last executing test programs: 17.065721614s ago: executing program 0 (id=287): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x51, 0xa, 0xdf7b7a5625e873df, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20", 0x48524742}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x115) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket(0x1, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000180), &(0x7f00000000c0)=@tcp=r7}, 0x20) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x101000, 0x40) chdir(&(0x7f0000000080)='./file1\x00') r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r10, &(0x7f0000000300)="ca", 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 16.946151069s ago: executing program 0 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r3, 0x203, 0x70bd2a, 0x25dfdc01, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4e808}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x28, r7, 0x1, 0x60bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x80) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fffffff, 0x3e}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c880}, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000140)=""/12, 0xc, 0x7, &(0x7f0000000280)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="5e9b0e1771f05f4ea1b55461d67e2eaf9b83f6668a4b329b06d7e1e2c91ea75da1814d65284e583247ee58882ff527738adac30f909baa31f072ac91c3d100b97ba528d80acbff5cf306c40ab66a52a2aee41c971cb61359b55797e419c2a9f6a5645adf0ef8c490508e3b852f94a60000000000000000", @ANYRES16=r10, @ANYBLOB="000329bd7000ffdbdf252800000006000400a1aa000006000400000000000c0005000200aaaaaaaaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0x10001000}, 0x80800) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, 0x0, &(0x7f0000001540)) ioctl$VHOST_SET_FEATURES(r11, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r11, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000380)=""/251, 0xfffffffffffffd8b, 0x0, 0x3, 0x2}}, 0x48) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r9) sendmsg$NFC_CMD_DEP_LINK_DOWN(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, r14, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24044040) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 16.0623386s ago: executing program 0 (id=303): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000700000000000000080000fb18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000004000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0xfffffffc, 0xea, &(0x7f0000000540)=""/234, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x20005, 0x1, 0xfffffff8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000680)=[{0x1, 0x5, 0xa, 0x3}, {0x1, 0x1, 0xb}, {0x5, 0x5, 0x10, 0x5}, {0x3, 0x4, 0xe, 0x7}, {0x4, 0x5, 0x10, 0x3}], 0x10, 0x3}, 0x94) close_range(r1, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000340)=0x7) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x2410804, &(0x7f0000000040)) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x101000, 0x10b) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) (async) ptrace$setregset(0x4205, r3, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) r5 = syz_open_procfs(r3, &(0x7f00000001c0)='net/rpc\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020, 0x0, 0x0}, 0x2020) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) write$FUSE_INIT(r5, &(0x7f00000002c0)={0x50, 0x0, r6, {0x7, 0x2b, 0x5, 0x10008010, 0x8, 0x4, 0x91, 0x80000000, 0x0, 0x0, 0x49, 0x1000}}, 0x50) r7 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) (async) r8 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000c, 0x4008031, r8, 0x1c5ed000) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x30, 0x0, 0x0}) (async) r9 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000000)={0x0, [[0x7fff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x0, 0x2, 0xc000, 0x5], [0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0x2]], '\x00', [{}, {}, {0x0, 0x1}, {0xffffffff, 0x1}, {0x5f08, 0x6}, {}, {}, {}, {}, {0x4, 0x8}, {0x0, 0xfffffffc}, {0x0, 0x8000}], '\x00', 0x0, 0x0, 0x0, 0x2}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x5, [{0x4, 0x1, 0x3}, {0x0, 0x1, 0x1}]}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42, 0x0, 0x1, 0xfffffc00}, 0x20) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000040)=""/102) 16.005583134s ago: executing program 0 (id=305): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2300, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x3, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x3031334d}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r8, 0x0, 0x0) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) r11 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) r12 = fcntl$getown(r3, 0x9) waitid(0x1, r12, 0x0, 0x1, 0x0) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x0, {0xffffffffffffffff}}, 0x20000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061112c0000000000c6000000000001019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 15.925480095s ago: executing program 0 (id=307): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) (async) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000100001040400"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000003800128009000100766c616e00000000280002801c0004800c00010000000100080000000c0001000800000000000000060001000300000008000500", @ANYRES32=r3, @ANYBLOB="cec421103b675b98a57378e30ecd39b07cfbe0b66c64af901793822723d026f41d6e3e293658d5868ea5faac2c9f9111dcc1914e6b476cdb0caf9923dbb965debc5b763fa324e5be1b196e755840f4a3737f7854f0cab443d4f342b51b716a3cb7031d4002c95d4240a64e493f408bc3981f891d94cee60c4d381620ac9bf1072f31bd9e7848"], 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) mlock(&(0x7f0000642000/0x4000)=nil, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x20000059}, 0x80) 15.564912025s ago: executing program 0 (id=319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7a}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_IE={0xf0, 0x2a, [@random_vendor={0xdd, 0xae, "6ed709988c56346512d2ed28079da4fb324823c2e734c1be53f086c939ef1b109ebe1321f2254e2370411a69a2b8c5883a08a9a2255b41d72c6cd41561e0a596565195767ea67691146df9f6bde273cfdbb7f6773e6c6c89708633867843bb287c1c45422ca43c4100c5def3302b341e49e6bbc576049804f1b81c7119041fa39763db3e544b4364c76c0963fc5c62f98ba3505cb56bc5660996bbcc40f857348631686260f7cb25bb37ff348c86"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xb, 0xfb, @broadcast, 0x0, @value=@broadcast, 0x8, 0x6a, @broadcast, 0x96}}, @gcr_ga={0xbd, 0x6}, @ssid={0x0, 0xb, @random="14a4623254062582f3c6fc"}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x0, 0x0, 0x0, {0x10, 0xff, 0x0, 0xe, 0x0, 0x0, 0x1, 0x2}, 0x0, 0x3a32, 0x4}}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x11, 0x24, [{0x16, 0x1}, {0x18}, {0x16}, {0x4}, {0x1, 0x1}, {0x6, 0x1}, {0x1b}, {0x18, 0x1}, {0x30}, {0x12}, {0x9, 0x1}, {0x6c}, {0x4, 0x1}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x24001014) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$sock(r3, &(0x7f0000000240)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00', 0x1000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="8c0da6b473e86f169fe713e1858a51205b19b6a0ff946f637cdb13f4a697d699944ab78c12bed4fa3ab79985ada71597cbab748039b8d85f1799aaa4e691f09993826e695f8cf439163f9ec2ae09c2fa3b5678e921a17c0c7d931e1a0486c363f474d2f6e44794", 0x67}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0xfffff78e}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}, 0x20048025) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7a}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_IE={0xf0, 0x2a, [@random_vendor={0xdd, 0xae, "6ed709988c56346512d2ed28079da4fb324823c2e734c1be53f086c939ef1b109ebe1321f2254e2370411a69a2b8c5883a08a9a2255b41d72c6cd41561e0a596565195767ea67691146df9f6bde273cfdbb7f6773e6c6c89708633867843bb287c1c45422ca43c4100c5def3302b341e49e6bbc576049804f1b81c7119041fa39763db3e544b4364c76c0963fc5c62f98ba3505cb56bc5660996bbcc40f857348631686260f7cb25bb37ff348c86"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xb, 0xfb, @broadcast, 0x0, @value=@broadcast, 0x8, 0x6a, @broadcast, 0x96}}, @gcr_ga={0xbd, 0x6}, @ssid={0x0, 0xb, @random="14a4623254062582f3c6fc"}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x0, 0x0, 0x0, {0x10, 0xff, 0x0, 0xe, 0x0, 0x0, 0x1, 0x2}, 0x0, 0x3a32, 0x4}}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x11, 0x24, [{0x16, 0x1}, {0x18}, {0x16}, {0x4}, {0x1, 0x1}, {0x6, 0x1}, {0x1b}, {0x18, 0x1}, {0x30}, {0x12}, {0x9, 0x1}, {0x6c}, {0x4, 0x1}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x24001014) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) sendmsg$sock(r3, &(0x7f0000000240)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00', 0x1000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="8c0da6b473e86f169fe713e1858a51205b19b6a0ff946f637cdb13f4a697d699944ab78c12bed4fa3ab79985ada71597cbab748039b8d85f1799aaa4e691f09993826e695f8cf439163f9ec2ae09c2fa3b5678e921a17c0c7d931e1a0486c363f474d2f6e44794", 0x67}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0xfffff78e}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}, 0x20048025) (async) 15.470611845s ago: executing program 32 (id=319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7a}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_IE={0xf0, 0x2a, [@random_vendor={0xdd, 0xae, "6ed709988c56346512d2ed28079da4fb324823c2e734c1be53f086c939ef1b109ebe1321f2254e2370411a69a2b8c5883a08a9a2255b41d72c6cd41561e0a596565195767ea67691146df9f6bde273cfdbb7f6773e6c6c89708633867843bb287c1c45422ca43c4100c5def3302b341e49e6bbc576049804f1b81c7119041fa39763db3e544b4364c76c0963fc5c62f98ba3505cb56bc5660996bbcc40f857348631686260f7cb25bb37ff348c86"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xb, 0xfb, @broadcast, 0x0, @value=@broadcast, 0x8, 0x6a, @broadcast, 0x96}}, @gcr_ga={0xbd, 0x6}, @ssid={0x0, 0xb, @random="14a4623254062582f3c6fc"}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x0, 0x0, 0x0, {0x10, 0xff, 0x0, 0xe, 0x0, 0x0, 0x1, 0x2}, 0x0, 0x3a32, 0x4}}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x11, 0x24, [{0x16, 0x1}, {0x18}, {0x16}, {0x4}, {0x1, 0x1}, {0x6, 0x1}, {0x1b}, {0x18, 0x1}, {0x30}, {0x12}, {0x9, 0x1}, {0x6c}, {0x4, 0x1}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x24001014) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$sock(r3, &(0x7f0000000240)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00', 0x1000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="8c0da6b473e86f169fe713e1858a51205b19b6a0ff946f637cdb13f4a697d699944ab78c12bed4fa3ab79985ada71597cbab748039b8d85f1799aaa4e691f09993826e695f8cf439163f9ec2ae09c2fa3b5678e921a17c0c7d931e1a0486c363f474d2f6e44794", 0x67}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0xfffff78e}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}, 0x20048025) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7a}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_IE={0xf0, 0x2a, [@random_vendor={0xdd, 0xae, "6ed709988c56346512d2ed28079da4fb324823c2e734c1be53f086c939ef1b109ebe1321f2254e2370411a69a2b8c5883a08a9a2255b41d72c6cd41561e0a596565195767ea67691146df9f6bde273cfdbb7f6773e6c6c89708633867843bb287c1c45422ca43c4100c5def3302b341e49e6bbc576049804f1b81c7119041fa39763db3e544b4364c76c0963fc5c62f98ba3505cb56bc5660996bbcc40f857348631686260f7cb25bb37ff348c86"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xb, 0xfb, @broadcast, 0x0, @value=@broadcast, 0x8, 0x6a, @broadcast, 0x96}}, @gcr_ga={0xbd, 0x6}, @ssid={0x0, 0xb, @random="14a4623254062582f3c6fc"}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x0, 0x0, 0x0, {0x10, 0xff, 0x0, 0xe, 0x0, 0x0, 0x1, 0x2}, 0x0, 0x3a32, 0x4}}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x11, 0x24, [{0x16, 0x1}, {0x18}, {0x16}, {0x4}, {0x1, 0x1}, {0x6, 0x1}, {0x1b}, {0x18, 0x1}, {0x30}, {0x12}, {0x9, 0x1}, {0x6c}, {0x4, 0x1}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x24001014) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) sendmsg$sock(r3, &(0x7f0000000240)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00', 0x1000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="8c0da6b473e86f169fe713e1858a51205b19b6a0ff946f637cdb13f4a697d699944ab78c12bed4fa3ab79985ada71597cbab748039b8d85f1799aaa4e691f09993826e695f8cf439163f9ec2ae09c2fa3b5678e921a17c0c7d931e1a0486c363f474d2f6e44794", 0x67}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0xfffff78e}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}, 0x20048025) (async) 3.145827165s ago: executing program 4 (id=504): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/75, &(0x7f0000000100)=0x4b) 3.025877264s ago: executing program 4 (id=505): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x48}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) syz_emit_ethernet(0x249, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) 2.974652343s ago: executing program 4 (id=507): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x81002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="3b6ec9656cd5a42a1347d2df488c01b6be427295a96ace4e0abaa73fe426e29b8961d545ada6273d20a832fca160e1049c725545d41ba0a1a15bf61c3dc5c5675a8523a600ddfd7a27aba884cbd7fa76f0ad8965542c54d90b2223", 0x5b}], 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r4, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96a}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r5, r6, 0x3, 0x0, 0x0, 0xfffffffd, {0xac79, 0x1, 0x3, 0x67, 0xf4b, 0x4, 0x2, 0x5, 0x412e, 0xe154, 0x1004, 0x7f, 0x0, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 2.969788895s ago: executing program 4 (id=509): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x3a}, {@rand_addr=0x64010105, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) syz_emit_vhci(&(0x7f00000014c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7a}, "43dec32c0b227d2c1835132dc09256771b64d87c21c14b7dbaba8d517555c73c0cf69807076b06641d5650fa88bd54645db0b79c26282f3ab3d238dc5ac830077c9ecbe197bdf1660282d5b9111ca79e2d085faa715754f1d245fc0fba7795c1d10ad561f8551bfece55d867d7085003311a6910726b11a7e144"}, 0x7e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="b88ae0e1a8020a7195d7b34e0bc6c472443135089078fa4a6fdcad1a1b32d0906000e286a24717edfac224d6f55d7ee07b3abf7df7dfbef4535ca68305b9ec890b9403b858a98b468f525cb88196e3175430f4b7a68b500f7e539d94d5b5f8ea75882656971b1cf79c0cf65dbf50055661fc4246da94171b535e2fe5dc02d604a743d17e3486d014122f1646335ebbfdcd023ffc270b3856902b29e5c8ec25fdb052db5f38cae7080c09bd47029e8d249e51f535398e3b38ed416807ff6df760f3101b05eac945c208c8ef55644ce9ed327f7bce8b5cf2791c2cc7d828", 0xdd}, {&(0x7f0000000240)="557c3096e3eb4697ecf5d1abe35c025a302cd51857406580fa809dcb44e8c57d90dafaa9169a9e9721944d7cc45dfb132c2d0e0ffb367c3a5b799efb7e0953d240e3a3fcd3b8bb90b1d924efeca10eddb0470d2d64337411d22c656678c8c0f0ba55c2bfa4e377603020c5a7816ac1e038ae2c959f19697687050ab2c959b0df81120f361ec676723773840f3584421223101585ec89369041e429ccdcaac113a444b7a2a8538b3810e655d8836da62ed64d1c730e0acf0eb89a454573e028c1077c76d9a5ebd3e11a0cbd74d95e6f66ba44b5fd90ca", 0xd6}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="8fd49540ff6b3284a3935a64ab869152a2ee4b5556bd4b40255f38f0a4c8dbb0795d389bbf0dfdcceba2869b21c1eed6c8f0fdb9b739ccfeafb7c72f07ee1f2f105aa84451386133c6cbdf5ff32e628272a2cdd344bfb6ff698eb3a8ae0e895312dd412867d877f3c161600e9237fa5ee966827772604edffeaea9369450785b32200f5dec37428ed70fe36dfa296c2e57da4f80490a", 0x96}], 0x4, &(0x7f0000001400)}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0xfeb0, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000000)=0x8, 0x4) open(0x0, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000001400)={0xc, 0xd58}, &(0x7f0000001480)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000280)="b8ea3e97e70f23c00f21f835000009000f23f8c4e27d5abdf60000000f01df2e26f3a7b94e0600000f32440f20c03507000000440f22c0c4c2791822b9800000c00f3235002000000f309a010000000801b9800000c00f3235008000000f30", 0x5f}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @local, @loopback}, 0xc) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.676165457s ago: executing program 4 (id=514): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_emit_ethernet(0xfffffffffffffdc6, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000006c0)={0x1, &(0x7f0000000600)=[{0x0, 0x0, 0x0, @remote}]}) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xa}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x44044) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000004c0)=0x1, 0x4) (async) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000004c0)=0x1, 0x4) 2.675701067s ago: executing program 4 (id=516): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r4, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x140, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @empty, 0xff}, 0x1c) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r5, &(0x7f0000000240), 0xfdef) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000140)=[{r6, 0x8000}], 0x1, 0x9) 1.994078152s ago: executing program 2 (id=538): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x74}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x81, 0x4) sendto$inet(r0, &(0x7f0000000200)="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", 0x145, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) 1.895667562s ago: executing program 2 (id=539): getrusage(0x1, &(0x7f0000000340)) setitimer(0x2, &(0x7f0000000000)={{0x0, 0xea60}}, &(0x7f0000000040)) getcwd(&(0x7f0000000200)=""/197, 0xc5) 1.894354276s ago: executing program 2 (id=541): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r2 = socket(0x29, 0x3, 0x37) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2000000000000, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04050400c900014ebff542"], 0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002f80)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x3, 0x20000000, 0x4) 1.125543364s ago: executing program 1 (id=547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x20, 0x1402, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x80) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth0_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0x200, 0x7f, 0x5b, 0x7, 0xd951, 0x10001, 0x9, 0x8}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x91) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="460f01c8f3420f5f8a00500000c4c1f058d048b800380000000000000f23c00f21f835020004000f23f8670f01cb0f011d00000000410f01d167410f01f8b9800000c00f3235000100000f302e260f07", 0x50}], 0x1, 0x76, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 944.657136ms ago: executing program 2 (id=548): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001200ab99"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) r2 = syz_open_dev$vbi(&(0x7f0000000400), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) read(r1, &(0x7f0000000500)=""/134, 0x21) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = dup(r4) setns(r5, 0x24020000) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000440)={0x5, r0, 0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x8, 0x3, 0x10000, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) r6 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\x01\x00\x00\x00\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xbaL\xd3#\x87|J\xb9\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\x00\x00\x00\x00\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9Z\xd9G\xb6K[\x94\xfd^\xdd\x04\xa1\x83U\x900}!