last executing test programs: 2m15.974860888s ago: executing program 1 (id=410): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="400f07000000d807064a"], 0x0, 0x0, 0x0, 0x0}) 2m14.624962383s ago: executing program 1 (id=439): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'pim6reg\x00', {0x2, 0xe24, @broadcast}}) 2m14.554509104s ago: executing program 1 (id=440): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="d400000010000d0400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b400128009000100766c616e00000000a400028004000380"], 0xd4}}, 0x0) 2m14.554353011s ago: executing program 1 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) 2m14.494851967s ago: executing program 1 (id=442): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r2, 0x0, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) 2m14.274948394s ago: executing program 1 (id=445): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 2m14.230257936s ago: executing program 32 (id=445): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 2m11.032918783s ago: executing program 4 (id=492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) 2m10.945003181s ago: executing program 4 (id=494): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m9.493897427s ago: executing program 4 (id=518): socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800683a00fc010000000000000000000000000000fe800000e4edc7c1d4ee30bcdfe48900001a19bb46908d32fc00aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc0000000000000000000000000000000004040201000000fc0200000000000000000000f7916d00000000fe88000000000000000000000000000188000000000000000401090000000000"], 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x1, {0x0, 0x2a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 2m8.631841431s ago: executing program 4 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0x5c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1101, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) (async) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000800)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@IFLA_EVENT={0x8, 0x2c, 0x4fe4}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@IFLA_EVENT={0x8, 0x2c, 0x4fe4}]}, 0x28}}, 0x0) 2m8.571748198s ago: executing program 4 (id=540): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) syz_clone(0x10010000, &(0x7f0000000140)="17db509222e2228d6896310cbf4aecd00dd34689c4fed77137", 0x19, &(0x7f0000000200), &(0x7f0000000480), &(0x7f00000004c0)="c3da333f9dde64") (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0x0, 0x86b1b18158a7cb82) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) (async) listxattr(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)=""/129, 0x81) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r2, 0x0, 0x5b, 0x40, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000340)={{0x1, 0x10001}, 0x100}) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100), 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0, 0x37, 0x0, 0x0, 0x80000, 0x0, @void, @value}, 0x28) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x800) 2m8.570402683s ago: executing program 4 (id=542): syz_emit_ethernet(0x9a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000feffffffffff86dd60ecff8000641100fc000000000000000000000000000000ff02000000000000000000000000000100004e22006490910200000003000000030000000075713e1f83ac361c8b3ce671d0f6040eeeb5f3d682aa44b5baa75d0e6f30e9f78c045a5d3e3dd45207daba0bf8fb104633251188e45d79a220d115a0774e8a0c3e29a4f380cf106865a0edf7bf2a3d"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004d00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fefbdf350c00000008000300", @ANYRES32=r4, @ANYBLOB="0e0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) splice(r6, 0x0, r8, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="000128bd7000fcdbdf25160000000a001a0008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a00060008021100000000000a001a00ffffffffffff00000a00060008021100000000000a000600ffffffffffff1d000a001a00ffffffffffff00000a000600ffffffffffff0000"], 0x80}, 0x1, 0x0, 0x0, 0x20008080}, 0x1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x2010, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@directio}, {@version_u}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@posixacl}, {@version_L}], [{@euid_lt={'euid<', r1}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '&'}}, {@measure}, {@hash}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'wlan0\x00'}}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}}) syz_emit_ethernet(0x9a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000feffffffffff86dd60ecff8000641100fc000000000000000000000000000000ff02000000000000000000000000000100004e22006490910200000003000000030000000075713e1f83ac361c8b3ce671d0f6040eeeb5f3d682aa44b5baa75d0e6f30e9f78c045a5d3e3dd45207daba0bf8fb104633251188e45d79a220d115a0774e8a0c3e29a4f380cf106865a0edf7bf2a3d"], 