last executing test programs: 2m5.05204146s ago: executing program 0 (id=1162): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) userfaultfd(0x801) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000480)={0x2b, 0x1, 0x0, "3ad3cbcfd20fb29634b50b097fae23ee506c00000700000000000000cc0a00", 0x30314247}) r1 = syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x40000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0085666, &(0x7f0000000080)={0x2, 0x3}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000180)={0x0, {0x9, 0x4}}) 2m5.000873652s ago: executing program 0 (id=1163): mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) syz_emit_ethernet(0x62, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2c, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @local, {[@hopopts={0x33, 0x2, '\x00', [@calipso={0x7, 0x8}, @jumbo={0xc2, 0x4, 0x6}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2m5.000587023s ago: executing program 0 (id=1164): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000000c0)="283549a27d5f283e19d3b1b8de0b867a1304fb3445185f657fbcce6b68c74606e29b6403afdb4e213b105e14201c8227e21371c672f56bc5107d2346c82325df3da6c33ce8195c68d33c45d32a81bd103cabea12964acbdce2c1703efe11114ba5646119256f805ea3968b1303955764d2ce9d74e290c1555dae31964117a967deb1a7313bc318d7d697bd85c7aa8656339bd77115e07211d0757d2b359f3237f30166ae738f26f3b036745d9607f42ca1a7ad6520b32c0bd0493c8878592e8bbea8405d8951ffac6b2d5a0a72cbff6198e5f8203c268ccade6987f762bc3d8237ff8e78e9d3ac803e8c41a9d30c05f59f032af7d99ff60fc63f18ac7a83c7162f9415a1fc61708dcd2107975628926248be260514df18c8484cf2b7efe4860f0ce75559b78da9d01c69fa5f429bfdb4e62655dbda4aa90f4442dd60b75e0b292a1b33569ada891cb9f081f942ac9b093bf62d228a314b9605ecda68083acb1ce9b72bcfba4f60dc43bf055dda58fe8b159d2267c744d5c81fcf48e200387375bf6f39ab0d028b1c7ba2623759efe0a52ae7b96d2854053d18545d8f6e3405442814f068f9f0b4887194009f0a6140a2c7d6a9bd03952d4b3803fc223d9d78cd87d464c4258c0473f28b58a2943e36fd1dbe1fb6b121989a1171b95efd58e8b0b1e1b03d773c79a67252d4d2517aadc9ca076445318c88d00e0127de5e32a4fe906117045f571f0214cc8839f743c454e9795fe7bc3bb3c2ca227af7c2f49897bc92e6fa0d9bd0fdfae643436af4501b1b195c5dc56238dff12d472342e486cedaece971e23d514955b1c9d37d300392db21fc26a854e2e56d7ff7ef611907c43e8598aa81b26f656ab6a5b9738eb5df20e4eb71e719b4df99122a6e24215fe1277aa1d142166610d97ee368fe826056883036aca079c79c999fe92a5b7fcf1e4bee24a28785bcd97a5d2788102c4442ef132686b2c5cd974ae2d2feb11cace50629efcf2c84f3d0e1c417ffb795014a9b25494754e7e26221232299ba3ea515afc4f05a79c9f86e32cef6810984ae1c4b8953c51dea4d4a1bef7d0a7183b2a0ca30b6d7d4587f3806835ebde5525e46a63ec738b88c63ef4c5154009225ce83fd29d6e938bce81eef242decc2c255317db5b323209965ae6781dea6ffa777881aa992463172e2776b32d71a2f48d926d205e4c310d94c18896e5e445745473327f1c3f98818e1b00775164d18f47c4f82658bad8a9a7bb8b25d6e949df99ec1c6763da3fe90ead04993716d0922d545077d567b1cec25ab53b6de9bc70aac8a71bc87d1862a95808c1b982bd6f6890b147910aed3d31bc1c554c530c2db482ef91be2e1d613a210564f3fad57b0a8c2822990b713024c139f29a618372b0ac1bad5d15649e0045d04835a7c899be3cffd693119af7f0610c38f5e65b50fc8d7303cf14db6d272bfdf1b8f886bb1257a7673eeb96c01a3b73c02a59c5a5d20e61b0a03edc4bdff557ba4f4e93fc823eb411cdf870ad156f990a9822a45ab7307122df22b5f9a3fd7013c542f21ad71418f7eeec4d2b942f0789310354dd4466a87e90a441a2fdb61e412a855871b9a31ac87d87f343bdaabd2826cd941b18b38e2696098485a98759ff6a1d889ed14b9db23d403053770dbfe91b6b35290f0b031f1ee38b96e357b5c1d8a5cccca9d87ac6de32f2569100300830bfa45debbc890ad249161433886786a0d39be77ba6913e58ccafa8bf23b2381bd64ceb691cf3d23fbd3cd7a1225918292a59b978193f2f08272cf107c9efcedadb5fc59ba2fbe210bb99e6c58816eea186e91fa51b7ea57c3a3128369bca1b21a40a418972ca366431b3d60d2847c54015d315ca8bc0c645157d4a71f20789e3eae27e4ddd2b032775951033f88c8862a8caef3c7be9065f31015ace45ac67f46c5b3d34d3c714656c31c52f24873d750f688ab1aeca94f22c2d07e1f28b339133a7a569f975b8370103c1c5acacfff6f2e9b97e209ee958c8031ad0900f77d9ca08000752f636d690575e7aedc0ed5ace6fc2bb6c2b516b4ff110686bfe9ba61e1a214fec47970676c480619187817d123efc12d3e2e1b5aae2bdcfbeae4e6ffab335d3981e051888b5ae55b3ccf94eec786a4fb994c939f18bff32566dc701e59b04722f24f79c1099d659108b9951984ac8564cfa9ced0df8cba2e1dd5341bda4ada294ad3cd389ab6b594bf0ce05f71f04ddb1a56341e561d8a7471ae226c39883c1d6292ddbb9b37d80524a3d31bc84a0bb4db3ce14b26d85714031826ecdf9b77caf7fb82b3aae2886bc3765607b277d84ec4b060ffc2c5bf0a2f4b1973ab53a89235f7ac3ce77fcfd39bcda72252039e42e1b43b0a7be19216ea74522ab4da0f9ff536e1c1eb1a71840a3c4badbd4ef14205ad51323cbfb7d8276f1f0af9ba42963eacbf5acf2eed676bd19210e9fd3d45aa4b51f09ba723b2eb9ae4f113d47bfa10a78eb4a309c4529be185be8899481714a4b5558ec3cbc15acd8548405777542d8b3bcc5986f46e828467ccea244ecfcf6032a9e672ad68918cc4905f62684df57dcd5f3122c440a688e36ed95205443c305f973325a9f1b840ca452e28821c193d5107ebd030af06f441c807d109cf1052144f8bacb376021151891722053b72fc489ae99330d983ee30947edaec2eb54ebf25c62e4b450c759096accb0e05f22bf37b3d23974486834d76a508fb649e9a4804108e9fef4c390b564a36e171f2132b945b7f211bde719eded8a8a1cd305b2af1d697ffcb4b8a831160919b2db44b03154e8eb2004cfec01592a4d42f408dce822a4d4e151aa4e4cc8a3f9dd4a02dbc622cb802ee81eb0a138dabb784e9a6340ee55012c44a187d263e890f777a820ebbca7671a7cf2f7a6b446c0d3a09433f3add5f0cb4583ce5496ffe2212483fc89ef2ed8bc6e0a95ee77f2190a67b10d87c8b0e1daf248d878ea1378c87258eb9ebf11881e6c04c2f91cbd2231c69addd69c6dff6968b76129b794ff3fc1e8a141dedf03dbc2f972bd6369c86d4e441cc2726a3c14eafb7090bdf5803370182875adc7bc20b51edd50187f9a7285c26494998c79809f3a9ef86fee1265ef77c55e43ce993c3932055d4a056ebbcadd45e526cb3932434045e7e7a4f7399c9b20ed4d45e03c341a191368839df60dd144bc6da0d98e14b65726b693b360a26edc9b501fa21eae2c2c736d029817e89dc383744bfceed62d415beed9c4aacbacb671f2956d51d0195c63b7430cb1425ccb44a7b824e9916ef3a732587034ce6c99e0e69cbc77785ea4ccf46ac43cd5e9a2f6346159f7760c59a71bcfa1ca14e09c47b864f60b890aa4c1027ea4ea02bdae347aebcdadbb445946fe8432651a7a47936efbb4d781af243fcc0c71ec25d5133fb8f9a59cf49f4278b399eea7b52b2a0fd49ebe468d69225e35ee59d4067611aba7f866c7b4b1c32042a0a16c066ad2e351ac9779efe3471f75708b036b00bcbe090f06095d5e5aa6cf6a6915eb8f56f48e69d8d17126599dc58667e28e889d8d40220a40f38d2383e01963fd18bd08f89ea72521e6599dc177465a0d5a56ff1da44a0ea6e24ee18116db19a7491b57094b665daac5f01b3ee678f6a7a07e5bd3eb7282220a784a627cc105d7f6029e103d82d829b98d604cd18fab743dab54bc95cb7e1e11b6ab7d70ee381e4fb1afc5b1c490321626bd8271c747e05478218aacc9814aad10ed08b9a3662c9233995aebd2064aa0b2eb1d9dcf67d3094e6de5795fc6fa5b5003bb2fbe3da670225f025e81b613a78a7dba6acc945668c2a2f2c0b679b09f65e21c71aea6cc2ce204c0bd3006c2cc77aadfed64d26806d4417f514105f021410d0ea474b05cfc0c528b9d1cdad902d00bbe0097d7a759f851d96eba8eb3cce1b7178355c9e80ab6fe3b54fc52bf5fd0ed3c038a9bf9bf8d51a2851827b45c7551fdbf99ac39751fa532ec4d7647d8f79c3b968596e4748ef08dd484a8a0fb1bd7f2d3eda28332d15b9919dbaeb64c239ba2f61ab703b94acf0bc11700fce010a426e084f05dd30a36b4dc37da1c4a4e3a1870190620ac03352401aeb3765f6782ac6c3672039d0afa24101a1b61540984944bb654b8795d88311310cb97a9945a2d760df4364fa33f547235d74f58f01cf825e3fb038013189373b8892c2ff121998a0c86b946f51a5b57c6c202cb3436f49b1698b979cb268fac8addb20725bea9641fd9fcd24e77b07b161887af5570d90b2650e6221f4c0b8532a9cf684548cf47ef3f8cc2840836681d011c2cef4fecf5dd29c05e1c529633bbc4077122f12feca4f692549270a35f1c820797a394d77e4aad074a21ddbe31e246d396239e5b95ff9b7273db737ee7bd5619d744a9ad894bc0310bd05eabbb141ca2436fb77bcc5a17dfc0c2436db2f638f7567dd22b6d3a824ab4d227eafedadecc5b3bcf50e399b04f3bf31c709a6f5979666a96791552de2271e8ded596a23c25d99e7c0155519e5acb177db5c3eb4a751519e12bad217231d1945fc51ff043f905f46d9de66df23ab53fe8da5803ea9f52dd839360c1fceb31688fb724d9016f23a84ce09801332aed13261251b2c57e74f2334c78dbe2e34b4033f110420073d7b310a09738ccc1087121aa9d3b564159e60fb38bec45985f7576c8fce1dd90721f0bc19bac9956b262ed1fc63a8e907f2c02de94cf1cfd769611c1e4551cb358a4a2494c2e97a9139cbd6acb1cbb49a3a1e19ee36d96f56ac5a4d2396661130b9e5c2cf35323daf80a1ba3981dd37c8330abcb065853c76d1274d875daba856ca87b91b51973f76a5a0504287512b7b3e76755d67a7e34de3c80f0f5431044854e6d7a56b7e610f3dd71f8b1456878596541621c1c5557958a233eccd4e83a85c930c1b0ad8f553c18592bfcfa1c8e37300ceda6fc8eae4dfa63ea890b7a49f6e579ffc9d2c589e63b9cafd1304a6568a83c88a6fcb9bc78755439231d4a7f12cf1fb95a6d1222867a94b626e7816973f4bb4684824c5ce421149553166776427b7f89c012958c9d69d0ce9fbee498d4a91396e824661321d8e299aaa3fc85b63dd566ee7ebbef4bfe468cd80ceccc08c98dbd6f9d04b9c85fa842ad64dc139eec61298e22fa697972fc1cff3a729e025b8b520a2d1381f75aa04f6f6c15449f7450887ffcfaa869ddb5c3e4f7e25239017ff9dc6220ce29380846e67f48b8eb4242fd4561fce21041bb68ae4b6ce7893eebf6b626f8e1e142793d1ccdf7bbd810e11dcc33fc1619e8e7d634f5cc3eb867e4ae0c32f8342764035806dbc677b9f680f077674bcaa16a6b0e59d284e0b49d5e8f42a7f54762c50123521d661403d4b991da455784d3e62b18246d926f88f3fabcdacc9ee3c6e63fb4b66ad0876de192a1a486ccf19cccfb6ca94db5ba43c61ed05bbcfdd6f52d20f5a7a11e08311199ab981b4f532647eb444c70126187f98a4e42d151f73f7fef56cee870c48f297a14f63c6e0d3ae9fa358df3a635f99eafed15c3cb49eee03bf8feccdaf4ad0e1d170ea373c5e4e46a6679edfc94709252e5478cea714e7b9faa1901bb3af6db4abc18640b345ae6a2c353a1c8ec5accd1365aec5767b7c523f4df1f6e6875e55bdf49da01e0fbfcf6114af03a7aec73dbe776100b59388eb16db0ef8b38d72409a9b7803a528e2c682bcd29837a6f115c577af59c19f7225b60416a171a2f2217b54728b8f924e4cdc278ba85bf894546c5be3f9cfd0f0724e7ed1c981828c9c5ab6a5a11db0c1", 0x1000) (async, rerun: 32) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000001c40), 0x4) (async, rerun: 64) migrate_pages(r1, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) (rerun: 64) 2m4.900543103s ago: executing program 0 (id=1165): r0 = socket$packet(0x11, 0x2, 0x300) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x161b82, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000008400000002000000fe8041"], 0x20}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r3]) ioctl$KVM_GET_VCPU_EVENTS(r4, 0xc048aeca, &(0x7f0000000080)) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000140)={0x6, 0x0, {0x20, 0x37, 0x9, 0x10, 0x2, 0xee6d, 0x0, 0xf7, 0x1}}) r6 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4440) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/21, 0x204000, 0x800, 0x0, 0x5}, 0x20) 2m1.839501138s ago: executing program 0 (id=1207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010000000000000000000a9e"], 0x64}}, 0x40080c0) 2m1.780474544s ago: executing program 0 (id=1209): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x110, r0, 0x52f91000) 1m46.369066651s ago: executing program 32 (id=1209): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x110, r0, 0x52f91000) 5.100150221s ago: executing program 1 (id=2656): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206010200000000000000000000000105000100070000000900020073797a30000000000c000780050015000100000005000400000000b164ffffffffffff683a69702c706f727400000000050005000a000000"], 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000001800000010000000100000003c45f902000000040000000000000e1e000000000000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(0x0, 0x84880) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000080)="2277c66486332ce8b88f9713e277f16fa4225e55695ce54a", &(0x7f0000000240)=""/195, &(0x7f0000000340)="57e71ca3e2feb57e213a43999fefc133cada0535c19a499542e9833df82d6ce312f1edf37261cac83ecfd8fdb43a42d7490b42792960f98c4eed213988e5b6a096366a88c9e71801448ee58ac3dad76dc7fc58fc791b4983ebcb0185e060c7c263af02d8c413acb2378620527723128911dd29086dc7d80cfa251ffa2257feac09ffd5c446d2feca94147060abaf0fb7f0c1aeb16c0dadcdea58200b346e6c688a39b9d8c0e0fd960b06f4a95dcf", &(0x7f0000000400)="6e155cbdaf67d04c01b1fd1f053397c350a7cc8a00572334497bbe50e5cefe9fa7b45002424fa1a72027492be2b7f8650756c4ae567b4544215d06e22a679b4c7ed2265a0380ee92d7f03c012c80c16b576c9007b5566d56f5e89d0bb11b4fb9d423fb6a26aa129ab23c51b87fd3f6c418fd0e5754eb2576685980634e840ec17527ca80a96442e0fdf49ab743368942cf429d2de5be96b117b066c02f1eedeee2", 0xc4, r4, 0x4}, 0x38) close_range(r3, 0xffffffffffffffff, 0x0) 5.099731546s ago: executing program 1 (id=2657): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000002100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002140)={0x0, 0x0, 0x0}, &(0x7f0000002180)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000004340)={0x3, 0xa3e, {r4}, {r5}, 0x80, 0x3ff}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000004b80)={&(0x7f00000041c0)={0x50, 0x0, 0x6, {0x7, 0x2b, 0xa, 0x8000001, 0x5, 0xc, 0x43, 0x1, 0x0, 0x0, 0x80, 0x81}}, &(0x7f0000004240)={0x18, 0xfffffffffffffff5, 0x2, {0xfffffffffffff92b}}, &(0x7f0000004280)={0x18, 0x0, 0xaf, {0x2}}, &(0x7f00000042c0)={0x18, 0x0, 0xfffffffffffffbff, {0x4}}, &(0x7f0000004300)={0x18, 0x0, 0x6}, &(0x7f0000004380)={0x28, 0x0, 0x80, {{0x0, 0x10, 0x0, r7}}}, &(0x7f00000043c0)={0x60, 0x0, 0x7ff, {{0xffffffffffffffff, 0x1, 0x10001, 0x4, 0x200, 0x5, 0x1, 0x1}}}, &(0x7f0000004440)={0x18, 0x0, 0x73, {0x10}}, &(0x7f0000004480)={0x12, 0xfffffffffffffff5, 0x8753, {')\x00'}}, &(0x7f00000044c0)={0x20, 0x0, 0x39, {0x0, 0x1d}}, &(0x7f0000004500)={0x78, 0x0, 0xa, {0x9, 0x5, 0x0, {0x0, 0x5, 0x7, 0x0, 0x400, 0x149, 0x5, 0x9, 0x2, 0x8000, 0x9, r5, r3, 0x7, 0x400}}}, &(0x7f0000004580)={0x90, 0x0, 0x41aa, {0x2, 0x1, 0x87, 0x4, 0x1, 0x3, {0x5, 0x7ff, 0xc, 0x81, 0x4, 0x0, 0x7, 0xff, 0xc82d, 0x1000, 0xffff, r2, r6, 0xfffffff9, 0xbb}}}, &(0x7f0000004640)={0x150, 0x0, 0x4, [{0x3, 0xbff1, 0xb, 0x299d, '/dev/nvram\x00'}, {0x5, 0x1, 0x0, 0x6}, {0x6, 0x3, 0x3, 0x3, ')&['}, {0x3, 0x100, 0xb, 0x7fff, '/dev/nvram\x00'}, {0x6, 0x6, 0xb, 0x3, '/dev/nvram\x00'}, {0x6, 0x1000000, 0xb, 0x80000001, '/dev/nvram\x00'}, {0x1, 0x10001, 0x3, 0x7f, '@@]'}, {0x1, 0x6, 0x6, 0x4, '*/:(.$'}, {0x1, 0x6, 0xb, 0x4, '/dev/nvram\x00'}]}, &(0x7f00000047c0)={0x160, 0x0, 0x6, [{{0x1, 0x2, 0x6, 0x8, 0x80000000, 0x14000000, {0x4, 0x5, 0x5, 0xe, 0xfe2fba7, 0x81, 0x2, 0x8, 0x2, 0x8000, 0x1ff, r5, r6, 0x1ce0, 0x5}}, {0x2, 0x10, 0xb, 0x3a, '/dev/nvram\x00'}}, {{0x1, 0x2, 0x7fffffff, 0x7d4, 0x3ff, 0x2, {0x3, 0x40a, 0x8f4, 0x8, 0xffffffff, 0x3, 0x3c6, 0x80000001, 0x8a0a, 0x1000, 0x10000, r5, r6, 0x1, 0xffffffff}}, {0x5, 0xfffffffffffff001, 0xb, 0x6, '/dev/nvram\x00'}}]}, &(0x7f0000004940)={0xa0, 0x0, 0x9, {{0x4, 0x2, 0x5, 0x0, 0x8, 0x1, {0x3, 0x4, 0xe, 0x10, 0x40, 0x8, 0x3ff, 0xb, 0x3, 0x4000, 0x2, r2, r6, 0xb, 0x8}}, {0x0, 0xa}}}, &(0x7f0000004a00)={0x20, 0x0, 0x401, {0x2, 0x4, 0x0, 0x1000}}, &(0x7f0000004a40)={0x130, 0xfffffffffffffffe, 0x5, {0x4fc, 0x2, 0x0, '\x00', {0x10000, 0xae, 0x5, 0xea95375, r2, r6, 0x2000, '\x00', 0x6, 0x1, 0x1, 0x9, {0x8, 0x1000}, {0xa74a, 0x4f5}, {0x8000000000000000, 0x4}, {0x243, 0x3}, 0x3, 0x5, 0x2, 0x2}}}}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004c80), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000004d40)={'syztnl1\x00', &(0x7f0000004cc0)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x6, 0x9, {{0xf, 0x4, 0x3, 0x37, 0x3c, 0x68, 0x0, 0x9, 0x2f, 0x0, @remote, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x24, 0x9e, 0x3, 0x2, [{@loopback, 0xfff}, {@multicast1, 0x100}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x9}]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000004e40)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004e00)={&(0x7f0000004d80)={0x78, r8, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c010}, 0xf687f19d52b48580) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000004e80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x67e}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x7, 0x80}}}}}]}}]}}, &(0x7f0000004f80)={0xa, &(0x7f0000004ec0)={0xa, 0x6, 0x110, 0x2, 0x6, 0xa0, 0x40, 0x9}, 0x1c, &(0x7f0000004f00)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "aeee3c8d3477085700b319c8597465e1"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000004f40)=@lang_id={0x4, 0x3, 0x81d}}]}) socket$inet6(0xa, 0x1, 0xbcc) r10 = syz_open_dev$vcsn(&(0x7f0000004fc0), 0x9, 0x400040) sendmsg$nl_route(r10, &(0x7f0000005100)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000050c0)={&(0x7f0000005040)=@ipv6_deladdrlabel={0x5c, 0x49, 0x200, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, r9, 0xd3b}, [@IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20c0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000005300)={'wg2\x00', 0x0}) sendmsg$inet(r10, &(0x7f0000005440)={&(0x7f0000005140)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000052c0)=[{&(0x7f0000005180)="bbb7006351644f0216223c66d55b06d9d15fbe44732087e498925a8e15fc536537691b19c0c59786fe58f1c4cba86cacadac157fe6e820dbbd1f44ca8fb7c55e744e89a5442aff33822634c85b2bb6a8080c86dde1f14c1faa3b9c220454e1b6cbf0e2ece19ea95e446205382f32132a847ca549b5dd8a3e6475beefeb2b0a2386dfb377fcbd52ef606b3633b6fcbdce84f86dd3aa28d5c6595ca08dea8c5f366fe8b85bf103f02ecb8dc4590ba8532e07ea89c54356ee13cef4595cee17e35fc1e9a935fe944dd47682369b53fff5ac14b4b81df06795d0e815ed4b51ae67ef31e90280ae0db7fc5feaf1ea65c0a688421434240366452f63", 0xf9}, {&(0x7f0000005280)}], 0x2, &(0x7f0000005340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @remote, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6d06cd90}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xd0}, 0x4) ioctl$FUSE_DEV_IOC_CLONE(r10, 0x8004e500, &(0x7f0000005480)=r10) ioctl$KDSETLED(r10, 0x4b32, 0x0) write$FUSE_INIT(r0, &(0x7f00000054c0)={0x50, 0xffffffffffffffd1, r1, {0x7, 0x2b, 0x713, 0xffffffffc6000600, 0x9, 0x6000, 0xc, 0x13, 0x0, 0x0, 0x2, 0x5}}, 0x50) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005580), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000005880)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005840)={&(0x7f00000055c0)={0x270, r12, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x1d4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x56, 0x5, "ee1cd5679046c1b511168e8974d2a5b0862f517bf11e19848cef17b2d6bdf0bf0dae54efce50ad5b1d0d319c0e051336df78af691cfa0164a34ed8f53772dee97a4f30478618b8029665a46356eb590e0e4c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x94, 0x4, "c010394231d9f0f8493d6bbc8301231115438b01610a73f770adbdc901351bbc2a658cc7bfc00ab8c89c64fb14965eacf9748d75ac23d35f88bd2301d1cabbebed034d8cc28811b17b6fac9ffc71b7d885436495e8643776294114fc5ede0f787d1bdf36054f4060161c5c80b2e672c0e65a8ca2a03009911d12aa2ec55edce28dc6fa0b0622e543f60eabd75a304199"}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xe1)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x45}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')&['}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@@]'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000058c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000005900)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000005940)=@assoc_id=r13, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000005980), r0) sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f0000005ac0)={&(0x7f00000059c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a00)={0x74, 0x1, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x36, 0x6, "6bf956bce9584a9f3eadf4ee4aa472a710c505a828338b05b02107f11a118442e182469c43a88fc714e8ca44c0238473ff26"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000005b40), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000005c40)={&(0x7f0000005b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005c00)={&(0x7f0000005b80)={0x58, r14, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x800}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000005cc0), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000005dc0)={&(0x7f0000005c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005d80)={&(0x7f0000005d00)={0x48, r15, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040854}, 0x40864) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000005e00)={0x0, 0x7}, 0x1) 3.999597953s ago: executing program 3 (id=2663): r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x700, 0x700, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mo\x01e\x00', &(0x7f0000000140)='\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x28, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x28}}, 0x2000c050) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000040)=[0x0, 0x1002], 0x2) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x8140aecc, &(0x7f00000000c0)=ANY=[]) getsockopt$inet6_tcp_int(r2, 0x6, 0x18, 0x0, &(0x7f0000002300)) 3.882089038s ago: executing program 3 (id=2664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3.785533984s ago: executing program 3 (id=2665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpgrp(0xffffffffffffffff) r0 = userfaultfd(0xc0001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x11b000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x1) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x150, 0x10100, 0x0, 0x4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd_index=0x2, 0x0, 0x0, 0x8, 0x62ca00576f1a33c5, 0x1, {0x0, 0x0, r5}}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = dup(r3) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_RUN(r9, 