufstype=old is supported read-only [ 85.011275][ T7541] ufs: ufs_fill_super(): bad magic number [ 85.052569][ T7550] ip6t_srh: unknown srh match flags 4000 [ 85.373347][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 85.628806][ T7585] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.836258][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 85.836268][ T39] audit: type=1400 audit(1730500733.975:715): avc: denied { write } for pid=7602 comm="syz.0.395" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.936276][ T7608] __nla_validate_parse: 1 callbacks suppressed [ 85.936290][ T7608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'. [ 85.959697][ T39] audit: type=1400 audit(1730500734.105:716): avc: denied { write } for pid=7614 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.053123][ T39] audit: type=1400 audit(1730500734.195:717): avc: denied { write } for pid=7628 comm="syz.2.407" path="socket:[19154]" dev="sockfs" ino=19154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.064982][ T7642] sp0: Synchronizing with TNC [ 86.085994][ T7639] sp0: Found TNC [ 86.193506][ T7654] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.195419][ T7654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.200381][ T39] audit: type=1400 audit(1730500734.345:718): avc: denied { read } for pid=7653 comm="syz.4.409" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 86.208075][ T39] audit: type=1400 audit(1730500734.345:719): avc: denied { open } for pid=7653 comm="syz.4.409" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 86.248302][ T6001] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 86.248469][ T39] audit: type=1400 audit(1730500734.395:720): avc: denied { create } for pid=7651 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 86.256083][ T39] audit: type=1400 audit(1730500734.395:721): avc: denied { read } for pid=7651 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 86.338168][ T830] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.399115][ T6001] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.402189][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.405084][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 86.407954][ T6001] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.411363][ T6001] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.413740][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.416734][ T6001] usb 6-1: config 0 descriptor?? [ 86.477703][ T830] usb 5-1: device descriptor read/64, error -71 [ 86.717646][ T830] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 86.747210][ T39] audit: type=1400 audit(1730500734.885:722): avc: denied { read append } for pid=7657 comm="syz.4.410" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.756192][ T39] audit: type=1400 audit(1730500734.885:723): avc: denied { open } for pid=7657 comm="syz.4.410" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.763158][ T39] audit: type=1400 audit(1730500734.895:724): avc: denied { ioctl } for pid=7657 comm="syz.4.410" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.825653][ T6001] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 86.835235][ T6001] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 86.847697][ T830] usb 5-1: device descriptor read/64, error -71 [ 86.967865][ T830] usb usb5-port1: attempt power cycle [ 87.082529][ T59] usb 6-1: USB disconnect, device number 11 [ 87.088230][ T6000] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 87.248164][ T6000] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 87.251559][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.254686][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.258024][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 87.260739][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.263138][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.266228][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 87.269035][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.271368][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.274618][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 87.277043][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.279678][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.282794][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 87.285395][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.288019][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.290847][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 87.293414][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.296053][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.299386][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 87.301832][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.304207][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.306984][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 87.309800][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.312130][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.315093][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 87.319354][ T6000] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 87.321984][ T6000] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 87.324268][ T6000] usb 9-1: Product: syz [ 87.325371][ T6000] usb 9-1: Manufacturer: syz [ 87.326603][ T6000] usb 9-1: SerialNumber: syz [ 87.328895][ T6000] usb 9-1: config 0 descriptor?? [ 87.332930][ T6000] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 87.338206][ T830] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 87.368569][ T830] usb 5-1: device descriptor read/8, error -71 [ 87.618659][ T830] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 87.651554][ T830] usb 5-1: device descriptor read/8, error -71 [ 87.699575][ C1] usb 9-1: yurex_control_callback - control failed: -71 [ 87.702716][ T6000] usb 9-1: USB disconnect, device number 4 [ 87.713723][ T6000] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 87.759923][ T830] usb usb5-port1: unable to enumerate USB device [ 87.887762][ T59] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 88.037707][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 88.042925][ T59] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.045050][ T59] usb 6-1: config 0 has no interface number 0 [ 88.046698][ T59] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 88.049850][ T59] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 88.052830][ T59] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.055325][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.064037][ T59] usb 6-1: config 0 descriptor?? [ 88.073663][ T59] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 88.272068][ T830] usb 6-1: USB disconnect, device number 12 [ 88.274803][ T830] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 88.455715][ T7685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.416'. [ 88.799637][ T7695] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 [ 88.799672][ T6001] IPVS: starting estimator thread 0... [ 88.803679][ T7695] netlink: 'syz.1.419': attribute type 10 has an invalid length. [ 88.812117][ T7695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.814462][ T7695] batadv0: entered promiscuous mode [ 88.815894][ T7695] batadv0: entered allmulticast mode [ 88.818391][ T7695] team0: Port device batadv0 added [ 88.907734][ T7696] IPVS: using max 34 ests per chain, 81600 per kthread [ 89.013596][ T7707] netlink: 'syz.1.423': attribute type 10 has an invalid length. [ 89.158252][ T7724] autofs4:pid:7724:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(120.1), cmd(0xc018937e) [ 89.159592][ T7731] usb 1-1: USB disconnect, device number 2 [ 89.163394][ T7724] autofs4:pid:7724:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 89.247858][ T7744] fuse: Bad value for 'fd' [ 89.278334][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 89.280930][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 89.543703][ T7757] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.614673][ T7765] xt_hashlimit: size too large, truncated to 1048576 [ 89.843556][ T7713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.931510][ T7771] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 90.824025][ T7803] tipc: Started in network mode [ 90.828293][ T7803] tipc: Node identity b84, cluster identity 4711 [ 90.830321][ T7803] tipc: Node number set to 2948 [ 90.833758][ T7803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.838135][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 90.838148][ T39] audit: type=1400 audit(1730500738.985:736): avc: denied { setopt } for pid=7802 comm="syz.4.