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000004d00)={0x2020}, 0x2020) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) (async) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fefbdf350c00000008000300", @ANYRES32=r4, @ANYBLOB="0e0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x4800) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) pipe2$9p(&(0x7f0000000080), 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) (async) splice(r6, 0x0, r8, 0x0, 0x2, 0x0) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="000128bd7000fcdbdf25160000000a001a0008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a00060008021100000000000a001a00ffffffffffff00000a00060008021100000000000a000600ffffffffffff1d000a001a00ffffffffffff00000a000600ffffffffffff0000"], 0x80}, 0x1, 0x0, 0x0, 0x20008080}, 0x1) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x2010, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@directio}, {@version_u}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@posixacl}, {@version_L}], [{@euid_lt={'euid<', r1}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '&'}}, {@measure}, {@hash}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'wlan0\x00'}}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}}) (async) 1m53.27337113s ago: executing program 33 (id=542): syz_emit_ethernet(0x9a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000feffffffffff86dd60ecff8000641100fc000000000000000000000000000000ff02000000000000000000000000000100004e22006490910200000003000000030000000075713e1f83ac361c8b3ce671d0f6040eeeb5f3d682aa44b5baa75d0e6f30e9f78c045a5d3e3dd45207daba0bf8fb104633251188e45d79a220d115a0774e8a0c3e29a4f380cf106865a0edf7bf2a3d"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004d00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fefbdf350c00000008000300", @ANYRES32=r4, @ANYBLOB="0e0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) splice(r6, 0x0, r8, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="000128bd7000fcdbdf25160000000a001a0008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a00060008021100000000000a001a00ffffffffffff00000a00060008021100000000000a000600ffffffffffff1d000a001a00ffffffffffff00000a000600ffffffffffff0000"], 0x80}, 0x1, 0x0, 0x0, 0x20008080}, 0x1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x2010, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@directio}, {@version_u}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@posixacl}, {@version_L}], [{@euid_lt={'euid<', r1}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '&'}}, {@measure}, {@hash}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'wlan0\x00'}}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}}) syz_emit_ethernet(0x9a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000feffffffffff86dd60ecff8000641100fc000000000000000000000000000000ff02000000000000000000000000000100004e22006490910200000003000000030000000075713e1f83ac361c8b3ce671d0f6040eeeb5f3d682aa44b5baa75d0e6f30e9f78c045a5d3e3dd45207daba0bf8fb104633251188e45d79a220d115a0774e8a0c3e29a4f380cf106865a0edf7bf2a3d"], 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000004d00)={0x2020}, 0x2020) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) (async) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fefbdf350c00000008000300", @ANYRES32=r4, @ANYBLOB="0e0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x4800) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) pipe2$9p(&(0x7f0000000080), 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) (async) splice(r6, 0x0, r8, 0x0, 0x2, 0x0) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="000128bd7000fcdbdf25160000000a001a0008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a00060008021100000000000a001a00ffffffffffff00000a00060008021100000000000a000600ffffffffffff1d000a001a00ffffffffffff00000a000600ffffffffffff0000"], 0x80}, 0x1, 0x0, 0x0, 0x20008080}, 0x1) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x2010, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@directio}, {@version_u}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@posixacl}, {@version_L}], [{@euid_lt={'euid<', r1}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '&'}}, {@measure}, {@hash}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'wlan0\x00'}}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}}) (async) 6.252140897s ago: executing program 2 (id=2621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000001f0000000003000000b7370fc32da1d5963d9617c40b649d27035f59cfcb27065efcf510fb4b64be2814fedd0c9260c7a0d2419cc261bf6441a58aacf549f9ee88f8b3226e082fa4d8dde8be7df5fcb5a7bb08eb761112b2f399a4c75cbca117eeb9a30a02fbba9c4ffc32ba3b2a94a2cdecfbc554e77ebbd200c804d4ed283c8cd1a2d0ff538c75128ce46825a1d387202243e6157c4becf96be6b0547449cbfad57e62", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000300)=@v={0x93, 0x3, 0x80, 