0xaece, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000a19000/0x2000)=nil, &(0x7f0000779000/0x1000)=nil, 0x2000, 0x2, 0x2}) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000280)="7800000018002507b9409b14ffff00000214ae04020206050a02040c430009003f000405100000000d0085a168d0bf46d389516a9069921a4b0005000a00000049935ade4a460c89b6ec0cff3959547f5000000000c902007a00004a324004001600040000d5808bd3e30a37e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r13) sendmsg$DEVLINK_CMD_RATE_NEW(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={0x14, r14, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3.667505401s ago: executing program 3 (id=2666): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8080, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x33, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x85, 0x4}, {@rand_addr=0xac1414ae, 0x4e24, 0x3, 0x1cb, 0x6, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00003c9000/0x3000)=nil, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x4) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)=0x8000000000000000}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x60a895249110b501}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000100), &(0x7f0000000140)=0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x90) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0}, 0x1440}], 0x0, 0x0, 0x0}) 3.603745966s ago: executing program 3 (id=2667): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000300)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "d6b4a2c27febaed4b1b9ac68da30f186547ca30f7098c3da", "6ec543b1c0bc10955f8f22202d5eca64135205a1c734c1647b0d3b6c06239297"}}}}}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r2, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x4642, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x1) pidfd_send_signal(r4, 0x12, 0x0, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x6, 0x0) bind$tipc(r7, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x0, 0x3}, 0x4}}, 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000002000000000000000000000000ffffffffffffffff000000000000000000000000a12fb57220000000000000000000000000000a000000000000000000000080400000000000000000080000000000000044000500fc000000000000000000000000000001000100003c000000000079086d9df8a559c90734cd297b14e8c80000ffffffdf00000000000000000000000000480d000000000000000000ffde000006f5db8166932f000000000000000000"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000001440)={@random="8ddfd5cefee4", @remote, @void, {@generic={0x1a}}}, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r9, 0x1ad72f7) accept4$netrom(r9, 0x0, 0x0, 0x80000) 3.283395355s ago: executing program 3 (id=2669): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000000055aaff", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.261889685s ago: executing program 33 (id=2669): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000000055aaff", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.96147456s ago: executing program 2 (id=2677): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) utime(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x7, 0x3c}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000ec0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e25, @remote}, 0x3, 0x0, 0x3}}, 0x26) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x20000, @rand_addr=' \x01\x00'}}}, 0x32) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) close(r1) 2.694817175s ago: executing program 4 (id=2683): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x101, 0x501b00) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x10007, 0x8, 0x0, 0x81}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) ioctl$USBDEVFS_BULK(r1, 0xc0185502, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000140)={0x400, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x505001, 0x11, 0x11}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900400000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f0000000080)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x7, 0x0, &(0x7f0000000740)) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r8, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, 0x0, 0x0) timer_delete(r8) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f00000000c0)='./file1\x00') 2.178494502s ago: executing program 4 (id=2684): mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000840)) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x111) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x10002, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f045}) (async) ppoll(&(0x7f0000000300)=[{r1, 0x2007}], 0x1, 0x0, 0x0, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000010401040000000000000000000000050500010001000000", @ANYRESDEC=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) (async) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000104010300"/28], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x25, 0x8, 0x202, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x401c801}, 0x10) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) read$char_usb(r5, &(0x7f0000000100)=""/124, 0x7c) (async) openat$cgroup_ro(r5, &(0x7f0000000540)='blkio.bfq.idle_time\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) chdir(&(0x7f0000001180)='./bus\x00') getxattr(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) 2.175891789s ago: executing program 4 (id=2685): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getchain={0x34, 0x66, 0x104, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x1, 0x8}, {0xf, 0xc}, {0x8, 0xe}}, [{0x8, 0xb, 0x9}, {0x8}]}, 0x34}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x7}, {0xb, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008840}, 0x404c0c0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x500, 0x40420f00}}}, 0x90) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000600)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), 0xffffffffffffffff, r10}}, 0x18) pread64(r4, &(0x7f0000000640)=""/197, 0xc5, 0x4) r11 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getqdisc={0x38, 0x26, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x9, 0x10}, {0x10, 0x1d}, {0xa, 0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000001c0)={'wg2\x00', 0x800}) 1.996656927s ago: executing program 2 (id=2686): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYRES16]) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000994bd740e50d5600b505000000010902"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r6, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9c) write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) 1.817604065s ago: executing program 1 (id=2687): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5, @local, 0x3}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff020000000000"], 0x0) 1.81709792s ago: executing program 1 (id=2688): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0xbacf, {0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x10, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 695.450867ms ago: executing program 2 (id=2689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='qnx6\x00', 0x20000a, 0x0) 632.097305ms ago: executing program 2 (id=2690): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x0, 0x1000000}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffe4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) 449.759774ms ago: executing program 1 (id=2691): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4048aec9, &(0x7f0000000080)={[{0x3, 0x0, 0x0, 0x4, 0x0, 0x81, 0x0, 0x0, 0x3, 0x1}, {0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0xfd, 0xfe, 0x0, 0x9, 0x3d}, {0x1ffffd, 0xa, 0x21, 0x3, 0x9, 0x6, 0xd, 0x0, 0xb, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x2000007}) syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) lsm_get_self_attr(0x2, 0x0, &(0x7f0000001280), 0x0) r2 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x2c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0xc0046686, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xb0, r7, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c69}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5713}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xb0, r7, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c69}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5713}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$BLKRRPART(r6, 0x125f, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x6, "925b852ba6ebfe8b654e9789241d93ba"}}}]}, 0x44}}, 0x800) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) 446.655233ms ago: executing program 2 (id=2692): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = eventfd2(0x200, 0x800) read$eventfd(r1, &(0x7f0000000040), 0x8) getsockname$inet(r0, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x15}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0xc084}, 0x8800) ioctl$TIOCSBRK(r0, 0x5427) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x79b4, &(0x7f0000000240)={0x0, 0xc34d, 0x2, 0x2, 0x231, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x20004000) setsockopt$inet6_tcp_buf(r0, 0x6, 0x3e, &(0x7f0000000440)="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", 0xfb) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0xbefea000) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x84000, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000580)=0x2004034) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f00000005c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000600)={'veth0_to_batadv\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000640)={0x0, 0x80a0000, 0x1, 0xffffffffffffffff, 0xb}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x7c}}, 0x44) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000800)={[{0x1, 0x1, 0xb, 0x7, 0x8, 0x7, 0x7, 0x7, 0x7, 0x2, 0x5, 0xfa, 0xe000000000000000}, {0x9, 0x100, 0x6, 0x1, 0x19, 0xd, 0x0, 0x39, 0x90, 0x7f, 0x4, 0x8, 0x8}, {0x9, 0xa, 0x0, 0x40, 0x1, 0x6, 0x6, 0x7, 0x2, 0x1, 0xb0, 0x6, 0x2}], 0x6}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@newnexthop={0x20, 0x68, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x7f998ba8907d41e6, 0x0, 0x8}, [@NHA_GROUP_TYPE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc001) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000e40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f00000009c0)={0x434, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "659300b2c33e36b06548b72dd10c19a8aee71d2236b1f19c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x383}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x50}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x68, 0x3, "47f37b0ebb346cb816457750413b8f811578061cd20d6e4857afd31ba555339dbee57e0ba0e10c2dfc7b37ef14077368a0b56c6497fe70ed5c0fa99095c01c6234553b249cc906a7a60b48dcf48cfe1e38b07f025cc2d0308c778b04d040a8f0d52fe59c"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ID={0x78, 0x3, "df5958a858c05514cb6ee617fd9968c76ade611a128e515ca0bc17824ddb58b1a6c8e9de7fb2cd1d9c9a440dd1ca2e342e6a6a15c258c394c35edd8236e19061b833b73d5b703469abeb88c4a373ec95d08b0e327431c6b4c9e52803efd1af3cb2e404bbfcc9fac7bf927d83aa19f1682b06fa4c"}, @TIPC_NLA_NODE_ID={0x58, 0x3, "7fed1b7527ff7f94bbdec4879b6f5f50e541df70e2d39fab11e4772a454336df71b8a36b3421dd104d4dd4ed6f5b7cccb9061f6007f500494d66fa143ae49ea193d06b322b9d37cb344575ba5d1b4cb521a69f4e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6ea5e992}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x434}, 0x1, 0x0, 0x0, 0x8004040}, 0x24000800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000e80)=0x55) r6 = syz_open_dev$dri(&(0x7f0000000ec0), 0x6, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r6, 0x80386433, &(0x7f0000000f00)=""/135) fcntl$setpipe(r2, 0x407, 0x0) 396.267469ms ago: executing program 4 (id=2693): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000090006110500000000000070000f9000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)="42f6a00c3fcd095b44e45159d0127188358d863e6392b038d10caf663205d2c6a7e19759c31ea99006a87429be7c13c6abf17f7d62a58bdbdbc2fd88cd9f3877c3864706d6bed60e2707eb8018bac2833e1fd63d42de730cd22cf2ebc6fced60e3df6e7b6ff64256198749406c9d081b264bca2a44320fee4dd4ab85450bbe128e4d9c152741d1e44dfda6041524aaa63d16229edfc7608b91dad31211c00d799c8926d50c1ee0303523aaafaf07d3675d8cc99b3ebeee352ebed6ef0aa7abfc8cbb97f8781ca8ca96b2dd0a9bc991c8922983aba7d1cecf1e0dd3f6bc9e", 0xde}], 0x1, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}], 0x30}, 0x8c1) unshare(0x22020600) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x22) 311.112492ms ago: executing program 2 (id=2694): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000002900)={0x1, @sliced={0x1, [0x5, 0x2, 0x1000, 0x0, 0x931, 0x6, 0x5, 0xb44, 0x0, 0x4, 0x0, 0x2a2d, 0x3, 0xc2, 0x7, 0x1, 0x24bb, 0x75e1, 0x9, 0x5a, 0x400, 0x0, 0x1, 0xdc, 0x5, 0x2, 0x2, 0x5, 0xb, 0x3, 0xe8, 0x7, 0x168d, 0x8, 0xfff, 0x8001, 0x0, 0x4, 0x1, 0x401, 0x7, 0x6, 0x2, 0x0, 0x5, 0x7ff, 0x4], 0x5}}) ioctl$sock_bt_hci(r2, 0x400448e3, &(0x7f00000003c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x400) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x9, 0x8, 0xa, 0x5}, {0x1, 0x0, 0x4, 0xc4}, {0xb, 0x8, 0x9, 0x6}, {0x513, 0x7f, 0x8}, {0xe, 0x8, 0x10, 0x9}]}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xd}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4800) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) 193.557143ms ago: executing program 4 (id=2695): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x3c}}, 0x200440d4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000910400"/24]) iopl(0x3) getitimer(0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x34}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000440)={0x4, 0x0, [{0x346, 0x0, 0x8001}, {0x8b, 0x0, 0x3}, {0x189, 0x0, 0xb}, {0x85b, 0x0, 0xfffffffffffffffa}]}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) sendmsg$kcm(r2, &(0x7f0000001c80)={&(0x7f00000005c0)=@in6={0xa, 0x4e21, 0x2fc, @mcast2, 0x6}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)="63450fdb8700f3643278557e052f5acec058a99130edbf8b23f51b480b2c08121b939ae52723f06964b4c70981ee650d26d9982473c0948c195049995130ab59e88b32074f6489f8b084eacfd7ac4b7d8fff9a7c83580128239f61fa361791ea7843f7c30390aac15965c2bbeee9e4f1b94858f9f21df6928d7d0c0a53ede48f3810ffc012de2e9340759f5a3d2ec3ae26ed664da423cb3d849b15675f4f6167c958d29daf19f2d0beef8f1ad464d9c35c7d8fb57dca5a", 0xb7}, {&(0x7f0000000700)="22a59b37f402c60efefcdc679606e83c1f06d341b08f35019b2f772f827bab48", 0x20}, {&(0x7f0000000740)="5c9f364b88f2f0f07b049d33a37c23acc350f82418e512ad35a8051732de5d73826c79ca6414c24390ba64adb27685f0d2171ae178dac37cefcff70b70fef43e509ffc089bf0612f084a18a7ad0df799c0822980f41529e3913c404e121cc8bc36fc63d2d91efbdac18c95e6edd889d4fd5b6954a37d2a555bb0db8d8a9b1aa21365b4c1773cceac3af126133c93b1a0de12d611d7a88e86ad1eb85515b6601839da384e662eceaff6303a7ad6b5bb92bd56452fab96f8ae872c33074ad1dc", 0xbf}, {&(0x7f0000000800)="9b112c2fa41ad1df11141d6a5c490f8c4a8429184d99c2adc5c7f9906df9b3716a4ec2370354cb405ab878a8dfc4930520b05032ce624afa5beb35dd88b12615281c684446cb9fc444d4c8752b326ce3bdc2f136ad033d0284800c4bf1a9f55e77f27f8f86160f6165e0ec7f0459e3efdd13da2d2d23f7a117a758687a256fb1c13f50f193579241c869328636e73a6f4756976c7f315ba83b0892bd899d5e5fd62e95c9", 0xa4}, {&(0x7f00000008c0)="e7d52dd7e8f77fe7c6c4a0feb6ce26693c94f3b7d6243b6fb4bfaf647f042b49c0e353e308a04afce1260d6b096dbb6cc6151c2f849edea8f02d6aabbdd0b27716826c1c1f374f7e470112e78ba18f4382498ac47007ec3d163ed161b2e65c3880ddb7f21aa9884f84339aaca8b3fc1cf903b17617a174dbf9058d7bed1cdd4483072a8ab47f57dea42bb2a7bc2a204b5ecdd7c482fbcca9223d31b01044ad91dd3ad18b901bb674d43b1683", 0xac}, {&(0x7f0000000980)="96dd48dfea2fd57b93d3ad16948ee5c6f50ec07410261f5582b8bbf481350c507163758603921b3b4ee5b5ec12d60a95b9fd8a53c65f3bbbd6fee6c2da7f68c3da0eed11b20c46928771bbd049875dfa35f8dbde84b6694ced5683ef13a8771f65b2ff070c345b79eb61", 0x6a}, {&(0x7f0000000a00)="c1fa5ee0cde9466a3cc6f6538a96388927fbf4fa40cc5452d846f1e9f9eac1fdcd387606856ec329261e5f61d270217fd5a061eeb7659588e5dc6d4ce119da30e265631bd96936634d450447a76be24e8c08420d130e67530cbcbcee0346abd77a55edee420d3f4428b77f86b10add360a73c9fbfcd91de0eaccb83117f392e1756b205086d8a48d7f15b922ef51e8c7a9bfccd9c4e485a36793225b0fe6674627d0ba4aa8f2664a4679e408dd57d72ee228a774bb", 0xb5}, {&(0x7f0000000ac0)="7e20d2c7ed", 0x5}], 0x8, &(0x7f0000000b80)=[{0x1010, 0x112, 0x9, "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"}, {0xe8, 0x10a, 0x7, "058491a65ac0b01250468ac0882558e121db2a49044beeae21e14389d5a752628c37e993eae63921017f9da02c843f1a142e5da4453f7bcdd66604ef4d725e0b8536cce44d64c5d60650256b27363fd52591749be9c1484abf6dd62c496bf4b529a44b8fcdc13306e8966cf349f275761e53d2556b25d44cd69106efbefdbe0823c7349787ad2c00f1e9dd1e1b2b102043cbf4ded68e914dbd1564624eaf28844306ddd48ff461903af7f25a60363ca147c12186a48c7ad367239706fbd954a7b476b985cde47e17ede054a1d9578de3aeb2"}], 0x10f8}, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0xdd, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x2, 0x1, 0x2}}, {@x25={0x805, {0x1, 0x88, 0x9, "b24562b54ecb015ad388403aab2abdfbbaf1f74e0c4c5195d9172fd23cb86843e83d3330b79924ea19f34fa5a7fa45275f6597c2a98e0d94bc509e5d4bf1535dace675b5041343e84938ae876968619f7385f8ee754e05740a5c3ca8c976d86306413dcc2cbc46d799cf46e2af3de81d60bf7afc1294d2f63aa1dddfdf0d918b65ba739f4e7500646487bc1ff8ce2bae8a23d0666d92c5e54ca169aa52d4778c3243ab9c2894c1591c2de257ac871d8ba5adba134c8780e3d9a77485499b26fa5b76a104"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0xde3, 0x80d, 0x424, 0x361]}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_num_supported_adv_sets={{0x4}, {0x1, 0x4}}}}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xa5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x4000080) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x9, 0xc, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x17, 0x33, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x9}}, @sadb_sa={0x2, 0x1, 0x0, 0x80, 0x2, 0xfd, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x2, @empty}}]}, 0x60}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a00"], 0x50}}, 0x4000850) 193.370522ms ago: executing program 1 (id=2696): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYRES16]) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000994bd740e50d5600b505000000010902"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r6, 0x0) listen(r4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9c) write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) 0s ago: executing program 4 (id=2697): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff, 0x70bd2b}, 0x14}}, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4094, 0x3d0f, 0x10, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x600, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cf653f00283a286d8a8800000000000000000000000000ff020000000000000000000000000001890090780000000020010000000000000000000000fc010000000000"], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000840)={0x0, 0x0, 0x3b8}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000140)=0x5, 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x3, 0xffff, @vifc_lcl_addr=@local, @local}, 0x10) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a"], 0x14}}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x141000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc1105511, &(0x7f0000000140)={0x4a, 0x0, 0x1, 0x0, 'syz1\x00'}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x4000080) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r6) kernel console output (not intermixed with test programs): apacity change from 0 to 7 [ 175.461220][T11168] Dev loop6: unable to read RDB block 7 [ 175.465393][T11168] loop6: AHDI p1 p2 [ 175.466673][T11168] loop6: partition table partially beyond EOD, truncated [ 175.473104][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 175.480032][T11584] Dev loop6: unable to read RDB block 7 [ 175.481829][T11584] loop6: AHDI p1 p2 [ 175.483438][T11584] loop6: partition table partially beyond EOD, truncated [ 175.486423][T11584] loop6: p1 start 926365495 is beyond EOD, truncated [ 175.548472][T11593] rtc_cmos 00:05: Alarms can be up to one day in the future [ 175.552579][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1875'. [ 175.560316][T11595] macvtap1: entered promiscuous mode [ 175.562107][T11595] erspan0: entered promiscuous mode [ 175.565254][T11595] macvtap1: entered allmulticast mode [ 175.585644][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1875'. [ 175.589527][T11595] erspan0: left promiscuous mode [ 175.669287][T11604] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 175.671731][T11604] netlink: 'syz.1.1878': attribute type 2 has an invalid length. [ 175.676250][T11604] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 175.678667][T11604] netlink: 'syz.1.1878': attribute type 2 has an invalid length. [ 175.709635][T11607] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 175.743295][T11613] loop6: detected capacity change from 0 to 7 [ 175.745827][T11613] Dev loop6: unable to read RDB block 7 [ 175.747420][ T40] audit: type=1400 audit(175.663:702): avc: denied { connect } for pid=11612 comm="syz.1.