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 90.915291][ T39] audit: type=1400 audit(1730500739.055:737): avc: denied { bind } for pid=7806 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 91.167715][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.445699][ T39] audit: type=1400 audit(1730500739.585:738): avc: denied { remount } for pid=7815 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 91.451958][ T7816] devtmpfs: Cannot change global quota limit on remount [ 91.460548][ T39] audit: type=1400 audit(1730500739.605:739): avc: denied { mounton } for pid=7815 comm="syz.4.453" path="/79/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 91.467141][ T39] audit: type=1400 audit(1730500739.605:740): avc: denied { mount } for pid=7815 comm="syz.4.453" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 92.063118][ T39] audit: type=1400 audit(1730500740.205:741): avc: denied { getopt } for pid=7832 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.068259][ T39] audit: type=1400 audit(1730500740.205:742): avc: denied { create } for pid=7832 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 92.073393][ T39] audit: type=1400 audit(1730500740.205:743): avc: denied { create } for pid=7832 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 92.309153][ T7837] ubi0: attaching mtd0 [ 92.318691][ T7837] ubi0: scanning is finished [ 92.319970][ T7837] ubi0: empty MTD device detected [ 92.409211][ T7837] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 92.411208][ T7837] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 92.412999][ T7837] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 92.414752][ T7837] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 92.416586][ T7837] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 92.419740][ T7837] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 92.422752][ T7837] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 534333366 [ 92.426745][ T7837] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 92.430091][ T7839] ubi0: background thread "ubi_bgt0d" started, PID 7839 [ 92.430345][ T7838] ubi0: detaching mtd0 [ 92.439625][ T7838] ubi0: mtd0 is detached [ 92.483255][ T7843] netlink: 56 bytes leftover after parsing attributes in process `syz.0.458'. [ 92.520374][ T39] audit: type=1400 audit(1730500740.665:744): avc: denied { unmount } for pid=6495 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 92.562136][ T7848] netlink: 100 bytes leftover after parsing attributes in process `syz.4.459'. [ 92.665251][ T39] audit: type=1400 audit(1730500740.805:745): avc: denied { getopt } for pid=7853 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 92.678474][ T7855] input: syz1 as /devices/virtual/input/input12 [ 92.905545][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.465'. [ 93.012985][ T7890] /dev/sg0: Can't lookup blockdev [ 93.018016][ T7883] nbd2: detected capacity change from 0 to 12 [ 93.027487][ T7508] block nbd2: Send control failed (result -89) [ 93.031841][ T7508] block nbd2: Request send failed, requeueing [ 93.033552][ T5953] block nbd2: Receive control failed (result -32) [ 93.034312][ T55] block nbd2: Dead connection, failed to find a fallback [ 93.039387][ T55] block nbd2: shutting down sockets [ 93.041154][ T55] blk_print_req_error: 40 callbacks suppressed [ 93.041162][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.045371][ T55] buffer_io_error: 40 callbacks suppressed [ 93.045380][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 93.051563][ T7508] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.054698][ T7508] Buffer I/O error on dev nbd2, logical block 0, async page read [ 93.056807][ T7508] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.060026][ T7508] Buffer I/O error on dev nbd2, logical block 0, async page read [ 93.062141][ T7508] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.064611][ T7508] Buffer I/O error on dev nbd2, logical block 0, async page read [ 93.066711][ T7508] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.070963][ T7508] Buffer I/O error on dev nbd2, logical block 0, async page read [ 93.074787][ T7508] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.077436][ T7508] Buffer I/O error on dev nbd2, logical block 0, async page read [ 93.080300][ T7508] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.083331][ T7508] Buffer I/O error on dev nbd2, logical block 0, async page read [ 93.086390][ T7508] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.089771][ T7508] Buffer I/O error on dev nbd2, logical block 0, async page read [ 93.092405][ T7508] ldm_validate_partition_table(): Disk read failed. [ 93.094622][ T7508] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.097017][ T7508] Buffer I/O error on dev nbd2, logical block 0, async page read [ 93.099208][ T7508] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.101537][ T7508] Buffer I/O error on dev nbd2, logical block 0, async page read [ 93.103699][ T7508] Dev nbd2: unable to read RDB block 0 [ 93.105599][ T7508] nbd2: unable to read partition table [ 93.107140][ T7508] nbd2: partition table beyond EOD, truncated [ 93.123697][ T7508] ldm_validate_partition_table(): Disk read failed. [ 93.125653][ T7508] Dev nbd2: unable to read RDB block 0 [ 93.127216][ T7508] nbd2: unable to read partition table [ 93.128861][ T7508] nbd2: partition table beyond EOD, truncated [ 93.340139][ T7913] overlayfs: overlapping lowerdir path [ 93.350945][ T7908] netlink: 'syz.4.477': attribute type 11 has an invalid length. [ 93.561430][ T7922] input: syz0 as /devices/virtual/input/input13 [ 93.663384][ T7932] netlink: 'syz.2.484': attribute type 4 has an invalid length. [ 93.725117][ T7932] netlink: 172 bytes leftover after parsing attributes in process `syz.2.484'. [ 93.780011][ T7939] block nbd4: Unsupported socket: shutdown callout must be supported. [ 94.081992][ T7957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.151167][ T7957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.305232][ T7957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.371684][ T7957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.518398][ T7957] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.524366][ T7957] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.530629][ T7957] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.536746][ T7957] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.557659][ T59] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 94.716291][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.497'. [ 94.728282][ T59] usb 6-1: Using ep0 maxpacket: 16 [ 94.733761][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.736819][ T59] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.740527][ T59] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.742901][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.747945][ T1319] IPVS: starting estimator thread 0... [ 94.748444][ T59] usb 6-1: config 0 descriptor?? [ 94.848155][ T7981] IPVS: using max 34 ests per chain, 81600 per kthread [ 95.020387][ T7984] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.022897][ T7984] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.025265][ T7984] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.030040][ T7984] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.032881][ T7984] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 95.035402][ T7984] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 95.038138][ T7984] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 95.040785][ T7984] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 95.043549][ T7984] geneve2: entered promiscuous mode [ 95.045088][ T7984] geneve2: entered allmulticast mode [ 95.155496][ T7964] raw-gadget.0 gadget.1: fail, usb_ep_set_halt returned -11 [ 95.162078][ T59] usbhid 6-1:0.0: can't add hid device: -71 [ 95.163689][ T59] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 95.170484][ T59] usb 6-1: USB disconnect, device number 13 [ 95.614169][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 95.716049][ T8009] lo speed is unknown, defaulting to 1000 [ 95.728270][ T8009] lo speed is unknown, defaulting to 1000 [ 95.802922][ T8009] lo speed is unknown, defaulting to 1000 [ 95.806605][ T8009] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.812349][ T8009] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 95.828934][ T8009] lo speed is unknown, defaulting to 1000 [ 95.831279][ T8009] lo speed is unknown, defaulting to 1000 [ 95.834248][ T8009] lo speed is unknown, defaulting to 1000 [ 95.836188][ T8009] lo speed is unknown, defaulting to 1000 [ 95.838613][ T8009] lo speed is unknown, defaulting to 1000 [ 95.840607][ T8009] lo speed is unknown, defaulting to 1000 [ 95.977755][ T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 96.023709][ T8028] kAFS: Can only specify source 'none' with -o dyn [ 96.139655][ T30] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.142623][ T30] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 96.145108][ T30] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 96.157711][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.160081][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.175380][ T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.256961][ T30] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 96.375638][ T5857] usb 5-1: USB disconnect, device number 10 [ 96.864465][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 96.864475][ T39] audit: type=1400 audit(1730500745.005:771): avc: denied { read } for pid=8046 comm="syz.4.515" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 96.873884][ T8047] sd 0:0:0:0: PR command failed: 1026 [ 96.876446][ T8047] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 96.877729][ T39] audit: type=1400 audit(1730500745.015:772): avc: denied { open } for pid=8046 comm="syz.4.515" path="/96/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 96.881442][ T8047] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 96.894650][ T39] audit: type=1400 audit(1730500745.015:773): avc: denied { ioctl } for pid=8046 comm="syz.4.515" path="/96/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 96.926031][ T39] audit: type=1400 audit(1730500745.065:774): avc: denied { append } for pid=8058 comm="syz.0.518" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.004454][ T8065] ALSA: mixer_oss: invalid OSS volume '' [ 97.138763][ T5857] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 97.267702][ T5857] usb 6-1: device descriptor read/64, error -71 [ 97.647707][ T5857] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 97.708249][ T8074] netlink: 76 bytes leftover after parsing attributes in process `syz.4.522'. [ 97.736804][ T8076] tipc: Enabled bearer , priority 0 [ 97.752809][ T8076] syzkaller0: entered promiscuous mode [ 97.754278][ T8076] syzkaller0: entered allmulticast mode [ 97.756038][ T8076] tipc: Resetting bearer [ 97.787669][ T5857] usb 6-1: device descriptor read/64, error -71 [ 97.788197][ T12] tipc: Resetting bearer [ 97.794760][ T8075] tipc: Resetting