0x0, @generic}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x7, 0x3, 0x7, 0x0, r8}) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) 6.096181557s ago: executing program 2 (id=2622): syz_clone(0x100, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071025}, &(0x7f0000000140)={0x0, 0x9, 0x8000}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0xa8) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000000)='./file0\x00') 5.154456223s ago: executing program 2 (id=2623): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 4.244476737s ago: executing program 3 (id=2643): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040effff2820"], 0x7) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x5, 0xfffffffffffffe53) 4.244191039s ago: executing program 3 (id=2644): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0xb) mount(&(0x7f00000006c0)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x204001, 0x0) 4.16873928s ago: executing program 3 (id=2645): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x9, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @rand_addr=0x3}}}}) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x5, [{0x4, 0x1, 0x3}, {0x0, 0x1, 0x1}]}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42, 0x0, 0x1, 0xfffffc00, 0x0, @void, @value}, 0x20) syz_io_uring_setup(0xd55, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, &(0x7f0000000280)) 4.167726378s ago: executing program 3 (id=2646): r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x202, 0x0, 0xb, 0x196}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043209aaaaaaaaaa10"], 0xc) r2 = dup(r1) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000002a00)=""/4096) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10, r2, 0xf11ca000) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r8 = syz_io_uring_setup(0x6, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x80003, 0x31a, 0x0, r7}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_io_uring_submit(0x0, r10, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x10, 0x4007, @fd=r3, 0x2, 0x0, 0x0, 0xa, 0x0, {0x1}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x14, 0x30, 0x1, 0x3}, 0x14}}, 0x0) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000080), 0x10) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000140)=0x1, 0xfffffffffffffea3) r13 = io_uring_setup(0x2ff2, &(0x7f0000002240)={0x0, 0x41, 0x4000, 0x3}) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100451f275f963e842ba440000102030109020131290b0700f40904000e0107010208090501022000090afd090582020004fb0302"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xab, 0x5f, 0x5, 0x38, 0x8d}, 0x38, &(0x7f0000000300)=ANY=[@ANYBLOB="050f380001231004f8d9a774ec0c602f5024d816058eb3f53f61b300229f6df6f571af28a1e520171e28316d24d9095141853ba3dfcd1c118ceb22dfe2d918a08b08c9"], 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) io_uring_register$IORING_REGISTER_FILES(r13, 0x2, &(0x7f0000000180)=[r0], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r13, 0x18, &(0x7f0000000000), 0x1) 3.583160126s ago: executing program 0 (id=2648): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0xf, 0x3) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = fanotify_init(0x8, 0x800) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x40) fanotify_mark(r2, 0x41, 0x8000038, r3, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x125d, &(0x7f0000001080)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x7) close(0x3) 3.455884209s ago: executing program 0 (id=2649): r0 = syz_usb_connect_ath9k(0x3, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e609, [{{0x9, 0x2, 0xffffffffffffff84}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 2.179829699s ago: executing program 5 (id=2655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0xffffffffffffffd3, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000834}, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x4f0602, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r4, 0x0, r2}) r5 = getuid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x2) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r6]) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x2148, 0x3b, 0x300, 0x70bd26, 0x25dfdbfc, {0x1a}, [@typed={0x8, 0xb4, 0x0, 0x0, @fd=r2}, @nested={0x2010, 0x3c, 0x0, 0x1, [@typed={0x8, 0x52, 0x0, 