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.747599][T11613] loop6: AHDI p1 p2 [ 175.755289][T11613] loop6: partition table partially beyond EOD, truncated [ 175.757644][T11613] loop6: p1 start 926365495 is beyond EOD, truncated [ 175.813536][T11607] md2: using deprecated bitmap file support [ 175.821614][T11607] md2: error: bitmap file must be a regular file [ 175.967939][ T40] audit: type=1400 audit(175.883:703): avc: denied { accept } for pid=11634 comm="syz.2.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.989979][T11642] loop6: detected capacity change from 0 to 7 [ 175.992721][T11168] Dev loop6: unable to read RDB block 7 [ 175.996083][T11168] loop6: AHDI p1 p2 [ 175.997612][T11168] loop6: partition table partially beyond EOD, truncated [ 176.000430][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 176.009748][T11642] Dev loop6: unable to read RDB block 7 [ 176.013111][T11642] loop6: AHDI p1 p2 [ 176.015201][T11642] loop6: partition table partially beyond EOD, truncated [ 176.017742][T11642] loop6: p1 start 926365495 is beyond EOD, truncated [ 176.121916][T11656] netlink: 'syz.1.1898': attribute type 7 has an invalid length. [ 176.232369][T11673] loop6: detected capacity change from 0 to 7 [ 176.235686][T11673] Dev loop6: unable to read RDB block 7 [ 176.237746][T11673] loop6: AHDI p1 p2 [ 176.239325][T11673] loop6: partition table partially beyond EOD, truncated [ 176.241749][T11673] loop6: p1 start 926365495 is beyond EOD, truncated [ 176.255498][T11675] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 176.295390][ T40] audit: type=1400 audit(176.213:704): avc: denied { accept } for pid=11680 comm="syz.4.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 176.417900][T11682] trusted_key: syz.4.1908 sent an empty control message without MSG_MORE. [ 176.433891][ T5991] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 176.598206][ T5991] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.605665][ T5991] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.609871][ T5991] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.613636][ T5991] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.618821][ T5991] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.621747][ T5991] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.624485][ T5991] usb 8-1: Product: syz [ 176.625835][ T5991] usb 8-1: Manufacturer: syz [ 176.630143][ T5991] cdc_wdm 8-1:1.0: skipping garbage [ 176.631778][ T5991] cdc_wdm 8-1:1.0: skipping garbage [ 176.641569][ T5991] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 176.644415][ T5991] cdc_wdm 8-1:1.0: Unknown control protocol [ 176.701690][T11699] loop6: detected capacity change from 0 to 7 [ 176.705341][T11168] Dev loop6: unable to read RDB block 7 [ 176.707140][T11168] loop6: AHDI p1 p2 [ 176.708398][T11168] loop6: partition table partially beyond EOD, truncated [ 176.710840][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 176.724752][T11699] Dev loop6: unable to read RDB block 7 [ 176.727112][T11699] loop6: AHDI p1 p2 [ 176.728744][T11699] loop6: partition table partially beyond EOD, truncated [ 176.731280][T11699] loop6: p1 start 926365495 is beyond EOD, truncated [ 176.776707][T11708] net_ratelimit: 55 callbacks suppressed [ 176.776719][T11708] openvswitch: netlink: Duplicate or invalid key (type 0). [ 176.780883][T11708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.831120][ T5991] usb 8-1: USB disconnect, device number 28 [ 176.833109][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 177.744668][T11729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1925'. [ 177.753680][T11731] loop6: detected capacity change from 0 to 7 [ 177.754650][T11729] gfs2: path_lookup on 6(+dQnB!eUV!`: 8DSE y|YT{-,mb/ returned error -2 [ 177.756390][T11731] Dev loop6: unable to read RDB block 7 [ 177.761247][T11731] loop6: AHDI p1 p2 [ 177.762631][T11731] loop6: partition table partially beyond EOD, truncated [ 177.765452][T11731] loop6: p1 start 926365495 is beyond EOD, truncated [ 177.789349][T11734] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1926'. [ 177.981450][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1934'. [ 178.233542][T11785] tmpfs: Unknown parameter '' [ 178.243351][T11785] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 178.245487][T11785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.249783][T11785] vhci_hcd vhci_hcd.0: Device attached [ 178.308039][ T5991] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 178.470323][ T5991] usb 8-1: not running at top speed; connect to a high speed hub [ 178.474638][ T5991] usb 8-1: config 1 has an invalid interface number: 5 but max is 2 [ 178.477246][ T5991] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.480434][ T5991] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 178.483210][ T5991] usb 8-1: config 1 has no interface number 1 [ 178.485226][ T5991] usb 8-1: config 1 interface 5 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 178.489227][ T5991] usb 8-1: config 1 interface 5 has no altsetting 0 [ 178.493361][ T5991] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.496251][ T5991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.498681][ T5991] usb 8-1: Product: syz [ 178.500061][ T5991] usb 8-1: Manufacturer: syz [ 178.500126][ T837] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 178.501503][ T5991] usb 8-1: SerialNumber: syz [ 178.506677][ T5976] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 178.683531][ T5976] usb 7-1: config 0 has no interfaces? [ 178.685632][ T5976] usb 7-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 178.688412][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.692148][ T5976] usb 7-1: config 0 descriptor?? [ 178.732970][ T5991] usb 8-1: 0:2 : does not exist [ 178.735819][T11742] 9pnet_fd: p9_fd_create_tcp (11742): problem connecting socket to 127.0.0.1 [ 178.748322][ T5991] usb 8-1: USB disconnect, device number 29 [ 178.788114][T11168] udevd[11168]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.862280][T11809] program syz.4.1953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.913469][T11786] usb 41-1: recv xbuf, 0 [ 178.916603][ T9742] vhci_hcd: stop threads [ 178.918291][ T9742] vhci_hcd: release socket [ 178.920755][ T9742] vhci_hcd: disconnect device [ 179.003116][ T837] vhci_hcd: vhci_device speed not set [ 179.163897][ T1146] nci: nci_rx_work: unknown MT 0x1 [ 179.324237][ T5977] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 179.462940][ T5977] usb 9-1: device descriptor read/64, error -71 [ 179.718784][ T5977] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 179.857781][ T5977] usb 9-1: device descriptor read/64, error -71 [ 179.982426][ T5977] usb usb9-port1: attempt power cycle [ 180.339443][ T5977] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 180.361416][ T5977] usb 9-1: device descriptor read/8, error -71 [ 180.616899][ T5977] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 180.638688][ T5977] usb 9-1: device descriptor read/8, error -71 [ 180.756579][ T5977] usb usb9-port1: unable to enumerate USB device [ 181.449533][ T837] usb 7-1: USB disconnect, device number 12 [ 181.492592][T11866] netlink: zone id is out of range [ 181.494808][T11866] netlink: zone id is out of range [ 181.496907][T11866] netlink: zone id is out of range [ 181.499069][T11866] netlink: zone id is out of range [ 181.504194][ T61] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 181.575627][T11872] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1970'. [ 181.639069][T11874] SELinux: policydb magic number 0x6e696466 does not match expected magic number 0xf97cff8c [ 181.645436][T11874] SELinux: failed to load policy [ 181.675175][ T61] usb 6-1: Using ep0 maxpacket: 16 [ 181.678301][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 181.680530][ T61] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 181.683492][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.687666][ T61] usb 6-1: config 0 descriptor?? [ 181.840206][T11885] loop6: detected capacity change from 0 to 7 [ 181.843720][T11885] Dev loop6: unable to read RDB block 7 [ 181.846519][T11885] loop6: AHDI p1 p2 [ 181.848850][T11885] loop6: partition table partially beyond EOD, truncated [ 181.853661][T11885] loop6: p1 start 926365495 is beyond EOD, truncated [ 182.077773][T11894] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 182.121924][T11853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.125961][T11853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.186308][ T61] hid (null): report_id 27651 is invalid [ 182.191042][ T61] hid (null): report_id 0 is invalid [ 182.193783][ T61] hid (null): unknown global tag 0xc [ 182.193797][ T61] hid (null): unknown global tag 0xe [ 182.193809][ T61] hid (null): global environment stack underflow [ 182.193820][ T61] hid (null): global environment stack underflow [ 182.194689][ T61] hid (null): unknown global tag 0xe [ 182.223544][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 182.223567][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1981'. [ 182.227142][T11899] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.227177][T11899] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.227204][T11899] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.227232][T11899] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.229487][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 182.229500][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1981'. [ 182.285086][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 182.285097][ T40] audit: type=1400 audit(181.842:710): avc: denied { mount } for pid=11905 comm="syz.2.1983" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 182.294335][ T40] audit: type=1400 audit(181.852:711): avc: denied { watch } for pid=11905 comm="syz.2.1983" path="/68/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 182.326077][ T40] audit: type=1400 audit(181.880:712): avc: denied { unmount } for pid=11270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 182.336476][T11910] loop6: detected capacity change from 0 to 7 [ 182.338309][T11910] Dev loop6: unable to read RDB block 7 [ 182.338335][T11910] loop6: AHDI p1 p2 [ 182.338357][T11910] loop6: partition table partially beyond EOD, truncated [ 182.338501][T11910] loop6: p1 start 926365495 is beyond EOD, truncated [ 182.409710][ T54] usb 6-1: USB disconnect, device number 20 [ 182.410927][T11920] binder: 11919:11920 ioctl c0306201 200000000180 returned -14 [ 182.712210][ T61] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 182.861810][ T61] usb 8-1: device descriptor read/64, error -71 [ 183.027478][T11931] netlink: 'syz.4.1994': attribute type 4 has an invalid length. [ 183.139955][ T61] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 183.278772][ T61] usb 8-1: device descriptor read/64, error -71 [ 183.410917][ T61] usb usb8-port1: attempt power cycle [ 183.781211][ T61] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 183.814228][ T61] usb 8-1: device descriptor read/8, error -71 [ 183.886556][T11975] loop6: detected capacity change from 0 to 7 [ 183.889867][T11975] Dev loop6: unable to read RDB block 7 [ 183.891848][T11975] loop6: AHDI p1 p2 [ 183.893406][T11975] loop6: partition table partially beyond EOD, truncated [ 183.896194][T11975] loop6: p1 start 926365495 is beyond EOD, truncated [ 183.922670][T11981] binder: 11980:11981 ioctl c0306201 200000000180 returned -14 [ 183.997636][T11993] netlink: 'syz.4.2004': attribute type 1 has an invalid length. [ 184.010875][T11993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.022583][T11993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.024787][T11993] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 184.028588][T11993] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 184.074041][T11994] bond2: (slave dummy0): making interface the new active one [ 184.076616][T11994] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 184.093434][ T61] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 184.124297][ T61] usb 8-1: device descriptor read/8, error -71 [ 184.165647][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'. [ 184.169819][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'. [ 184.238346][T12025] binder: 12024:12025 ioctl c0306201 200000000180 returned -14 [ 184.241682][ T61] usb usb8-port1: unable to enumerate USB device [ 184.272590][T12029] sg_read: process 1110 (syz.1.2013) changed security contexts after opening file descriptor, this is not allowed. [ 184.281310][T12031] loop6: detected capacity change from 0 to 7 [ 184.284451][T11168] Dev loop6: unable to read RDB block 7 [ 184.286260][T11168] loop6: AHDI p1 p2 [ 184.287714][T11168] loop6: partition table partially beyond EOD, truncated [ 184.291991][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 184.298022][T12031] Dev loop6: unable to read RDB block 7 [ 184.299760][T12031] loop6: AHDI p1 p2 [ 184.301335][T12031] loop6: partition table partially beyond EOD, truncated [ 184.303865][T12031] loop6: p1 start 926365495 is beyond EOD, truncated [ 184.326823][T12035] SET target dimension over the limit! [ 184.419491][ T40] audit: type=1400 audit(183.844:713): avc: denied { append } for pid=12046 comm="syz.4.2019" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 184.567304][T12063] binder: 12062:12063 ioctl c0306201 200000000180 returned -14 [ 184.675386][T12072] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2027'. [ 185.361830][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2031'. [ 185.365083][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2031'. [ 185.369128][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2031'. [ 185.372079][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2031'. [ 185.404476][T12086] loop6: detected capacity change from 0 to 7 [ 185.407368][T11168] Dev loop6: unable to read RDB block 7 [ 185.409219][T11168] loop6: AHDI p3 p4 [ 185.410466][T11168] loop6: partition table partially beyond EOD, truncated [ 185.413086][T11168] loop6: p3 start 1886353253 is beyond EOD, truncated [ 185.418230][T12086] Dev loop6: unable to read RDB block 7 [ 185.420070][T12086] loop6: AHDI p3 p4 [ 185.421345][T12086] loop6: partition table partially beyond EOD, truncated [ 185.424264][T12086] loop6: p3 start 1886353253 is beyond EOD, truncated [ 185.452846][T12088] tmpfs: User quota block hardlimit too large. [ 185.738175][T12114] netlink: 'syz.3.2043': attribute type 32 has an invalid length. [ 185.741367][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 185.999403][ T40] audit: type=1400 audit(185.322:714): avc: denied { bind } for pid=12125 comm="syz.1.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.005142][ T40] audit: type=1400 audit(185.322:715): avc: denied { name_bind } for pid=12125 comm="syz.1.2047" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 186.011612][ T40] audit: type=1400 audit(185.322:716): avc: denied { node_bind } for pid=12125 comm="syz.1.2047" saddr=fc01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 186.056589][T12114] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 186.169858][ T40] audit: type=1400 audit(185.481:717): avc: denied { remount } for pid=12143 comm="syz.2.2051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 186.175334][T12146] binder_alloc: 12145: binder_alloc_buf, no vma [ 186.180119][T12146] binder: 12145:12146 ioctl c0306201 200000000180 returned -14 [ 186.238967][T12149] syzkaller0: entered promiscuous mode [ 186.241107][T12149] syzkaller0: entered allmulticast mode [ 186.262922][ T40] audit: type=1400 audit(185.575:718): avc: denied { map } for pid=12157 comm="syz.1.2058" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.539569][ T5976] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 186.710437][ T5976] usb 9-1: Using ep0 maxpacket: 32 [ 186.713833][ T5976] usb 9-1: unable to get BOS descriptor or descriptor too short [ 186.720749][ T5976] usb 9-1: config index 0 descriptor too short (expected 34347, got 43) [ 186.723800][ T5976] usb 9-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 186.726624][ T5976] usb 9-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 186.729741][ T5976] usb 9-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 186.733056][ T5976] usb 9-1: config 31 has no interface number 0 [ 186.735066][ T5976] usb 9-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 186.738749][ T5976] usb 9-1: config 31 interface 81 altsetting 3 bulk endpoint 0x83 has invalid maxpacket 150 [ 186.741867][ T5976] usb 9-1: config 31 interface 81 has no altsetting 0 [ 186.747274][ T5976] usb 9-1: string descriptor 0 read error: -22 [ 186.749313][ T5976] usb 9-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 186.752136][ T5976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.756958][T12161] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 186.761951][ T5976] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:31.81/input/input23 [ 186.841771][ C3] usbtouchscreen 9-1:31.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 186.978152][ T40] audit: type=1400 audit(186.248:719): avc: denied { read append } for pid=12160 comm="syz.4.2059" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 187.065684][ T140] usb 9-1: USB disconnect, device number 9 [ 187.387938][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2063'. [ 187.397079][T12169] sd 0:0:0:0: PR command failed: 1026 [ 187.399191][T12169] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 187.401806][T12169] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 187.634045][T12180] binder: 12179:12180 ioctl c0306201 200000000180 returned -14 [ 187.765236][T12186] hfs: unable to load iocharset "io#harset" [ 188.271471][ T54] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 188.419158][T12206] binder: 12205:12206 ioctl c0306201 200000000180 returned -14 [ 188.421209][ T54] usb 7-1: device descriptor read/64, error -71 [ 188.612342][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 188.612360][ T40] audit: type=1400 audit(187.764:723): avc: denied { listen } for pid=12215 comm="syz.3.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 188.622933][ T40] audit: type=1400 audit(187.773:724): avc: denied { accept } for pid=12215 comm="syz.3.