bearer [ 97.898056][ T5857] usb usb6-port1: attempt power cycle [ 98.237688][ T5857] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 98.258238][ T5857] usb 6-1: device descriptor read/8, error -71 [ 98.497776][ T5857] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 98.518335][ T5857] usb 6-1: device descriptor read/8, error -71 [ 98.627858][ T5857] usb usb6-port1: unable to enumerate USB device [ 99.013775][ T8075] tipc: Disabling bearer [ 99.111097][ T39] audit: type=1400 audit(1730500747.255:775): avc: denied { mounton } for pid=8081 comm="syz.4.525" path="/99/bus/bus" dev="ramfs" ino=22834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 99.111718][ T8082] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 99.119543][ T8082] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 99.122668][ T8082] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 99.182623][ T39] audit: type=1400 audit(1730500747.325:776): avc: denied { nlmsg_read } for pid=8087 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.212741][ T8090] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 99.214758][ T8090] netlink: 224 bytes leftover after parsing attributes in process `syz.0.529'. [ 99.239741][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.287966][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 99.293889][ T8094] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 99.295688][ T8094] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 99.299024][ T8094] vhci_hcd vhci_hcd.0: Device attached [ 99.348187][ T8095] vhci_hcd: connection closed [ 99.349798][ T1166] vhci_hcd: stop threads [ 99.352182][ T1166] vhci_hcd: release socket [ 99.353356][ T1166] vhci_hcd: disconnect device [ 99.696846][ T39] audit: type=1400 audit(1730500747.835:777): avc: denied { getopt } for pid=8108 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.821357][ T8112] netlink: 60 bytes leftover after parsing attributes in process `syz.4.534'. [ 99.879111][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.903608][ T39] audit: type=1400 audit(1730500748.045:778): avc: denied { getopt } for pid=8116 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 99.912783][ T39] audit: type=1400 audit(1730500748.045:779): avc: denied { setattr } for pid=8116 comm="syz.0.536" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.940317][ T8125] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 99.942419][ T8124] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.951500][ T8124] overlayfs: failed to set xattr on upper [ 99.953072][ T8124] overlayfs: ...falling back to redirect_dir=nofollow. [ 99.955004][ T8124] overlayfs: ...falling back to index=off. [ 99.956546][ T8124] overlayfs: ...falling back to uuid=null. [ 99.960181][ T8124] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 99.987229][ T39] audit: type=1400 audit(1730500748.125:780): avc: denied { ioctl } for pid=8126 comm="syz.1.539" path="socket:[21854]" dev="sockfs" ino=21854 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.038076][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.098799][ T8135] netlink: 76 bytes leftover after parsing attributes in process `syz.0.541'. [ 100.167696][ T60] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 100.320531][ T60] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.322969][ T60] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.325667][ T60] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.328588][ T60] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.333408][ T60] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.335855][ T60] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.338276][ T60] usb 9-1: Product: syz [ 100.339453][ T60] usb 9-1: Manufacturer: syz [ 100.342976][ T60] cdc_wdm 9-1:1.0: skipping garbage [ 100.344448][ T60] cdc_wdm 9-1:1.0: skipping garbage [ 100.346427][ T60] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 100.348356][ T60] cdc_wdm 9-1:1.0: Unknown control protocol [ 100.360753][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.546802][ T5857] usb 9-1: USB disconnect, device number 5 [ 100.919524][ T8139] binder: 8138:8139 ioctl c0306201 20004a40 returned -22 [ 101.077776][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.221995][ T8154] efs: device does not support 512 byte blocks [ 101.511783][ T8163] kAFS: Can only specify source 'none' with -o dyn [ 102.213569][ T8188] xt_hashlimit: size too large, truncated to 1048576 [ 102.269667][ T8190] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.283265][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 102.283279][ T39] audit: type=1400 audit(1730500750.425:782): avc: denied { append } for pid=8187 comm="syz.0.556" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 102.294273][ T8190] input: syz0 as /devices/virtual/input/input14 [ 102.728438][ T8192] overlayfs: missing 'lowerdir' [ 102.772926][ T39] audit: type=1800 audit(1730500750.915:783): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.557" name=2321200A6C6179 dev="9p" ino=36449105 res=0 errno=0 [ 102.952818][ T8199] netlink: 'syz.0.559': attribute type 3 has an invalid length. [ 102.954844][ T8199] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.559'. [ 102.981633][ T39] audit: type=1326 audit(1730500751.125:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.0.560" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a6b7e719 code=0x7ffc0000 [ 102.987382][ T39] audit: type=1326 audit(1730500751.125:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.0.560" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a6b7e719 code=0x7ffc0000 [ 102.993690][ T39] audit: type=1326 audit(1730500751.125:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.0.560" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96a6b7d0b0 code=0x7ffc0000 [ 102.999471][ T39] audit: type=1326 audit(1730500751.125:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.0.560" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96a6b7d0b0 code=0x7ffc0000 [ 103.004947][ T39] audit: type=1326 audit(1730500751.125:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.0.560" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a6b7e719 code=0x7ffc0000 [ 103.012526][ T39] audit: type=1326 audit(1730500751.125:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.0.560" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a6b7e719 code=0x7ffc0000 [ 103.019069][ T39] audit: type=1326 audit(1730500751.125:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.0.560" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96a6b7e719 code=0x7ffc0000 [ 103.025178][ T39] audit: type=1326 audit(1730500751.125:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.0.560" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a6b7e719 code=0x7ffc0000 [ 103.732085][ T8212] netlink: 'syz.0.563': attribute type 4 has an invalid length. [ 103.787428][ T8212] binder: BC_ACQUIRE_RESULT not supported [ 103.789322][ T8212] binder: 8211:8212 ioctl c0306201 200002c0 returned -22 [ 103.791701][ T8212] binder: 8211:8212 ioctl c040aed4 20000040 returned -22 [ 111.494576][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.502413][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.505662][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.510356][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.512575][ T5951] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 111.514445][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.546814][ T8224] lo speed is unknown, defaulting to 1000 [ 111.604359][ T8224] chnl_net:caif_netlink_parms(): no params data found [ 111.666197][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.668178][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.670281][ T8224] bridge_slave_0: entered allmulticast mode [ 111.672360][ T8224] bridge_slave_0: entered promiscuous mode [ 111.676913][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.679341][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.681255][ T8224] bridge_slave_1: entered allmulticast mode [ 111.683297][ T8224] bridge_slave_1: entered promiscuous mode [ 111.704385][ T8224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.710508][ T8224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.732570][ T8224] team0: Port device team_slave_0 added [ 111.735197][ T8224] team0: Port device team_slave_1 added [ 111.754667][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.756489][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.763352][ T8224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.787285][ T77] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.795135][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.796948][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.803829][ T8224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.827277][ T8224] hsr_slave_0: entered promiscuous mode [ 111.829283][ T8224] hsr_slave_1: entered promiscuous mode [ 111.831086][ T8224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.833046][ T8224] Cannot create hsr debugfs directory [ 111.870799][ T77] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.946650][ T77] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.971202][ T8224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.974564][ T8224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.978856][ T8224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.982138][ T8224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.991271][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.993149][ T8224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.995091][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.996968][ T8224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.022412][ T8224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.022665][ T8257] netlink: 84 bytes leftover after parsing