0x0, @uid=r5}, @generic="3cf5f44544c6a675d1137840ecfd996aced395bea26387ab035087aa12f062883290d5f84fd2156465bf1ad27313235ae45d6374dc21aadf6e63800840f57638cba971d26c656337aebadcc619d6d0ad04d05fcc5f6426f07c79184dbe0c111b31a932a735e1dca6429dbb068d58f4467d4f16c5c40c3dd00dbd1d6b98efd08aa1a9bee2a898cc69a9a7725024cb83e0c6f2182fafc68d9ea9cca248c4a2c97e389f75d9ac9692b0a505c8f9b539a44de66df34c1fcb34938a7028b5e1272b2eb9c8deb51c60e945ab2e8c142a68db16cbdb55b380d65ebfaed625f05614a7985d2411f1ff638430e64ea8f71a3e1e900f3abf1d9d19f924dfd36418a348741cbecf0eb1f6f5b9d449a6e84f1c247248f6161f731fc1f3181c2ab395b4c68bff2af0f66290cb026cdb92eb517128c88a4a3450bff8531b7341ccc1150b16a57c715aeb50279eeb85d3b892326bb8be7e8ae9ad0eeb1c755b01bdb95d2b2c6ff53796283ffb5d07af8d08152237409fe148ba06b3a53f87b5c1ba4304131a213ec4a49fab51be2cd2968a67bb00b167ae346abbddddccd8063f8815ace90ca9bdbc1fe432e927c7f75e607d7e74dc1789ea18b86c9fccc82244eb9ce61ba5342e9b9759d1b45ddc3b2448a71308cdbb3b4bc94ad10f7f20e7d9d4a9d2a0b23cf569fbaf5438be07eabe0a0ff396a9eca44256d18eb0c7bce841ef80c1d322df0f3ee4a88b4e3158f073266e51c9d37dd4eab8aa2585a0233ff1ebe934140416b29a93e07e745561bde869670d746e91a573686c880b3b812def190e8ce699c5f291fed647043fdaff98a8c5566ad384764e9e1b71302d2b95701497dfab22e9fa737e2ff1d49292466e7afda55bc5963dc9cc55caa383090aff15b2281299c8d2721db35586baa4ec75dc8cb6183774059c27187cccfc9d9a351792a8b176e93258a53d2743410486c11c4f2f82babaad8d1bec44970f18447177ae3c8a86f849321cbfed4e7b720ac000f2293f10ecb17db25c1eddf12ee9f941b44003d8575ce509acf269dce9c98f4c24cd9e249302e7822a5e1bc55db0b76153d4955f272443b72f7d24437862ee0ae935fa7870c67d3230c75782c4e2609cdc4f79f402379cc86dc6866fe6cf6d7eff149df01be28def476054d2150f940d59bd211b07eeca845a6bec906b687c971029cb042ad52c501c7461fd64bad2fdc0689edef042455d501267ea02743c5863b4031e6be01193f14fb3c8aaae70220fb26be6c4c12ebf2fe695a6efe49ceb672350da231307c2dcaba9a22ee5b936f197cdbdb3e6608877401ab7817053c749fe606ff4741c05b42944b99c06437a7a7b5bf1b0f244b55be8a19ebea54c8699e57d2a68400439d0642dd53034c503050544614fb0551d5daedc0ac3c47361fdb4f16b878cc7a0e78abf41e22852a4f80eda47e14f22cbb41386e3bdbc1134dfc7b0ade9113cfc24ce49ec66bc4d8af105db2ea60c5dd703e52533bee92b08b0e41d35304d00e7997c46a656bfa41750a0c7d9e584dd3c447f1f5cbdd41aa301f0660dbf49449b130a33a878ad57fd59e44bab1468b9d4dc6aa6b9edd8e0414f8a3c1cb3dafaf082d5b28b29f35f258d78b91ad00674f11166a414869217d72f8420fd8c37299a483a2117d4defeab784dbd16ccb511de0ae0eb83a1c78e7e8c5b6b513302857bfaa86e454df285eaa7f4204a6968f34cf789bbd6000a81411fd540f22f79be9980fe6baaa8bebbffafac7f46fddb5db78e561fd2c2a51151ba1d3db867ecd76e992aaa79a5f9db060aae2bdb9edf3204c82bcbc4c7a444a2d47ac895f46e6b0f104b239e282e33bf716a4ea8f61c2efbe97249bcf726bc3fb43016c7e024bebaf5e1d6541cb72bdf48b3bd74911557acda02592f70e60cc8e4eec45adccd06089b60457c0c74356d7797508d3103017418374eab0b67b84032545cbb71929bea9c33ec6b9c4e74bc91c97e3e534fa268b60944985a97715f3a2a68d4fd5df6bb526639ba241aa07195509f28eb56bc840634ca8c7f50760ed44352e7ebf8062e526cde4f3d74c44fe72a3a5b947960d58d619271ba894be89eaa128c2b7bfce59baa516585712d91f38bbc05b35d39ed8015a55a8f45a92222ff87a359049d396337f84db87bdc03e987dbf09fc7744fafb4e22ceaf8c025046b1e204fbae4e62e0de467ca0a1ebf1d2f6b79873924c6f7b1eae14474b5cda4ee95b6e9fa55fe5f17487af1bc2ac245f891657736421c69d1eb9a1890192894391f440159b63f3699443b58c38a04d7be36a6aafe99bb1c224303391da914352844399f6eff26426224b56758f2a9450d8303c7cf699ed0c266aa54c75625a1aefeaf8b53373ce4fdaf9b58feaec20002044e59db9a3b3b71c2f68e3ebea161fb5e5e7130f2cf8f39dd433ad74ed0f21fee6750a5cde298f825cc271eb514d92346ed358f69e3ab3fedbc6519afd86057c5e2939f6c0d4b40bed8f89c495c151488483cddf88228a12d79398df1216fe01653586be2a81a4eba9a1446f9685e54d90ef324426ff81df92f1f6fe2671925b687884207dc6fe9e4e5724b4c3e945e219bf246d3a4c5625c93a0ff73647a2435929146b2e3557fe90a20020ee4df82b1f8524fa4dc46144b9093f49623d6bf14bd24335d7e6a015e0bdf9d655f7e9f542b15150da9073fc16b316cdd1a7f83d13a55cd69e9998b1e1cdb2498a6d95bd46328868a5f80a61683627fa69ed85e238fc4e3ff113e3d2d208164c793b1c55de01b60e3369b81eecf6ac4ac3539b1888f6273a50b07dde4e8aaf21780244edb60f9eb906a168463c11a9cdb46dd58619a3dd8f720ecf0d74754d779ea03c92cc340895bbe7484fae2f2980edeadb43c749ff961feb6f32eadcab09cc565c1c7024c5e993514f89ef80ed995e19399b06d8853f9cfd08b8fb3b86a5880122cb2e1038427a286c14f69569fdc3fca5063d5f82c3453ba6abdecd94921966401c78e962f80151b4ecca185fc05f76bba7350bfc79f53912841368953199b8ff4df6377091a8b8c4f692816fe5c828eea18db6439dc045bf12106e0e73a82091439ba35abccc900e1050fd905e6de9f6bc14c996aa2f3306c412f137ba73ad7f7a324e87b2236ab827985e30c689e52e76b07deb41b0058df8427ed13d9e25e7deb28fe6199e76d2c924c419c9b5d8da752a32f638a612d7d2fb88870c17cf5db07eded7514db1e9c8b3046039979ec0717859edbc49630367b8921b03a6fd90b12aea592c9f0389437688518808ee5532817a81a41322e3ac5c617c4ed6e04d987e6fcf236a50ebe48f4cd6843b9d8d80e45816f9273e3449947069ffcf2545299a0b2f0ae5cf4e7e3f77aca6b91777a5520fa79d79a64d6e8e1e77f64644c45c96774023698718a5860a56bbb33c0457c68a67fe58a757034db74623cf1e1b0850b2137dda267b785c105544bb4a63ea6cb01e78f2149e9ec2512e8eac6605064149b3e47e9087cfdd424a99f7efaebb5c75846fa8c37098e5923486be73ea613801dec5e233f1a4bb693ca2e58662fb841f6674a33738b496e71da4375b9620a7a29bac20b07440092372f0e9ada186bccd0ed8753194bbc0d940d964b3f49e833e5821160181e06e64dcde67321629b74224a9dd0ce1d7de25b9d98a4ddc1b32203398558b691fcdf63f20bcbc76674c5bef3132395e6059ccb47524682049b4fcfdc2e07f7dd268cdf147da9a690c7399913ef65502295ada71690d0533e7ca27f94aeec9302cff6bb7c60f7fefcb252ba6ed10723003e11cafeecce5f73267fedce216b4bc4d98a7b51a2064244867d38568a970d24a45e0b27ebb0b66ecd3dfa82fcaa70158b722117df5680d4a024db3b92d81149b286283e452e73d94f2dd072d286dca132a5587fcbfad1578277b9f9f1b91561202b9dce4d386d9feaedecc2314b14789b227458b8e2e07baea4e5cbadf2774873140edf6ae6927d3d5347f22332d693d1a019fdace832aa51c7e80182693f9c45f3fa27b045f10c8a99d6bb320afd616abe7ef6fa264b2f64e3858d9ab2d6e64a854f246f00a6ce53613ad3cf31bf20174ca065c03f4e9a89392a93735e3e7367473d1a8457b5b93f6dcb620427fa878b1ac627a475247b5625bcc1c6dc2758c9e6bba9eb65d185e2af44f113e0c56cf50b790eb7c4a66eb8a7ef7f4105b0e50cdf297743f659dbe4386ee7b37f7ff11b1e2876b8622a0b8ec8b6d21d618158f772f2867b2c9b4a3b152611d304636aa958f1e3710573f042f5acb6fc48f6107da6079471acab5663a3af979c58709a232580e983f377136becd57ce47a35019ead0b5e1e1932458f4ae22cb5b56e741d98beae5e64d14745959a417f5b3c64edf4e985e4eb8e462b6eb34625c1838a53d9be287f1675a94d810121eea59646cfdb98c26cb48956a98d9d4799a1f6d77982b45ebf4a19119b244ec126e97d7b2eac5a36b0ff8936ce6fbb3bf38b7c4459b515248ea6b9502e61b86933d2457769e6b75ecb8236d79e5a5e41197d6e23382cd9c674b2cb454ba1a35814a8c7cb09c052cc543ac842be87841e8639e3d672ecf4a721ea8721157e4c5d4c03a2159fc334b8460ba1a7ad0d5c65bfb063504fb3ef527d7a284e9cf684f818f705a17b7456deb2d1799a702fc4ce21480dcf9af8f8aa9bb3f131d49bfa3a2ea97d14f92e4d6b9939624451656ed2265490c073c0c5ebb59fedd3696a867405c7ff21fb45d603dcd23e217416086dc75bfc6e094574b480b64210bde468a5ff3a23a4b6f0a70b61ecb65f973a43336c031e3269443350a44d2f38fa8e594b3a10ea6aeb87611e4451c75765e31772f4fc7d4f1c48aa061ee3aadafdb6713da53228c13853dcc5697fb244ea041dea733133af35e8ddb28517b19bbb23e7f8f3f064b8a9885148c61b811fa686747389d4c9df17a926130ba3d4527ce81bf77cc4ac4a1eb00679fed6a3c68fe1e15084468b2d2f65ead92e6a87f7cd6acf2341e6092d370a5cdbb84e000bfde1e897d9de63faadf4820da25940314260ae05d3d22e19afc4703ca0f58fd66a4282adb9ae9a993321a505cec445f00d07378b33a8ad88336546411750e929e9907c59796931a879ed29480950c3801720cc04b5be6c791511d9e5612b0ca6b46d7c04fe70d546c936da2affd800214c6db627ada204bce074a35169d792bf83ddbb0e01a9850702a935c08316990ced002497cd30606a4405cd8ef2ad29d549b1fd96ff29bd7b9af67c5cdcdf2800c5eb260c900a77038aceaa49660e6d5b28586b819aeac7dd3a5de61092e02c1d44f5489a5d0750f88b71dfd61395d9a2c138240f83f909050034d4941fb827d128474a1522cabef414e7c4b55b654225512bace8a0b00a415a10d0d18e84934baca13afc40a1a96cbb00c0d7476b9bfeb9c77e353eb6a8a005a46c91262716a455b69fcfb05cc3395d67daec106f6cf3fe696df63c97f8fd3b23b8c3bb409e861f6d8895507e0bac1dcfcbdb1a82eb33afdbeeee4dc28e07720dbb7598535de041afa7aaae7c85ce7516a27464621d5186ba3fdd7c3e62787da55f58f157abfc2a0952c1d500ca814dd9ad1293c2380d23f56decf2ca9f6aafb8ba4d4435bee7bab256fcd023cd736c4202de48923ec03b091e930fae3de147bd1f4f97964668ea82a4a5918454b3649c7c2b625a3792005b673d96da566c403578feb9be70d7593376ca42abbb4159ddfa3e14d2fd11d64532be465679f3ddf19949cc0d00fe493923a0", @generic="b3c9ac5997ec10a33ad22015c4d10a80c116e114cc7b1cbe17e7d4befafaeb01c7510c1d6b68c9eea585360624163b89f39f474109569867395dcd8cafdd46c5300798fe7012bb4b9c6808056173b478b8a0a0dc6e345ab42e935ee0c2c07bdb3ecbe2495c6a2829c722c45c61594915b8f01a1c7139aa522a59be46738529c695dec3e676a8db81948ca662cb2a06a9436e7621b66356424f2eeffa23aa5e43b47b899e1b7951db735436b6546da56a97aa476d02b649b48b2df231cc35146b1d55eb0f89272956ca45a690a54f178c565d9a5d0042fb67249225f3356ef7449b710ec46bace394b98856c976f3ff275638d639d61d3dd2c3fcfd51c2c9be5903c2883b00583a682957b5babd8aa1e1a311b0bdec77192de8301abb72cb21030c33f5b7286254bf7f500be342f403f101fc26a03c248f9b16edd04c29eed4309dda63fd9c6f99beb9650ab62d5fe7871f40d8698df4a606f83da20546031d2033b9617823dad0586df511931f78691ce1e23874708480cc7e7dc1930dbd1c827220cb062de0a69d5194c6b5820a7e2702b99687a1b74762a102153bb34935b2c7123a523c394e89f22a1ddd47e63965b6c237fe376ed6311c22fbe165d0f374dfae4dbbd264d49b3a456dcfad0a978de8c2b54300e0d22680d3976766a51998da300aacf0c27a098a1a0011e5ff0d62f4542b5c09a06bca4e6cdf539a99c17393983ab482695cfd0ecc1b906070069fa0c1e1d8d2979fa252abfb5b4c42de5446408edc1f47afab2d449858524c228d4342abf471e6d22c18b3c6d525eeaf454adef664b50e21a0725b1f8e937f67c80e8f74accaa96f9707f388aa8f32c89b51cb9a70569d98e1d9185266d65183de3714cd2ef34098e84042b40c8e0a79316ded00a3dc39722652b584e6aa49471022ba61d45dc548dffb1e217592c8d0ae2e9ab7079a5c02e3caa90877af67c1ee5367eea88796ed7d1d500bdf9ec2c27731980c93695f989d54e17f5d3baee6ac64facabef57cb7fef4f98be055d7d12d6baca92cecdc6167b2263663926d4f5d075151c10f4605ca387a1423bc4443c2de7ef247d55a7bdf1e852334c13f03581dda063d6bcb1de72b00fde8c575db23f58cd16afffbed69e7f83ca0aa63cf35b1e09d8e1f1baed43e5237cdc64a91bdfe520616a0557b8cb56f7c3cc92515057d2117cd82f2e1e49d6fade15851d86b8a96ca7504041299eebcae463430146cac028987e86fca8011f4d4c532f7548f112cccf69048ff18384b26f60092fb7b2d938e3cc76cd589132202aed47e79e4ea85b7fe43f783024505d54ed57950efef070444fc4063fb216dae4e7acc88f5a8b5e0128357ef5a722ee42a5807dfa3596a0d7c17ea2c161b16748c1a583159cc2f00f79e9b190893bbae0eebd4fed3e602334be3343e036ac762e9acc81f166f41a38efa5ecff7f555585b09f5aaf984157d29b5ac8c98021a668804b4b3e3066a96d8a13f66582d98d0abf25d02c4e6aacfd24bd2226e