\x8b\x0e,M\xc0D\x15\x02\xde\xda', 0x0) fallocate(r6, 0x0, 0x0, 0x400001) ioctl$FS_IOC_RESVSP(r6, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x100000001}) dup(r6) 880.890537ms ago: executing program 1 (id=549): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000400)={r2, 0x80000000, 0x1, 0xada0000, 0x1, [], [0x4, 0x7f, 0x6, 0x9], [0x7ff, 0xfff, 0x3, 0x5], [0xa, 0x7, 0x9, 0xd]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r5, r5], &(0x7f0000000280)=[0x8a, 0xceea], 0x2}) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r7 = syz_open_procfs(0x0, &(0x7f0000001040)='net/packet\x00') pread64(r7, &(0x7f0000000000)=""/232, 0xe8, 0x40) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) mmap(&(0x7f00006eb000/0x3000)=nil, 0x3000, 0x1000002, 0x1010, r6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 879.861545ms ago: executing program 1 (id=550): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x400003e, 0x71, 0xfffffffd}) close(r0) 823.463241ms ago: executing program 1 (id=552): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f0000000140)={@lba=0x6, 0x1, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x80010, r1, 0xce2b000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x42, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x10001, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) listen(r3, 0x9) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r6, &(0x7f0000000240)='ns/pid_for_children\x00') sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x98, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0x82, 0x6, "c1a1c52dcd42b3ea82fe3a51a7f38c88aff923f073a2d0c11ee6e8cbbf0cfc2cc1ab4988785e3bf552686303cecc1741560ee0e074296979dad90420c71cd07512a1a66f3295c40e0fce4740b147be672bb3165fed8a71b28ce26c32f000f4efac97e3c0d8aa172dc06744d7b8a036353e21772693e2fba9f40d383e5e97"}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x144}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x3) 424.655525ms ago: executing program 3 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800900010069706970000000001c00028008000100", @ANYRES32=r1, @ANYBLOB="08fde8590c2d2c34ad00140007003cd2e8cc20a1bb47e90000000002000000000000"], 0x4c}}, 0x80) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f000071a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = msgget(0x3, 0x1) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/192) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x3a, 0x0, &(0x7f0000000340)) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="a11fa81b133d", 0x0, 0x0, 0x0, 0x0, 0x0}) write$vhost_msg(0xffffffffffffffff, &(0x7f0000001cc0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) 343.416625ms ago: executing program 3 (id=559): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'dummy0\x00', {0x2}}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x60, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x46}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x454, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_DESC={0x3a8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x138, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2cba98f5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x339}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5737}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x198, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf274}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x83}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5ed}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xefaf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd1f4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe1e}]}]}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb403}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x647}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3a5e5da7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x61e6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4e40bdce}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x86f7b3c}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xfc}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xd8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x7fff}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELSET={0xd8, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0x92, 0xd, 0x1, 0x0, "297ad99fd45e24be516a179fd86930eb546bf7759ef2314800c63a79d8b3293d21545727ca9769e5f51c974e867bd92e88e71b8d3ce480272ee5d31134f613b2c0c1989ab48edb01744a0e7759f8b80a6ec03cfdd29f482f7f98010acc2d6c6a58726e28baa896cd3fb8fb22d06b785c248f72c49a5312bc226d90773748c5eb9c35c6dd05deedae864b9929cfc6"}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, '\r'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0xdc, 0x8, 0xa, 0x900, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0xc8, 0x7, 0x1, 0x0, "ecd3d032a440b61983279ff8da2ef1260d1c976a4f5f880ae851f2a2195c748c1704b3405534080da25a70e841b81d5965ed593a6554fb2c96a146017d2d1cfffb8a63f36ffb9d0c781b14ea285e69ba0ea69c5ab5e36235fdb6bd48805f72fc4e1b74b0f39fc41991cf930518c182440514da3992c5d646c1eecc2e938f1b789801f448eea00f3fa2ea51a1993cc19e9e1ae61dc0a4dabc567243c3689882c0f3a15d44e0dafed961d7406e5e50005847a3dfa710fd573a52fc96fe95db124c7f9b7a6d"}]}, @NFT_MSG_DELRULE={0x9c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x77c}, 0x1, 0x0, 0x0, 0x1}, 0x4040018) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000009c0)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a00)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000880)="74217399fe03625ad45b522cf6e8920bb251164f2b4e3229d5809392e98dc378dc09a58f43abc6d1bf2912ef3aace6c9f97a0abe75f222244dd6e6d3ae368f08b519fbeb5f826453db349dcb3416e2656a6376e1c345453cbd7788a829a28d1b894c217a5f9ed3471b90d539d4d1f9603e26a80bf30074c18058f024e984803ae7d7fd4c3be9ea1d8234b43cc15a5197ac15e62826515d1811afa8ad8dc0d6363cbfc64d544ba8dd3d76dd86798b14c35f53272fe643f974aa1c84f5480e3ed02fbc8d775a4bb73c9f1458fb6b35f2e5623cc0", 0xd3, r0}, 0x68) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000a80)={0x0, 0x0, r0}) (async) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000ac0)) (async) close_range(r0, r0, 0xa062b3f1adf2ba68) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000b00), 0x40, 0x0) (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x105000, 0x82) close(r1) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000b80)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000c00)={0x20, r2, 0x3, 0x0, &(0x7f0000000bc0)=[{}, {}, {}]}) (async) r3 = socket$inet(0x2, 0x0, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000c40)=""/177, &(0x7f0000000d00)=0xb1) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000d40)={0x1, @pix_mp={0xffff, 0x0, 0x20363159, 0x6, 0x4, [{0x8, 0x3}, {0x1, 0x5}, {0x7614, 0x9}, {0x9}, {0x9}, {0x3, 0x3}, {0x40d0, 0x200}, {0xa70, 0xcaa}], 0x6, 0x9, 0x6, 0x1, 0x3}}) (async) syz_clone3(&(0x7f0000001100)={0x28081000, &(0x7f0000000e40), &(0x7f0000000e80), &(0x7f0000000ec0)=0x0, {0x2a}, &(0x7f0000000f00)=""/132, 0x84, &(0x7f0000000fc0)=""/209, &(0x7f00000010c0)=[0x0, 0x0], 0x2}, 0x58) fcntl$setownex(r0, 0xf, &(0x7f0000001180)={0x1, r4}) (async) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000ffd000/0x3000)=nil) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000011c0)={0x18, r2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001200)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000001400)=r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = signalfd4(r6, &(0x7f0000001480)={[0x8000000000000000]}, 0x8, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000015c0)={&(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0], 0x4, 0x1, 0x3, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001700)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0], 0x4, 0x1, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000001840)={&(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001780)=[0x0, 0x0], &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0xa, 0x2, 0x2, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000001980)={&(0x7f0000001880)=[0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0], &(0x7f0000001940)=[0x0], 0x2, 0x6, 0x2, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000001ac0)={&(0x7f00000019c0)=[0x0], &(0x7f0000001a00)=[0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0], 0x1, 0x1, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000001c00)={&(0x7f0000001b00)=[0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0], &(0x7f0000001b80)=[0x0, 0x0], &(0x7f0000001bc0)=[0x0], 0x3, 0x1, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001d80)={&(0x7f0000001c40)=[r8, r9, r10, 0x0, r11, r12, r13], 0x7, 0x0, 0x0, 0xe, 0x8, 0x1, 0xf, {0x2, 0x5, 0x4, 0x7ff, 0x7f, 0x3, 0xffff, 0xe5, 0x7ff, 0x4, 0x81, 0x4, 0x39ce, 0x0, "0df44c900cc5507f5fbcfe6692360487dd46bc083b3dd05c7c75a5fd987941db"}}) 234.307436ms ago: executing program 3 (id=560): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @string=0x0}}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x5) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0xc0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x400, 0x33}}}}]}, 0x44}}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0xc, 0x1, 0x3}}, @TCA_GRED_PARMS={0x38, 0x1, {0x7ff, 0x800, 0xb, 0xd, 0x4, 0x8, 0x4c, 0x7, 0x4, 0x0, 0x14, 0x12, 0x1a, 0xbc, 0x7f, 0x8}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 85.631709ms ago: executing program 2 (id=561): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff04) (async) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000001c0)={0x0, 0x7}, 0x2) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x41) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(r2, &(0x7f0000000680)={'#! ', './file0'}, 0xb) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x5], 0x0, 0x0, 0x1}}, 0x40) 85.311276ms ago: executing program 3 (id=562): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x45, &(0x7f0000000640), 0x4) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r3 = accept(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) (async) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000300)=""/92, 0x5c}], 0x1}, 0x30845aa81b583fca) (async) pread64(r0, &(0x7f0000000140)=""/4075, 0xfeb, 0x7fff) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1e88c1, 0x0) 81.354786ms ago: executing program 3 (id=563): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x42, [0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0xfffd], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x0) 1.420302ms ago: executing program 2 (id=564): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="80fd02000040f31a3e66db3455628d56ccb9f9f0847411ab9851b3f921d017002ee575328d10edd7a94e25407eb75fa5fd86a39a0700e1938746c1472648be17f47b", 0x42}], 0x1, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) fcntl$addseals(r1, 0x409, 0x7) (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x1, 0x0, 0x0}) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) read(r4, 0x0, 0x57) (async) r5 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) socketpair(0x10, 0x1, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000300)=""/7, 0x7}) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) read(r7, &(0x7f0000000200)=""/214, 0xd6) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b39800006d67372f0d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="375f99402cc1bf47a9dfc979dcb12bd0907d82502f7ce7c99c3cbf557d4916d2bb496245ea6500da956dc5c97b2a79d03b56d194c78c445228069b92c1608f6370", 0x41) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x80, 0x4, {0xffffffffffffffff}, {0xee00}, 0xd, 0x4933ed6d}) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000180)={'\x00', 0x5, 0x1, 0x0, 0x401, 0x5, r10}) 681.187µs ago: executing program 1 (id=565): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) ftruncate(r1, 0x8a60) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000) (async) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000300)="959c80caa495abb1d25b4dcdaa6981f498506a9083cc70829fe9763daaad647e4b006cd840e86ecccf15cdacd7b4657a8e476134b8f72235707c40610c146362f4f5fe89444c1b81aedcc74619ee54087913b0b3f89460030b00b5540b3ec10aecfa", 0x62}, {&(0x7f0000000380)="55585e939c81d217649b865ae8956fece8390d4379ceb7088d64493954ea1312e0480adefa322ce543fff61d673c2ff89a2dc8c9bb4889c2aacca1b428dd99a214674ae5a078b35b79c8731d08fb2816b2834bb2f6870782364c0f300655723d299c9a4acbfac6d521a6e72f8e6b7a0d371ce35ca16ebeb3fcd8fa16f954cca370625743d728f3e94d4c20552289ff6323b0341216def970b4adfa4b4192cea43d005208af47158080a3a4cfd571cf1a8a23cb09f724160dca575ed45493142f35289b56ac3f1f1f9b8d62", 0xcb}, {&(0x7f0000000480)="5d69b32a5bed3d6477411311684b69af6bd727eb765c4403288a31066217374b6e", 0x21}, {&(0x7f00000004c0)}, {&(0x7f0000000580)="7aff2fe82da2c587da2dbd287b5ed15fc5c52d16581256f0", 0x18}, {&(0x7f00000005c0)="469b5846efdfd241bbfde59bae50529edf107c7f45f0a61ff1676b001a37e5002360201dda1d4997532ab692396d54fbf996d2f2a31dfbbf00c5d59a4fd9fc61567ec368a36f80be1f07a003a4672752f457eb7bf393c6071f132417d146670e296733911942faf8e33a67c4bf0c524d2fa68cc6542897fb9cabfafb076cb0ff160295be5c87e8616d93120add5f7d30c5f6548440a389687d141391e9ef774d7780d20481", 0xa5}], 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@random="98fff2ac2ed6", @broadcast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x3, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@empty}, {}, {@rand_addr=0x64010101, 0x3}]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffd}}}}}}, 0x0) (async) lseek(r0, 0x80000, 0x3) 357.007µs ago: executing program 3 (id=566): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f00003c1000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x279eb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$netlink(0x10, 0x3, 0x10) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x20, r2, 0x1, 0x0, 0x25dfdbfd, {0x25}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xf}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x700000004000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x1a1502) syz_usb_disconnect(r4) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, 0xd6bfaf6137e46cb9, "2a0541a1ba17da9ec709b63133f1fff84737c25bef35011eb4eb49e559a2fe6ff8f7251920c646f13f367d0b9c1e019ada2400fe50e6cc9c73b813614eb2eefa", "682c18061487f3a68236bcf84e0fe9e80f99b693055ac4bafd7633f46152014f9fd267eaf2d5f1451bd16747be138964b55a1f934319ee1f165c23ab3d3477a0", "9203ed7b335107defc062f5bd6562a166500e14fe9792eb5326d5d0dc0ea8cf3", [0x7fff, 