attributes in process `syz.0.573'. [ 112.032336][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.035342][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.044737][ T8257] netlink: 'syz.0.573': attribute type 21 has an invalid length. [ 112.051945][ T8224] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.063948][ T77] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.070826][ T8257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.573'. [ 112.073134][ T8257] (unnamed net_device) (uninitialized): down delay (536871808) is not a multiple of miimon (129), value rounded to 536871684 ms [ 112.087111][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.089145][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.095641][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.097588][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.202140][ T77] bridge_slave_1: left allmulticast mode [ 112.203655][ T77] bridge_slave_1: left promiscuous mode [ 112.205160][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.209944][ T77] bridge_slave_0: left allmulticast mode [ 112.211446][ T77] bridge_slave_0: left promiscuous mode [ 112.214269][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.284504][ T8276] netlink: 40 bytes leftover after parsing attributes in process `syz.4.575'. [ 112.295318][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 112.313736][ T8276] Bluetooth: MGMT ver 1.23 [ 112.515153][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.519688][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.523451][ T77] bond0 (unregistering): Released all slaves [ 112.550132][ T8224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.659761][ T8224] veth0_vlan: entered promiscuous mode [ 112.666397][ T8224] veth1_vlan: entered promiscuous mode [ 112.679189][ T8224] veth0_macvtap: entered promiscuous mode [ 112.682884][ T8224] veth1_macvtap: entered promiscuous mode [ 112.704696][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.708116][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.710729][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.713432][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.715957][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.718793][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.721331][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.724031][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.727324][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.752450][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.755237][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.758095][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.760879][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.763474][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.766483][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.769277][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.772151][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.775529][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.782543][ T8224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.784866][ T8224] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.788266][ T8224] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.790607][ T8224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.809075][ T77] hsr_slave_0: left promiscuous mode [ 112.810951][ T77] hsr_slave_1: left promiscuous mode [ 112.814239][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.816285][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.819282][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.821331][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.839848][ T77] veth1_macvtap: left promiscuous mode [ 112.841413][ T77] veth0_macvtap: left promiscuous mode [ 112.843022][ T77] veth0_vlan: left promiscuous mode [ 113.067347][ T8301] netlink: 'syz.0.576': attribute type 2 has an invalid length. [ 113.069642][ T8301] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.576'. [ 113.151909][ T5953] Bluetooth: hci0: unexpected event for opcode 0x203d [ 113.275929][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 113.283335][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 113.549965][ T77] team0 (unregistering): Port device team_slave_1 removed [ 113.558205][ T5953] Bluetooth: hci1: command tx timeout [ 113.636660][ T77] team0 (unregistering): Port device team_slave_0 removed [ 114.233444][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.235558][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.276632][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.279228][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.289935][ T8312] input: syz0 as /devices/virtual/input/input15 [ 114.317468][ T8320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.329239][ T8320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.581'. [ 114.387875][ T39] kauditd_printk_skb: 70 callbacks suppressed [ 114.387886][ T39] audit: type=1400 audit(1730500762.505:862): avc: denied { create } for pid=8319 comm="syz.4.581" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.394901][ T39] audit: type=1400 audit(1730500762.505:863): avc: denied { setattr } for pid=8319 comm="syz.4.581" name="oom_adj" dev="proc" ino=22162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 114.499809][ T77] IPVS: stop unused estimator thread 0... [ 114.547827][ T8337] trusted_key: encrypted_key: insufficient parameters specified [ 114.587094][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 114.589634][ T39] audit: type=1400 audit(1730500762.725:864): avc: denied { append } for pid=8336 comm="syz.0.583" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.609609][ T8343] kAFS: Can only specify source 'none' with -o dyn [ 114.867724][ T830] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.872462][ T39] audit: type=1400 audit(1730500763.015:865): avc: denied { unlink } for pid=6495 comm="syz-executor" name="file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.945030][ T8365] sd 0:0:0:0: PR command failed: 1026 [ 114.946665][ T8365] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 114.948739][ T8365] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 115.017872][ T830] usb 5-1: Using ep0 maxpacket: 8 [ 115.021222][ T830] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 115.023967][ T830] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 115.027020][ T830] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 115.030313][ T830] usb 5-1: config 250 has no interface number 0 [ 115.032410][ T830] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 115.036271][ T830] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 115.039999][ T830] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.043531][ T830] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 115.047053][ T830] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 115.051681][ T830] usb 5-1: config 250 interface 228 has no altsetting 0 [ 115.055272][ T830] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 115.058403][ T830] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 115.061145][ T830] usb 5-1: Product: syz [ 115.062569][ T830] usb 5-1: SerialNumber: syz [ 115.068694][ T830] hub 5-1:250.228: bad descriptor, ignoring hub [ 115.070943][ T830] hub 5-1:250.228: probe with driver hub failed with error -5 [ 115.073535][ T5951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.076951][ T5951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.079918][ T5951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.080877][ T8378] block nbd4: NBD_DISCONNECT [ 115.084837][ T5951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.088564][ T8376] block nbd4: Disconnected due to user request. [ 115.089351][ T5951] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 115.091028][ T8376] block nbd4: shutting down sockets [ 115.093350][ T5951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.114865][ T8379] lo speed is unknown, defaulting to 1000 [ 115.162785][ T8379] chnl_net:caif_netlink_parms(): no params data found [ 115.226122][ T39] audit: type=1400 audit(1730500763.365:866): avc: denied { write } for pid=8391 comm="syz.4.590" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.238238][ T39] audit: type=1400 audit(1730500763.375:867): avc: denied { mounton } for pid=8391 comm="syz.4.590" path="/128/file0" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 115.245852][ T8379] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.248237][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.250196][ T8379] bridge_slave_0: entered allmulticast mode [ 115.252128][ T8379] bridge_slave_0: entered promiscuous mode [ 115.255261][ T8379] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.257135][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.259302][ T8379] bridge_slave_1: entered allmulticast mode [ 115.261803][ T8379] bridge_slave_1: entered promiscuous mode [ 115.273797][ T830] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 115.276979][ T8392] syz.5.591 (8392): drop_caches: 2 [ 115.281133][ T8392] syz.5.591 (8392): drop_caches: 2 [ 115.311284][ T8379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.317684][ T8379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.342072][ T8379] team0: Port device team_slave_0 added [ 115.344791][ T8379] team0: Port device team_slave_1 added [ 115.372343][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.374240][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.382562][ T8379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.386179][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.390654][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.397230][ T8379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.419275][ T8379] hsr_slave_0: entered promiscuous mode [ 115.421243][ T8379] hsr_slave_1: entered promiscuous mode [ 115.473632][ T39] audit: type=1400 audit(1730500763.615:868): avc: denied { read write } for pid=8346 comm="syz.0.584" name="lp0" dev="devtmpfs" ino=2956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 115.483817][ T39] audit: type=1400 audit(1730500763.635:869): avc: denied { open } for pid=8346 comm="syz.0.584" path="/dev/usb/lp0" dev="devtmpfs" ino=2956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 115.493273][ T8379] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 115.500996][ T8379] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 115.504636][ T8379] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 115.508397][ T8379] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 115.520749][ T8379] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.522669][ T8379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.548366][ T8379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.554135][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.569329][ T8379] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.575812][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.578268][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.582760][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.584641][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.637706][ T5951] Bluetooth: hci1: command tx timeout [ 115.664019][ T8379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.756045][ T8379] veth0_vlan: entered promiscuous mode [ 115.760667][ T8379] veth1_vlan: entered promiscuous mode [ 115.773238][ T8379] veth0_macvtap: entered promiscuous mode [ 115.776448][ T8379] veth1_macvtap: entered promiscuous mode [ 115.784016][ T8379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.786666][ T8379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.789764][ T8379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.792439][ T8379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.795006][ T8379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.797699][ T8379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.800326][ T8379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.802981][ T8379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.806512][ T8379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.812579][ T8379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.815181][ T8379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.818154][ T8379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.821592][ T8379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.824132][ T8379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.826826][ T8379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.829461][ T8379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.832378][ T8379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.835922][ T8379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.840073][ T8379] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.842355][ T8379] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.844612][ T8379] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.846791][ T8379] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.878913][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.881007][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.894466][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.897427][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.973924][ T8423] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 116.038875][ T8432] netlink: 'syz.6.587': attribute type 2 has an invalid length. [ 116.041657][ T8432] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.587'. [ 116.135219][ T8435] Bluetooth: MGMT ver 1.23 [ 116.169649][ T8347] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 116.279294][ T39] audit: type=1326 audit(1730500764.425:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.4.596" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dd037e719 code=0x0 [ 116.380134][ T5953] Bluetooth: hci0: unexpected event for opcode 0x100c [ 116.392645][ T5953] Bluetooth: hci0: unexpected event for opcode 0x080d [ 116.736883][ T8347] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 116.847883][ T1461] usb 5-1: USB disconnect, device number 11 [ 116.851239][ T1461] usblp0: removed [ 117.062401][ T8457] __nla_validate_parse: 2 callbacks suppressed [ 117.062414][ T8457] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.600'. [ 117.100388][ T39] audit: type=1400 audit(1730500765.245:871): avc: denied { bind } for pid=8462 comm="syz.5.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.158432][ T5953] Bluetooth: hci4: command tx timeout [ 117.180804][ T8471] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 117.183028][ T8471] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 117.185184][ T8471] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 117.187317][ T8471] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 117.192582][ T8471] netlink: 76 bytes leftover after parsing attributes in process `syz.4.603'. [ 117.307337][ T8481] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 117.700462][ T8489] netlink: 'syz.6.609': attribute type 10 has an invalid length. [ 117.707023][ T8489] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 117.717677][ T5941] Bluetooth: hci1: command tx timeout [ 117.961621][ T8504] overlayfs: missing 'lowerdir' [ 118.207770][ T5951] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 118.337641][ T5945] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 118.500679][ T5945] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.503835][ T5945] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 118.506798][ T5945] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 118.510172][ T5945] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.513544][ T5945] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.516471][ T5945] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.519569][ T5945] usb 10-1: config 0 descriptor?? [ 118.522313][ T8510] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 118.951536][ T8529] program syz.6.619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.969677][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.973826][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 119.018924][ T8529] netlink: 7 bytes leftover after parsing attributes in process `syz.6.619'. [ 119.128661][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.131611][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.172562][ T8538] xt_hashlimit: max too large, truncated to 1048576 [ 119.237770][ T5941] Bluetooth: hci4: command tx timeout [ 119.349450][ T8546] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 119.443627][ T8549] netlink: 'syz.0.624': attribute type 2 has an invalid length. [ 119.445760][ T8549] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.624'. [ 119.584333][ T5945] usbhid 10-1:0.0: can't add hid device: -71 [ 119.586373][ T5945] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 119.594533][ T5945] usb 10-1: USB disconnect, device number 2 [ 119.757464][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 119.757475][ T39] audit: type=1400 audit(1730500767.895:879): avc: denied { connect } for pid=8551 comm="syz.5.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.797908][ T5941] Bluetooth: hci1: command tx timeout [ 119.811653][ T39] audit: type=1400 audit(1730500767.955:880): avc: denied { listen } for pid=8551 comm="syz.5.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 120.077665][ T1319] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 120.231879][ T39] audit: type=1400 audit(1730500768.375:881): avc: denied { write } for pid=8557 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.237840][ T1319] usb 10-1: Using ep0 maxpacket: 8 [ 120.240570][ T1319] usb 10-1: config 0 has no interfaces? [ 120.242368][ T1319] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.244821][ T1319] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.248407][ T1319] usb 10-1: config 0 descriptor?? [ 120.439405][ T5941] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 120.448070][ T5941] Bluetooth: hci0: Injecting HCI hardware error event [ 120.452642][ T39] audit: type=1400 audit(1730500768.595:882): avc: denied { write } for pid=8551 comm="syz.5.625" path="socket:[22445]" dev="sockfs" ino=22445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 120.456428][ T5941] Bluetooth: hci0: hardware error 0x00 [ 120.460567][ T25] usb 10-1: USB disconnect, device number 3 [ 120.492315][ T8578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.627'. [ 120.598969][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.630'. [ 120.750499][ T8587] input: syz0 as /devices/virtual/input/input16 [ 120.796153][ T8580] program syz.0.630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.997919][ T5951] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 121.014068][ T8612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.016812][ T8612] IPv6: NLM_F_CREATE should be set when creating new route [ 121.019330][ T8612] IPv6: NLM_F_CREATE should be set when creating new route [ 121.040812][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.637'. [ 121.067691][ T39] audit: type=1400 audit(1730500769.205:883): avc: denied { accept } for pid=8618 comm="syz.6.