3c7f60a246c3fca965bc8d8d519a2539ee3e641cccd3ac861129ae10b70c1fc9f894c316d58a98a89eb8d59936dfefefb1b9000e515ef0792c6b6e9c0ca4a66444ea18fa8813855aac3adfa8ce971bf7c4a94c2611558498d1bd213edd637518cbfe214ce4afd7465a23f8434be90c48e433b1952d3c4688735f3281a8b38f8bf5cdaf65819d15a2bb8a785ae295213c1474d4849ffdaabf0a75e4d3521b402f9d273a7235d2384c90590eeab68a107ecca0fc1fd5626853132e045ebde77b1527b43140d6bb822d6d9e0acda8e61809ac723e11516eb7737e5eea2a25e7dbec480035f61ecc6cdc9290a9e6894e4ae1798177a237eb6118ddd0288b54583e5b51b9792583c38b6d7090d7bcaead3ad49472e2f20f962103fab77d9dd456645db3026220610f958a040470846b32eb3e4f1bc98456d9e3b683a4f5406553c71bf0aea1c6832d82e605fdd56e98fa0d8e5c818bc25e5848373b4ac9fec47d6b594afc771270a31283ead8d4c29358ef2a87473beb71fab5546771f07b352dcdaab7921409e606a7d01f3ed43686ba4d7e48a313e4959509c1a4441160c9ac163230e83a077bf38dbcecd76c741c5233787bc31e3b04314d65e01e96d6568b1324a1ce4ed19d4f4753d8cb2c485540e9c01afc0306ba26ab723571e3070e0be13a765ac0b8ddda635f285e716d8214424e1b2c2b8dfefd6fc6469f0cc1d0b56466f7ee0d92fa68442e47ddc8c7266e61d116ffc764f982977270a4dbbaf0ecb0a49cf65c8fbb2fac90459e4577fba44d59b30b5e6c160b091aa0812e2630f8caed58b5a4cd3909bce9211a7d9680cbacf5b3c05a932486f16990d5cf2040ba68490dbc24d2865b01aef3c9d81a98eab75998ae1943e51d2924ac99e88bceb322e8bf4a5d11750aa3530c3c0b275a251c7f63b8a06668d780d43c8ddae0da2c1e9268609e9cf71bf0b6fc84ede0f7e5a4dbdc7c0e4b5c008b5e790d1649d8916afe779d0f03eadb77a789d862e2bf62d3f85753637c0de4d7bab20a4dd4fce4ccde8dca6184a4cfc867fcadccc59c2f48f5ae4bdf60b688996ed50d32c488c244df75569f615f374a00205489c34ce1333106f40de3f462bc585c4b3b85afa183888548409d207caf04117a7283a108f55c17da07adfd72a32bef2fc86a5ed790955ae8027c3882e79baa4a68b7747bd9446ed058dbb99a219aba4aa5d1efbe27fdae2de5de57aff362f968927dcd7a8efcbcf0af3368a75efc657066ac70fd476b5cfacf7a537ba72e291d1d54bdb9f1710388cfb4ea58c026f8017d717b22400c2e047e2393ebbd85d111fc72dbe8bb7b13f322fdf43f522c00c582b25e633eeed7538f7fef6f8376374dd0aaa2c8bbf145b28881fda030de197a53970f8d0d8b8a6b5d4982b5b4f6f98641d38e49621482a1aef71aae916dac0e0d9671b36279dde8525b544344864541824e16bb3bc0a29391a492ad9d2a1eb72ae04e5f05d5ff55c5aa323bb59524899391c698619d84894ffac4ccefe576f481808f83436cb7d793e58761d1cc89609d4b7fa026acc28676007aa7492e3bb70c396cd9e1d0327c635243fdc869788312cb4050903dfd7592df60ef226406d523836a7e1f2af3187f6a631538a49aabe86250be56fb77ba66e5865c9548b057444e4c88a74a27a75608bea742e1407598fe3c2717f4cc8898a2a985544d5ba1323c2d4331c93837c5a958f6ed45f5d8df1b9d15bdd69df097749c1993300f1fd99e5dc4b07b3ca3c3fe8ba0f43c1b25a1aebd2c0c71432ad2c5200289f184d3671c00addbcb75213ea5120b648df19aef057b168e3ef6ec34ae5bdfa1be935b8b5adf80bab25eb2977c80095526038199ea4322585d2863d1d38f0af668a0715e8f759277ef67e50df3ca8d34ec9242ba1eb0d878f1b79638496d21cfa6d9bb24260ec4809b0261e7d538c5a76982c57a581aa00ae7c53f5f58b4005625b4b408c16dc3d815863d13b25c10f333de7859c48c5fda3605fbc57ddc064027d36315463ae154b1e379379f676ef83f93180eb8c925cc161b7f830fa3e042fc2ce64787bc6324c622b266f0529de74eb6ed1f00b7bb40edb9e86b2e50b7f253b65c845018e58119d16c6bebef4448bd4d2c7497584f35b4030b57ae574bc7ec3e99961cd1fe393a75c14e65b0de885b0380464205bb29efbf981e32e465376553744d4e68b9046692856b241edf56d90c63052d229b720065e733941cb0e86ea05719a97750aee3c986ac54884400efeee244edd9d8a7fa9015dd28a25cfbe0fb9fd82cd1125156da0af28c8cb1a715e75b093be24984232f94067983d5efc620ada5c9b820760a3d8bea92946a957aae4845ce5acf615d9ed538d87f4cf56a285ff9e847cfcc920e99e04ddfadd2ca8771af95e7608d1637597ab146b09c33f79f517b92aaf6ff937fd1c60d6b49ba7f3eb288d84ca1213cb492c7df7401ed23d9718a7ed7e634063952ce43885b8dfe9ebed50e6fe0f8d33851f147848cf814927ac01f009a5c5c59141556992d0862d697d343e8f306c30e64f8eb052ce4fd35bd73853684612785417728d2ab2d3d328fea642590a15629fa073db20f65f8e50263f2d216afa329e5be3510ed03934205d6d584c1f10d9b4bcd56123585c356fe449ab4a41c1bcebbef3306eaec7beaa553425f5148420fb94e6b2e703b7173b5e9bb9cfbe3d5c6108683d8fcf348ba97e8ec117d9f6d0e5e799c8bd235eb0dd7bb61d2bec943acc90365b33887ade27da9c0c0c1842946e24e6eaf53ab85ac97bd5968fc90781e2fb277ee1a1ff872f86c1c9d92bc3ff3d786c66391fe6e88001f4bb162285f4f67efd7d3a7e0667c9dfde9590dec2fcbb62fd584b02ff014e5f8b66220c3710ad7b95f40c42011234b44e6ec16b6dbdf69b7f598965aeeaa5e543668ae15b82affb695d253e2d21d36752fc6243d4992b3922e1b266189c282a8cfe53e610ec115ea4c866f5d916c7c5bb3278719bafbd73c0afcfd2b9d2a5ed6d40ebf37b35b01fcabdf6e380609990300c3a463b43a01a0556a6b3d61c8380d0d46c5e3cdae34d72dc1077c9f77a0d7842e9c60ca095b2d366b469d4a61630f389af447251a62e7bd9d7bc11730fab19408cc4fdf20d46b5f61943327860e4fbb12169b8e1bd26f0016c43b068fe77906de8b2c247e98b28867b53bcc9d3cb18c92a7d04729856cf05cde4046b4575aeead0e01fd9728e63bcc3ed03f5f65e5ccb6ec1b85101995dda74e37a09fa9cd594379571debbc1e6afc73bcc0639eddefdceba935ada676233f531698a13237a1d889ebc94bf1df2b97c077bb43a7b54c15fa2a779c61f71b8aa8240048979117afdd129a5fb35d6fd97e83ef0c2d9c5b4d84e373ce112ed63804600235fda2bfc81482461853ec01d8c46b6ec37c1e3a8425cbe8f5b12a720098a970f1b29c339ee81c0dc8b672893