0xfbf]}) syz_usb_connect(0x6, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x9d, 0xf3, 0xe2, 0x40, 0x1b1c, 0x1ab5, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x5, 0x0, 0x44, [{{0x9, 0x4, 0xab, 0xc, 0x0, 0x94, 0x4d, 0xf5, 0x8}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0x83c0550b, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xf0, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x56}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc7a}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7d964b37}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x800) mq_timedsend(r0, &(0x7f0000000080)="a69bee4ee847e196c6bc5b7cee1811a1c493251d7421abd15b4fa9d2987eb75f6f03c8d6d37e58f6eb50361d70c26cede6eb6e6231380a39ca4fb4434eeb47bba469af76bc748bf5f5f5183ab33295e09252428967cc7d3e172bdae9705b8c4e65d8726230e5f781d1e0339e1adc912c8d76dbec6e373e25d41a7892b2bf0a883a873cd4c6d4ca0475e07b71c9f471048b85295fbf6da86e06f3d6ad6ef6fc4f1e9d3954faa6b056f440e007204c1a124338d586b4e99a4f4636a31d47c0395afeaa2c2b62f35f5152a506cd9cfa91862a11c82ba51684", 0xd7, 0xe89, &(0x7f0000000180)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22300, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r7, 0xee01, 0xee00) keyctl$chown(0x4, r7, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 0s ago: executing program 1 (id=567): setrlimit(0x9, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/dev\x00') preadv(r0, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18, 0x40}, @wr_drn={0x6e, 0x20, {0x2, 0x2}}, @code={0xa, 0x4a, {"dce566b8d1000f00d00f20d835080000000f22d8f30f1ec741f730450f0865460fa966b8e8008ec82e446ad1b805000000b99c0000000f01c1"}}, @in_dx={0x82, 0x20, {0x2e3f, 0x4}}, @cpuid={0x14, 0x18, {0xdba3530, 0x4c}}, @code={0xa, 0x51, {"0f01f8660fdc677d866e22c40135fbee48b85d020000000000000f23d80f21f835800000100f23f86466460f3882210f08420f01ca0f30c46125ed8700600000"}}, @wr_crn={0x46, 0x20, {0x2, 0x4}}, @uexit={0x0, 0x18, 0xc}, @wr_crn={0x46, 0x20, {0x8, 0x4}}, @wrmsr={0x1e, 0x20, {0xae3, 0x4}}, @wrmsr={0x1e, 0x20, {0xa0b}}, @wrmsr={0x1e, 0x20, {0x61b, 0xd8e}}, @wr_drn={0x6e, 0x20, {0x4, 0x40}}, @rdmsr={0x32, 0xffffffffffffff19, {0x383}}, @rdmsr={0x32, 0x18, {0x60b}}, @wr_crn={0x46, 0x20, {0x0, 0x7fff}}, @wr_drn={0x6e, 0x20, {0x1, 0x4a1}}, @wr_drn={0x6e, 0x20, {0x4, 0x4}}, @wr_drn={0x6e, 0x20, {0x1, 0xffffffff00000001}}, @rdmsr={0x32, 0x18, {0x88f}}, @wr_crn={0x46, 0x20, {0x4, 0x4}}, @cpuid={0x14, 0x18, {0x5, 0x4b9}}, @in_dx={0x82, 0x20, {0x6149, 0x1}}, @wr_drn={0x6e, 0x20, {0x5, 0xc}}, @wr_crn={0x46, 0x20, {0x0, 0xfffffffffffffff9}}, @cpuid={0x14, 0x18, {0xfffffff8, 0x3}}, @code={0xa, 0x63, {"b9800000c00f3235000100000f30c4c211986f00c443796ff6a3808b00300000de0f01f065666665260f0158522e3ef0430fbab4fdfe0000000df30fbd39b9f20b0000b805000000ba000000000f300f01c5"}}, @rdmsr={0x32, 0x18, {0x902}}, @rdmsr={0x32, 0x18, {0xaa5}}, @wr_crn={0x46, 0x20, {0xa, 0x1}}, @wr_crn={0x46, 0x20, {0x4}}, @in_dx={0x82, 0x20, {0x684a, 0x1}}], 0x44e}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000580)="0f070f01c50f0198040000000f01b1000000800f5a0c140f009c147e6e0000c744240005000000c744240296000000c7442406000000000f011c2466baa000b00beeb805000000b9a94400000f01c1ea4650a294f400", 0x56}], 0x1, 0x48, &(0x7f0000000640), 0x0) userfaultfd(0x80801) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r2, 0x1, &(0x7f0000000040)={0x7a0, 0x2}, &(0x7f0000000080)) io_setup(0x2008, &(0x7f00000007c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:61805' (ED25519) to the list of known hosts. [ 45.193499][ T40] audit: type=1400 audit(1759306811.177:62): avc: denied { name_bind } for pid=5878 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.220320][ T40] audit: type=1400 audit(1759306811.207:63): avc: denied { write } for pid=5879 comm="sh" path="pipe:[6450]" dev="pipefs" ino=6450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.250391][ T40] audit: type=1400 audit(1759306811.237:64): avc: denied { execute } for pid=5879 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.260637][ T40] audit: type=1400 audit(1759306811.237:65): avc: denied { execute_no_trans } for pid=5879 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.459224][ T40] audit: type=1400 audit(1759306813.447:66): avc: denied { mounton } for pid=5879 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.474216][ T5879] cgroup: Unknown subsys name 'net' [ 47.648720][ T5879] cgroup: Unknown subsys name 'cpuset' [ 47.653707][ T5879] cgroup: Unknown subsys name 'rlimit' [ 47.933547][ T5939] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.672063][ T5879] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.969458][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.969472][ T40] audit: type=1400 audit(1759306817.957:80): avc: denied { execmem } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.207593][ T40] audit: type=1400 audit(1759306818.197:81): avc: denied { create } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.218510][ T40] audit: type=1400 audit(1759306818.197:82): avc: denied { read write } for pid=5951 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.227463][ T40] audit: type=1400 audit(1759306818.197:83): avc: denied { open } for pid=5951 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.235531][ T40] audit: type=1400 audit(1759306818.207:84): avc: denied { ioctl } for pid=5951 comm="syz-executor" path="socket:[8198]" dev="sockfs" ino=8198 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.257131][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.260097][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.265152][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.268589][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.271930][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.275171][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.275346][ T5962] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.281961][ T5962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.286339][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.289215][ T5967] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.290399][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.290995][ T5965] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.291530][ T40] audit: type=1400 audit(1759306818.277:85): avc: denied { read } for pid=5953 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.291557][ T40] audit: type=1400 audit(1759306818.277:86): avc: denied { open } for pid=5953 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.292789][ T5967] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.293192][ T5965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.293647][ T40] audit: type=1400 audit(1759306818.277:87): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.293817][ T5965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.294641][ T5965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.295642][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.296074][ T5965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.297685][ T5967] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.339507][ T5967] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.493754][ T40] audit: type=1400 audit(1759306818.487:88): avc: denied { module_request } for pid=5953 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.567033][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 52.655611][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 52.708284][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 52.725819][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.731176][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.737004][ T5953] bridge_slave_0: entered allmulticast mode [ 52.740298][ T5953] bridge_slave_0: entered promiscuous mode [ 52.749350][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.751945][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.755535][ T5953] bridge_slave_1: entered allmulticast mode [ 52.758693][ T5953] bridge_slave_1: entered promiscuous mode [ 52.849225][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.863612][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.920966][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.923546][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.926064][ T5964] bridge_slave_0: entered allmulticast mode [ 52.929047][ T5964] bridge_slave_0: entered promiscuous mode [ 52.985072][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.987466][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.990544][ T5964] bridge_slave_1: entered allmulticast mode [ 52.995938][ T5964] bridge_slave_1: entered promiscuous mode [ 53.019139][ T5953] team0: Port device team_slave_0 added [ 53.081938][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.087879][ T5953] team0: Port device team_slave_1 added [ 53.090385][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.094175][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.097979][ T5952] bridge_slave_0: entered allmulticast mode [ 53.102324][ T5952] bridge_slave_0: entered promiscuous mode [ 53.129765][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.212371][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.215984][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.218334][ T5952] bridge_slave_1: entered allmulticast mode [ 53.220967][ T5952] bridge_slave_1: entered promiscuous mode [ 53.270041][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.272648][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.282109][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.291365][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.294004][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.303334][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.331292][ T5964] team0: Port device team_slave_0 added [ 53.338306][ T5964] team0: Port device team_slave_1 added [ 53.342090][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 53.355126][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.416654][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.419566][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.431906][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.441446][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.469066][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.472433][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.484153][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.529896][ T5952] team0: Port device team_slave_0 added [ 53.589712][ T5953] hsr_slave_0: entered promiscuous mode [ 53.593059][ T5953] hsr_slave_1: entered promiscuous mode [ 53.602143][ T5952] team0: Port device team_slave_1 added [ 53.746803][ T5964] hsr_slave_0: entered promiscuous mode [ 53.750145][ T5964] hsr_slave_1: entered promiscuous mode [ 53.753222][ T5964] debugfs: 'hsr0' already exists in 'hsr' [ 53.755447][ T5964] Cannot create hsr debugfs directory [ 53.795162][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.797678][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.805865][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.849815][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.852431][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.855081][ T5951] bridge_slave_0: entered allmulticast mode [ 53.858616][ T5951] bridge_slave_0: entered promiscuous mode [ 53.862288][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.865149][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.875333][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.904723][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.908083][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.911425][ T5951] bridge_slave_1: entered allmulticast mode [ 53.915382][ T5951] bridge_slave_1: entered promiscuous mode [ 53.964131][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.972122][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.018366][ T5951] team0: Port device team_slave_0 added [ 54.064467][ T5951] team0: Port device team_slave_1 added [ 54.095388][ T5952] hsr_slave_0: entered promiscuous mode [ 54.097690][ T5952] hsr_slave_1: entered promiscuous mode [ 54.099823][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 54.101657][ T5952] Cannot create hsr debugfs directory [ 54.143387][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.146312][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.157601][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.179900][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.182488][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.190330][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.343963][ T63] Bluetooth: hci1: command tx timeout [ 54.344019][ T5967] Bluetooth: hci2: command tx timeout [ 54.352205][ T5951] hsr_slave_0: entered promiscuous mode [ 54.354147][ T5967] Bluetooth: hci3: command tx timeout [ 54.358114][ T5951] hsr_slave_1: entered promiscuous mode [ 54.360284][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 54.362101][ T5951] Cannot create hsr debugfs directory [ 54.433139][ T5967] Bluetooth: hci0: command tx timeout [ 54.497199][ T5953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.520364][ T5953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.525507][ T5953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.531904][ T5953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.621250][ T5964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.630002][ T5964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.636724][ T5964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.644764][ T5964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.708787][ T5952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.718199][ T5952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.725733][ T5952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.732191][ T5952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.809765][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.827237][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.834038][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.839426][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.846862][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.890753][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.897558][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.911453][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.915087][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.929829][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.932443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.951328][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.966286][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.969365][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.995833][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.998148][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.070555][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.093665][ T40] audit: type=1400 audit(1759306821.087:89): avc: denied { sys_module } for pid=5953 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.094722][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.115091][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.117894][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.128886][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.131774][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.141076][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.159814][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.171377][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.174572][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.197543][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.200623][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.250088][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.268563][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.311767][ T5953] veth0_vlan: entered promiscuous mode [ 55.326137][ T5953] veth1_vlan: entered promiscuous mode [ 55.343179][ T5964] veth0_vlan: entered promiscuous mode [ 55.357377][ T5964] veth1_vlan: entered promiscuous mode [ 55.370446][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.390561][ T5953] veth0_macvtap: entered promiscuous mode [ 55.396432][ T5953] veth1_macvtap: entered promiscuous mode [ 55.418275][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.436449][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.446767][ T5964] veth0_macvtap: entered promiscuous mode [ 55.451595][ T5964] veth1_macvtap: entered promiscuous mode [ 55.466579][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.484740][ T1146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.498987][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.504273][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.512199][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.518294][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.524347][ T5952] veth0_vlan: entered promiscuous mode [ 55.538563][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.548025][ T5952] veth1_vlan: entered promiscuous mode [ 55.559176][ T1141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.563760][ T1141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.572009][ T5951] veth0_vlan: entered promiscuous mode [ 55.577837][ T1141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.581467][ T1141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.594366][ T5951] veth1_vlan: entered promiscuous mode [ 55.625915][ T5952] veth0_macvtap: entered promiscuous mode [ 55.634772][ T5952] veth1_macvtap: entered promiscuous mode [ 55.638462][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.641957][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.690679][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.694628][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.695839][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.697304][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.699733][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.699805][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.708465][ T5951] veth0_macvtap: entered promiscuous mode [ 55.731863][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.734815][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.737788][ T5951] veth1_macvtap: entered promiscuous mode [ 55.748635][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.752275][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.764646][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.766734][ T5953] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.767507][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.786315][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.797964][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.814264][ T1146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.817548][ T1146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.829990][ T1146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.835370][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.837940][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.850375][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.880626][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.887015][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.889805][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.918042][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.920728][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.940142][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.944026][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.978701][ T6046] netlink: 'syz.0.1': attribute type 27 has an invalid length. [ 56.020795][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.024521][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.080620][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.089536][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.215588][ T6052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.219873][ T6052] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.226849][ T6052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.236579][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.237810][ T6059] process 'syz.3.8' launched './file0' with NULL argv: empty string added [ 56.240396][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.255136][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.258845][ T6056] usb usb8: usbfs: process 6056 (syz.3.8) did not claim interface 0 before use [ 56.259135][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.310073][ T6061] kvm: kvm [6057]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 56.314232][ T6061] kvm: kvm [6057]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 56.423092][ T63] Bluetooth: hci3: command tx timeout [ 56.423146][ T5957] Bluetooth: hci1: command tx timeout [ 56.423241][ T5308] Bluetooth: hci2: command tx timeout [ 56.427959][ T6069] netlink: 'syz.3.12': attribute type 29 has an invalid length. [ 56.466975][ T6067] netlink: 'syz.3.12': attribute type 29 has an invalid length. [ 56.504209][ T5957] Bluetooth: hci0: command tx timeout [ 56.521549][ T6073] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 56.525911][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 56.536891][ T6073] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 56.536895][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.536921][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.539429][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 56.542147][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.542195][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.559127][ T6073] Zero length message leads to an empty skb [ 56.674689][ T837] IPVS: starting estimator thread 0... [ 56.713286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.752930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.783428][ T6083] IPVS: using max 47 ests per chain, 112800 per kthread [ 56.793183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.878285][ T6100] netlink: 'syz.2.20': attribute type 27 has an invalid length. [ 56.923071][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.925693][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.992366][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.000469][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.148618][ T6101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.151942][ T6101] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.156229][ T40] kauditd_printk_skb: 84 callbacks suppressed [ 57.156238][ T40] audit: type=1400 audit(1759306823.147:174): avc: denied { create } for pid=6102 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.165758][ T6103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21'. [ 57.167609][ T40] audit: type=1400 audit(1759306823.157:175): avc: denied { write } for pid=6102 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.167639][ T40] audit: type=1400 audit(1759306823.157:176): avc: denied { nlmsg_write } for pid=6102 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.170134][ T6103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21'. [ 57.189517][ T6101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.190928][ T6103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21'. [ 57.197975][ T6103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21'. [ 57.198833][ T1181] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.200981][ T6103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21'. [ 57.204308][ T1181] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.207625][ T6103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21'. [ 57.212149][ T1181] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.214590][ T6103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21'. [ 57.217780][ T1181] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.220652][ T6103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21'. [ 57.264601][ T40] audit: type=1400 audit(1759306823.257:177): avc: denied { create } for pid=6106 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.270767][ T40] audit: type=1400 audit(1759306823.257:178): avc: denied { create } for pid=6107 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.280552][ T40] audit: type=1400 audit(1759306823.257:179): avc: denied { bind } for pid=6106 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.287705][ T40] audit: type=1400 audit(1759306823.257:180): avc: denied { create } for pid=6107 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.294014][ T40] audit: type=1400 audit(1759306823.257:181): avc: denied { listen } for pid=6106 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.300459][ T40] audit: type=1400 audit(1759306823.257:182): avc: denied { create } for pid=6106 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 57.308382][ T40] audit: type=1400 audit(1759306823.257:183): avc: denied { write } for pid=6106 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 57.346525][ T6108] ieee802154 phy0 wpan0: encryption failed: -22 [ 57.410652][ T6035] IPVS: starting estimator thread 0... [ 57.471529][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 57.475289][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.477817][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 57.480248][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.482788][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 57.485146][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.487707][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 57.490193][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.492805][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 57.495229][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.497622][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 57.499933][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.502435][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 57.502788][ T6117] IPVS: using max 46 ests per chain, 110400 per kthread [ 57.504908][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.509443][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 57.511922][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.514604][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 57.517143][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.519620][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 57.522051][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.524545][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 57.527107][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.529605][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 57.532177][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.535004][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 57.537903][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 57.537936][ T6126] binder: 6122:6126 ioctl c0306201 200000000640 returned -22 [ 57.544199][ T6126] binder: 6122:6126 ioctl 40286608 200000000180 returned -22 [ 57.559506][ T6123] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET) [ 58.409468][ T6146] Bluetooth: MGMT ver 1.23 [ 58.503189][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 58.513372][ T5967] Bluetooth: hci3: command tx timeout [ 58.513443][ T5957] Bluetooth: hci1: command tx timeout [ 58.583071][ T5957] Bluetooth: hci0: command tx timeout [ 58.635942][ T6161] mkiss: ax0: crc mode is auto. [ 58.929470][ T6165] random: crng reseeded on system resumption [ 59.285091][ T6183] netlink: 'syz.1.49': attribute type 7 has an invalid length. [ 59.294722][ T6183] : entered promiscuous mode [ 59.300033][ T6062] overlayfs: statfs failed on './file0' [ 59.343165][ T6189] EXT4-fs: Conflicting test_dummy_encryption options [ 59.442897][ T1954] IPVS: starting estimator thread 0... [ 59.482197][ T6208] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 59.495475][ T6208] overlayfs: failed lookup in lower (/, name='cgroup.controllers', err=-66): unsupported object type [ 59.563133][ T6201] IPVS: using max 47 ests per chain, 112800 per kthread [ 59.606030][ T6217] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=6217 comm=syz.3.58 [ 59.748645][ T6227] dlm: no local IP address has been set [ 59.751305][ T6227] dlm: cannot start dlm midcomms -107 [ 59.926396][ T6239] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.227679][ T6262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6262 comm=syz.0.75 [ 60.262750][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.300649][ T6269] vivid-000: ================= START STATUS ================= [ 60.304550][ T6269] vivid-000: Test Pattern: 75% Colorbar [ 60.306586][ T6269] vivid-000: Fill Percentage of Frame: 100 [ 60.308588][ T6269] vivid-000: Horizontal Movement: No Movement [ 60.310822][ T6269] vivid-000: Vertical Movement: No Movement [ 60.313845][ T6269] vivid-000: OSD Text Mode: All [ 60.316100][ T6269] vivid-000: Show Border: false [ 60.318287][ T6269] vivid-000: Show Square: false [ 60.320635][ T6269] vivid-000: Sensor Flipped Horizontally: false [ 60.324675][ T6269] vivid-000: Sensor Flipped Vertically: false [ 60.327477][ T6269] vivid-000: Insert SAV Code in Image: false [ 60.330084][ T6269] vivid-000: Insert EAV Code in Image: false [ 60.332533][ T6269] vivid-000: Insert Video Guard Band: false [ 60.335083][ T6269] vivid-000: Reduced Framerate: false [ 60.337460][ T6269] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 60.340734][ T6269] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 60.345504][ T6269] vivid-000: Enable Capture Cropping: true grabbed [ 60.349092][ T6269] vivid-000: Enable Capture Composing: true grabbed [ 60.351954][ T6269] vivid-000: Enable Capture Scaler: true grabbed [ 60.355447][ T6269] vivid-000: Timestamp Source: End of Frame [ 60.358351][ T6269] vivid-000: Colorspace: sRGB [ 60.360504][ T6269] vivid-000: Transfer Function: Default [ 60.363674][ T6269] vivid-000: Y'CbCr Encoding: Default [ 60.366337][ T6269] vivid-000: HSV Encoding: Hue 0-179 [ 60.368654][ T6269] vivid-000: Quantization: Default [ 60.371195][ T6269] vivid-000: Apply Alpha To Red Only: false [ 60.374897][ T6269] vivid-000: Standard Aspect Ratio: 4x3 [ 60.377962][ T6269] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 60.381428][ T6269] vivid-000: DV Timings: 640x480p59 inactive [ 60.384361][ T6269] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 60.387560][ T6269] vivid-000: Maximum EDID Blocks: 2 [ 60.389836][ T6269] vivid-000: Limited RGB Range (16-235): false [ 60.392519][ T6269] vivid-000: Rx RGB Quantization Range: Automatic [ 60.395858][ T6269] vivid-000: Power Present: 0x00000001 [ 60.398654][ T6269] tpg source WxH: 320x240 (Y'CbCr) [ 60.401204][ T6269] tpg field: 1 [ 60.403046][ T6269] tpg crop: (0,0)/320x240 [ 60.405322][ T6269] tpg compose: (0,0)/320x240 [ 60.407415][ T6269] tpg colorspace: 8 [ 60.409084][ T6269] tpg transfer function: 0/2 [ 60.411100][ T6269] tpg Y'CbCr encoding: 0/1 [ 60.413204][ T6269] tpg quantization: 0/2 [ 60.415070][ T6269] tpg RGB range: 0/2 [ 60.416748][ T6269] vivid-000: ================== END STATUS ================== [ 60.433988][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 60.443217][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.447150][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.455444][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 60.459472][ T9] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 60.464151][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.469888][ T9] usb 7-1: config 0 descriptor?? [ 60.583735][ T5957] Bluetooth: hci3: command tx timeout [ 60.594318][ T5957] Bluetooth: hci1: command tx timeout [ 60.596192][ T5957] Bluetooth: hci2: command 0x040f tx timeout [ 60.598436][ T5957] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 60.662865][ T5957] Bluetooth: hci0: command tx timeout [ 60.888331][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 60.895397][ T6313] cgroup: Need name or subsystem set [ 60.924893][ T9] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 60.928221][ T9] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 60.965394][ T6313] warning: `syz.3.