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 121.072881][ T39] audit: type=1400 audit(1730500769.215:884): avc: denied { mount } for pid=8618 comm="syz.6.639" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 121.086526][ T39] audit: type=1400 audit(1730500769.215:885): avc: denied { read } for pid=8618 comm="syz.6.639" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 121.092460][ T39] audit: type=1400 audit(1730500769.215:886): avc: denied { open } for pid=8618 comm="syz.6.639" path="/10/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 121.098726][ T39] audit: type=1400 audit(1730500769.225:887): avc: denied { unmount } for pid=8379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 121.109590][ T39] audit: type=1326 audit(1730500769.255:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.5.642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0d7e719 code=0x7ffc0000 [ 121.202645][ T8629] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 121.287106][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.642'. [ 121.327671][ T5951] Bluetooth: hci4: command 0x040f tx timeout [ 121.627833][ T25] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 121.729078][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 121.787620][ T25] usb 11-1: Using ep0 maxpacket: 32 [ 121.790458][ T25] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 121.792380][ T25] usb 11-1: can't read configurations, error -61 [ 121.927748][ T25] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 122.002832][ T8655] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 122.008457][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.650'. [ 122.127895][ T25] usb 11-1: Using ep0 maxpacket: 32 [ 122.135800][ T25] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 122.137987][ T25] usb 11-1: can't read configurations, error -61 [ 122.140052][ T25] usb usb11-port1: attempt power cycle [ 122.307788][ T8677] lo speed is unknown, defaulting to 1000 [ 122.497842][ T25] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 122.517816][ T5941] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 122.530411][ T25] usb 11-1: Using ep0 maxpacket: 32 [ 122.533817][ T25] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 122.535975][ T25] usb 11-1: can't read configurations, error -61 [ 122.667704][ T25] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 122.688293][ T25] usb 11-1: Using ep0 maxpacket: 32 [ 122.691385][ T25] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 122.694177][ T25] usb 11-1: can't read configurations, error -61 [ 122.696149][ T25] usb usb11-port1: unable to enumerate USB device [ 123.284069][ T8689] lo speed is unknown, defaulting to 1000 [ 123.398295][ T5941] Bluetooth: hci4: command 0x040f tx timeout [ 123.411177][ T8695] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 123.418575][ T8695] kvm: pic: level sensitive irq not supported [ 124.340887][ T8730] netlink: 96 bytes leftover after parsing attributes in process `syz.5.669'. [ 124.441508][ T8731] 9pnet_fd: Insufficient options for proto=fd [ 124.539107][ T8734] netlink: 'syz.6.671': attribute type 4 has an invalid length. [ 124.614010][ T77] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.736180][ T77] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.813415][ T77] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.823239][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.827120][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.830947][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.833415][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.835681][ T5953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.840751][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.864409][ T8778] lo speed is unknown, defaulting to 1000 [ 124.923371][ T77] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.940096][ T8778] chnl_net:caif_netlink_parms(): no params data found [ 125.005438][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.009776][ T8778] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.011801][ T8778] bridge_slave_0: entered allmulticast mode [ 125.013933][ T8778] bridge_slave_0: entered promiscuous mode [ 125.017031][ T8778] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.019046][ T8778] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.021043][ T8778] bridge_slave_1: entered allmulticast mode [ 125.023217][ T8778] bridge_slave_1: entered promiscuous mode [ 125.048567][ T8778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.053942][ T8778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.083517][ T8778] team0: Port device team_slave_0 added [ 125.102235][ T8778] team0: Port device team_slave_1 added [ 125.126908][ T8778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.128870][ T8778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.136714][ T8778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.142535][ T8778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.144589][ T8778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.151294][ T8778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.156733][ T77] bridge_slave_1: left allmulticast mode [ 125.158695][ T77] bridge_slave_1: left promiscuous mode [ 125.160226][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.162916][ T77] bridge_slave_0: left allmulticast mode [ 125.164399][ T77] bridge_slave_0: left promiscuous mode [ 125.167014][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.433899][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.438197][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.441983][ T77] bond0 (unregistering): Released all slaves [ 125.477256][ T8778] hsr_slave_0: entered promiscuous mode [ 125.479602][ T5941] Bluetooth: hci4: command 0x040f tx timeout [ 125.482163][ T8778] hsr_slave_1: entered promiscuous mode [ 125.484743][ T8778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.487239][ T8778] Cannot create hsr debugfs directory [ 125.606157][ T8778] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 125.609899][ T8778] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 125.613882][ T8778] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 125.617959][ T8778] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 125.695040][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.687'. [ 125.802262][ T8802] team0 (unregistering): Port device team_slave_0 removed [ 125.806138][ T8802] team0 (unregistering): Port device team_slave_1 removed [ 125.815622][ T39] kauditd_printk_skb: 78 callbacks suppressed [ 125.815634][ T39] audit: type=1400 audit(1730500773.955:967): avc: denied { setcheckreqprot } for pid=8809 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 125.819181][ T8811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.824396][ T8778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.836986][ T8809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.864871][ T77] hsr_slave_0: left promiscuous mode [ 125.866968][ T77] hsr_slave_1: left promiscuous mode [ 125.869448][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.871426][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.873825][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.875764][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.895027][ T77] veth1_macvtap: left promiscuous mode [ 125.896594][ T77] veth0_macvtap: left promiscuous mode [ 125.898605][ T77] veth1_vlan: left promiscuous mode [ 125.900025][ T77] veth0_vlan: left promiscuous mode [ 126.698955][ T77] team0 (unregistering): Port device team_slave_1 removed [ 126.784422][ T77] team0 (unregistering): Port device team_slave_0 removed [ 126.918605][ T5941] Bluetooth: hci1: command tx timeout [ 127.320850][ T8826] netlink: 'syz.0.692': attribute type 28 has an invalid length. [ 127.322433][ T39] audit: type=1400 audit(1730500775.475:968): avc: denied { setopt } for pid=8825 comm="syz.0.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.322953][ T8826] netlink: 'syz.0.692': attribute type 3 has an invalid length. [ 127.329699][ T8826] netlink: 132 bytes leftover after parsing attributes in process `syz.0.692'. [ 127.346196][ T8826] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.372273][ C0] sr 2:0:0:0: [sr0] tag#17 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 127.375030][ C0] sr 2:0:0:0: [sr0] tag#17 CDB: Xdwrite(16) 80 a3 3c 25 fa d6 ec c2 82 8d 87 d5 92 20 41 0a [ 127.425900][ T8778] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.443097][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.445325][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.455756][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.457814][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.461098][ T8831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8831 comm=syz.6.694 [ 127.465419][ T39] audit: type=1326 audit(1730500775.605:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.0.693" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96a6b7e719 code=0x0 [ 127.504192][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 127.583443][ T8778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.733102][ T8778] veth0_vlan: entered promiscuous mode [ 127.746464][ T8778] veth1_vlan: entered promiscuous mode [ 127.772532][ T8778] veth0_macvtap: entered promiscuous mode [ 127.779489][ T8778] veth1_macvtap: entered promiscuous mode [ 127.792398][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.797402][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.801240][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.805112][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.810518][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.816688][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.822383][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.827861][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.835517][ T8778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.847730][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.854014][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.860015][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.869908][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.874827][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.883495][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.888079][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.891247][ T39] audit: type=1400 audit(1730500776.035:970): avc: denied { write } for pid=8866 comm="syz.6.697" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.891437][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.907034][ T8778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.926038][ T8778] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.929651][ T8778] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.931797][ T8778] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.934047][ T8778] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.991541][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.993591][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.010396][ T8875] netlink: 24 bytes leftover after parsing attributes in process `syz.6.698'. [ 128.015889][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.017790][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.093903][ T39] audit: type=1400 audit(1730500776.235:971): avc: denied { setattr } for pid=8885 comm="syz.6.699" name="NETLINK" dev="sockfs" ino=27139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 128.300522][ T8898] netlink: 'syz.6.701': attribute type 29 has an invalid length. [ 128.309727][ T8898] netlink: 'syz.6.701': attribute type 29 has an invalid length. [ 128.313924][ T8898] netlink: 500 bytes leftover after parsing attributes in process `syz.6.701'. [ 128.316260][ T8898] unsupported nla_type 40 [ 128.447060][ T8912] gretap1: entered allmulticast mode [ 128.523780][ T8921] netlink: 88 bytes leftover after parsing attributes in process `syz.7.703'. [ 128.837731][ T1461] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 128.997815][ T5941] Bluetooth: hci1: command tx timeout [ 128.997894][ T1461] usb 11-1: Using ep0 maxpacket: 8 [ 129.013118][ T1461] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 129.015235][ T1461] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 129.027700][ T1461] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.030788][ T1461] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.033670][ T1461] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.042374][ T1461] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 129.044343][ T1461] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 129.047291][ T1461] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.051190][ T1461] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.053970][ T1461] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.057868][ T1461] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 129.059758][ T1461] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 129.062664][ T1461] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.065668][ T1461] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.068758][ T1461] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.073959][ T1461] usb 11-1: string descriptor 0 read error: -22 [ 129.075689][ T1461] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 129.078199][ T1461] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.088953][ T1461] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 129.097329][ T39] audit: type=1400 audit(1730500777.235:972): avc: denied { ioctl } for pid=8959 comm="syz.0.708" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 129.226889][ T8969] cgroup: fork rejected by pids controller in /syz0 [ 129.340877][ T9021] overlay: Bad value for 'metacopy' [ 129.453806][ T6000] usb 11-1: USB disconnect, device number 6 [ 129.509749][ T9064] netlink: 24 bytes leftover after parsing attributes in process `syz.7.714'. [ 129.654452][ T8915] overlayfs: failed to resolve './file1': -2 [ 129.928067][ T6000] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 129.932531][ T1139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.997256][ T1139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.052971][ T1139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.068024][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.071559][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.075065][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.080011][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.082369][ T5953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 130.084494][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.107658][ T6000] usb 9-1: Using ep0 maxpacket: 32 [ 130.110405][ T6000] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 130.110872][ T1139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.112582][ T6000] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 130.117733][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 130.120055][ T6000] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.122590][ T6000] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.125123][ T6000] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.125716][ T9118] lo speed is unknown, defaulting to 1000 [ 130.128624][ T6000] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 130.132570][ T6000] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.135952][ T6000] usb 9-1: config 0 descriptor?? [ 130.195594][ T9118] chnl_net:caif_netlink_parms(): no params data found [ 130.347137][ T6000] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 130.352036][ T6000] usb 9-1: USB disconnect, device number 6 [ 130.356823][ T6000] usblp0: removed [ 130.574328][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.580837][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.584730][ T1139] bond0 (unregistering): Released all slaves [ 130.590614][ T1139] bond1 (unregistering): Released all slaves [ 130.598569][ C3] ------------[ cut here ]------------ [ 130.600206][ C3] memcpy: detected field-spanning write (size 4) of single field "_Generic(info, const struct ip_tunnel_info * : ((const void *)((info) + 1)), struct ip_tunnel_info * : ((void *)((info) + 1)) )" at include/net/ip_tunnels.h:653 (size 0) [ 130.606148][ C3] WARNING: CPU: 3 PID: 34 at include/net/ip_tunnels.h:653 geneve_udp_encap_recv+0x22cd/0x29a0 [ 130.608780][ C3] Modules linked in: [ 130.610099][ C3] CPU: 3 UID: 0 PID: 34 Comm: ksoftirqd/3 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 130.610344][ T39] audit: type=1400 audit(1730500778.765:973): avc: denied { write } for pid=5927 comm="syz-executor" path="pipe:[5965]" dev="pipefs" ino=5965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 130.614346][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.622906][ C3] RIP: 0010:geneve_udp_encap_recv+0x22cd/0x29a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 130.624513][ C3] Code: 9e e9 ff ff e8 24 ca 53 fb c6 05 c4 65 0e 0a 01 90 31 c9 48 c7 c2 e0 3e 14 8c 4c 89 e6 48 c7 c7 c0 3f 14 8c e8 c4 b9 14 fb 90 <0f> 0b 90 90 e9 c7 ed ff ff e8 f5 c9 53 fb e8 80 8c c9 02 31 ff 41 [ 130.629392][ C3] RSP: 0018:ffffc900008df630 EFLAGS: 00010282 [ 130.630961][ C3] RAX: 0000000000000000 RBX: ffff888060da0f32 RCX: ffffffff814e6dd9 [ 130.633036][ C3] RDX: ffff88801e294880 RSI: ffffffff814e6de6 RDI: 0000000000000001 [ 130.635125][ C3] RBP: ffffc900008df750 R08: 0000000000000001 R09: 0000000000000000 [ 130.637299][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 130.639440][ C3] R13: ffff888032d57c00 R14: 0000000000000000 R15: ffff88804583ef00 [ 130.641499][ C3] FS: 0000000000000000(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 130.643766][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.645466][ C3] CR2: 00007fd1e8385f98 CR3: 000000004b406000 CR4: 0000000000352ef0 [ 130.647609][ C3] DR0: 00000000e0002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.649660][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.651682][ C3] Call Trace: [ 130.652508][ C3] [ 130.653269][ C3] ? __warn+0xea/0x3d0 [ 130.654323][ C3] ? geneve_udp_encap_recv+0x22cd/0x29a0 [ 130.655734][ C3] ? report_bug+0x3c0/0x580 [ 130.656899][ C3] ? handle_bug+0x54/0xa0 [ 130.658217][ C3] ? exc_invalid_op+0x17/0x50 [ 130.659494][ C3] ? asm_exc_invalid_op+0x1a/0x20 [ 130.660853][ C3] ? __warn_printk+0x199/0x350 [ 130.662141][ C3] ? __warn_printk+0x1a6/0x350 [ 130.663507][ C3] ? geneve_udp_encap_recv+0x22cd/0x29a0 [ 130.664980][ C3] ? __lock_acquire+0xbdd/0x3ce0 [ 130.666395][ C3] ? __pfx_geneve_udp_encap_recv+0x10/0x10 [ 130.668064][ C3] ? inet_lookup_reuseport+0xc9/0x150 [ 130.669516][ C3] ? udp4_lib_lookup2+0x4ea/0x8f0 [ 130.670868][ C3] ? udp4_lib_lookup2+0x39f/0x8f0 [ 130.672396][ C3] ? __pfx_geneve_udp_encap_recv+0x10/0x10 [ 130.673886][ C3] udp_queue_rcv_one_skb+0xad5/0x18c0 [ 130.675247][ C3] udp_queue_rcv_skb+0x198/0xd10 [ 130.676547][ C3] ? __udp4_lib_lookup+0x1ed/0x400 [ 130.677939][ C3] udp_unicast_rcv_skb+0x165/0x3b0 [ 130.679222][ C3] __udp4_lib_rcv+0x25fd/0x34e0 [ 130.680696][ C3] ? __pfx___udp4_lib_rcv+0x10/0x10 [ 130.680715][ C3] ? rcu_is_watching+0x12/0xc0 [ 130.680730][ C3] ? __pfx_udp_rcv+0x10/0x10 [ 130.680744][ C3] ip_protocol_deliver_rcu+0x2ff/0x4c0 [ 130.686240][ C3] ip_local_deliver_finish+0x316/0x570 [ 130.687664][ C3] ip_local_deliver+0x18e/0x1f0 [ 130.690271][ C3] ? __pfx_ip_local_deliver+0x10/0x10 [ 130.690291][ C3] ip_rcv+0x2c3/0x5d0 [ 130.690303][ C3] ? __pfx_ip_rcv+0x10/0x10 [ 130.694233][ C3] __netif_receive_skb_one_core+0x199/0x1e0 [ 130.694255][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 130.694271][ C3] ? trace_lock_acquire+0x14a/0x1d0 [ 130.694285][ C3] ? process_backlog+0x3f1/0x15f0 [ 130.694301][ C3] ? process_backlog+0x3f1/0x15f0 [ 130.694314][ C3] __netif_receive_skb+0x1d/0x160 [ 130.694331][ C3] process_backlog+0x443/0x15f0 [ 130.694350][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 130.694366][ C3] net_rx_action+0xa92/0x1010 [ 130.694384][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 130.694398][ C3] ? __print_lock_name+0x230/0x260 [ 130.694412][ C3] ? net_tx_action+0x7dd/0xd00 [ 130.694433][ C3] handle_softirqs+0x213/0x8f0 [ 