c270061a1da92aa9add4089afc8903e246fdadf50373893fa8c01e371e7b9faf3223e18167595653825e81d9a100872494e0f1eccda50ae0c5a59ab48693e9e705135aebc78a31601c161f335041b8a845afdf5648528c20a3214dea5a321f7c391c94d1e6fb82cad7652aec79a8e9a7354ecb2bd0825a58d3a1561685e88453053d4e3385c033655d4f1764d9e340d841b6b2fb8cfbb7a81982a9c0d336cd9b43dc19e98c07ee80400e83a303ac8b3d27726f35940910f590229f62dcb377bcbba9938e6414df338734e1d7119139d33f990a63b501389710460c3dd8607c76c92f30b6089340a6eddcdac46cee9bf55ba9688a539abe55fc26f5e9b88e0459861226bf29981817200f6dd22b202f8f89ab86ddefc8dba32b4983b61ecd38d3b4f0c043e260c4753313f5de46d9399682b2847b11a75590a9bd9231f3a6572de86afd756dae89774f02807e01f9600a6ecf0ac4f94fcd1b2628c6b4e623b86d122a45e5873bec2b651572e418d61be7284a8fa48cf03c1f9fc56728333faef2ea77b72c00cc437bc29c93134d75e9e096c5a63cbb263e1c181f86f0eff269bc2bfe8086b6a5c4e2251e054227923c9b7f58475f5f3af2bf706fe8063177695f1a3b786583e0c47fc75883a10c3a8dec9025b39e2b39a916c90913ada8f830f10f0b9f3451840f0741b3a0d6953a9461a822b943e982b0c9359a6199e25f98180cc75da2f5a85c1df89390bc092a36beebd626a0384b1315f859a56917f21db767c8ac59a7b58db3e1528664c90c20b929c51", @nested={0x4, 0x63}]}, @typed={0x8, 0x38, 0x0, 0x0, @u32=0x7ff}, @nested={0x10, 0xe1, 0x0, 0x1, [@nested={0x4, 0x43}, @typed={0x8, 0xc8, 0x0, 0x0, @uid=r6}]}, @generic="e0bc2af3470217720e5ff7d666ce4ec4aadf15b7428c5374770e835c24321be58d6571f18601831436d7c7fd99730cfd3d544dc138fb35a05fe27eab4a9642e1ca355f545824bd0d35947e570c2166e18324f8f25477875f02e117307a8acbcb367d55f22056a50174427b6173facc4fe71e26bd80d30ef691285865819defb40845508de4f9119e53b2c9d25a91b5283a82ea9ddf1df114e642b5ec7b447402e44499ff3de1f828c9d0271ce701efe390e259cf05d4ec18c6c36c8ed81c2f9a12d03cc87f3c7501775d504a", @generic="49adeb0d51ee236f591c44f71fa3019ab314884f8f9a40d52d8ce2cc8d360309b943482ac4535935b0d01047e59d20c580b73f7a34"]}, 0x2148}, 0x1, 0x0, 0x0, 0x4}, 0x84) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) read$FUSE(r1, &(0x7f0000003fc0)={0x2020}, 0x2020) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', r1, 0x4000, r8}, 0x18) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40048c0}, 0xc000) 1.72308437s ago: executing program 2 (id=2656): io_setup(0x8, &(0x7f0000004200)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00\x00\x00\x00\x02') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00\x02\x00\x00\x00') io_setup(0x3, &(0x7f0000000240)) io_setup(0x3083, &(0x7f0000000000)) io_setup(0x7fffffff, &(0x7f0000000080)) io_setup(0x8, &(0x7f00000001c0)) 1.552419308s ago: executing program 2 (id=2657): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x47, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x4c, 0x66, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xa, 0x6}, {0xfff2, 0x8}, {0x9, 0xb}}, [{0x8, 0xb, 0xae82}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x1000}, {0x8}, {0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r3) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000480)={'geneve0\x00', 0x800}) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000004c0)=""/61) close_range(r0, r3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r3) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x181040, 0x0) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000005c0)) sendmmsg$sock(r3, &(0x7f0000001300)=[{{&(0x7f0000000600)=@can={0x1d, r2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)="635c73f79572ebaade0c8d2a5519a570aaf56c8296e9763f618e4495786f11092f8fcf15ae4c8ba2ef1d87a61e76804f436b37b0dc802c7008859bddd81bedebcbad7399893f511095f5031fac50606cc23e0a928e875313230f94a47e66d4918ef9c72f96af1f78ec81ece42596de32d12ff54de8f71bab7508950ea46065ffdd3c328e1190300f74df7e6c5f4aadc7de64a2f1027cb2cb8d93087a02b1aee0b79b7c00203c7bfdf9d1f1b88ff8a0b6bddc8f0ab564476abf5cf63f4c65c60a3980313612e036a9df1c3dee576ecd97e4737c00aca7169c85e8e1ca842559b3fa23b8ea2d4a3fb9a9c8b2eeaeba0ec62dfa749b652e3c40", 0xf8}, {&(0x7f0000000780)="dff2617a01c32a5cab4c43317219445ee060a793f442dce84360e8235d406bf639ba114d3e16e498", 0x28}], 0x2, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)}], 0x1, &(0x7f00000008c0)=[@timestamping={{0x14, 0x1, 0x25, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000900)="cd96639274", 0x5}, {&(0x7f0000000940)="ca80123ee468a586d0a218805ec775442c19bf0659fddf07f3845eeabc2ab3a45559224e93d42fcf974f9954409c931c75e920c40709d869b95be2ec519ea043225a37b6a07adf14037444efa5e56ba0fd63acd02c92826edf47c1bdaf0216419e5b2a4e7ed55e83becd9b87717b0229c1bb6266e671daeed89dfc88c59916ea58654fbc6b2b93076eac9d790d62773fba180587dbda1f7bfbdeb455e8f1104d6089f1a24caf7098a859d86517851e8cffa04fb5821d7d7229a5e06e4171e7018059", 0xc2}, {&(0x7f0000000a40)="e08409a860d634aa87a1a6c6f7245fcb5fa8c57f3b9f4b80bbec66bb33f285d4564fa25135ee69cead727a24c2f130ca93b2f8a46ec9fb89b4d402e136a3d7026de2e1678cf95bf6d1d95d573d6cbd1cf1f5d0dce947882a5434f7db168ffe68e742747f639668194cfac953a1e5c43eb15cd5ed0ed0e998abd443f8f51690cc8ca5b541d549ceb8fe113acc61ac484b957efec154d4b1b1e4f0fe2f84b6c0f43c2727ed461c534ba9c946d74d7ba33affc242a854abcd58a0705012b9d60edcef07e8923902fc6601cca4fce8955f304aa90066b85964577204684236cad1146fe29a", 