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 188.645438][ T5976] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 188.670720][ T40] audit: type=1400 audit(187.820:725): avc: denied { write } for pid=12215 comm="syz.3.2079" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 188.688293][ T54] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 188.805793][ T5976] usb 6-1: Using ep0 maxpacket: 8 [ 188.808605][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.811913][ T5976] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 188.814600][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.818783][ T5976] usb 6-1: config 0 descriptor?? [ 188.839431][ T54] usb 7-1: device descriptor read/64, error -71 [ 188.955844][ T54] usb usb7-port1: attempt power cycle [ 189.038233][ T5976] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 189.318984][ T54] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 189.340752][ T54] usb 7-1: device descriptor read/8, error -71 [ 189.470317][T12200] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2072'. [ 189.478896][ T5976] usb 6-1: USB disconnect, device number 21 [ 189.597278][ T54] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 189.618798][ T54] usb 7-1: device descriptor read/8, error -71 [ 189.739103][ T54] usb usb7-port1: unable to enumerate USB device [ 190.050470][T12228] binder: 12227:12228 ioctl c0306201 200000000180 returned -14 [ 190.223396][T12239] xt_cgroup: xt_cgroup: no path or classid specified [ 190.242305][ T40] audit: type=1400 audit(189.298:726): avc: denied { mounton } for pid=12238 comm="syz.1.2088" path="/425/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 190.243540][T12239] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.252344][T12239] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 190.305207][T12243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2089'. [ 190.339787][T12246] sctp: [Deprecated]: syz.1.2090 (pid 12246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.339787][T12246] Use struct sctp_sack_info instead [ 190.388475][ T40] audit: type=1400 audit(189.429:727): avc: denied { execute } for pid=12247 comm="syz.1.2091" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 190.409477][T12248] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 190.599523][T12257] binder: BINDER_SET_CONTEXT_MGR already set [ 190.601780][T12257] binder: 12256:12257 ioctl 4018620d 200000000040 returned -16 [ 190.604499][T12257] binder: 12256:12257 ioctl c0306201 200000000180 returned -14 [ 190.799130][T12263] tipc: Started in network mode [ 190.800740][T12263] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 190.803020][T12263] tipc: Enabled bearer , priority 10 [ 190.859589][T12269] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 190.948295][T12271] 6t: left allmulticast mode [ 190.950680][T12271] tunl0: left allmulticast mode [ 190.952709][T12271] gre0: left allmulticast mode [ 190.955398][T12271] gretap0: left allmulticast mode [ 190.957431][T12271] erspan0: left allmulticast mode [ 190.959464][T12271] ip_vti0: left allmulticast mode [ 190.961517][T12271] ip6_vti0: left allmulticast mode [ 190.963563][T12271] sit0: left allmulticast mode [ 190.965698][T12271] ip6tnl0: left allmulticast mode [ 190.967760][T12271] ip6gre0: left allmulticast mode [ 190.969791][T12271] ip6gretap0: left allmulticast mode [ 190.972013][T12271] bridge0: left allmulticast mode [ 190.975375][T12271] bond0: left allmulticast mode [ 190.977502][T12271] team0: left allmulticast mode [ 190.979483][T12271] nlmon0: left allmulticast mode [ 190.981555][T12271] caif0: left allmulticast mode [ 190.983561][T12271] batadv0: left allmulticast mode [ 190.985609][T12271] vxcan0: left allmulticast mode [ 190.987714][T12271] vxcan1: left allmulticast mode [ 190.988455][T12274] hugetlbfs: Unknown parameter '' [ 190.989752][T12271] veth0: left allmulticast mode [ 190.993383][T12271] veth1: left allmulticast mode [ 190.995375][T12271] wg0: left allmulticast mode [ 190.997228][T12271] wg1: left allmulticast mode [ 190.999310][T12271] wg2: left allmulticast mode [ 191.001236][T12271] veth0_to_bridge: left allmulticast mode [ 191.003597][T12271] veth1_to_bridge: left allmulticast mode [ 191.005990][T12271] veth0_to_bond: left allmulticast mode [ 191.008413][T12271] bond_slave_0: left allmulticast mode [ 191.010614][T12271] veth1_to_bond: left allmulticast mode [ 191.012849][T12271] bond_slave_1: left allmulticast mode [ 191.015055][T12271] veth0_to_team: left allmulticast mode [ 191.017274][T12271] team_slave_0: left allmulticast mode [ 191.020090][T12271] veth1_to_team: left allmulticast mode [ 191.022353][T12271] team_slave_1: left allmulticast mode [ 191.024530][T12271] veth0_to_batadv: left allmulticast mode [ 191.026805][T12271] batadv_slave_0: left allmulticast mode [ 191.029153][T12271] veth1_to_batadv: left allmulticast mode [ 191.031946][T12271] batadv_slave_1: left allmulticast mode [ 191.034222][T12271] xfrm0: left allmulticast mode [ 191.036233][T12271] veth0_to_hsr: left allmulticast mode [ 191.038462][T12271] veth1_to_hsr: left allmulticast mode [ 191.041039][T12271] hsr0: left allmulticast mode [ 191.042927][T12271] hsr_slave_0: left allmulticast mode [ 191.045036][T12271] hsr_slave_1: left allmulticast mode [ 191.047257][T12271] veth1_virt_wifi: left allmulticast mode [ 191.049556][T12271] veth0_virt_wifi: left allmulticast mode [ 191.052257][T12271] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 191.055142][T12271] veth1_vlan: left allmulticast mode [ 191.057326][T12271] vlan0: left allmulticast mode [ 191.059268][T12271] vlan1: left allmulticast mode [ 191.061280][T12271] macvlan0: left allmulticast mode [ 191.063537][T12271] macvlan1: left allmulticast mode [ 191.065597][T12271] ipvlan0: left allmulticast mode [ 191.067687][T12271] ipvlan1: left allmulticast mode [ 191.069699][T12271] veth0_vlan: left allmulticast mode [ 191.071909][T12271] veth1_macvtap: left allmulticast mode [ 191.075401][T12271] veth0_macvtap: left allmulticast mode [ 191.077626][T12271] macvtap0: left allmulticast mode [ 191.079679][T12271] macsec0: left allmulticast mode [ 191.081837][T12271] geneve0: left allmulticast mode [ 191.084185][T12271] geneve1: left allmulticast mode [ 191.086183][T12271] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 191.089062][T12271] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 191.091904][T12271] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 191.095245][T12271] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 191.098120][T12271] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 191.100843][T12271] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 191.103566][T12271] mac80211_hwsim hwsim10 wlan2: left allmulticast mode [ 191.106734][T12271] mac80211_hwsim hwsim11 wlan3: left allmulticast mode [ 191.109469][T12271] macsec1: left allmulticast mode [ 191.111579][T12271] bond1: left allmulticast mode [ 191.113575][T12271] veth2: left allmulticast mode [ 191.115675][T12271] veth3: left allmulticast mode [ 191.117313][T12271] macvlan2: left allmulticast mode [ 191.120382][T12271] bridge1: left promiscuous mode [ 191.122002][T12271] bridge1: left allmulticast mode [ 191.125280][T12271] xfrm1: left promiscuous mode [ 191.127188][T12271] xfrm1: left allmulticast mode [ 191.134804][T12271] macvtap1: left promiscuous mode [ 191.136571][T12271] macvtap1: left allmulticast mode [ 191.657814][T12306] sp0: Synchronizing with TNC [ 191.678746][T12306] input: syz0 as /devices/virtual/input/input25 [ 191.812383][T12309] overlayfs: failed to resolve './file1/file0': -2 [ 192.005265][ T5976] tipc: Node number set to 10463914 [ 192.242169][T12338] bridge0: entered promiscuous mode [ 192.244196][T12338] macvlan2: entered promiscuous mode [ 192.256991][T12340] loop6: detected capacity change from 0 to 7 [ 192.263039][T12340] Dev loop6: unable to read RDB block 7 [ 192.264853][T12340] loop6: AHDI p1 p2 [ 192.266095][T12340] loop6: partition table partially beyond EOD, truncated [ 192.268529][T12340] loop6: p1 start 926365495 is beyond EOD, truncated [ 192.440688][ T6306] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 192.504936][ T1345] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 192.567219][T12349] dlm: Unknown command passed to DLM device : 255 [ 192.567219][T12349] [ 192.601339][T12351] binder: 12350:12351 ioctl c0306201 200000000180 returned -14 [ 192.633086][ T6306] usb 9-1: Using ep0 maxpacket: 8 [ 192.636330][ T6306] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.639434][ T6306] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.642486][ T6306] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.645758][ T6306] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.649725][ T6306] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.652582][ T6306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.666465][ T1345] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.669966][ T1345] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 192.670906][T12354] usb usb1: usbfs: process 12354 (syz.1.2127) did not claim interface 3 before use [ 192.675465][ T1345] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=d8.40 [ 192.678892][ T1345] usb 7-1: New USB device strings: Mfr=170, Product=2, SerialNumber=3 [ 192.681425][ T1345] usb 7-1: Product: syz [ 192.682774][ T1345] usb 7-1: Manufacturer: syz [ 192.684259][ T1345] usb 7-1: SerialNumber: syz [ 192.730465][ T5938] Bluetooth: hci1: command 0x0406 tx timeout [ 192.823221][T12365] netlink: 'syz.1.2130': attribute type 2 has an invalid length. [ 192.825760][T12365] netlink: 46 bytes leftover after parsing attributes in process `syz.1.2130'. [ 192.873661][ T6306] usb 9-1: GET_CAPABILITIES returned 0 [ 192.875441][ T6306] usbtmc 9-1:16.0: can't read capabilities [ 192.907997][ T5947] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 192.911341][ T1345] usb 7-1: USB disconnect, device number 17 [ 193.139620][T12333] usb 9-1: usbtmc_ioctl_clear_out_halt returned -32 [ 193.141444][T12380] binder: 12379:12380 ioctl c0306201 200000000180 returned -14 [ 193.142165][ T140] usb 9-1: USB disconnect, device number 10 [ 193.184387][ T40] audit: type=1400 audit(192.048:728): avc: denied { shutdown } for pid=12381 comm="syz.3.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.268020][T12391] sp0: Synchronizing with TNC [ 193.477174][ T40] audit: type=1400 audit(192.310:729): avc: denied { getopt } for pid=12394 comm="syz.2.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 193.485053][ T40] audit: type=1400 audit(192.328:730): avc: denied { accept } for pid=12394 comm="syz.2.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 193.525487][T12397] netlink: 'syz.2.2141': attribute type 2 has an invalid length. [ 193.629114][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 194.291658][T12408] loop6: detected capacity change from 0 to 7 [ 194.294680][T11168] Dev loop6: unable to read RDB block 7 [ 194.297034][T11168] loop6: AHDI p1 p2 [ 194.298310][T11168] loop6: partition table partially beyond EOD, truncated [ 194.300659][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 194.303978][T12408] Dev loop6: unable to read RDB block 7 [ 194.306119][T12408] loop6: AHDI p1 p2 [ 194.307667][T12408] loop6: partition table partially beyond EOD, truncated [ 194.310398][T12408] loop6: p1 start 926365495 is beyond EOD, truncated [ 194.437638][T12422] binder: BINDER_SET_CONTEXT_MGR already set [ 194.441367][T12422] binder: 12421:12422 ioctl 4018620d 200000000040 returned -16 [ 194.442015][T12411] netlink: 'syz.4.2146': attribute type 21 has an invalid length. [ 194.444105][T12422] binder: 12421:12422 ioctl c0306201 200000000180 returned -14 [ 194.446333][T12411] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2146'. [ 194.448554][ T6130] hid-generic 0005:16C0:0009.0007: unknown main item tag 0x0 [ 194.449716][ T6130] hid-generic 0005:16C0:0009.0007: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 194.651521][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2156'. [ 194.669157][ T40] audit: type=1400 audit(193.432:731): avc: denied { connect } for pid=12432 comm="syz.4.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 194.802221][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'. [ 194.832429][T12474] Cannot find del_set index 1 as target [ 194.863780][ T40] audit: type=1400 audit(193.610:732): avc: denied { write } for pid=12479 comm="syz.3.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 194.985800][ T40] audit: type=1400 audit(193.731:733): avc: denied { unmount } for pid=10099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 195.062986][T12503] netlink: 'syz.4.2178': attribute type 4 has an invalid length. [ 195.065605][T12503] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2178'. [ 195.072725][T12503] wlan1: mtu less than device minimum [ 195.128072][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.130182][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.191863][T12512] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 195.452079][T12518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2183'. [ 195.922432][T12525] program syz.2.2186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.927321][T12525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29525 sclass=netlink_route_socket pid=12525 comm=syz.2.2186 [ 196.305105][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2194'. [ 196.307978][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2194'. [ 196.599279][ T5976] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 196.738410][ T5976] usb 6-1: device descriptor read/64, error -71 [ 196.802933][T12554] xt_hashlimit: size too large, truncated to 1048576 [ 197.005487][ T5976] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 197.123094][ T837] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 197.136766][T12558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2198'. [ 197.139582][T12558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2198'. [ 197.155163][ T5976] usb 6-1: device descriptor read/64, error -71 [ 197.262133][ T5947] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 197.266632][ T5947] Bluetooth: hci1: Injecting HCI hardware error event [ 197.269891][ T5947] Bluetooth: hci1: hardware error 0x00 [ 197.276564][ T5976] usb usb6-port1: attempt power cycle [ 197.304864][ T837] usb 8-1: Using ep0 maxpacket: 32 [ 197.307815][ T837] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 197.310450][ T837] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 197.313089][ T837] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 197.314672][T12563] random: crng reseeded on system resumption [ 197.316099][ T837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.321449][ T837] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 197.324402][ T837] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 197.324431][ T837] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 197.324444][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.326091][ T837] usb 8-1: config 0 descriptor?? [ 197.428046][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 197.462401][T12575] binder: 12574:12575 ioctl c0306201 200000000180 returned -14 [ 197.502783][T12577] netlink: 'syz.4.2205': attribute type 1 has an invalid length. [ 197.505284][T12577] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2205'. [ 197.513208][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2205'. [ 197.554632][ T837] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 197.563615][ T837] usb 8-1: USB disconnect, device number 34 [ 197.567830][ T837] usblp0: removed [ 197.658089][ T5976] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 197.679585][ T5976] usb 6-1: device descriptor read/8, error -71 [ 197.956964][ T5976] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 197.979022][ T5976] usb 6-1: device descriptor read/8, error -71 [ 198.021132][ T140] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 198.096330][ T5976] usb usb6-port1: unable to enumerate USB device [ 198.181465][ T140] usb 8-1: Using ep0 maxpacket: 32 [ 198.184403][ T140] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 198.187165][ T140] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 198.190040][ T140] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 198.193360][ T140] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 198.196355][ T140] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 198.199277][ T140] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 198.203601][ T140] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 198.206389][ T140] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.210053][ T140] usb 8-1: config 0 descriptor?? [ 198.428229][ T140] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 198.629232][T12597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2211'. [ 198.647963][ T40] audit: type=1400 audit(197.155:734): avc: denied { read write } for pid=12553 comm="syz.3.2197" name="lp0" dev="devtmpfs" ino=3430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 198.657169][ T40] audit: type=1400 audit(197.155:735): avc: denied { open } for pid=12553 comm="syz.3.2197" path="/dev/usb/lp0" dev="devtmpfs" ino=3430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 198.698865][T12608] binder: 12607:12608 ioctl c0306201 200000000180 returned -14 [ 198.706658][ C2] usblp0: nonzero read bulk status received: -71 [ 198.710670][ T6130] usb 8-1: USB disconnect, device number 35 [ 198.760390][T12612] program syz.4.2215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.923124][T12614] syz.2.2216: attempt to access beyond end of device [ 198.923124][T12614] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 198.928639][T12614] (syz.2.2216,12614,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 198.931577][T12553] usblp0: removed [ 198.932190][T12614] (syz.2.2216,12614,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 198.936770][T12614] (syz.2.2216,12614,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 198.940625][T12614] (syz.2.2216,12614,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 198.957835][T12614] tc_dump_action: action bad kind [ 199.485787][ T5947] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 199.504639][T12619] FAULT_INJECTION: forcing a failure. [ 199.504639][T12619] name failslab, interval 1, probability 0, space 0, times 0 [ 199.508904][T12619] CPU: 0 UID: 0 PID: 12619 Comm: syz.3.2218 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 199.508919][T12619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.508927][T12619] Call Trace: [ 199.508931][T12619] [ 199.508935][T12619] dump_stack_lvl+0x16c/0x1f0 [ 199.508967][T12619] should_fail_ex+0x512/0x640 [ 199.508990][T12619] ? fs_reclaim_acquire+0xae/0x150 [ 199.509015][T12619] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 199.509034][T12619] should_failslab+0xc2/0x120 [ 199.509049][T12619] __kmalloc_noprof+0xd2/0x510 [ 199.509064][T12619] tomoyo_realpath_from_path+0xc2/0x6e0 [ 199.509083][T12619] ? tomoyo_profile+0x47/0x60 [ 199.509097][T12619] tomoyo_path_number_perm+0x245/0x580 [ 199.509111][T12619] ? tomoyo_path_number_perm+0x237/0x580 [ 199.509126][T12619] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 199.509141][T12619] ? find_held_lock+0x2b/0x80 [ 199.509165][T12619] ? find_held_lock+0x2b/0x80 [ 199.509175][T12619] ? hook_file_ioctl_common+0x145/0x410 [ 199.509190][T12619] ? __fget_files+0x20e/0x3c0 [ 199.509206][T12619] security_file_ioctl+0x9b/0x240 [ 199.509224][T12619] __x64_sys_ioctl+0xb7/0x210 [ 199.509245][T12619] do_syscall_64+0xcd/0x4c0 [ 199.509268][T12619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.509280][T12619] RIP: 0033:0x7f1ceb98e969 [ 199.509289][T12619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.509300][T12619] RSP: 002b:00007f1cec857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.509311][T12619] RAX: ffffffffffffffda RBX: 00007f1cebbb5fa0 RCX: 00007f1ceb98e969 [ 199.509317][T12619] RDX: 0000000000000000 RSI: 00000000c0506107 RDI: 0000000000000003 [ 199.509324][T12619] RBP: 00007f1cec857090 R08: 0000000000000000 R09: 0000000000000000 [ 199.509330][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.509336][T12619] R13: 0000000000000000 R14: 00007f1cebbb5fa0 R15: 00007ffe03526e08 [ 199.509349][T12619] [ 199.509354][T12619] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.315580][T12631] binder: 12630:12631 ioctl c0306201 200000000180 returned -14 [ 200.426048][T12643] loop6: detected capacity change from 0 to 7 [ 200.428983][T12643] Dev loop6: unable to read RDB block 7 [ 200.430751][T12643] loop6: AHDI p1 p2 [ 200.432030][T12643] loop6: partition table partially beyond EOD, truncated [ 200.434370][T12643] loop6: p1 start 926365495 is beyond EOD, truncated [ 200.465994][T12646] ip6t_rpfilter: unknown options [ 200.478548][ T9741] nci: nci_rx_work: unknown MT 0x1 [ 200.533459][ T837] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 200.551568][T12654] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2232'. [ 200.579196][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2229'. [ 200.652621][T12655] bond0: (slave team0): Releasing backup interface [ 200.659280][T12655] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 200.663221][T12655] team0 (unregistering): Port device team_slave_0 removed [ 200.666073][T12655] team0 (unregistering): Failed to send options change via netlink (err -105) [ 200.668968][T12655] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 200.673713][T12655] team0 (unregistering): Port device team_slave_1 removed [ 200.707780][ T837] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 200.710748][ T837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.713360][ T837] usb 6-1: Product: syz [ 200.714744][ T837] usb 6-1: Manufacturer: syz [ 200.716472][ T837] usb 6-1: SerialNumber: syz [ 200.722641][ T837] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 200.735754][ T5976] EXT4-fs error (device sda1): ext4_lookup:1787: inode #312: comm kworker/0:3: iget: checksum invalid [ 200.740763][ T5976] usb 6-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 200.743662][ T5976] usb 6-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 200.746578][ T5976] usb 6-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 200.810159][ T40] audit: type=1400 audit(199.175:736): avc: denied { mount } for pid=12660 comm="syz.2.2235" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 201.342698][T12666] loop6: detected capacity change from 0 to 7 [ 201.346701][T11168] Dev loop6: unable to read RDB block 7 [ 201.348594][T11168] loop6: AHDI p1 p2 [ 201.349845][T11168] loop6: partition table partially beyond EOD, truncated [ 201.352295][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 201.358751][T12666] Dev loop6: unable to read RDB block 7 [ 201.361123][T12666] loop6: AHDI p1 p2 [ 201.367425][T12666] loop6: partition table partially beyond EOD, truncated [ 201.370177][T12666] loop6: p1 start 926365495 is beyond EOD, truncated [ 201.469153][T12675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12675 comm=syz.4.2241 [ 202.490212][ T40] audit: type=1400 audit(200.756:737): avc: denied { mounton } for pid=12695 comm="syz.4.2247" path="/167/file0" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 202.516799][ T1142] nci: nci_rx_work: unknown MT 0x1 [ 202.524316][T12700] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 202.569832][T12708] IPv6: addrconf: prefix option has invalid lifetime [ 202.654664][ T40] audit: type=1400 audit(200.906:738): avc: denied { bind } for pid=12714 comm="syz.4.