130.694449][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 130.694461][ C3] ? rcu_is_watching+0x12/0xc0 [ 130.694475][ C3] ? __pfx_run_ksoftirqd+0x10/0x10 [ 130.694486][ C3] ? smpboot_thread_fn+0x59d/0xa30 [ 130.694497][ C3] run_ksoftirqd+0x3a/0x60 [ 130.694508][ C3] smpboot_thread_fn+0x661/0xa30 [ 130.694520][ C3] ? __kthread_parkme+0x148/0x220 [ 130.694533][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 130.694546][ C3] kthread+0x2c1/0x3a0 [ 130.694557][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.694571][ C3] ? __pfx_kthread+0x10/0x10 [ 130.694583][ C3] ret_from_fork+0x45/0x80 [ 130.694596][ C3] ? __pfx_kthread+0x10/0x10 [ 130.694610][ C3] ret_from_fork_asm+0x1a/0x30 [ 130.694630][ C3] [ 130.694636][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.694642][ C3] CPU: 3 UID: 0 PID: 34 Comm: ksoftirqd/3 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 130.694654][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.694660][ C3] Call Trace: [ 130.694664][ C3] [ 130.694668][ C3] dump_stack_lvl+0x3d/0x1f0 [ 130.694688][ C3] panic+0x71d/0x800 [ 130.694703][ C3] ? __pfx_panic+0x10/0x10 [ 130.694716][ C3] ? show_trace_log_lvl+0x29d/0x3d0 [ 130.694731][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 130.694745][ C3] ? geneve_udp_encap_recv+0x22cd/0x29a0 [ 130.694759][ C3] check_panic_on_warn+0xab/0xb0 [ 130.694773][ C3] __warn+0xf6/0x3d0 [ 130.694786][ C3] ? geneve_udp_encap_recv+0x22cd/0x29a0 [ 130.694799][ C3] report_bug+0x3c0/0x580 [ 130.694814][ C3] handle_bug+0x54/0xa0 [ 130.694824][ C3] exc_invalid_op+0x17/0x50 [ 130.694834][ C3] asm_exc_invalid_op+0x1a/0x20 [ 130.694847][ C3] RIP: 0010:geneve_udp_encap_recv+0x22cd/0x29a0 [ 130.694862][ C3] Code: 9e e9 ff ff e8 24 ca 53 fb c6 05 c4 65 0e 0a 01 90 31 c9 48 c7 c2 e0 3e 14 8c 4c 89 e6 48 c7 c7 c0 3f 14 8c e8 c4 b9 14 fb 90 <0f> 0b 90 90 e9 c7 ed ff ff e8 f5 c9 53 fb e8 80 8c c9 02 31 ff 41 [ 130.694871][ C3] RSP: 0018:ffffc900008df630 EFLAGS: 00010282 [ 130.694880][ C3] RAX: 0000000000000000 RBX: ffff888060da0f32 RCX: ffffffff814e6dd9 [ 130.694887][ C3] RDX: ffff88801e294880 RSI: ffffffff814e6de6 RDI: 0000000000000001 [ 130.694894][ C3] RBP: ffffc900008df750 R08: 0000000000000001 R09: 0000000000000000 [ 130.694900][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 130.694906][ C3] R13: ffff888032d57c00 R14: 0000000000000000 R15: ffff88804583ef00 [ 130.694916][ C3] ? __warn_printk+0x199/0x350 [ 130.694929][ C3] ? __warn_printk+0x1a6/0x350 [ 130.694943][ C3] ? __lock_acquire+0xbdd/0x3ce0 [ 130.694957][ C3] ? __pfx_geneve_udp_encap_recv+0x10/0x10 [ 130.694969][ C3] ? inet_lookup_reuseport+0xc9/0x150 [ 130.694982][ C3] ? udp4_lib_lookup2+0x4ea/0x8f0 [ 130.694994][ C3] ? udp4_lib_lookup2+0x39f/0x8f0 [ 130.695005][ C3] ? __pfx_geneve_udp_encap_recv+0x10/0x10 [ 130.695018][ C3] udp_queue_rcv_one_skb+0xad5/0x18c0 [ 130.695032][ C3] udp_queue_rcv_skb+0x198/0xd10 [ 130.695044][ C3] ? __udp4_lib_lookup+0x1ed/0x400 [ 130.695056][ C3] udp_unicast_rcv_skb+0x165/0x3b0 [ 130.695069][ C3] __udp4_lib_rcv+0x25fd/0x34e0 [ 130.695087][ C3] ? __pfx___udp4_lib_rcv+0x10/0x10 [ 130.695100][ C3] ? rcu_is_watching+0x12/0xc0 [ 130.695112][ C3] ? __pfx_udp_rcv+0x10/0x10 [ 130.695125][ C3] ip_protocol_deliver_rcu+0x2ff/0x4c0 [ 130.695138][ C3] ip_local_deliver_finish+0x316/0x570 [ 130.695151][ C3] ip_local_deliver+0x18e/0x1f0 [ 130.695161][ C3] ? __pfx_ip_local_deliver+0x10/0x10 [ 130.695172][ C3] ip_rcv+0x2c3/0x5d0 [ 130.695182][ C3] ? __pfx_ip_rcv+0x10/0x10 [ 130.695192][ C3] __netif_receive_skb_one_core+0x199/0x1e0 [ 130.695205][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 130.695219][ C3] ? trace_lock_acquire+0x14a/0x1d0 [ 130.695231][ C3] ? process_backlog+0x3f1/0x15f0 [ 130.695246][ C3] ? process_backlog+0x3f1/0x15f0 [ 130.695259][ C3] __netif_receive_skb+0x1d/0x160 [ 130.695272][ C3] process_backlog+0x443/0x15f0 [ 130.695288][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 130.695303][ C3] net_rx_action+0xa92/0x1010 [ 130.695321][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 130.695334][ C3] ? __print_lock_name+0x230/0x260 [ 130.695347][ C3] ? net_tx_action+0x7dd/0xd00 [ 130.695367][ C3] handle_softirqs+0x213/0x8f0 [ 130.695380][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 130.695392][ C3] ? rcu_is_watching+0x12/0xc0 [ 130.695403][ C3] ? __pfx_run_ksoftirqd+0x10/0x10 [ 130.695413][ C3] ? smpboot_thread_fn+0x59d/0xa30 [ 130.695424][ C3] run_ksoftirqd+0x3a/0x60 [ 130.695434][ C3] smpboot_thread_fn+0x661/0xa30 [ 130.695445][ C3] ? __kthread_parkme+0x148/0x220 [ 130.695457][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 130.695469][ C3] kthread+0x2c1/0x3a0 [ 130.695479][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.695491][ C3] ? __pfx_kthread+0x10/0x10 [ 130.695503][ C3] ret_from_fork+0x45/0x80 [ 130.695511][ C3] ? __pfx_kthread+0x10/0x10 [ 130.695523][ C3] ret_from_fork_asm+0x1a/0x30 [ 130.695541][ C3] [ 130.696134][ C3] Kernel Offset: disabled VM DIAGNOSIS: 04:23:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=1ffff9200076df56 RCX=ffffc9002de93000 RDX=dffffc0000000000 RSI=00000000000002ae RDI=ffffffff8ca1bec0 RBP=0000000000000001 RSP=ffffc90003b6faa0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888032f56c10 R13=0000000000000000 R14=ffffc90005b3b000 R15=0000000000000001 RIP=ffffffff815c4403 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fda3dbe76c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fda3daa5d58 CR3=0000000030892000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff438ed6b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4dd03f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4dd03f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4dd03f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4dd03f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4dd03f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4dd03f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49425f444c004854 41005f5952415242 494c5f444c005f00 656d65675f6b6364 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000362e3200414e 41004c004c005042 494c444449004600 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=00000000000000ee RCX=ffffffff816da47a RDX=ffff88801bb2a440 RSI=ffffffff816da466 RDI=0000000000000001 RBP=1ffff9200012ef7f RSP=ffffc90000977be8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000200 R14=ffff88801e294880 R15=ffffc90000977cd0 RIP=ffffffff816da468 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe00dadf30 CR3=0000000026504000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000044402 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c57f0c6a3 00007f6c57f0c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe00db0130 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556711a4a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555671934c2 0000555567192de0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe00db05a4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e676973206e77 6f6e6b6e75000a29 7325203a6425206f 6e7272652820000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b424c56054b52 4a4b4e4b50000a0c 5600051f4100054a 4b5757400d05000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9803000800119003 0008001188030100 000a080611800301 9010000004001000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101901000118004 141000060101ee00 0800129003000800 1288030008001280 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0303ffffffff0411 f003000208000300 0411e00300080011 d8030190080011d0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080011c80310 808080080011c003 03ffffffff0411b0 0303ffffffff0411 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a003000800119803 0008001190030008 001188030100000a 0806118003019010 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000225519 RBX=0000000000000002 RCX=ffffffff8b2325d9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1adc0 RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f5388 R15=0000000000000000 RIP=ffffffff8b2339bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fda3daa4f98 CR3=00000000537de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe68b4ebb0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda3cdf21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda3cdf21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda3cdf21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda3cdf21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda3cdf226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda3cdf234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49425f444c004854 41005f5952415242 494c5f444c005f00 656d65675f6b6364 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000362e3200414e 41004c004c005042 494c444449004600 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b5025 RDI=ffffffff9aaeac00 RBP=ffffffff9aaeabc0 RSP=ffffc900008def98 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff850b4fc0 R15=0000000000000000 RIP=ffffffff850b504f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd1e8385f98 CR3=000000004b406000 CR4=00352ef0 DR0=00000000e0002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced826320 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e75f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e75f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e75f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e75f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e75f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e75f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ac ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000ac ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49425f444c004854 41005f5952415242 494c5f444c005f00 656d65675f6b6364 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000362e3200414e 41004c004c005042 494c444449004600 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000