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.973749][ T6317] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 61.090140][ T835] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 61.093157][ T6035] usb 7-1: USB disconnect, device number 2 [ 61.105223][ T835] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 61.115745][ T835] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 61.119274][ T835] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 61.142620][ T6346] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 61.405120][ T6375] batadv1: entered allmulticast mode [ 61.416457][ T6381] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 61.510440][ T6391] trusted_key: encrypted_key: master key parameter is missing [ 61.515356][ T6391] trusted_key: encrypted_key: master key parameter is missing [ 61.546180][ T6395] support for cryptoloop has been removed. Use dm-crypt instead. [ 61.621363][ T6405] Bluetooth: hci0: service_discovery: too big uuid_count value 8526 [ 61.624692][ T6407] capability: warning: `syz.3.122' uses 32-bit capabilities (legacy support in use) [ 61.692084][ T6418] overlayfs: failed to resolve './file1/file0': -2 [ 61.699290][ T6420] erofs (device loop0): cannot find valid erofs superblock [ 61.760039][ T6427] Bluetooth: MGMT ver 1.23 [ 61.796771][ T6434] capability: warning: `syz.1.131' uses deprecated v2 capabilities in a way that may be insecure [ 61.832949][ T6444] Bluetooth: hci0: service_discovery: too big uuid_count value 8526 [ 61.897821][ T6451] __nla_validate_parse: 42 callbacks suppressed [ 61.897833][ T6451] netlink: 104 bytes leftover after parsing attributes in process `syz.3.136'. [ 61.904786][ T6453] netlink: 104 bytes leftover after parsing attributes in process `syz.3.136'. [ 61.925946][ T6457] tmpfs: Unknown parameter '00000000000000000000' [ 62.043227][ T6459] usb usb8: usbfs: process 6459 (syz.1.138) did not claim interface 0 before use [ 62.046500][ T6459] netlink: 88 bytes leftover after parsing attributes in process `syz.1.138'. [ 62.049457][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 62.206268][ T40] kauditd_printk_skb: 140 callbacks suppressed [ 62.206282][ T40] audit: type=1400 audit(1759306828.197:324): avc: denied { ioctl } for pid=6462 comm="syz.3.140" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.271381][ T40] audit: type=1400 audit(1759306828.257:325): avc: denied { ioctl } for pid=6466 comm="syz.3.141" path="mnt:[4026532872]" dev="nsfs" ino=4026532872 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.312318][ T40] audit: type=1400 audit(1759306828.297:326): avc: denied { getopt } for pid=6468 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.319629][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.142'. [ 62.424728][ T6472] bridge1: entered promiscuous mode [ 62.526215][ T6477] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 62.569228][ T40] audit: type=1400 audit(1759306828.557:327): avc: denied { read write } for pid=6478 comm="syz.3.146" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.577703][ T40] audit: type=1400 audit(1759306828.557:328): avc: denied { open } for pid=6478 comm="syz.3.146" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.586441][ T40] audit: type=1400 audit(1759306828.557:329): avc: denied { ioctl } for pid=6478 comm="syz.3.146" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.635306][ T40] audit: type=1400 audit(1759306828.627:330): avc: denied { name_connect } for pid=6480 comm="syz.2.147" dest=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 62.646481][ T40] audit: type=1400 audit(1759306828.637:331): avc: denied { ioctl } for pid=6480 comm="syz.2.147" path="socket:[10894]" dev="sockfs" ino=10894 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.656206][ T40] audit: type=1400 audit(1759306828.637:332): avc: denied { mounton } for pid=6480 comm="syz.2.147" path="/30/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.663250][ T5957] Bluetooth: hci2: command 0x040f tx timeout [ 62.696735][ T6487] ieee802154 phy0 wpan0: encryption failed: -22 [ 62.706838][ T6487] bridge0: entered promiscuous mode [ 62.709289][ T6487] macsec1: entered promiscuous mode [ 62.713258][ T6487] bridge0: port 3(macsec1) entered blocking state [ 62.716128][ T6487] bridge0: port 3(macsec1) entered disabled state [ 62.718982][ T6487] macsec1: entered allmulticast mode [ 62.721384][ T6487] bridge0: entered allmulticast mode [ 62.726862][ T6487] macsec1: left allmulticast mode [ 62.729191][ T6487] bridge0: left allmulticast mode [ 62.737236][ T6487] bridge0: left promiscuous mode [ 62.764848][ T6495] ======================================================= [ 62.764848][ T6495] WARNING: The mand mount option has been deprecated and [ 62.764848][ T6495] and is ignored by this kernel. Remove the mand [ 62.764848][ T6495] option from the mount to silence this warning. [ 62.764848][ T6495] ======================================================= [ 62.786079][ T40] audit: type=1400 audit(1759306828.777:333): avc: denied { ioctl } for pid=6491 comm="syz.1.151" path="socket:[12881]" dev="sockfs" ino=12881 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.862261][ T6504] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 62.883444][ T6506] netlink: 'syz.1.155': attribute type 6 has an invalid length. [ 62.886542][ T6506] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.155'. [ 62.923882][ T6035] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.074728][ T6035] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 63.080139][ T6035] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 63.083508][ T6536] tmpfs: Invalid gid '0x00000000ffffffff' [ 63.086008][ T6035] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 63.088043][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.089084][ T6035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.092576][ T6485] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.106622][ T6035] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 63.112138][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.115401][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.118615][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.121039][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.137194][ T6542] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 63.143645][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.147129][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.149534][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.151904][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.162850][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.170845][ T61] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 63.356237][ T1954] usb 7-1: USB disconnect, device number 3 [ 63.532882][ T61] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.577751][ T6563] nft_compat: unsupported protocol 0 [ 63.682780][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 63.686317][ T61] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 63.689775][ T61] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.694211][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.698520][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.702639][ T61] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.710402][ T61] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.714305][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.822888][ T1954] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.899245][ T6571] (syz.2.174,6571,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 63.903297][ T6571] (syz.2.174,6571,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 63.906214][ T6571] (syz.2.174,6571,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 63.909743][ T6571] (syz.2.174,6571,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 63.989297][ T1954] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 63.993589][ T1954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.997688][ T1954] usb 5-1: Product: syz [ 63.999592][ T1954] usb 5-1: Manufacturer: syz [ 64.001600][ T1954] usb 5-1: SerialNumber: syz [ 64.017964][ T1954] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 64.050308][ T837] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 64.216963][ T4193] usb 6-1: USB disconnect, device number 2 [ 64.272375][ T6606] kvm: user requested TSC rate below hardware speed [ 64.480468][ T1954] usb 5-1: USB disconnect, device number 2 [ 64.543442][ T6619] binder: 6618:6619 ioctl 4018620d 0 returned -22 [ 65.066432][ T6637] overlayfs: missing 'lowerdir' [ 65.089377][ T6637] kvm: Disabled LAPIC found during irq injection [ 65.092093][ T6637] kvm: apic: phys broadcast and lowest prio [ 65.298999][ T6645] netlink: 64 bytes leftover after parsing attributes in process `syz.0.194'. [ 65.305133][ T837] usb 5-1: Service connection timeout for: 256 [ 65.310012][ T837] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 65.314552][ T837] ath9k_htc: Failed to initialize the device [ 65.319141][ T1954] usb 5-1: ath9k_htc: USB layer deinitialized [ 65.415917][ T6651] overlayfs: failed to resolve './file1': -2 [ 65.483784][ T6660] comedi comedi3: comedi_config --init_data is deprecated [ 65.652835][ T53] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.723865][ T6670] netlink: 'syz.1.201': attribute type 3 has an invalid length. [ 65.726525][ T6670] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.201'. [ 65.812967][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 65.819323][ T53] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 65.822005][ T53] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.825540][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.828726][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.832589][ T53] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.837650][ T53] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.840455][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.989149][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 66.044929][ T6692] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.048947][ T53] usb 7-1: usb_control_msg returned -32 [ 66.051439][ T53] usbtmc 7-1:16.0: can't read capabilities [ 66.055154][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 66.137296][ T6695] sp0: Synchronizing with TNC [ 66.141528][ T6695] block nbd0: Unsupported socket: shutdown callout must be supported. [ 66.166747][ T6699] erspan0: entered promiscuous mode [ 66.406103][ T6651] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 66.409613][ T9] usb 7-1: USB disconnect, device number 4 [ 66.554890][ T4193] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.722849][ T4193] usb 8-1: Using ep0 maxpacket: 32 [ 66.729363][ T4193] usb 8-1: config 1 interface 0 has no altsetting 0 [ 66.734706][ T4193] usb 8-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.40 [ 66.738938][ T4193] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.741578][ T4193] usb 8-1: Product: syz [ 66.743429][ T4193] usb 8-1: Manufacturer: syz [ 66.745030][ T4193] usb 8-1: SerialNumber: syz [ 67.025962][ T6773] netlink: 'syz.2.234': attribute type 10 has an invalid length. [ 67.041552][ T6773] team0: Port device dummy0 added [ 67.058348][ T6773] netlink: 'syz.2.234': attribute type 10 has an invalid length. [ 67.062445][ T6773] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.072574][ T6773] team0: Failed to send options change via netlink (err -105) [ 67.077169][ T6773] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.081932][ T6773] team0: Port device dummy0 removed [ 67.089715][ T6773] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.134909][ T6776] syz.3.216 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.142355][ T6715] __nla_validate_parse: 1 callbacks suppressed [ 67.142367][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 67.247931][ T4193] usbhid 8-1:1.0: can't add hid device: -71 [ 67.250735][ T4193] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 67.256683][ T4193] usb 8-1: USB disconnect, device number 2 [ 67.584812][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 67.584824][ T40] audit: type=1400 audit(1759306833.577:381): avc: denied { create } for pid=6786 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 67.902809][ T53] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 67.992571][ T40] audit: type=1400 audit(1759306833.977:382): avc: denied { create } for pid=6803 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 68.008646][ T40] audit: type=1400 audit(1759306833.987:383): avc: denied { getopt } for pid=6803 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 68.016536][ T6807] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 68.021198][ T6807] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 68.052272][ T40] audit: type=1400 audit(1759306834.037:384): avc: denied { write } for pid=6808 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.061559][ T40] audit: type=1400 audit(1759306834.037:385): avc: denied { read } for pid=6808 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.068856][ T53] usb 6-1: not running at top speed; connect to a high speed hub [ 68.070782][ T40] audit: type=1400 audit(1759306834.047:386): avc: denied { write } for pid=6808 comm="syz.2.245" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.076684][ T53] usb 6-1: config 1 has an invalid interface number: 177 but max is 0 [ 68.085978][ T53] usb 6-1: config 1 has an invalid interface number: 116 but max is 0 [ 68.089426][ T53] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 68.093476][ T53] usb 6-1: config 1 has no interface number 0 [ 68.096158][ T53] usb 6-1: config 1 has no interface number 1 [ 68.098615][ T53] usb 6-1: config 1 interface 177 altsetting 251 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 68.102219][ T53] usb 6-1: config 1 interface 177 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 68.107862][ T53] usb 6-1: too many endpoints for config 1 interface 116 altsetting 255: 251, using maximum allowed: 30 [ 68.111307][ T53] usb 6-1: config 1 interface 116 altsetting 255 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 68.114833][ T53] usb 6-1: config 1 interface 116 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 68.118200][ T53] usb 6-1: config 1 interface 116 altsetting 255 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 68.121927][ T53] usb 6-1: config 1 interface 116 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 68.126091][ T53] usb 6-1: config 1 interface 116 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 68.129874][ T53] usb 6-1: config 1 interface 116 altsetting 255 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 68.133410][ T53] usb 6-1: config 1 interface 116 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 68.136874][ T53] usb 6-1: config 1 interface 116 altsetting 255 has a duplicate endpoint with address 0x6, skipping [ 68.143080][ T53] usb 6-1: config 1 interface 116 altsetting 255 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 68.146719][ T53] usb 6-1: config 1 interface 116 altsetting 255 endpoint 0x9 has invalid maxpacket 592, setting to 64 [ 68.150152][ T53] usb 6-1: config 1 interface 116 altsetting 255 endpoint 0x4 has invalid maxpacket 576, setting to 64 [ 68.153662][ T53] usb 6-1: config 1 interface 116 altsetting 255 has 13 endpoint descriptors, different from the interface descriptor's value: 251 [ 68.157959][ T53] usb 6-1: config 1 interface 177 has no altsetting 0 [ 68.160660][ T53] usb 6-1: config 1 interface 116 has no altsetting 0 [ 68.165988][ T53] usb 6-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= f.37 [ 68.168969][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.171568][ T53] usb 6-1: Product: 㰁 [ 68.173060][ T53] usb 6-1: Manufacturer: ᰉ [ 68.174845][ T53] usb 6-1: SerialNumber: Г [ 68.206208][ T40] audit: type=1400 audit(1759306834.197:387): avc: denied { ioctl } for pid=6823 comm="syz.3.249" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 68.219920][ T6826] (syz.2.250,6826,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 68.222305][ T6826] (syz.2.250,6826,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 68.224936][ T6826] (syz.2.250,6826,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 68.227895][ T6826] (syz.2.250,6826,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 68.236607][ T6826] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 68.239671][ T6826] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 68.261143][ T40] audit: type=1400 audit(1759306834.247:388): avc: denied { read } for pid=6823 comm="syz.3.249" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 68.268834][ T40] audit: type=1400 audit(1759306834.247:389): avc: denied { open } for pid=6823 comm="syz.3.249" path="/74/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 68.281463][ T6829] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.282844][ T6827] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.287633][ T6827] block device autoloading is deprecated and will be removed. [ 68.294160][ T40] audit: type=1400 audit(1759306834.287:390): avc: denied { ioctl } for pid=6823 comm="syz.3.249" path="/74/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 68.317902][ T6831] overlayfs: unescaped trailing colons in lowerdir mount option. [ 68.385604][ T53] keyspan 6-1:1.177: Keyspan 1 port adapter converter detected [ 68.389059][ T53] keyspan 6-1:1.177: found no endpoint descriptor for endpoint 84 [ 68.392462][ T53] keyspan 6-1:1.177: found no endpoint descriptor for endpoint 81 [ 68.395079][ T53] keyspan 6-1:1.177: found no endpoint descriptor for endpoint 82 [ 68.397579][ T53] keyspan 6-1:1.177: found no endpoint descriptor for endpoint 1 [ 68.400151][ T53] keyspan 6-1:1.177: found no endpoint descriptor for endpoint 2 [ 68.402752][ T53] keyspan 6-1:1.177: found no endpoint descriptor for endpoint 83 [ 68.405400][ T53] keyspan 6-1:1.177: found no endpoint descriptor for endpoint 3 [ 68.416899][ T53] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 68.429637][ T53] keyspan 6-1:1.116: Keyspan 1 port adapter converter detected [ 68.436393][ T53] keyspan 6-1:1.116: found no endpoint descriptor for endpoint 84 [ 68.440679][ T53] keyspan 6-1:1.116: found no endpoint descriptor for endpoint 81 [ 68.444890][ T53] keyspan 6-1:1.116: found no endpoint descriptor for endpoint 82 [ 68.447540][ T53] keyspan 6-1:1.116: found no endpoint descriptor for endpoint 1 [ 68.450278][ T53] keyspan 6-1:1.116: found no endpoint descriptor for endpoint 2 [ 68.454080][ T53] keyspan 6-1:1.116: found no