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.928131][ T61] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 203.100507][ T61] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.103855][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 203.107295][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.110472][ T61] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.115882][ T61] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 203.119126][ T61] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 203.122656][ T61] usb 9-1: Manufacturer: syz [ 203.127501][ T61] usb 9-1: config 0 descriptor?? [ 203.334143][ T6130] usb 6-1: USB disconnect, device number 26 [ 203.398637][ T61] rc_core: IR keymap rc-hauppauge not found [ 203.400632][ T61] Registered IR keymap rc-empty [ 203.402286][ T61] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 203.404284][T12725] can: request_module (can-proto-3) failed. [ 203.419949][ T61] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 203.436522][T12736] __nla_validate_parse: 3 callbacks suppressed [ 203.436532][T12736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2259'. [ 203.441783][ T61] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 203.446375][ T61] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input26 [ 203.454622][ T61] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 203.484148][ T61] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 203.516179][ T61] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 203.538366][ T61] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 203.560475][ T61] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 203.579467][ T40] audit: type=1400 audit(201.766:739): avc: denied { append } for pid=12745 comm="syz.1.2263" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 203.581302][T12746] program syz.1.2263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.586864][ T61] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 203.602152][ T61] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 203.623184][ T61] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 203.644486][ T61] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 203.665840][ T61] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 203.699520][ T61] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 203.703169][ T61] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 203.709866][ T61] usb 9-1: USB disconnect, device number 11 [ 204.133860][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2268'. [ 204.148563][T12761] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.253766][ T5977] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 204.284882][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 204.424772][ T5977] usb 7-1: Using ep0 maxpacket: 8 [ 204.427767][ T5977] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 204.430075][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.433504][ T5977] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.437288][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.440711][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.444960][ T5977] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 204.447820][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.451240][ T5977] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.454801][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.459745][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.464056][ T5977] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 204.466719][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.470442][ T5977] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.474082][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.477539][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.483691][ T5977] usb 7-1: string descriptor 0 read error: -22 [ 204.485790][ T5977] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 204.489275][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.507088][ T5977] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 204.588115][T12779] Option ''MO' to dns_resolver key: bad/missing value [ 204.622564][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2275'. [ 204.639008][T12781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.714472][ T837] usb 7-1: USB disconnect, device number 18 [ 204.789829][T12787] syzkaller0: entered promiscuous mode [ 204.791706][T12787] syzkaller0: entered allmulticast mode [ 204.946906][T12753] adutux: No device or device unplugged -19 [ 205.439769][T12797] netlink: 'syz.3.2278': attribute type 6 has an invalid length. [ 205.928107][T12801] binder: 12800:12801 ioctl c0306201 200000000180 returned -14 [ 205.996688][T12753] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.006661][T12808] Invalid ELF header magic: != ELF [ 206.105333][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.173040][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.253190][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.355992][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.359169][ T40] audit: type=1400 audit(204.367:740): avc: denied { name_bind } for pid=12819 comm="syz.3.2286" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 206.402305][T12822] tmpfs: Unknown parameter '' [ 206.410209][T12822] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 206.412356][T12822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.416888][T12822] vhci_hcd vhci_hcd.0: Device attached [ 206.628075][T12829] binder: 12828:12829 ioctl c0306201 200000000180 returned -14 [ 206.680552][ T7361] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 206.691634][ T837] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 206.739473][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.745120][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.749895][ T1142] bond0 (unregistering): Released all slaves [ 206.761024][ T1142] bond1 (unregistering): Released all slaves [ 206.854855][ T7361] usb 8-1: config 0 has no interfaces? [ 206.857235][ T7361] usb 8-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 206.870212][ T7361] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.874212][ T7361] usb 8-1: config 0 descriptor?? [ 206.938212][ T1142] tipc: Disabling bearer [ 206.941891][ T1142] tipc: Left network mode [ 206.970593][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 207.095518][T12823] usb 43-1: recv xbuf, 0 [ 207.099802][ T6306] usb 8-1: USB disconnect, device number 36 [ 207.103853][ T9741] vhci_hcd: stop threads [ 207.105860][ T9741] vhci_hcd: release socket [ 207.107879][ T9741] vhci_hcd: disconnect device [ 207.183265][ T837] vhci_hcd: vhci_device speed not set [ 207.239929][ T1142] hsr_slave_0: left promiscuous mode [ 207.242034][ T1142] hsr_slave_1: left promiscuous mode [ 207.243977][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.246251][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.250380][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.252668][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.276985][ T1142] veth1_macvtap: left promiscuous mode [ 207.279058][ T1142] veth0_macvtap: left allmulticast mode [ 207.281190][ T1142] veth0_macvtap: left promiscuous mode [ 207.282946][ T1142] veth1_vlan: left promiscuous mode [ 207.284695][ T1142] veth0_vlan: left promiscuous mode [ 207.688735][T12866] loop6: detected capacity change from 0 to 7 [ 207.696223][T12866] Dev loop6: unable to read RDB block 7 [ 207.698294][T12866] loop6: AHDI p1 p2 [ 207.699641][T12866] loop6: partition table partially beyond EOD, truncated [ 207.701963][T12866] loop6: p1 start 926365495 is beyond EOD, truncated [ 207.892534][ T40] audit: type=1400 audit(205.807:741): avc: denied { getopt } for pid=12881 comm="syz.4.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 208.090009][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 208.200185][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 208.209288][ T5947] Bluetooth: hci3: command 0x0405 tx timeout [ 208.348104][T12893] tmpfs: Unknown parameter '' [ 208.365440][T12893] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 208.367733][T12893] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.371293][T12893] vhci_hcd vhci_hcd.0: Device attached [ 208.617317][T12901] netlink: 'syz.3.2306': attribute type 4 has an invalid length. [ 208.637934][ T7361] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 208.640463][ T6306] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 208.671425][T12902] netlink: 'syz.3.2306': attribute type 4 has an invalid length. [ 208.826915][ T6306] usb 7-1: config 0 has no interfaces? [ 208.829181][ T6306] usb 7-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 208.833020][ T6306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.836826][ T6306] usb 7-1: config 0 descriptor?? [ 208.852470][T12908] loop6: detected capacity change from 0 to 7 [ 208.854878][T12908] Dev loop6: unable to read RDB block 7 [ 208.856695][T12908] loop6: AHDI p1 p2 [ 208.857913][T12908] loop6: partition table partially beyond EOD, truncated [ 208.860180][T12908] loop6: p1 start 926365495 is beyond EOD, truncated [ 209.058780][T12894] vhci_hcd: connection reset by peer [ 209.061136][ T6306] usb 7-1: USB disconnect, device number 19 [ 209.061666][ T9742] vhci_hcd: stop threads [ 209.066923][ T9742] vhci_hcd: release socket [ 209.068431][ T9742] vhci_hcd: disconnect device [ 209.169504][T12951] loop6: detected capacity change from 0 to 7 [ 209.172050][T12951] Dev loop6: unable to read RDB block 7 [ 209.173928][T12951] loop6: AHDI p1 p2 [ 209.175204][T12951] loop6: partition table partially beyond EOD, truncated [ 209.177790][T12951] loop6: p1 start 926365495 is beyond EOD, truncated [ 209.248322][ T1142] IPVS: stop unused estimator thread 0... [ 209.289044][ T5977] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 209.404250][T12977] ucma_write: process 1278 (syz.1.2325) changed security contexts after opening file descriptor, this is not allowed. [ 209.417351][T12977] vxcan1: tx drop: invalid sa for name 0x0000000000000007 [ 209.420708][T12977] raw_sendmsg: syz.1.2325 forgot to set AF_INET. Fix it! [ 209.449365][ T5977] usb 9-1: Using ep0 maxpacket: 8 [ 209.452573][ T5977] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 209.455264][ T5977] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 209.458141][ T5977] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 209.463018][ T5977] usb 9-1: config 250 has no interface number 0 [ 209.464944][ T5977] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 209.468580][ T5977] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 209.473079][ T5977] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.476260][ T5977] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 209.479402][ T5977] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 209.483768][ T5977] usb 9-1: config 250 interface 228 has no altsetting 0 [ 209.487066][ T5977] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 209.489967][ T5977] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 209.494526][ T5977] usb 9-1: Product: syz [ 209.496020][ T5977] usb 9-1: SerialNumber: syz [ 209.500577][ T5977] hub 9-1:250.228: bad descriptor, ignoring hub [ 209.502617][ T5977] hub 9-1:250.228: probe with driver hub failed with error -5 [ 209.515600][T12983] GUP no longer grows the stack in syz.1.2326 (12983): 200000004000-20000000a000 (200000002000) [ 209.520221][T12983] CPU: 3 UID: 0 PID: 12983 Comm: syz.1.2326 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 209.520247][T12983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 209.520258][T12983] Call Trace: [ 209.520265][T12983] [ 209.520273][T12983] dump_stack_lvl+0x16c/0x1f0 [ 209.520324][T12983] gup_vma_lookup+0x1d2/0x220 [ 209.520355][T12983] __get_user_pages+0x271/0x3b80 [ 209.520396][T12983] ? __pfx___get_user_pages+0x10/0x10 [ 209.520436][T12983] get_user_pages_remote+0x258/0xb20 [ 209.520466][T12983] ? __pfx_mtree_load+0x10/0x10 [ 209.520492][T12983] ? __pfx_get_user_pages_remote+0x10/0x10 [ 209.520533][T12983] __access_remote_vm+0x246/0x810 [ 209.520561][T12983] ? do_raw_spin_lock+0x12c/0x2b0 [ 209.520589][T12983] ? __pfx___access_remote_vm+0x10/0x10 [ 209.520636][T12983] proc_pid_cmdline_read+0x4de/0x900 [ 209.520662][T12983] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 209.520686][T12983] ? rw_verify_area+0xcf/0x680 [ 209.520718][T12983] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 209.520738][T12983] vfs_readv+0x5c1/0x8b0 [ 209.520761][T12983] ? __pfx_vfs_readv+0x10/0x10 [ 209.520799][T12983] ? __fget_files+0x20e/0x3c0 [ 209.520829][T12983] ? do_preadv+0x1a6/0x270 [ 209.520844][T12983] do_preadv+0x1a6/0x270 [ 209.520863][T12983] ? __pfx_do_preadv+0x10/0x10 [ 209.520889][T12983] do_syscall_64+0xcd/0x4c0 [ 209.520915][T12983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.520934][T12983] RIP: 0033:0x7fc1d9d8e969 [ 209.520950][T12983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.520968][T12983] RSP: 002b:00007fc1dabb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 209.520986][T12983] RAX: ffffffffffffffda RBX: 00007fc1d9fb5fa0 RCX: 00007fc1d9d8e969 [ 209.521002][T12983] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 209.521013][T12983] RBP: 00007fc1d9e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 209.521026][T12983] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 209.521036][T12983] R13: 0000000000000000 R14: 00007fc1d9fb5fa0 R15: 00007fff2b1a2a78 [ 209.521062][T12983] [ 209.721462][T12934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.726607][ T5977] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 209.727457][T12934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.738192][ T40] audit: type=1400 audit(207.529:742): avc: denied { write } for pid=12930 comm="syz.4.2313" path="socket:[43022]" dev="sockfs" ino=43022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 209.751260][ T5977] usb 9-1: USB disconnect, device number 12 [ 209.756997][ T5977] usblp0: removed [ 210.097572][T13019] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2334'. [ 210.195584][T13024] tmpfs: Unknown parameter '' [ 210.207661][T13024] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 210.210271][T13024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 210.214106][T13024] vhci_hcd vhci_hcd.0: Device attached [ 210.324673][T13028] gretap0: entered allmulticast mode [ 210.330166][T13027] gretap0: left allmulticast mode [ 210.483849][T13041] SELinux: Context system_u:object_r:systemd_logind_sessions_t:s0 is not valid (left unmapped). [ 210.486607][ T9] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 210.488020][ T40] audit: type=1400 audit(208.230:743): avc: denied { relabelto } for pid=13040 comm="syz.4.2340" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_logind_sessions_t:s0" [ 210.490785][ T837] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 210.501463][ T40] audit: type=1400 audit(208.230:744): avc: denied { associate } for pid=13040 comm="syz.4.2340" name="kvm" dev="devtmpfs" ino=84 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logind_sessions_t:s0" [ 210.695931][ T837] usb 8-1: config 0 has no interfaces? [ 210.697786][ T837] usb 8-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 210.701933][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.706889][T13041] syz.4.2340 (13041): drop_caches: 2 [ 210.712201][ T837] usb 8-1: config 0 descriptor?? [ 210.723211][T13041] syz.4.2340 (13041): drop_caches: 2 [ 210.819850][T13062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.823635][T13062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.874285][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2346'. [ 210.960894][ T3234] usb 8-1: USB disconnect, device number 37 [ 210.963035][T13025] vhci_hcd: connection reset by peer [ 210.973960][ T9742] vhci_hcd: stop threads [ 210.975380][ T9742] vhci_hcd: release socket [ 210.979601][ T9742] vhci_hcd: disconnect device [ 211.038149][T13082] bond0: (slave bond_slave_0): Releasing backup interface [ 211.285936][T13108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2358'. [ 211.291058][T13108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2358'. [ 211.339619][T13110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2359'. [ 211.342532][T13110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2359'. [ 211.542428][T13120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2361'. [ 211.546818][T13116] block device autoloading is deprecated and will be removed. [ 211.549666][T13116] syz.3.2360: attempt to access beyond end of device [ 211.549666][T13116] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 211.664911][T13132] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2367'. [ 211.711383][ T40] audit: type=1400 audit(209.371:745): avc: denied { rename } for pid=13136 comm="syz.4.2368" name="#27" dev="tmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 211.764455][T13143] program syz.4.2370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.770091][T13146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.772983][T13146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.775891][T13146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.779211][T13146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.784653][T13146] geneve2: entered promiscuous mode [ 212.047229][ T5977] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 212.049859][ T5991] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 212.069483][ T3234] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 212.207628][ T5991] usb 8-1: Using ep0 maxpacket: 16 [ 212.210398][ T5977] usb 7-1: unable to get BOS descriptor or descriptor too short [ 212.211471][ T5991] usb 8-1: config 1 interface 0 has no altsetting 0 [ 212.214027][ T5977] usb 7-1: config 8 has an invalid interface number: 135 but max is 0 [ 212.217125][ T5991] usb 8-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.40 [ 212.217750][ T5977] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 212.221549][ T5991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.223854][ T5977] usb 7-1: config 8 has no interface number 0 [ 212.226436][ T5991] usb 8-1: Product: 橤鈀茨狟摗㳼٬腗铐ཷ푃㇧쏇ჯᐻ囹샹倿맮䱹淖ḻ䴄痩庀桄ᕋ牸ⵢ [ 212.228325][ T5977] usb 7-1: config 8 interface 135 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 8 [ 212.232521][ T40] audit: type=1400 audit(209.858:746): avc: denied { getopt } for pid=13168 comm="syz.1.