endpoint descriptor for endpoint 83 [ 68.457059][ T53] keyspan 6-1:1.116: unsupported endpoint type 0 [ 68.457901][ T53] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 68.469326][ T53] usb 6-1: USB disconnect, device number 3 [ 68.479391][ T53] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 68.482942][ T53] keyspan 6-1:1.177: device disconnected [ 68.490911][ T53] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 68.494908][ T53] keyspan 6-1:1.116: device disconnected [ 68.581962][ T6861] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 68.657284][ T6866] overlayfs: conflicting lowerdir path [ 68.860388][ T6877] netlink: 200 bytes leftover after parsing attributes in process `syz.2.266'. [ 69.172823][ T835] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 69.337488][ T835] usb 6-1: config index 0 descriptor too short (expected 6171, got 27) [ 69.341897][ T835] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 69.344645][ T835] usb 6-1: config 0 has no interface number 0 [ 69.346708][ T835] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.352197][ T835] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 69.355525][ T835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.358917][ T835] usb 6-1: Product: syz [ 69.360607][ T835] usb 6-1: Manufacturer: syz [ 69.362274][ T835] usb 6-1: SerialNumber: syz [ 69.365345][ T835] usb 6-1: config 0 descriptor?? [ 69.369525][ T5967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.376226][ T5967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.377280][ T835] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 69.385326][ T5967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.390433][ T5967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.395290][ T5967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.447939][ T6894] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.457506][ T6894] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 69.466989][ T70] bridge_slave_1: left allmulticast mode [ 69.469284][ T70] bridge_slave_1: left promiscuous mode [ 69.473356][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.483382][ T70] bridge_slave_0: left allmulticast mode [ 69.484567][ T6895] netlink: 'syz.3.274': attribute type 10 has an invalid length. [ 69.485273][ T70] bridge_slave_0: left promiscuous mode [ 69.490751][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.549772][ T6903] netlink: 'syz.0.276': attribute type 21 has an invalid length. [ 69.553337][ T6903] netlink: 156 bytes leftover after parsing attributes in process `syz.0.276'. [ 69.778226][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.782063][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.787495][ T70] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 69.792251][ T70] bond0 (unregistering): Released all slaves [ 69.816395][ T6895] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 69.823467][ T835] usb 6-1: USB disconnect, device number 4 [ 69.834339][ T835] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 69.854621][ T6906] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 69.857203][ T6906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.907497][ T6893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.028875][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 70.131020][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.133711][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.136535][ T6888] bridge_slave_0: entered allmulticast mode [ 70.139508][ T6888] bridge_slave_0: entered promiscuous mode [ 70.147328][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.149864][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.152173][ T6888] bridge_slave_1: entered allmulticast mode [ 70.155757][ T6888] bridge_slave_1: entered promiscuous mode [ 70.178497][ T70] hsr_slave_0: left promiscuous mode [ 70.187433][ T70] hsr_slave_1: left promiscuous mode [ 70.189619][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.192842][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.197445][ T6925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.279'. [ 70.301878][ T6927] comedi comedi0: dt2817: I/O port conflict (0x3,5) [ 70.431859][ T6930] syz.1.280 (6930): /proc/6928/oom_adj is deprecated, please use /proc/6928/oom_score_adj instead. [ 70.739837][ T6935] netlink: 'syz.3.281': attribute type 10 has an invalid length. [ 70.743041][ T6935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.281'. [ 70.794014][ T70] team0 (unregistering): Port device team_slave_1 removed [ 70.867599][ T70] team0 (unregistering): Port device team_slave_0 removed [ 71.306875][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.309772][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.375087][ T6935] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 71.378532][ T6935] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 71.384794][ T6935] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 71.397687][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.411633][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.465143][ T5957] Bluetooth: hci2: command tx timeout [ 71.466880][ T6888] team0: Port device team_slave_0 added [ 71.471614][ T6888] team0: Port device team_slave_1 added [ 71.530856][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.533515][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.541782][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.547933][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.550111][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.561362][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.610222][ T6888] hsr_slave_0: entered promiscuous mode [ 71.614188][ T6888] hsr_slave_1: entered promiscuous mode [ 71.691761][ T6954] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.286'. [ 71.757419][ T6957] tmpfs: Unknown parameter 'usrquota' [ 71.911628][ T70] IPVS: stop unused estimator thread 0... [ 71.942093][ T6971] sctp: [Deprecated]: syz.1.289 (pid 6971) Use of int in max_burst socket option. [ 71.942093][ T6971] Use struct sctp_assoc_value instead [ 72.103183][ T6987] ipvlan2: entered promiscuous mode [ 72.107514][ T6987] bridge0: port 3(ipvlan2) entered blocking state [ 72.109976][ T6987] bridge0: port 3(ipvlan2) entered disabled state [ 72.114224][ T6987] ipvlan2: entered allmulticast mode [ 72.116031][ T6987] bridge0: entered allmulticast mode [ 72.118631][ T6987] ipvlan2: left allmulticast mode [ 72.120187][ T6987] bridge0: left allmulticast mode [ 72.198851][ T6995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6995 comm=syz.1.294 [ 72.236701][ T6998] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 72.240273][ T6998] overlayfs: failed to set xattr on upper [ 72.242440][ T6998] overlayfs: ...falling back to redirect_dir=nofollow. [ 72.249771][ T6998] overlayfs: ...falling back to index=off. [ 72.251742][ T6998] overlayfs: ...falling back to uuid=null. [ 72.257822][ T6888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.260494][ T6998] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.260803][ T6999] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 72.269226][ T6888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.276273][ T6888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.288125][ T6888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.296973][ T7010] trusted_key: syz.1.297 sent an empty control message without MSG_MORE. [ 72.353854][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.379784][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.391395][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.394267][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.403927][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.406649][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.582851][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.612916][ T835] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 72.613915][ T7035] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 72.614791][ T6888] veth0_vlan: entered promiscuous mode [ 72.622123][ T6888] veth1_vlan: entered promiscuous mode [ 72.625060][ T7035] Error validating options; rc = [-22] [ 72.653664][ T6888] veth0_macvtap: entered promiscuous mode [ 72.658153][ T6888] veth1_macvtap: entered promiscuous mode [ 72.670362][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.671527][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 72.671542][ T40] audit: type=1400 audit(1759306838.657:427): avc: denied { setopt } for pid=7036 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.685508][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.695177][ T1141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.698783][ T1141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.703443][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.706879][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.742907][ T835] usb 8-1: device descriptor read/64, error -71 [ 72.755755][ T40] audit: type=1400 audit(1759306838.747:428): avc: denied { append } for pid=7041 comm="syz.0.303" name="event1" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.769304][ T40] audit: type=1400 audit(1759306838.757:429): avc: denied { mount } for pid=7041 comm="syz.0.303" name="/" dev="autofs" ino=16720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 72.781930][ T40] audit: type=1400 audit(1759306838.767:430): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 72.785999][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.791934][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.818649][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.821661][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.832821][ T40] audit: type=1400 audit(1759306838.817:431): avc: denied { create } for pid=7048 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 72.841662][ T40] audit: type=1400 audit(1759306838.827:432): avc: denied { mounton } for pid=6888 comm="syz-executor" path="/syzkaller.0Wctsz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.851220][ T40] audit: type=1400 audit(1759306838.837:433): avc: denied { sys_admin } for pid=7048 comm="syz.0.305" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 72.938649][ T40] audit: type=1400 audit(1759306838.927:434): avc: denied { setopt } for pid=7057 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.975284][ T40] audit: type=1400 audit(1759306838.967:435): avc: denied { write } for pid=7059 comm="syz.1.309" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.992912][ T835] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 73.012920][ T40] audit: type=1400 audit(1759306838.997:436): avc: denied { map } for pid=7061 comm="syz.2.310" path="socket:[14985]" dev="sockfs" ino=14985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.023068][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 73.133414][ T835] usb 8-1: device descriptor read/64, error -71 [ 73.243044][ T835] usb usb8-port1: attempt power cycle [ 73.478221][ T7111] netlink: 'syz.1.325': attribute type 5 has an invalid length. [ 73.536292][ T5967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.544115][ T63] Bluetooth: hci2: command tx timeout [ 73.548230][ T5967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.552188][ T5967] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.557828][ T5967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.561278][ T5967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.578142][ T7124] unknown channel width for channel at 909000KHz? [ 73.583228][ T835] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 73.613514][ T835] usb 8-1: device descriptor read/8, error -71 [ 73.673874][ T12] bridge_slave_1: left allmulticast mode [ 73.675489][ T12] bridge_slave_1: left promiscuous mode [ 73.678151][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.681788][ T12] bridge_slave_0: left allmulticast mode [ 73.685580][ T12] bridge_slave_0: left promiscuous mode [ 73.687870][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.782851][ T5819] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.852954][ T835] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 73.873501][ T835] usb 8-1: device descriptor read/8, error -71 [ 73.944772][ T5819] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.949517][ T5819] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 73.950125][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.953966][ T5819] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.965451][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.965513][ T5819] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 73.973870][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.974883][ T12] bond0 (unregistering): Released all slaves [ 73.976994][ T5819] usb 7-1: Product: syz [ 73.981129][ T5819] usb 7-1: Manufacturer: syz [ 73.984116][ T5819] usb 7-1: SerialNumber: syz [ 73.989554][ T12] bond1 (unregistering): Released all slaves [ 73.994673][ T835] usb usb8-port1: unable to enumerate USB device [ 74.090044][ T7119] chnl_net:caif_netlink_parms(): no params data found [ 74.209607][ T5819] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 74.224402][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.228720][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.231504][ T7119] bridge_slave_0: entered allmulticast mode [ 74.239343][ T7119] bridge_slave_0: entered promiscuous mode [ 74.246115][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.249084][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.252374][ T7119] bridge_slave_1: entered allmulticast mode [ 74.256103][ T7119] bridge_slave_1: entered promiscuous mode [ 74.346981][ T7119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.367483][ T7119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.414067][ T5819] usb 7-1: USB disconnect, device number 5 [ 74.417282][ T7113] netlink: 'syz.2.326': attribute type 4 has an invalid length. [ 74.421151][ T7113] netlink: 152 bytes leftover after parsing attributes in process `syz.2.326'. [ 74.429210][ T5819] usblp0: removed [ 74.448155][ T7119] team0: Port device team_slave_0 added [ 74.475490][ T7119] team0: Port device team_slave_1 added [ 74.521143][ T12] hsr_slave_0: left promiscuous mode [ 74.524032][ T12] hsr_slave_1: left promiscuous mode [ 74.527038][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.530407][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.001095][ T6017] IPVS: starting estimator thread 0... [ 75.046130][ T7160] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 75.049760][ C3] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 75.102838][ T7162] IPVS: using max 47 ests per chain, 112800 per kthread [ 75.158364][ T12] team0 (unregistering): Port device team_slave_1 removed [ 75.216312][ T12] team0 (unregistering): Port device team_slave_0 removed [ 75.383286][ T7170] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 75.632944][ T5957] Bluetooth: hci2: command tx timeout [ 75.636433][ T5967] Bluetooth: hci1: command tx timeout [ 75.701000][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.704724][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.715507][ T7119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.723468][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.726041][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.733888][ T7119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.777229][ T7171] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 75.781578][ T7171] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 75.793147][ T7172] gretap1: entered promiscuous mode [ 75.797677][ T7172] bond1: (slave gretap1): making interface the new active one [ 75.800693][ T7172] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 75.811234][ T7173] macvlan2: entered promiscuous mode [ 75.813727][ T7173] macvlan2: entered allmulticast mode [ 75.816384][ T7173] bond1: entered promiscuous mode [ 75.818801][ T7173] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 75.825148][ T7173] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 75.829469][ T7173] bond1: left promiscuous mode [ 75.916228][ T7119] hsr_slave_0: entered promiscuous mode [ 75.923221][ T7119] hsr_slave_1: entered promiscuous mode [ 75.926076][ T7119] debugfs: 'hsr0' already exists in 'hsr' [ 75.928278][ T7119] Cannot create hsr debugfs directory [ 76.125036][ T7119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.131561][ T7119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.135429][ T7198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.146335][ T7119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.152231][ T7119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.220191][ T7119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.233418][ T12] IPVS: stop unused estimator thread 0... [ 76.240906][ T7119] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.244382][ T4193] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.251615][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.253903][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.263078][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.265660][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.383838][ T4193] usb 6-1: device descriptor read/64, error -71 [ 76.433763][ T7119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.617307][ T7119] veth0_vlan: entered promiscuous mode [ 76.626210][ T7119] veth1_vlan: entered promiscuous mode [ 76.643076][ T4193] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 76.647280][ T7119] veth0_macvtap: entered promiscuous mode [ 76.655329][ T7119] veth1_macvtap: entered promiscuous mode [ 76.670934][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.684400][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.701125][ T1181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.707766][ T1181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.711858][ T1181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.719311][ T1181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.726280][ T7238] Illegal XDP return value 3970949658 on prog (id 147) dev N/A, expect packet loss! [ 76.743525][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.341'. [ 76.782822][ T4193] usb 6-1: device descriptor read/64, error -71 [ 76.811124][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.815771][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.855181][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.858702][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.903377][ T4193] usb usb6-port1: attempt power cycle [ 76.947933][ T7122] IPVS: starting estimator thread 0... [ 77.066217][ T7260] IPVS: using max 47 ests per chain, 112800 per kthread [ 77.088658][ T7279] dlm: non-version read from control device 0 [ 77.103063][ T7280] loop7: detected capacity change from 0 to 7 [ 77.112223][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.115420][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.121109][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.124493][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.128242][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.131596][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.138724][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.141651][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.146162][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.150729][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.155299][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.159257][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.162586][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.166303][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.167360][ T7283] loop2: detected capacity change from 0 to 7 [ 77.172627][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.173850][ T7280] ldm_validate_partition_table(): Disk read failed. [ 77.180722][ T5954] Dev loop2: unable to read RDB block 7 [ 77.180939][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.182990][ T5954] loop2: AHDI p1 p2 p3 [ 77.185657][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.187117][ T5954] loop2: partition table partially beyond EOD, truncated [ 77.191090][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.192630][ T5954] loop2: p1 start 1601398130 is beyond EOD, [ 77.196555][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.197737][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.199910][ T5954] truncated [ 77.201910][ T7280] Dev loop7: unable to read RDB block 0 [ 77.205479][ T5954] loop2: p2 start 1702059890 is beyond EOD, truncated [ 77.208570][ T7280] loop7: unable to read partition table [ 77.212089][ T7280] loop7: partition table beyond EOD, truncated [ 77.215519][ T7280] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 77.231823][ T7283] Dev loop2: unable to read RDB block 7 [ 77.233903][ T7283] loop2: AHDI p1 p2 p3 [ 77.235302][ T7283] loop2: partition table partially beyond EOD, truncated [ 77.238516][ T7283] loop2: p1 start 1601398130 is beyond EOD, truncated [ 77.240750][ T7283] loop2: p2 start 1702059890 is beyond EOD, truncated [ 77.252973][ T4193] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 77.283638][ T4193] usb 6-1: device descriptor read/8, error -71 [ 77.552833][ T4193] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 77.583516][ T4193] usb 6-1: device descriptor read/8, error -71 [ 77.596432][ T7122] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 77.693076][ T4193] usb usb6-port1: unable to enumerate USB device [ 77.702927][ T5967] Bluetooth: hci1: command tx timeout [ 77.707809][ T7302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.712901][ T5967] Bluetooth: hci2: command tx timeout [ 77.742988][ T7122] usb 7-1: Using ep0 maxpacket: 8 [ 77.750029][ T7122] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 77.753948][ T7122] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.758138][ T7122] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.762146][ T7122] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.766671][ T7122] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.771340][ T7122] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.775553][ T7122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.986519][ T7122] usb 7-1: usb_control_msg returned -32 [ 77.989148][ T7122] usbtmc 7-1:16.0: can't read capabilities [ 77.995910][ T7306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.000270][ T7306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.572887][ T4193] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 78.746362][ T4193] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 78.749191][ T4193] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.752245][ T4193] usb 8-1: Product: syz [ 78.753910][ T4193] usb 8-1: Manufacturer: syz [ 78.755586][ T4193] usb 8-1: SerialNumber: syz [ 78.763593][ T4193] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 78.778788][ T34] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 79.125404][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 79.125417][ T40] audit: type=1804 audit(1759306845.117:458): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.363" name="/newroot/97/bus/bus" dev="overlay" ino=544 res=1 errno=0 [ 79.231875][ T6017] usb 8-1: USB disconnect, device number 7 [ 79.242359][ T40] audit: type=1400 audit(1759306845.227:459): avc: denied { append } for pid=7330 comm="syz.4.368" name="hpet" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.280628][ T40] audit: type=1400 audit(1759306845.267:460): avc: denied { ioctl } for pid=7332 comm="syz.4.369" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 79.315790][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.370'. [ 79.431504][ T40] audit: type=1400 audit(1759306845.417:461): avc: denied { read write } for pid=7334 comm="syz.4.370" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 79.431868][ T7335] [ 79.441376][ T40] audit: type=1400 audit(1759306845.417:462): avc: denied { open } for pid=7334 comm="syz.4.370" path="/14/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 79.534822][ T40] audit: type=1400 audit(1759306845.527:463): avc: denied { setopt } for pid=7340 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 79.782788][ T5967] Bluetooth: hci1: command tx timeout [ 79.865556][ T34] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 79.866716][ T40] audit: type=1400 audit(1759306845.857:464): avc: denied { read } for pid=7376 comm="syz.3.380" path="socket:[18323]" dev="sockfs" ino=18323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.868515][ T34] ath9k_htc: Failed to initialize the device [ 79.880786][ T6017] usb 8-1: ath9k_htc: USB layer deinitialized [ 79.918261][ T40] audit: type=1400 audit(1759306845.907:465): avc: denied { getopt } for pid=7376 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.323031][ T40] audit: type=1400 audit(1759306846.307:466): avc: denied { mounton } for pid=7381 comm="syz.4.382" path="/24/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 80.367447][ T6017] usb 7-1: USB disconnect, device number 6 [ 80.679385][ T7398] netlink: zone id is out of range [ 80.701521][ T7398] netlink: set zone limit has 4 unknown bytes [ 80.711277][ T40] audit: type=1400 audit(1759306846.697:467): avc: denied { create } for pid=7399 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.757858][ T7403] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.390'. [ 80.773159][ T7404] overlayfs: failed to resolve './file0': -2 [ 80.814274][ T7400] netlink: 'syz.3.388': attribute type 13 has an invalid length. [ 80.828369][ T7411] netlink: 'syz.2.391': attribute type 32 has an invalid length. [ 80.917232][ T7421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.392'. [ 80.944054][ T7423] bridge66: entered promiscuous mode [ 80.946373][ T7423] bridge66: entered allmulticast mode [ 81.164703][ T7447] Bluetooth: MGMT ver 1.23 [ 81.321282][ T7462] binder: 7461:7462 ioctl 4068aea3 2000000002c0 returned -22 [ 81.324955][ T7462] binder: 7461:7462 ioctl c0306201 200000000640 returned -22 [ 81.347805][ T7462] binder: 7461:7462 ioctl 40084504 2000000001c0 returned -22 [ 81.408893][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 81.516671][ T7473] netlink: 172 bytes leftover after parsing attributes in process `syz.1.410'. [ 81.549873][ T29] cfg80211: failed to load regulatory.db [ 81.616615][ T7467] hsr_slave_1 (unregistering): left promiscuous mode [ 81.633108][ T7445] IPVS: Unknown mcast interface: veth1_vlan [ 81.822832][ T6027] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 81.850099][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 81.854273][ T7494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35671 sclass=netlink_route_socket pid=7494 comm=syz.4.417 [ 81.859489][ T7494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7494 comm=syz.4.417 [ 81.881486][ T7491] binder: BINDER_SET_CONTEXT_MGR already set [ 81.885019][ T7491] binder: 7490:7491 ioctl 4018620d 200000000100 returned -16 [ 81.890567][ T7491] binder: 7490:7491 ioctl 4028641b 200000000000 returned -22 [ 81.992825][ T6027] usb 8-1: Using ep0 maxpacket: 16 [ 82.001905][ T6027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.007378][ T6027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 82.011945][ T6027] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.017991][ T6027] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.024424][ T6027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.030695][ T6027] usb 8-1: config 0 descriptor?? [ 82.034100][ T7452] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.181333][ T7511] kvm: pic: non byte read [ 82.186340][ T7511] kvm: pic: non byte read [ 82.194961][ T7511] kvm: pic: level sensitive irq not supported [ 82.195605][ T7511] kvm: pic: non byte read [ 82.203379][ T7511] kvm: pic: non byte read [ 82.208177][ T7511] kvm: pic: non byte read [ 82.215302][ T7511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7511 comm=syz.4.422 [ 82.247304][ T7519] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.255607][ T6027] usbhid 8-1:0.0: can't add hid device: -71 [ 82.258430][ T6027] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 82.277713][ T6027] usb 8-1: USB disconnect, device number 8 [ 82.567542][ T7528] devpts: Bad value for 'max' [ 82.604048][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 82.764492][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.769092][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 82.779805][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 82.784636][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 178, setting to 64 [ 82.788897][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.799686][ T9] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 82.804089][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.807480][ T9] usb 9-1: Product: syz [ 82.809215][ T9] usb 9-1: Manufacturer: syz [ 82.811336][ T9] usb 9-1: SerialNumber: syz [ 82.823597][ T9] usb 9-1: config 0 descriptor?? [ 82.830932][ T7522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 82.846465][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input10 [ 82.860710][ C0] kbtab 9-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 82.913978][ T7539] tmpfs: Unknown parameter 'auds<٘it' [ 82.944991][ T7544] vlan2: entered allmulticast mode [ 82.946840][ T7544] bond0: entered allmulticast mode [ 82.948933][ T7544] bond_slave_0: entered allmulticast mode [ 82.951264][ T7544] bond_slave_1: entered allmulticast mode [ 82.977129][ C2] kbtab 9-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 83.043835][ T7522] binder: 7521:7522 ioctl c018620c 200000000040 returned -22 [ 83.111245][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 83.117092][ C0] kbtab 9-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 83.122416][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 83.134146][ T5819] usb 9-1: USB disconnect, device number 2 [ 83.538997][ T7574] netlink: 'syz.3.444': attribute type 10 has an invalid length. [ 83.551656][ T7574] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 83.690214][ T7578] program syz.1.445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.696356][ T7578] netlink: 'syz.1.445': attribute type 2 has an invalid length. [ 83.896486][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 83.900803][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.451'. [ 83.997695][ T7601] Bluetooth: hci0: service_discovery: too big uuid_count value 8526 [ 84.007732][ T7599] Bluetooth: hci0: service_discovery: too big uuid_count value 8526 [ 84.067262][ T7605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.119267][ T7603] Bluetooth: hci0: service_discovery: too big uuid_count value 8526 [ 84.168471][ T7610] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 84.177958][ T7610] CIFS mount error: No usable UNC path provided in device string! [ 84.177958][ T7610] [ 84.181234][ T7610] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 84.278288][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 84.278306][ T40] audit: type=1400 audit(1759306850.267:498): avc: denied { ioctl } for pid=7618 comm="syz.4.460" path="socket:[21052]" dev="sockfs" ino=21052 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 84.302885][ T40] audit: type=1400 audit(1759306850.287:499): avc: denied { write } for pid=7618 comm="syz.4.460" name="fb0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 84.310674][ T40] audit: type=1400 audit(1759306850.297:500): avc: denied { ioctl } for pid=7620 comm="syz.1.461" path="socket:[21868]" dev="sockfs" ino=21868 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.355495][ T7625] netlink: 'syz.1.463': attribute type 12 has an invalid length. [ 84.359012][ T7625] netlink: 'syz.1.463': attribute type 29 has an invalid length. [ 84.360641][ T7626] fuse: Bad value for 'fd' [ 84.362167][ T7625] netlink: 148 bytes leftover after parsing attributes in process `syz.1.463'. [ 84.362195][ T7625] netlink: 'syz.1.463': attribute type 2 has an invalid length. [ 84.362209][ T7625] netlink: 'syz.1.463': attribute type 3 has an invalid length. [ 84.362222][ T7625] netlink: 11 bytes leftover after parsing attributes in process `syz.1.463'. [ 84.408113][ T40] audit: type=1400 audit(1759306850.397:501): avc: denied { watch_mount } for pid=7630 comm="syz.1.465" path="/114" dev="tmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.410653][ T7632] Bluetooth: hci0: service_discovery: too big uuid_count value 8526 [ 84.460219][ T40] audit: type=1400 audit(1759306850.447:502): avc: denied { ioctl } for pid=7636 comm="syz.2.467" path="socket:[21090]" dev="sockfs" ino=21090 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.489890][ T7638] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 84.489994][ T7640] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 84.500097][ T7638] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 84.506054][ T7638] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 84.645602][ T7643] binder: BINDER_SET_CONTEXT_MGR already set [ 84.647765][ T7643] binder: 7641:7643 ioctl 4018620d 200000000280 returned -16 [ 84.793431][ T7668] futex_wake_op: syz.1.476 tries to shift op by -1; fix this program [ 84.815984][ T7668] overlayfs: statfs failed on './file0' [ 84.816002][ T40] audit: type=1400 audit(1759306850.807:503): avc: denied { getattr } for pid=7667 comm="syz.1.476" name="/" dev="9p" ino=71827873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.843751][ T7671] program syz.3.477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.847232][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 84.859899][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 84.860912][ T1141] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.868849][ T1141] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.870746][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 84.876561][ T1141] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.876664][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.476'. [ 84.880295][ T1141] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.957785][ T7685] unsupported nla_type 4111 [ 85.116295][ T40] audit: type=1400 audit(1759306851.107:504): avc: denied { setattr } for pid=7701 comm="syz.1.483" name="sr0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 85.131553][ T40] audit: type=1400 audit(1759306851.117:505): avc: denied { setattr } for pid=7701 comm="syz.1.483" name="PF_CAIF" dev="sockfs" ino=21297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 85.206005][ T40] audit: type=1400 audit(1759306851.197:506): avc: denied { ioctl } for pid=7709 comm="syz.4.488" path="socket:[20372]" dev="sockfs" ino=20372 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.416985][ T7727] bond2: entered promiscuous mode [ 85.420878][ T7727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.425282][ T7727] bond0: (slave bond2): Enslaving as an active interface with an up link [ 85.454479][ T7740] openvswitch: netlink: IPv4 frag type 36 is out of range max 2 [ 85.506291][ T40] audit: type=1400 audit(1759306851.497:507): avc: denied { mount } for pid=7747 comm="syz.3.499" name="/" dev="configfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 85.512009][ T7745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.524880][ T7745] vlan3: entered promiscuous mode [ 85.527728][ T7745] bond1: entered promiscuous mode [ 85.529935][ T7745] vlan3: entered allmulticast mode [ 85.531824][ T7745] bond1: entered allmulticast mode [ 85.544813][ T7745] bond1: (slave gretap1): making interface the new active one [ 85.547231][ T7745] gretap1: entered promiscuous mode [ 85.548993][ T7745] gretap1: entered allmulticast mode [ 85.553683][ T7745] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 85.630836][ T7752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7752 comm=syz.3.501 [ 86.131059][ T7794] ucma_write: process 166 (syz.2.513) changed security contexts after opening file descriptor, this is not allowed. [ 86.673091][ T29] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 86.702467][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.532'. [ 86.748873][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 86.772994][ T7858] Bluetooth: hci0: service_discovery: too big uuid_count value 8526 [ 86.802217][ T7861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.531'. [ 86.824909][ T29] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.828614][ T29] usb 9-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 86.833478][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.837074][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 86.841252][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 86.852179][ T29] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.856231][ T29] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.859192][ T29] usb 9-1: Product: syz [ 86.861060][ T29] usb 9-1: Manufacturer: syz [ 86.866723][ T7811] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 86.871564][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 86.874942][ T7871] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.878913][ T7871] overlayfs: failed to set xattr on upper [ 86.881736][ T7871] overlayfs: ...falling back to redirect_dir=nofollow. [ 86.884459][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 86.884676][ T7871] overlayfs: ...falling back to index=off. [ 86.888583][ T29] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 86.888597][ T29] cdc_wdm 9-1:1.0: Unknown control protocol [ 86.894886][ T7871] overlayfs: ...falling back to uuid=null. [ 87.074904][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 87.077268][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 87.077457][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 87.082522][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 87.082728][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 87.082739][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 87.082919][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 87.092502][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 87.092839][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 87.092850][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 87.093017][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 87.093027][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 87.095338][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 87.095354][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 87.096210][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 87.096223][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 87.098852][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 87.098867][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 87.101688][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 87.101703][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 87.772075][ T7907] kvm: MONITOR instruction emulated as NOP! [ 88.173816][ T7935] validate_nla: 3 callbacks suppressed [ 88.173837][ T7935] netlink: 'syz.3.556': attribute type 1 has an invalid length. [ 88.180043][ T7935] netlink: 'syz.3.556': attribute type 1 has an invalid length. [ 88.184832][ T7935] netlink: 92 bytes leftover after parsing attributes in process `syz.3.556'. [ 88.583601][ T7959] mkiss: ax0: crc mode is auto. [ 88.891308][ T7989] atomic_op ffff888053e2d998 conn xmit_atomic 0000000000000000 [ 88.896394][ T7976] loop6: detected capacity change from 0 to 63 [ 88.898741][ T7976] ------------[ cut here ]------------ [ 88.900672][ T7976] WARNING: CPU: 0 PID: 7976 at fs/exec.c:118 path_noexec+0x1ca/0x230 [ 88.904474][ T7976] Modules linked in: [ 88.906587][ T5961] buffer_io_error: 10 callbacks suppressed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 88.906603][ T5961] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.906839][ T7976] CPU: 0 UID: 0 PID: 7976 Comm: syz.2.564 Not tainted syzkaller #0 PREEMPT(full) [ 88.913237][ T5961] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.915995][ T7976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.916018][ T7976] RIP: 0010:path_noexec+0x1ca/0x230 [ 88.916052][ T7976] Code: ff 83 e3 02 48 89 de e8 84 d0 84 ff 48 85 db 41 0f 95 c4 e8 08 d5 84 ff 44 89 e0 5b 5d 41 5c e9 7c 74 1c 09 e8 f7 d4 84 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 49 c8 eb ff e9 a8 fe ff ff e8 3f c8 eb [ 88.916067][ T7976] RSP: 0018:ffffc90003597c70 EFLAGS: 00010293 [ 88.916086][ T7976] RAX: 0000000000000000 RBX: ffff88801ea948e0 RCX: ffffffff82363f30 [ 88.916097][ T7976] RDX: ffff88802422a480 RSI: ffffffff82363fe9 RDI: 0000000000000007 [ 88.916107][ T7976] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 88.916118][ T7976] R10: 0000000000000000 R11: 0000000000000000 R12: 0000200000000000 [ 88.916129][ T7976] R13: 0000000000000001 R14: 000000007c07f9f3 R15: ffff888054944a88 [ 88.916142][ T7976] FS: 00007f0872c8e6c0(0000) GS:ffff8880d6e76000(0000) knlGS:0000000000000000 [ 88.919544][ T5961] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.919809][ T5961] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.920069][ T5961] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.922385][ T7976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.922401][ T7976] CR2: 0000200000001ac0 CR3: 00000000490d9000 CR4: 0000000000352ef0 [ 88.922409][ T7976] Call Trace: [ 88.922413][ T7976] [ 88.922422][ T7976] do_mmap+0xd23/0x1210 [ 88.979756][ T7976] ? __pfx_do_mmap+0x10/0x10 [ 88.981571][ T7976] ? __pfx_down_write_killable+0x10/0x10 [ 88.983735][ T7976] vm_mmap_pgoff+0x29e/0x470 [ 88.985528][ T7976] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 88.987753][ T7976] ? __fget_files+0x20e/0x3c0 [ 88.989715][ T7976] ksys_mmap_pgoff+0x32c/0x5c0 [ 88.991333][ T7976] __x64_sys_mmap+0x125/0x190 [ 88.992905][ T7976] do_syscall_64+0xcd/0x4e0 [ 88.994575][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.997173][ T7976] RIP: 0033:0x7f0871d8eec9 [ 88.999036][ T7976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.006901][ T7976] RSP: 002b:00007f0872c8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 89.010301][ T7976] RAX: ffffffffffffffda RBX: 00007f0871fe5fa0 RCX: 00007f0871d8eec9 [ 89.013076][ T7976] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000000000 [ 89.016652][ T7976] RBP: 00007f0871e11f91 R08: 0000000000000008 R09: 0000000000000000 [ 89.022053][ T7976] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 89.025642][ T7976] R13: 00007f0871fe6038 R14: 00007f0871fe5fa0 R15: 00007ffcb6b1a9f8 [ 89.028727][ T7976] [ 89.029977][ T7976] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.033348][ T7976] CPU: 0 UID: 0 PID: 7976 Comm: syz.2.564 Not tainted syzkaller #0 PREEMPT(full) [ 89.037725][ T7976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.043058][ T7976] Call Trace: [ 89.044437][ T7976] [ 89.045700][ T7976] dump_stack_lvl+0x3d/0x1f0 [ 89.047690][ T7976] vpanic+0x6e8/0x7a0 [ 89.049163][ T7976] ? __pfx_vpanic+0x10/0x10 [ 89.050993][ T7976] ? path_noexec+0x1ca/0x230 [ 89.052884][ T7976] panic+0xca/0xd0 [ 89.054514][ T7976] ? __pfx_panic+0x10/0x10 [ 89.056405][ T7976] ? check_panic_on_warn+0x1f/0xb0 [ 89.058835][ T7976] check_panic_on_warn+0xab/0xb0 [ 89.061240][ T7976] __warn+0xf6/0x3c0 [ 89.063655][ T7976] ? path_noexec+0x1ca/0x230 [ 89.066081][ T7976] report_bug+0x3c3/0x580 [ 89.067916][ T7976] ? path_noexec+0x1ca/0x230 [ 89.069847][ T7976] handle_bug+0x184/0x210 [ 89.071736][ T7976] exc_invalid_op+0x17/0x50 [ 89.073713][ T7976] asm_exc_invalid_op+0x1a/0x20 [ 89.075753][ T7976] RIP: 0010:path_noexec+0x1ca/0x230 [ 89.077733][ T7976] Code: ff 83 e3 02 48 89 de e8 84 d0 84 ff 48 85 db 41 0f 95 c4 e8 08 d5 84 ff 44 89 e0 5b 5d 41 5c e9 7c 74 1c 09 e8 f7 d4 84 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 49 c8 eb ff e9 a8 fe ff ff e8 3f c8 eb [ 89.084231][ T7976] RSP: 0018:ffffc90003597c70 EFLAGS: 00010293 [ 89.086882][ T7976] RAX: 0000000000000000 RBX: ffff88801ea948e0 RCX: ffffffff82363f30 [ 89.091211][ T7976] RDX: ffff88802422a480 RSI: ffffffff82363fe9 RDI: 0000000000000007 [ 89.093990][ T7976] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 89.097191][ T7976] R10: 0000000000000000 R11: 0000000000000000 R12: 0000200000000000 [ 89.100363][ T7976] R13: 0000000000000001 R14: 000000007c07f9f3 R15: ffff888054944a88 [ 89.103846][ T7976] ? path_noexec+0x110/0x230 [ 89.105898][ T7976] ? path_noexec+0x1c9/0x230 [ 89.108382][ T7976] do_mmap+0xd23/0x1210 [ 89.110772][ T7976] ? __pfx_do_mmap+0x10/0x10 [ 89.112971][ T7976] ? __pfx_down_write_killable+0x10/0x10 [ 89.115237][ T7976] vm_mmap_pgoff+0x29e/0x470 [ 89.116886][ T7976] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 89.118580][ T7976] ? __fget_files+0x20e/0x3c0 [ 89.120015][ T7976] ksys_mmap_pgoff+0x32c/0x5c0 [ 89.121522][ T7976] __x64_sys_mmap+0x125/0x190 [ 89.122986][ T7976] do_syscall_64+0xcd/0x4e0 [ 89.124500][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.126865][ T7976] RIP: 0033:0x7f0871d8eec9 [ 89.128727][ T7976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.135226][ T7976] RSP: 002b:00007f0872c8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 89.138022][ T7976] RAX: ffffffffffffffda RBX: 00007f0871fe5fa0 RCX: 00007f0871d8eec9 [ 89.140763][ T7976] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000000000 [ 89.143592][ T7976] RBP: 00007f0871e11f91 R08: 0000000000000008 R09: 0000000000000000 [ 89.146908][ T7976] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 89.150448][ T7976] R13: 00007f0871fe6038 R14: 00007f0871fe5fa0 R15: 00007ffcb6b1a9f8 [ 89.154147][ T7976] [ 89.156572][ T7976] Kernel Offset: disabled [ 89.158429][ T7976] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:20:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=000000000000004f RCX=ffffffff819a48d2 RDX=ffff88802422a480 RSI=ffffffff819a48c0 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc900035978f8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920006b2f21 R13=0000000000000200 R14=ffff8880301aa480 R15=ffffc900035979c0 RIP=ffffffff819a48c2 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0872c8e6c0 ffffffff 00c00000 GS =0000 ffff8880d6e76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001ac0 CR3=00000000490d9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb6b1af06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb6b1af06 00007ffcb6b1af0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0871e12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0871e12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0871e12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0871e12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0871e1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0871e1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0871fb74a8 00007f0871fb74a0 00007f0871fb7498 00007f0871fb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0872b1d100 00007f0871fb7460 00007f0871fb7478 00007f0871fb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0871fb74b8 00007f0871fb74b0 00007f0871fb74a8 00007f0871fb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851f7f75 RDI=ffffffff9ab4eae0 RBP=ffffffff9ab4eaa0 RSP=ffffc90002816ec0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9ab4eaa0 R15=ffffffff851f7f10 RIP=ffffffff851f7f9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f28d87a7880 ffffffff 00c00000 GS =0000 ffff8880d6f76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff6437e7dac CR3=000000004dc6a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c40000 Opmask01=0000000000000001 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560b565ecfc8 0000560b565ecfc8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00363a372f6b636f 6c622f7665642f73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560b565f77c0 0000560b565f77c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28d81f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff00ff00000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20676e6964616572 004b4f2034366f66 6e695f706f6f6c20 676e696461657200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05424b4c41444057 004b4f0511134a43 4b4c5f554a4a4905 424b4c4144405700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a72737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88801ea9fad0 RCX=ffffffff8181a587 RDX=ffff888026038000 RSI=0000000000000000 RDI=0000000000000001 RBP=dffffc0000000000 RSP=ffffc90004ef7d10 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88801ea9fad8 R13=ffff88806a839298 R14=ffff8880258cd440 R15=ffff8880258cd440 RIP=ffffffff81bb0e71 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7076000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c451f81 CR3=0000000055090000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc04647fd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc04647fd6 00007ffc04647fdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd43012fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd43012fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd43012fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd43012fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd4301305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd4301313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd431b74a8 00007efd431b74a0 00007efd431b7498 00007efd431b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd43d1d100 00007efd431b7460 00007efd431b7478 00007efd431b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd431b74b8 00007efd431b74b0 00007efd431b74a8 00007efd431b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=0000000000000003 RCX=ffffffff8b4fbd4d RDX=ffffed100d526656 RSI=0000000000000003 RDI=00000000ffffffff RBP=ffffed1003b58000 RSP=ffffc90000197de8 R8 =0000000000000000 R9 =ffffed100d526655 R10=ffff88806a9332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801dac0000 R14=ffffffff905f4d90 R15=0000000000000000 RIP=ffffffff818f77b6 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7176000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000005ffe4 CR3=0000000031dd1000 CR4=00352ef0 DR0=00000000e7973eea DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=00000000030101ff Opmask03=0000000000080040 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560b565f58f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560b565ff710 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732578252dd483 7373257d45fd3959 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a664bbcfd9b81848 7373737613c61686 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 752f342e6463685f 796d6d75642f6d72 6f6674616c702f73 6563697665642f73 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000560b00305f65 6b69727473726564 6e7568742f796c70 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000