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 212.232554][ T5991] usb 8-1: Manufacturer:  [ 212.233933][ T5991] usb 8-1: rejected 1 configuration due to insufficient available bus power [ 212.235884][ T5977] usb 7-1: config 8 interface 135 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 212.239626][ T3234] usb 9-1: Using ep0 maxpacket: 8 [ 212.242215][ T5991] usb 8-1: no configuration chosen from 1 choice [ 212.243636][ T5977] usb 7-1: config 8 interface 135 altsetting 8 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 212.246404][ T3234] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 212.249352][ T5977] usb 7-1: config 8 interface 135 altsetting 8 endpoint 0x82 has invalid maxpacket 26904, setting to 1024 [ 212.259763][ T3234] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 212.260873][ T5977] usb 7-1: config 8 interface 135 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 212.265691][ T3234] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.267485][ T5977] usb 7-1: config 8 interface 135 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 212.270740][ T3234] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.273917][ T5977] usb 7-1: config 8 interface 135 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 212.273931][ T5977] usb 7-1: config 8 interface 135 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 0 [ 212.273944][ T5977] usb 7-1: config 8 interface 135 has no altsetting 0 [ 212.276549][ T5977] usb 7-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=4f.58 [ 212.278796][ T3234] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.281260][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.281273][ T5977] usb 7-1: Product: syz [ 212.281281][ T5977] usb 7-1: Manufacturer: syz [ 212.281288][ T5977] usb 7-1: SerialNumber: syz [ 212.283094][T13147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 212.285768][ T3234] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.287992][T13147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 212.309577][T13147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 212.518081][ T3234] usb 9-1: usb_control_msg returned -71 [ 212.520047][ T3234] usbtmc 9-1:16.0: can't read capabilities [ 212.533344][ T3234] usb 9-1: USB disconnect, device number 13 [ 212.638646][T13194] overlayfs: conflicting options: userxattr,verity=on [ 213.500863][T13202] overlay: Bad value for 'redirect_dir' [ 213.543480][T13209] loop6: detected capacity change from 0 to 7 [ 213.546093][T13209] Dev loop6: unable to read RDB block 7 [ 213.547863][T13209] loop6: AHDI p1 p2 [ 213.549078][T13209] loop6: partition table partially beyond EOD, truncated [ 213.551309][T13209] loop6: p1 start 926365495 is beyond EOD, truncated [ 214.121955][ T7361] vhci_hcd: vhci_device speed not set [ 214.794892][T13147] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 214.797351][T13215] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 214.798150][T13193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.805061][T13193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.808369][ T5947] Bluetooth: hci3: command 0x0405 tx timeout [ 214.858441][T13231] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.2396' resets device [ 214.939943][T13236] 9p: Unknown uid 00000000004294967295 [ 214.992742][ T5999] usb 8-1: USB disconnect, device number 38 [ 215.011725][T13238] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2399'. [ 215.018365][T13240] binder: 13239:13240 ioctl 4018620d 0 returned -22 [ 215.023314][T13240] binder: 13239:13240 ioctl c0306201 200000000180 returned -14 [ 215.094001][ T3234] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 215.256042][ T3234] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.259083][ T3234] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.263205][ T3234] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.266241][ T3234] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.362415][ T5977] sierra 7-1:8.135: Sierra USB modem converter detected [ 215.368631][ T5977] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 215.374847][ T5977] usb 7-1: Sierra USB modem converter now attached to ttyUSB1 [ 215.380047][ T5977] usb 7-1: USB disconnect, device number 20 [ 215.387401][ T5977] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 215.394945][ T5977] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 215.398120][ T5977] sierra 7-1:8.135: device disconnected [ 215.485605][ T3234] usb 9-1: usb_control_msg returned -32 [ 215.487393][ T3234] usbtmc 9-1:16.0: can't read capabilities [ 215.541200][ T40] audit: type=1400 audit(212.954:747): avc: denied { shutdown } for pid=13251 comm="syz.1.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.552750][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2404'. [ 215.556827][T13254] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 215.692904][T13268] block nbd3: NBD_DISCONNECT [ 215.981351][ T9] vhci_hcd: vhci_device speed not set [ 215.999847][ T40] audit: type=1400 audit(213.384:748): avc: denied { listen } for pid=13286 comm="syz.3.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 216.000939][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2413'. [ 216.008947][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2412'. [ 216.061339][ T40] audit: type=1400 audit(213.440:749): avc: denied { map } for pid=13291 comm="syz.3.2414" path="/proc/1726/clear_refs" dev="proc" ino=43549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 216.061529][ T40] audit: type=1400 audit(213.440:750): avc: denied { execute } for pid=13291 comm="syz.3.2414" path="/proc/1726/clear_refs" dev="proc" ino=43549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 216.072613][T13296] netlink: 'syz.2.2415': attribute type 142 has an invalid length. [ 216.287863][T13307] loop6: detected capacity change from 0 to 7 [ 216.288677][T13307] Dev loop6: unable to read RDB block 7 [ 216.288753][T13307] loop6: AHDI p1 p2 [ 216.288767][T13307] loop6: partition table partially beyond EOD, truncated [ 216.288858][T13307] loop6: p1 start 926365495 is beyond EOD, truncated [ 216.318321][T13309] binder: BINDER_SET_CONTEXT_MGR already set [ 216.323114][T13309] binder: 13308:13309 ioctl 4018620d 200000000040 returned -16 [ 216.323516][T13309] binder: 13308:13309 ioctl c0306201 200000000180 returned -14 [ 216.344857][ T5977] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 216.508271][ T5977] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.508295][ T5977] usb 8-1: config 0 has no interfaces? [ 216.510535][ T5977] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.510555][ T5977] usb 8-1: config 0 has no interfaces? [ 216.511905][ T5977] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.511923][ T5977] usb 8-1: config 0 has no interfaces? [ 216.513783][ T5977] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 216.541115][ T5977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 216.544303][ T5977] usb 8-1: Product: syz [ 216.545661][ T5977] usb 8-1: Manufacturer: syz [ 216.547293][ T5977] usb 8-1: SerialNumber: syz [ 216.549745][ T5977] usb 8-1: config 0 descriptor?? [ 216.556757][ T24] usb 9-1: USB disconnect, device number 14 [ 216.799126][ T24] usb 8-1: USB disconnect, device number 39 [ 216.847176][T13337] loop6: detected capacity change from 0 to 7 [ 216.850869][T11168] Dev loop6: unable to read RDB block 7 [ 216.852658][T11168] loop6: AHDI p1 p2 [ 216.853884][T11168] loop6: partition table partially beyond EOD, truncated [ 216.856963][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 216.864753][T13337] Dev loop6: unable to read RDB block 7 [ 216.867261][T13337] loop6: AHDI p1 p2 [ 216.872529][T13337] loop6: partition table partially beyond EOD, truncated [ 216.875719][T13337] loop6: p1 start 926365495 is beyond EOD, truncated [ 216.983722][T13339] input: syz0 as /devices/virtual/input/input27 [ 217.002711][T13339] wg0: left allmulticast mode [ 217.023808][T13339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.032210][T13339] bridge4: left promiscuous mode [ 217.037237][T13339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.060399][T13344] binder: BINDER_SET_CONTEXT_MGR already set [ 217.062495][T13344] binder: 13343:13344 ioctl 4018620d 200000000040 returned -16 [ 217.065200][T13344] binder: 13343:13344 ioctl c0306201 200000000180 returned -14 [ 217.123076][ T40] audit: type=1400 audit(214.432:751): avc: denied { map } for pid=13351 comm="syz.2.2431" path="/170/file0/devices.list" dev="9p" ino=36047886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 217.136960][T13354] netlink: 'syz.1.2432': attribute type 15 has an invalid length. [ 217.309628][T13370] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 217.309913][T13368] loop6: detected capacity change from 0 to 7 [ 217.316664][T13368] Dev loop6: unable to read RDB block 7 [ 217.320061][T13368] loop6: AHDI p1 p2 [ 217.321328][T13368] loop6: partition table partially beyond EOD, truncated [ 217.323627][T13368] loop6: p1 start 926365495 is beyond EOD, truncated [ 217.343178][ T40] audit: type=1800 audit(214.647:752): pid=13365 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2435" name="file0" dev="tmpfs" ino=2761 res=0 errno=0 [ 217.368077][T13373] sp0: Synchronizing with TNC [ 217.375463][T13373] --map-set only usable from mangle table [ 217.547515][ T40] audit: type=1400 audit(214.834:753): avc: denied { map } for pid=13376 comm="syz.1.2440" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 217.606794][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.611444][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.615109][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.622334][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.626275][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.629043][ T5991] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 217.743715][T13386] chnl_net:caif_netlink_parms(): no params data found [ 217.810605][ T5991] usb 9-1: config 0 has no interfaces? [ 217.812386][ T5991] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 217.815316][ T5991] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.820761][ T5991] usb 9-1: config 0 descriptor?? [ 217.834669][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.836995][T13386] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.839243][T13386] bridge_slave_0: entered allmulticast mode [ 217.842308][T13386] bridge_slave_0: entered promiscuous mode [ 217.845340][T13386] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.847900][T13386] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.850154][T13386] bridge_slave_1: entered allmulticast mode [ 217.853459][T13386] bridge_slave_1: entered promiscuous mode [ 217.923590][T13386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.933705][T13386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.992547][T13386] team0: Port device team_slave_0 added [ 217.997379][T13386] team0: Port device team_slave_1 added [ 218.045422][T13386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.047672][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.056121][T13386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.061384][T13375] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 218.069371][T13386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.071651][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.080361][T13386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.083779][T13410] loop6: detected capacity change from 0 to 7 [ 218.086511][T13410] Dev loop6: unable to read RDB block 7 [ 218.089085][T13410] loop6: AHDI p1 p2 [ 218.090397][T13410] loop6: partition table partially beyond EOD, truncated [ 218.092766][T13410] loop6: p1 start 926365495 is beyond EOD, truncated [ 218.143730][T13412] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 218.157788][T13386] hsr_slave_0: entered promiscuous mode [ 218.160429][T13386] hsr_slave_1: entered promiscuous mode [ 218.177840][T13417] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 218.177875][ C0] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 218.292323][T13386] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.382556][T13386] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.486692][T13425] SELinux: unknown common [ 218.488402][T13425] SELinux: failed to load policy [ 218.490324][T13426] SELinux: unknown common [ 218.492237][T13426] SELinux: failed to load policy [ 218.494755][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 218.494758][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 218.540848][T13386] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.559268][T13428] hfs: can't find a HFS filesystem on dev sr0 [ 218.612960][T13386] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.663799][ T40] audit: type=1400 audit(215.872:754): avc: denied { read } for pid=13440 comm="syz.1.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.671739][ T40] audit: type=1400 audit(215.882:755): avc: denied { ioctl } for pid=13440 comm="syz.1.2457" path="socket:[45309]" dev="sockfs" ino=45309 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.731584][T13386] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.737811][T13386] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.743302][T13386] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.748512][T13386] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.763109][T13386] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.765421][T13386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.766896][T13449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2460'. [ 218.767831][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.772714][T13386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.801308][T13386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.815429][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.821175][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.839895][T13386] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.844860][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.848072][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.854639][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.856927][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.894440][T13458] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2463'. [ 218.962171][T13386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.986747][T13386] veth0_vlan: entered promiscuous mode [ 218.991350][T13386] veth1_vlan: entered promiscuous mode [ 219.015423][T13386] veth0_macvtap: entered promiscuous mode [ 219.022767][T13386] veth1_macvtap: entered promiscuous mode [ 219.031658][T13386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.038243][T13386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.044337][T13386] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.047071][T13386] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.049883][T13386] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.052602][T13386] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.094334][ T9741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.097083][ T9741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.116981][ T9745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.120256][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.218760][ T40] audit: type=1800 audit(216.396:756): pid=13473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2465" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 219.223729][T13473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2465'. [ 219.375920][T13482] fuse: Unknown parameter 'r0M0000000000' [ 219.840679][ T5938] Bluetooth: hci2: command tx timeout [ 219.878445][T13495] ALSA: mixer_oss: invalid index 40000 [ 219.955844][T13502] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 220.026465][ T40] audit: type=1400 audit(217.154:757): avc: denied { mounton } for pid=13503 comm="syz.3.2475" path="/10/file0/bus" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 220.029519][T13504] overlay: filesystem on ./file0 not supported [ 220.048206][ T40] audit: type=1400 audit(217.173:758): avc: denied { unmount } for pid=13386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 220.092206][T13508] netlink: 'syz.2.2477': attribute type 39 has an invalid length. [ 220.296002][T13511] netlink: 'syz.2.2478': attribute type 7 has an invalid length. [ 220.343797][ T54] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 220.504963][ T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.508070][ T54] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 220.511122][ T54] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 220.516223][ T54] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 220.519084][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.521561][ T54] usb 8-1: Product: syz [ 220.522874][ T54] usb 8-1: Manufacturer: syz [ 220.524341][ T54] usb 8-1: SerialNumber: syz [ 220.530721][T13506] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 220.578781][ T5991] usb 9-1: USB disconnect, device number 15 [ 220.615299][T13526] fuse: Bad value for 'fd' [ 220.618422][T13526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2482'. [ 220.677052][T13529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.304685][T13546] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 221.481677][ T40] audit: type=1400 audit(218.510:759): avc: denied { mounton } for pid=13555 comm="syz.4.2487" path="/224/file0" dev="9p" ino=36047757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.499733][ T40] audit: type=1400 audit(218.510:760): avc: denied { getattr } for pid=13555 comm="syz.4.2487" name="/" dev="9p" ino=36047757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 221.553048][T13558] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 221.567290][T13558] kvm: pic: non byte read [ 221.570316][T13558] kvm: pic: level sensitive irq not supported [ 221.570649][T13558] kvm: pic: non byte read [ 221.578795][T13558] kvm: pic: level sensitive irq not supported [ 221.579085][T13558] kvm: pic: non byte read [ 221.585411][T13558] kvm: pic: level sensitive irq not supported [ 221.585680][T13558] kvm: pic: non byte read [ 221.590794][T13558] kvm: pic: level sensitive irq not supported [ 221.591276][T13558] kvm: pic: non byte read [ 221.598957][T13558] kvm: pic: level sensitive irq not supported [ 221.599333][T13558] kvm: pic: non byte read [ 221.605285][T13564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2489'. [ 222.064464][ T5938] Bluetooth: hci2: command tx timeout [ 222.071633][T13579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2493'. [ 222.604986][ T54] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 222.828649][ C2] usblp0: nonzero read bulk status received: -71 [ 222.832180][T13506] usblp0: error -71 reading from printer [ 222.849766][ C2] usblp0: nonzero read bulk status received: -71 [ 222.906907][T13572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2492'. [ 222.918406][ T24] usb 8-1: USB disconnect, device number 40 [ 222.922194][ T24] usblp0: removed [ 222.961797][T13587] xt_hashlimit: size too large, truncated to 1048576 [ 222.962153][ T40] audit: type=1400 audit(219.895:761): avc: denied { setattr } for pid=13588 comm="syz.2.2494" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 223.049150][T13603] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.106357][T13610] binder: 13608:13610 ioctl c0306201 200000000180 returned -14 [ 223.598373][T13650] input: syz1 as /devices/virtual/input/input28 [ 223.696372][T13661] binder: 13660:13661 ioctl c0306201 200000000180 returned -14 [ 223.741752][T13669] 9pnet_fd: Insufficient options for proto=fd [ 223.891409][T13677] syz.2.2510: attempt to access beyond end of device [ 223.891409][T13677] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 223.897604][T13677] EXT4-fs (nbd2): unable to read superblock [ 224.011200][T13466] IPVS: starting estimator thread 0... [ 224.035550][ T40] audit: type=1400 audit(220.905:762): avc: denied { relabelfrom } for pid=13682 comm="syz.2.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 224.043199][ T40] audit: type=1400 audit(220.905:763): avc: denied { relabelto } for pid=13682 comm="syz.2.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 224.106373][T13684] IPVS: using max 45 ests per chain, 108000 per kthread [ 224.129857][T13691] block nbd0: not configured, cannot reconfigure [ 224.191287][ T40] audit: type=1400 audit(221.045:764): avc: denied { getopt } for pid=13698 comm="syz.2.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 224.287994][ T5938] Bluetooth: hci2: command tx timeout [ 224.299881][T13697] bond2: (slave dummy0): Releasing active interface [ 224.303652][T13697] batman_adv: batadv0: Adding interface: dummy0 [ 224.305639][T13697] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.313531][T13697] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 224.512139][T13725] loop6: detected capacity change from 0 to 7 [ 224.515978][T11168] Dev loop6: unable to read RDB block 7 [ 224.517682][T11168] loop6: AHDI p1 p2 [ 224.519512][T11168] loop6: partition table partially beyond EOD, truncated [ 224.522044][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 224.535012][T13725] Dev loop6: unable to read RDB block 7 [ 224.536935][T13725] loop6: AHDI p1 p2 [ 224.538255][T13725] loop6: partition table partially beyond EOD, truncated [ 224.540769][T13725] loop6: p1 start 926365495 is beyond EOD, truncated [ 224.579522][T13731] binder: 13730:13731 ioctl c0306201 200000000180 returned -14 [ 224.750671][T13765] loop6: detected capacity change from 0 to 7 [ 224.759357][T11168] Dev loop6: unable to read RDB block 7 [ 224.761143][T11168] loop6: AHDI p1 p2 [ 224.762458][T11168] loop6: partition table partially beyond EOD, truncated [ 224.765032][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 224.768069][T13765] Dev loop6: unable to read RDB block 7 [ 224.770294][T13765] loop6: AHDI p1 p2 [ 224.771604][T13765] loop6: partition table partially beyond EOD, truncated [ 224.774456][T13765] loop6: p1 start 926365495 is beyond EOD, truncated [ 224.838044][T13778] binder: Unknown parameter '' [ 224.840230][T13742] cgroup: fork rejected by pids controller in /syz1 [ 224.842084][T13778] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 224.882621][T13792] binder: 13791:13792 ioctl c0306201 200000000180 returned -14 [ 224.933067][T13795] netlink: 'syz.3.2540': attribute type 4 has an invalid length. [ 224.935447][T13795] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2540'. [ 224.969042][T13798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2541'. [ 224.975076][T13799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2541'. [ 225.027907][T13804] fuse: Unknown parameter '' [ 225.110657][T13811] loop6: detected capacity change from 0 to 7 [ 225.115921][T11168] Dev loop6: unable to read RDB block 7 [ 225.118420][T11168] loop6: AHDI p1 p2 [ 225.120235][T11168] loop6: partition table partially beyond EOD, truncated [ 225.123162][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 225.126355][T13811] Dev loop6: unable to read RDB block 7 [ 225.128653][T13811] loop6: AHDI p1 p2 [ 225.130190][T13811] loop6: partition table partially beyond EOD, truncated [ 225.133424][T13811] loop6: p1 start 926365495 is beyond EOD, truncated [ 225.263768][T13822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2548'. [ 225.463915][ T3234] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 225.519779][T13829] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 225.533907][T13829] cramfs: wrong magic [ 225.624335][ T3234] usb 7-1: Using ep0 maxpacket: 16 [ 225.627255][ T3234] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 225.632689][ T3234] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 225.635566][ T3234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.638068][ T3234] usb 7-1: Product: syz [ 225.639822][ T3234] usb 7-1: Manufacturer: syz [ 225.641304][ T3234] usb 7-1: SerialNumber: syz [ 225.654951][ T3234] usb 7-1: config 0 descriptor?? [ 225.658322][ T3234] hub 7-1:0.0: bad descriptor, ignoring hub [ 225.660221][ T3234] hub 7-1:0.0: probe with driver hub failed with error -5 [ 225.663883][ T3234] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input29 [ 225.798362][T13863] tmpfs: Unknown parameter 'aЧ9yf' [ 225.815815][T13867] binder: 13866:13867 ioctl c0306201 200000000180 returned -14 [ 225.840675][T13874] loop6: detected capacity change from 0 to 7 [ 225.843754][T11168] Dev loop6: unable to read RDB block 7 [ 225.845780][T11168] loop6: AHDI p1 p2 [ 225.847043][T11168] loop6: partition table partially beyond EOD, truncated [ 225.850004][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 225.853285][T13876] netlink: 'syz.3.2560': attribute type 1 has an invalid length. [ 225.858874][T13874] Dev loop6: unable to read RDB block 7 [ 225.865946][T13876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.876768][T13874] loop6: AHDI p1 p2 [ 225.878449][T13874] loop6: partition table partially beyond EOD, truncated [ 225.882904][ T40] audit: type=1400 audit(222.635:765): avc: denied { write } for pid=13812 comm="syz.2.2546" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 225.884057][T13874] loop6: p1 start 926365495 is beyond EOD, truncated [ 225.923108][T13876] bond1: (slave veth3): Enslaving as an active interface with a down link [ 225.932165][T13876] bond1: (slave dummy0): making interface the new active one [ 225.935131][T13876] dummy0: entered promiscuous mode [ 225.937270][T13876] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 225.963555][ T40] audit: type=1400 audit(222.701:766): avc: denied { nosuid_transition } for pid=13881 comm="syz.4.2562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 225.970195][ T40] audit: type=1400 audit(222.701:767): avc: denied { transition } for pid=13881 comm="syz.4.2562" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 225.979971][ T40] audit: type=1400 audit(222.701:768): avc: denied { entrypoint } for pid=13881 comm="syz.4.2562" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=26 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 225.989250][ T40] audit: type=1400 audit(222.701:769): avc: denied { share } for pid=13881 comm="syz.4.2562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 225.995304][ T40] audit: type=1400 audit(222.701:770): avc: denied { noatsecure } for pid=13881 comm="syz.4.2562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 226.144787][T13897] loop6: detected capacity change from 0 to 524287999 [ 226.147676][T11168] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.150721][T11168] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.153247][T11168] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.155817][T11168] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.158371][T11168] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.161205][T11168] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.163663][T11168] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.166125][T11168] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.168559][T11168] ldm_validate_partition_table(): Disk read failed. [ 226.170851][T11168] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.171095][T13466] usb 7-1: USB disconnect, device number 21 [ 226.173331][T11168] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.177614][T11168] Dev loop6: unable to read RDB block 0 [ 226.179757][T11168] loop6: unable to read partition table [ 226.184602][T13897] ldm_validate_partition_table(): Disk read failed. [ 226.187971][T13897] Dev loop6: unable to read RDB block 0 [ 226.192543][T13897] loop6: unable to read partition table [ 226.195236][T13897] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 226.234205][ T3234] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 226.243281][ T5347] ldm_validate_partition_table(): Disk read failed. [ 226.245653][ T5347] Dev loop6: unable to read RDB block 0 [ 226.247667][ T5347] loop6: unable to read partition table [ 226.385848][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 226.388782][ T60] bond0: (slave bond_slave_0): interface is now down [ 226.389676][T13899] netlink: 'syz.4.2567': attribute type 10 has an invalid length. [ 226.391021][ T60] bond0: (slave bond_slave_1): interface is now down [ 226.396002][ T60] bond0: (slave wlan1): interface is now down [ 226.404713][ T3234] usb 8-1: Using ep0 maxpacket: 8 [ 226.409173][ T3234] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.413636][ T3234] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 226.418035][ T3234] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.424225][ T3234] usb 8-1: config 0 descriptor?? [ 226.480225][T13903] binder: 13902:13903 ioctl c0306201 200000000180 returned -14 [ 226.511779][ T5947] Bluetooth: hci2: command tx timeout [ 226.529152][T13905] xt_l2tp: missing protocol rule (udp|l2tpip) [ 226.532415][T13905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2570'. [ 226.645544][ T3234] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 226.775244][T13912] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2573'. [ 226.815340][T13916] nft_compat: unsupported protocol 0 [ 226.860344][T13466] usb 8-1: USB disconnect, device number 41 [ 226.872593][T13919] SELinux: ebitmap: truncated map [ 226.878079][T13919] SELinux: failed to load policy [ 226.883606][T13919] fuse: Unknown parameter '' [ 226.940446][T13923] binder: 13922:13923 ioctl 4018620d 0 returned -22 [ 226.943119][T13923] binder: 13922:13923 ioctl c0306201 200000000180 returned -14 [ 227.023022][T13932] loop6: detected capacity change from 0 to 7 [ 227.027504][T13932] Dev loop6: unable to read RDB block 7 [ 227.029710][T13932] loop6: AHDI p1 p2 [ 227.031250][T13932] loop6: partition table partially beyond EOD, truncated [ 227.034055][T13932] loop6: p1 start 926365495 is beyond EOD, truncated [ 227.105470][T13940] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 227.119794][T13944] tmpfs: Unknown parameter '' [ 227.128966][T13944] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 227.131163][T13944] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.136873][T13944] vhci_hcd vhci_hcd.0: Device attached [ 227.163893][T13949] bridge_slave_0: left allmulticast mode [ 227.166716][T13949] bridge_slave_0: left promiscuous mode [ 227.169060][T13949] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.183786][T13949] bridge_slave_1: left allmulticast mode [ 227.187021][T13949] bridge_slave_1: left promiscuous mode [ 227.188913][T13949] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.193621][T13949] bond0: (slave bond_slave_1): Releasing backup interface [ 227.208269][T13949] team0: Port device team_slave_0 removed [ 227.220096][T13949] team0: Port device team_slave_1 removed [ 227.222530][T13949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.224916][T13949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.228882][T13949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.231292][T13949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.239649][T13949] bond0: (slave wlan1): Releasing backup interface [ 227.346263][ T24] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 227.406967][T13963] loop6: detected capacity change from 0 to 7 [ 227.409699][ T3234] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 227.412119][ T7361] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 227.415643][T11168] Dev loop6: unable to read RDB block 7 [ 227.417481][T11168] loop6: AHDI p1 p2 [ 227.418795][T11168] loop6: partition table partially beyond EOD, truncated [ 227.421312][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 227.424485][T13963] Dev loop6: unable to read RDB block 7 [ 227.426339][T13963] loop6: AHDI p1 p2 [ 227.427629][T13963] loop6: partition table partially beyond EOD, truncated [ 227.430191][T13963] loop6: p1 start 926365495 is beyond EOD, truncated [ 227.458691][T13907] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.498187][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2592'. [ 227.525297][T13974] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2594'. [ 227.530532][ T24] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 227.533353][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.536133][ T24] usb 8-1: Product: syz [ 227.537659][ T24] usb 8-1: Manufacturer: syz [ 227.541231][ T24] usb 8-1: SerialNumber: syz [ 227.550621][ T24] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 227.564824][T13976] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.568711][T13976] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.592891][ T7361] usb 7-1: config 0 has no interfaces? [ 227.594641][ T7361] usb 7-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 227.597526][ T7361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.601685][ T7361] usb 7-1: config 0 descriptor?? [ 227.785236][T13982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2596'. [ 227.820883][T13946] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 227.823204][ T12] vhci_hcd: stop threads [ 227.824563][ T12] vhci_hcd: release socket [ 227.826512][ T7361] usb 7-1: USB disconnect, device number 22 [ 227.827352][ T12] vhci_hcd: disconnect device [ 227.831174][T13992] loop6: detected capacity change from 0 to 7 [ 227.833880][T13992] Dev loop6: unable to read RDB block 7 [ 227.835709][T13992] loop6: AHDI p1 p2 [ 227.836978][T13992] loop6: partition table partially beyond EOD, truncated [ 227.839800][T13992] loop6: p1 start 926365495 is beyond EOD, truncated [ 228.407149][ T60] bond0: (slave bond_slave_0): interface is now down [ 228.409382][ T60] bond0: (slave bond_slave_1): interface is now down [ 228.411540][ T60] bond0: (slave wlan1): interface is now down [ 228.418949][ T60] bond0: now running without any active interface! [ 228.516498][T14015] program syz.2.2609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.520506][T14018] loop6: detected capacity change from 0 to 7 [ 228.533194][T11168] Dev loop6: unable to read RDB block 7 [ 228.541613][T11168] loop6: AHDI p1 p2 [ 228.545066][T11168] loop6: partition table partially beyond EOD, truncated [ 228.547479][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 228.552895][T14018] Dev loop6: unable to read RDB block 7 [ 228.554813][T14018] loop6: AHDI p1 p2 [ 228.556081][T14018] loop6: partition table partially beyond EOD, truncated [ 228.558336][T14018] loop6: p1 start 926365495 is beyond EOD, truncated [ 228.603605][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 228.603617][ T40] audit: type=1400 audit(225.170:776): avc: denied { remove_name } for pid=14026 comm="syz.2.2614" name="file1" dev="9p" ino=36047806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.607698][T14029] tmpfs: Unknown parameter '' [ 228.613705][ T40] audit: type=1400 audit(225.170:777): avc: denied { unlink } for pid=14026 comm="syz.2.2614" name="file1" dev="9p" ino=36047806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 228.620728][T14031] netlink: 'syz.1.2616': attribute type 2 has an invalid length. [ 228.624099][T14031] netlink: 46 bytes leftover after parsing attributes in process `syz.1.2616'. [ 228.627358][ T40] audit: type=1400 audit(225.198:778): avc: denied { link } for pid=14026 comm="syz.2.2614" name="file0" dev="9p" ino=36047776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 228.629464][T14029] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 228.630624][T14031] block nbd1: not configured, cannot reconfigure [ 228.638225][T14029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.642811][T14029] vhci_hcd vhci_hcd.0: Device attached [ 228.746575][ T5947] Bluetooth: hci2: command 0x0405 tx timeout [ 228.788349][ T40] audit: type=1400 audit(225.348:779): avc: denied { read } for pid=14044 comm="syz.1.2621" path="socket:[48303]" dev="sockfs" ino=48303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 228.797864][T14047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2619'. [ 228.907554][ T6306] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 228.909926][ T7361] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 228.928325][T14053] loop6: detected capacity change from 0 to 7 [ 228.939707][T14053] Dev loop6: unable to read RDB block 7 [ 228.942715][T14053] loop6: AHDI p1 p2 [ 228.944010][T14053] loop6: partition table partially beyond EOD, truncated [ 228.946300][T14053] loop6: p1 start 926365495 is beyond EOD, truncated [ 229.089535][ T7361] usb 9-1: config 0 has no interfaces? [ 229.091306][ T7361] usb 9-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 229.095143][ T7361] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.099324][ T7361] usb 9-1: config 0 descriptor?? [ 229.200707][ T5977] usb 8-1: USB disconnect, device number 42 [ 229.317270][T14034] usb 45-1: recv xbuf, 0 [ 229.319676][ T1151] vhci_hcd: stop threads [ 229.321177][ T1151] vhci_hcd: release socket [ 229.322855][ T1151] vhci_hcd: disconnect device [ 229.326954][ T7361] usb 9-1: USB disconnect, device number 16 [ 229.388165][ T6306] vhci_hcd: vhci_device speed not set [ 229.399819][T14069] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2628'. [ 229.402851][T14069] 0XD: renamed from gretap0 (while UP) [ 229.407642][T14069] 0XD: entered allmulticast mode [ 229.412996][T14069] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 229.425201][ T40] audit: type=1400 audit(225.947:780): avc: denied { listen } for pid=14081 comm="syz.2.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.466991][T14085] loop6: detected capacity change from 0 to 7 [ 229.469882][T11168] Dev loop6: unable to read RDB block 7 [ 229.471930][T11168] loop6: AHDI p1 p2 [ 229.474686][T11168] loop6: partition table partially beyond EOD, truncated [ 229.477227][T11168] loop6: p1 start 926365495 is beyond EOD, truncated [ 229.481251][T14085] Dev loop6: unable to read RDB block 7 [ 229.483056][T14085] loop6: AHDI p1 p2 [ 229.486332][T14085] loop6: partition table partially beyond EOD, truncated [ 229.488819][T14085] loop6: p1 start 926365495 is beyond EOD, truncated [ 229.554109][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'. [ 229.612077][ T40] audit: type=1400 audit(226.124:781): avc: denied { map } for pid=14098 comm="syz.3.2636" path="socket:[46080]" dev="sockfs" ino=46080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.982384][T14117] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 229.990175][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2642'. [ 230.488491][T13466] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 230.527103][ T40] audit: type=1400 audit(226.976:782): avc: denied { setopt } for pid=14123 comm="syz.3.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 230.662870][T13466] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 230.665782][T13466] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.668365][T13466] usb 9-1: Product: syz [ 230.669757][T13466] usb 9-1: Manufacturer: syz [ 230.672328][T13466] usb 9-1: SerialNumber: syz [ 230.677698][T13466] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 230.775427][T14145] netlink: 'syz.1.2650': attribute type 1 has an invalid length. [ 230.778814][T14145] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2650'. [ 230.999594][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2654'. [ 231.002586][T14157] netlink: 'syz.2.2654': attribute type 30 has an invalid length. [ 231.055217][T14158] netlink: 'syz.2.2654': attribute type 1 has an invalid length. [ 231.770339][ T40] audit: type=1326 audit(228.135:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.2.2654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576498e969 code=0x7fc00000 [ 231.824678][T14169] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !fIZE,=$)%ĂL [ 232.422766][T14192] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 232.484866][T14195] netlink: 'syz.2.2662': attribute type 12 has an invalid length. [ 232.491658][T14195] random: crng reseeded on system resumption [ 232.878654][ T5991] IPVS: starting estimator thread 0... [ 232.880441][T14204] IPVS: set_ctl: invalid protocol: 51 172.30.1.4:20001 [ 232.903110][T14204] binder: 14203:14204 ioctl c0306201 2000000001c0 returned -14 [ 232.915297][ T3234] vhci_hcd: vhci_device speed not set [ 232.969218][T14205] IPVS: using max 45 ests per chain, 108000 per kthread [ 233.386764][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.419461][ T52] usb 9-1: USB disconnect, device number 17 [ 233.441009][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.446841][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.450405][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.459767][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.461675][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.463002][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.480431][T14221] dvmrp1: entered allmulticast mode [ 233.528572][T14225] overlayfs: empty lowerdir [ 233.551368][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.603501][T14232] overlay: Unknown parameter 'subj_role' [ 233.615987][T14218] chnl_net:caif_netlink_parms(): no params data found [ 233.669934][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.677182][T14241] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 233.721840][T14218] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.724335][T14218] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.726727][T14218] bridge_slave_0: entered allmulticast mode [ 233.731825][T14218] bridge_slave_0: entered promiscuous mode [ 233.735174][T14218] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.737547][T14218] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.741711][T14218] bridge_slave_1: entered allmulticast mode [ 233.744467][T14218] bridge_slave_1: entered promiscuous mode [ 233.770155][T14252] loop6: detected capacity change from 0 to 7 [ 233.773423][T14252] Dev loop6: unable to read RDB block 7 [ 233.775212][T14252] loop6: AHDI p1 p2 [ 233.776504][T14252] loop6: partition table partially beyond EOD, truncated [ 233.780524][T14252] loop6: p1 start 926365495 is beyond EOD, truncated [ 233.798402][T14218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.806808][T14218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.851111][T14218] team0: Port device team_slave_0 added [ 233.875400][T14218] team0: Port device team_slave_1 added [ 233.901640][T14259] netlink: 'syz.4.2683': attribute type 64 has an invalid length. [ 233.904754][T14259] netlink: 'syz.4.2683': attribute type 4 has an invalid length. [ 233.907675][T14259] __nla_validate_parse: 5 callbacks suppressed [ 233.907688][T14259] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2683'. [ 233.915096][T14218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.917327][T14218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.917361][T14218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.918235][T14218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.918243][T14218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.918264][T14218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.975200][ T12] bridge_slave_1: left allmulticast mode [ 233.975236][ T12] bridge_slave_1: left promiscuous mode [ 233.976527][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.987728][ T12] bridge_slave_0: left allmulticast mode [ 233.987742][ T12] bridge_slave_0: left promiscuous mode [ 233.987844][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.236544][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.240959][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.245706][ T12] bond0 (unregistering): Released all slaves [ 234.316793][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 234.321515][ T12] bond1 (unregistering): (slave dummy0): Releasing active interface [ 234.326649][ T12] bond1 (unregistering): Released all slaves [ 234.336030][T14218] hsr_slave_0: entered promiscuous mode [ 234.338536][T14218] hsr_slave_1: entered promiscuous mode [ 234.340715][T14218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.344124][T14218] Cannot create hsr debugfs directory [ 234.520880][T14218] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.559873][T14218] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.563842][T14278] tmpfs: Unknown parameter '' [ 234.576733][T14278] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 234.578847][T14278] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 234.583916][T14278] vhci_hcd vhci_hcd.0: Device attached [ 234.584941][T14218] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 234.599408][T14218] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.673061][ T12] hsr_slave_0: left promiscuous mode [ 234.675876][ T12] hsr_slave_1: left promiscuous mode [ 234.678332][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.682075][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.692496][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.694966][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.719449][ T12] veth1_macvtap: left promiscuous mode [ 234.721260][ T12] veth0_macvtap: left promiscuous mode [ 234.724894][ T12] veth1_vlan: left promiscuous mode [ 234.726614][ T12] veth0_vlan: left promiscuous mode [ 234.842270][ T61] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 234.844619][ T5991] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 235.023032][ T5991] usb 7-1: config 0 has no interfaces? [ 235.024791][ T5991] usb 7-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 235.027620][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.043705][ T5991] usb 7-1: config 0 descriptor?? [ 235.051391][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2685'. [ 235.264708][T14281] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 235.265611][ T5991] usb 7-1: USB disconnect, device number 23 [ 235.267034][ T1151] vhci_hcd: stop threads [ 235.273033][ T1151] vhci_hcd: release socket [ 235.275192][ T1151] vhci_hcd: disconnect device [ 235.443408][ T12] team0 (unregistering): Port device team_slave_1 removed [ 235.519522][ T12] team0 (unregistering): Port device team_slave_0 removed [ 235.676619][ T5947] Bluetooth: hci2: command tx timeout [ 236.061753][T14218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.107954][T14218] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.116207][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.118454][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.131205][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.134076][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.207233][T14218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.352036][T14218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.402262][T14328] tmpfs: Unknown parameter '' [ 236.410336][T14328] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 236.412411][T14328] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.415928][T14328] vhci_hcd vhci_hcd.0: Device attached [ 236.548182][T14218] veth0_vlan: entered promiscuous mode [ 236.549658][T14341] xt_hashlimit: size too large, truncated to 1048576 [ 236.559419][T14218] veth1_vlan: entered promiscuous mode [ 236.567599][ T12] IPVS: stop unused estimator thread 0... [ 236.581831][T14218] veth0_macvtap: entered promiscuous mode [ 236.586315][T14218] veth1_macvtap: entered promiscuous mode [ 236.602625][T14218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.611283][T14344] program syz.4.2697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.614903][T14218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.624044][T14344] pimreg: entered allmulticast mode [ 236.628911][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2697'. [ 236.630590][T14218] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.634653][T14218] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.649296][T14218] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.653127][T14218] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.667802][ T837] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 236.695179][ T9743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.697617][ T9743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.713618][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.721107][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.734101][T14218] ================================================================== [ 236.736598][T14218] BUG: KASAN: slab-use-after-free in binder_add_device+0xa4/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 236.739070][T14218] Write of size 8 at addr ffff88801392d008 by task syz-executor/14218 [ 236.742593][T14218] [ 236.744017][T14218] CPU: 0 UID: 0 PID: 14218 Comm: syz-executor Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 236.744033][T14218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 236.744040][T14218] Call Trace: [ 236.744045][T14218] [ 236.744050][T14218] dump_stack_lvl+0x116/0x1f0 [ 236.744068][T14218] print_report+0xcd/0x680 [ 236.744082][T14218] ? __virt_addr_valid+0x81/0x610 [ 236.744099][T14218] ? __phys_addr+0xe8/0x180 [ 236.744117][T14218] ? binder_add_device+0xa4/0xb0 [ 236.744134][T14218] kasan_report+0xe0/0x110 [ 236.744147][T14218] ? binder_add_device+0xa4/0xb0 [ 236.744166][T14218] binder_add_device+0xa4/0xb0 [ 236.744183][T14218] binderfs_binder_device_create.isra.0+0xa03/0xc30 [ 236.744200][T14218] binderfs_fill_super+0x8d4/0x1360 [ 236.744214][T14218] ? __pfx_binderfs_fill_super+0x10/0x10 [ 236.744233][T14218] ? shrinker_register+0x1a8/0x260 [ 236.744247][T14218] ? sget_fc+0x808/0xc20 [ 236.744259][T14218] ? __pfx_set_anon_super_fc+0x10/0x10 [ 236.744270][T14218] ? __pfx_binderfs_fill_super+0x10/0x10 [ 236.744282][T14218] get_tree_nodev+0xdd/0x190 [ 236.744294][T14218] vfs_get_tree+0x8e/0x340 [ 236.744311][T14218] path_mount+0x14d4/0x1f70 [ 236.744326][T14218] ? kmem_cache_free+0x2d1/0x4d0 [ 236.744338][T14218] ? __pfx_path_mount+0x10/0x10 [ 236.744354][T14218] ? putname+0x154/0x1a0 [ 236.744370][T14218] __x64_sys_mount+0x28d/0x310 [ 236.744385][T14218] ? __pfx___x64_sys_mount+0x10/0x10 [ 236.744402][T14218] do_syscall_64+0xcd/0x4c0 [ 236.744418][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.744429][T14218] RIP: 0033:0x7f0651b9010a [ 236.744439][T14218] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.744450][T14218] RSP: 002b:00007ffed1e7d558 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.744461][T14218] RAX: ffffffffffffffda RBX: 00007f0651c10e74 RCX: 00007f0651b9010a [ 236.744468][T14218] RDX: 00007f0651c208cb RSI: 00007f0651c10e74 RDI: 00007f0651c208cb [ 236.744475][T14218] RBP: 00007f0651c110bd R08: 0000000000000000 R09: 00007f0651db6738 [ 236.744482][T14218] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0651bec1a8 [ 236.744489][T14218] R13: 00007f0651bec180 R14: 0000000000000009 R15: 0000000000000000 [ 236.744500][T14218] [ 236.744504][T14218] [ 236.814511][T14218] Allocated by task 14306: [ 236.815886][T14218] kasan_save_stack+0x33/0x60 [ 236.817313][T14218] kasan_save_track+0x14/0x30 [ 236.818793][T14218] __kasan_kmalloc+0xaa/0xb0 [ 236.820228][T14218] alloc_bprm+0x86/0x6f0 [ 236.821537][T14218] kernel_execve+0xb0/0x3b0 [ 236.822937][T14218] call_usermodehelper_exec_async+0x255/0x4c0 [ 236.824776][T14218] ret_from_fork+0x5d7/0x6f0 [ 236.826225][T14218] ret_from_fork_asm+0x1a/0x30 [ 236.827735][T14218] [ 236.828465][T14218] Freed by task 14306: [ 236.829701][T14218] kasan_save_stack+0x33/0x60 [ 236.831114][T14218] kasan_save_track+0x14/0x30 [ 236.832595][T14218] kasan_save_free_info+0x3b/0x60 [ 236.834116][T14218] __kasan_slab_free+0x51/0x70 [ 236.835607][T14218] kfree+0x2b4/0x4d0 [ 236.836808][T14218] kernel_execve+0x2fe/0x3b0 [ 236.838213][T14218] call_usermodehelper_exec_async+0x255/0x4c0 [ 236.840062][T14218] ret_from_fork+0x5d7/0x6f0 [ 236.841492][T14218] ret_from_fork_asm+0x1a/0x30 [ 236.842974][T14218] [ 236.843753][T14218] The buggy address belongs to the object at ffff88801392d000 [ 236.843753][T14218] which belongs to the cache kmalloc-512 of size 512 [ 236.847939][T14218] The buggy address is located 8 bytes inside of [ 236.847939][T14218] freed 512-byte region [ffff88801392d000, ffff88801392d200) [ 236.851946][T14218] [ 236.852701][T14218] The buggy address belongs to the physical page: [ 236.854641][T14218] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1392c [ 236.857292][T14218] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 236.859782][T14218] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 236.862117][T14218] page_type: f5(slab) [ 236.863378][T14218] raw: 00fff00000000040 ffff88801b842c80 ffffea0000d27100 dead000000000002 [ 236.865933][T14218] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 236.868530][T14218] head: 00fff00000000040 ffff88801b842c80 ffffea0000d27100 dead000000000002 [ 236.871120][T14218] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 236.873681][T14218] head: 00fff00000000002 ffffea00004e4b01 00000000ffffffff 00000000ffffffff [ 236.876298][T14218] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 236.878858][T14218] page dumped because: kasan: bad access detected [ 236.880790][T14218] page_owner tracks the page as allocated [ 236.882467][T14218] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11273, tgid 11272 (syz.4.1778), ts 166589860644, free_ts 165938744372 [ 236.888786][T14218] post_alloc_hook+0x1c0/0x230 [ 236.890231][T14218] get_page_from_freelist+0x1321/0x3890 [ 236.891910][T14218] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 236.893723][T14218] alloc_pages_mpol+0x1fb/0x550 [ 236.895164][T14218] new_slab+0x23b/0x330 [ 236.896446][T14218] ___slab_alloc+0xd9c/0x1940 [ 236.897879][T14218] __slab_alloc.constprop.0+0x56/0xb0 [ 236.899530][T14218] __kmalloc_noprof+0x2f2/0x510 [ 236.901021][T14218] copy_splice_read+0x1a8/0xba0 [ 236.902524][T14218] do_splice_read+0x2bd/0x370 [ 236.904052][T14218] splice_direct_to_actor+0x2a1/0xa30 [ 236.905718][T14218] do_splice_direct+0x174/0x240 [ 236.907196][T14218] do_sendfile+0xb06/0xe50 [ 236.908583][T14218] __x64_sys_sendfile64+0x1d8/0x220 [ 236.910150][T14218] do_syscall_64+0xcd/0x4c0 [ 236.911611][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.913450][T14218] page last free pid 11183 tgid 11183 stack trace: [ 236.915431][T14218] __free_frozen_pages+0x7fe/0x1180 [ 236.917032][T14218] vfree+0x1fd/0xb50 [ 236.918263][T14218] vb2_vmalloc_put+0x7b/0xc0 [ 236.919674][T14218] __vb2_buf_mem_free+0x15a/0x2d0 [ 236.921231][T14218] __vb2_queue_free+0x7ee/0xa30 [ 236.922743][T14218] vb2_core_queue_release+0x70/0x190 [ 236.924406][T14218] v4l2_m2m_ctx_release+0x1e/0x40 [ 236.925957][T14218] vicodec_release+0x9c/0x150 [ 236.927443][T14218] v4l2_release+0x232/0x460 [ 236.928862][T14218] __fput+0x402/0xb70 [ 236.930093][T14218] task_work_run+0x14d/0x240 [ 236.931556][T14218] exit_to_user_mode_loop+0xeb/0x110 [ 236.933161][T14218] do_syscall_64+0x3f6/0x4c0 [ 236.934564][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.936363][T14218] [ 236.937106][T14218] Memory state around the buggy address: [ 236.938808][T14218] ffff88801392cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 236.941292][T14218] ffff88801392cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 236.943729][T14218] >ffff88801392d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.946159][T14218] ^ [ 236.947491][T14218] ffff88801392d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.949868][T14218] ffff88801392d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.952367][T14218] ================================================================== [ 236.961246][T14218] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 236.963688][T14218] CPU: 0 UID: 0 PID: 14218 Comm: syz-executor Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 236.967208][T14218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 236.970453][T14218] Call Trace: [ 236.971490][T14218] [ 236.972387][T14218] dump_stack_lvl+0x3d/0x1f0 [ 236.973844][T14218] panic+0x71c/0x800 [ 236.975040][T14218] ? __pfx_panic+0x10/0x10 [ 236.976423][T14218] ? irqentry_exit+0x3b/0x90 [ 236.977856][T14218] ? lockdep_hardirqs_on+0x7c/0x110 [ 236.979455][T14218] ? preempt_schedule_thunk+0x16/0x30 [ 236.981089][T14218] ? binder_add_device+0xa4/0xb0 [ 236.982609][T14218] ? preempt_schedule_common+0x44/0xc0 [ 236.984285][T14218] ? check_panic_on_warn+0x1f/0xb0 [ 236.985882][T14218] ? binder_add_device+0xa4/0xb0 [ 236.987420][T14218] check_panic_on_warn+0xab/0xb0 [ 236.988942][T14218] end_report+0x107/0x170 [ 236.990249][T14218] kasan_report+0xee/0x110 [ 236.991630][T14218] ? binder_add_device+0xa4/0xb0 [ 236.993170][T14218] binder_add_device+0xa4/0xb0 [ 236.994672][T14218] binderfs_binder_device_create.isra.0+0xa03/0xc30 [ 236.996709][T14218] binderfs_fill_super+0x8d4/0x1360 [ 236.998308][T14218] ? __pfx_binderfs_fill_super+0x10/0x10 [ 237.000032][T14218] ? shrinker_register+0x1a8/0x260 [ 237.001648][T14218] ? sget_fc+0x808/0xc20 [ 237.002992][T14218] ? __pfx_set_anon_super_fc+0x10/0x10 [ 237.004648][T14218] ? __pfx_binderfs_fill_super+0x10/0x10 [ 237.006338][T14218] get_tree_nodev+0xdd/0x190 [ 237.007757][T14218] vfs_get_tree+0x8e/0x340 [ 237.009104][T14218] path_mount+0x14d4/0x1f70 [ 237.010559][T14218] ? kmem_cache_free+0x2d1/0x4d0 [ 237.012089][T14218] ? __pfx_path_mount+0x10/0x10 [ 237.013570][T14218] ? putname+0x154/0x1a0 [ 237.014868][T14218] __x64_sys_mount+0x28d/0x310 [ 237.016356][T14218] ? __pfx___x64_sys_mount+0x10/0x10 [ 237.018016][T14218] do_syscall_64+0xcd/0x4c0 [ 237.019431][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.021197][T14218] RIP: 0033:0x7f0651b9010a [ 237.022509][T14218] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.028126][T14218] RSP: 002b:00007ffed1e7d558 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.030562][T14218] RAX: ffffffffffffffda RBX: 00007f0651c10e74 RCX: 00007f0651b9010a [ 237.032932][T14218] RDX: 00007f0651c208cb RSI: 00007f0651c10e74 RDI: 00007f0651c208cb [ 237.035250][T14218] RBP: 00007f0651c110bd R08: 0000000000000000 R09: 00007f0651db6738 [ 237.037696][T14218] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0651bec1a8 [ 237.040293][T14218] R13: 00007f0651bec180 R14: 0000000000000009 R15: 0000000000000000 [ 237.042741][T14218] [ 237.044347][T14218] Kernel Offset: disabled [ 237.045710][T14218] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:43:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8559a465 RDI=ffffffff9b0772e0 RBP=ffffffff9b0772a0 RSP=ffffc900045af508 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3933313038387257 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b0772a0 R15=ffffffff8559a400 RIP=ffffffff8559a48f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555594515500 ffffffff 00c00000 GS =0000 ffff8880d6765000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fce182f9286 CR3=000000002b676000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000000000d8 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c0c0c0 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed1e7d570 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed1e7d526 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed1e7d526 00007ffed1e7d52c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0651c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0651c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0651c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0651c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0651c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0651c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2029706d742d7a79 73287269646b6d00 706d742d7a79732f 2e00303030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 050c554851085f5c 560d574c414e4800 554851085f5c560a 0b00151515151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffffff817a19fa RCX=ffffc9000434f4ec RDX=1ffff92000869ebc RSI=ffffffff8dde3c89 RDI=ffffffff817a19fa RBP=ffffc9000434f5e0 RSP=ffffc9000434f560 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000010c58 R12=ffffffff81a76580 R13=ffffc9000434f658 R14=0000000000000000 R15=ffff88802bb9c880 RIP=ffffffff81851fa2 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6865000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fce182f9286 CR3=0000000058112000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4c0c004 Opmask01=0000000000000000 Opmask02=0000000011000303 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002f3a6e69622f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002a2e 2573257325003a25 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff0f0e0d0c0b0a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056105c237ce8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f3a6e69622f3a6e 6962732f7273752f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 00007fce181f442d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056105c229520 000056105c229520 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056105c2344d0 000056105c2272c0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056105c00662d 000056105c237ce8 000056105c237d08 665f65676e006d72 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056105c00662d 000056105c237ce8 000056105c237d08 665f65676e006d72 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056105c004902 000056105c0c53c7 000056105c0c5208 495f4a484100425d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056105c2340b8 0000000000000000 000000000000000f 000056105c00873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056105c22e918 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea00019706c0 RCX=ffffffff81f7d816 RDX=ffff8880292a2440 RSI=0000000000000003 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003f6f2e8 R8 =0000000000000005 R9 =0000000000000003 R10=0000000000000002 R11=0000000000000001 R12=ffff88801ce90048 R13=0000000000000002 R14=0000000000000002 R15=00fff00000020901 RIP=ffffffff8b805320 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6965000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007eff95ae7d60 CR3=000000002f7fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff94f836a3 00007eff94f836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe663de320 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555810b0e7 000055555810b0a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555581057e9 0000555558105440 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000806060103f6 0010000fffffffff ffff040010000008 00029ef808000100 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001080001 0000000806060103 f60010000fffffff ffffff0400100000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800029ef8080001 00000208060c010d de08800400000006 1006000000041006 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060172ee00020007 0000000000000000 0000000000000000 0000000001ffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffd70808 d80300040008d403 00040008d0030210 0008c00300080008 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff888029358000 RBX=ffffffff8e5c4d80 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff816ab8c1 RDI=fffffbfff1cb89b0 RBP=0000000000000002 RSP=ffffc9000343f7c0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=00000000000133bb R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81986a34 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555587ad1500 ffffffff 00c00000 GS =0000 ffff8880d6a65000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff90ed7d2d8 CR3=0000000061883000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd657fa1d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff90ec11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff90ec11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff90ec11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff90ec11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff90ec11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff90ec11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000