0xe3}, {&(0x7f0000000b40)="950d836d106d9d04ee9b1ea02928a0fa8f23f315294163e7b974de14bdbf8e6ceaa8c1a31d13608f7b8f001d7261162e6e181e04a2536e0ec1e5b4407249a4955346a473d7930573ac2e9d093d500b44b597c8210edf53fe3221e0bc92eb06e8cbbfb411804f246716f146cbc2420f20ee9ed2b91dbd3f61c9fe87e82f8aed36859f0fed0929d1241eedb65d22", 0x8d}, {&(0x7f0000000c00)="a42d9b6fbe1754caa89ed70d2931dc79eba9311a9b96a9022939bd91724ba568be341dc0dcbadfa090b0f01c4ea0d9d4337926281c18ee8b0fbdd3431aac4b30d87eff4e1ea0fa9c0e776ace5a9242a9eb6aebbce639327ddd18b458c1447526539b0644eeff349f35da0f5ead75aba7ff4ac31201ccee07f76397ddc2e13f6b3d9723c40c6c97eb82c3faa15ff6c3", 0x8f}, {&(0x7f0000000cc0)="261cd7e4a3cace2b4ecd", 0xa}, {&(0x7f0000000d00)="173184beacfb82621cfaa623088c1ffe903bd08f5dbeba58f6e99b042f3c51fdfa7d4456f1d46185a8bf5b9f35b19729715b3bb65420ae2e08804f9f52e637cb752a3ca6b592da20d44bf6755074231943ca763f788015e29f2d29a64d676a2a39b6408c76a83c1c57f9743d58ae57783a5d52a01594800984953c50d0b297fbd802a07d33fbd13a8104961b9ff9ff45015e8f0e7b181a279cbc81a6c1f838e862ff88ae1e0432a8edf3f7ff48c27e42b34a2478c8a1c086bedabf", 0xbb}, {&(0x7f0000000dc0)="68622b41963e2fb5dc50c34a6abe699a978d44de52ad401150ab7ceacb580e1f014a5d59e33ac2418683aefb338abeca08fd92b7e6616a9c5ae73b2682853d4ab4a290800b7b762e90bbb2a6bd333660265db87d335063a9e418c14d454f246e447863e7add4f89ff5852a0a597e9face9df920701b2675e71657343defcc85d5291b9944e51df958496e87c5f635c1175a4b61eecdfc4c9f2699b634b14e8b18b51875be97ae2ccee23a384e16918960cff7d805bb4640aaeafc8", 0xbb}], 0x8, &(0x7f0000000f00)=[@txtime={{0x18, 0x1, 0x3d, 0x5088}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x30}}, {{&(0x7f0000000f40)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000fc0)="2b39577bf19a4369d54be66f6e020e75b748d657c6dbaa5521d2940ee7e1e59437dff58b2e5db2cdfd7298e24ed472b1dac65fde79fc07fb31b53fff4b78fc128afbf0f03c2ddbe7a7", 0x49}], 0x1, &(0x7f0000001080)=[@txtime={{0x18, 0x1, 0x3d, 0xfcd}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2eac}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001100)="fa6cc861b0600d99ca5b16f57ad54cb05384783e63dd834d9b5da4fc991aec77aeabbfd6c48efc7c8da2374080ec541c2a2bc6bed3f55ce8363e7f5cbf217afcc4ba6b28c4394f6414cb2c50b6cd8cd63adc98db472c0f64428653a007b01b8c57eb46399c24e40d3e8911a56a94077cc2d74c88c58f566f2424cb2f12d32bf66a887a945c24ef008b44c8df1a", 0x8d}, {&(0x7f00000011c0)="033e6c44d8a3f48447e79cd601fb4beaaadfaac9401bf7a81a4190d140761f26ae8e841df3642d503a180304794ace6b3981fb28b8e879216bad8280956d70e5ee52a6adac00e0e21018a7f530fb415eda87772ba4228cacbed49cdfe0975bd405849e1189821d048b6c173a24acca84fb897ed6409155d1b586d10d4832b89e24399c7e3d0024580389c4b08c081a2b0301c4898f0e5a6e19f46cc4fde377455be86d015c483df8b018", 0xaa}], 0x2, &(0x7f00000012c0)=[@mark={{0x14, 0x1, 0x24, 0x349d}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}}], 0x5, 0x20000800) syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), r3) close(r3) sendmsg$NFT_BATCH(r4, &(0x7f0000001a00)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f00000014c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x130, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x120, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xfd, 0x7, 0x1, 0x0, "e2fac619b651393d7c62c3c4d98f82c9a31f44ad89bb4e8e44dcd1f8c1aef902a8752a9fdd929dfda9aae465523a443211a0561438d8cd7dac4bfc9f517ab0e32c49685620368c4057a7e195782a2fbe496247a781df23fcd7fd7ddfda921a5d5e9b9d71fd059c29c4bbe5bcb577cdebb81e211252d8b2e8a580e90be3290b428b15fe38af635f44abc768c1374609e62accc26b9939ca49f8854939d9c03aedf3cc79c82e6881f9ea5ee575b4ed68992f4b15318311b2e407349c9ece2d65b7794745ed2b60060319b1160f6ee0b783c063bdfe8a3906f5ea7532e92e1a9f402fe3072c085ce7e07bb319a867d26478caca4e736616df61e2"}]}, @NFT_MSG_DELRULE={0x58, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x98de}]}}, @NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x81, 0x7, 0x1, 0x0, "17e0f765d379c9183ca45fa21cae3d2f7b5d56c6b16b648390f1453c2fe51eac1031e051a7b50f2dfd3090f23aa5137952cc50c34ff72e1d3006d0a6cbb9778be20e4b60ab13472246a4c92f140b8e71ded99fda19f20264eaee286f10fc9d1deafa662cfb5d3f7e1cfa91da55d80f16dd661486d8fd01fdc71a43d15f"}, @NFTA_RULE_USERDATA={0x15, 0x7, 0x1, 0x0, "cdcc5cea77b3bcb8ca7bb8b3a1eb72a05a"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x94, 0x7, 0x1, 0x0, "ebb0b2a6b57b7b2f067b21cb0d90c356da60a0a0cec3b250d32e11091e75b720c81f75b7d7049d73352e7e5cc7183bf759932ef1722766e75f24ff82bd64c4d542a124df5be07aff7edf87d993a165148dfa5ff1e115282be282275ce14c44c887fbefdc8664bce608fdc303981587e6cba1ca2449df8b2791673bbee96bc5ea1bc7e2d49c0da5f01c65b5f65cad1412"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x4e8}, 0x1, 0x0, 0x0, 0x8000}, 0x1000) r5 = epoll_create(0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001ac0)={'ip6tnl0\x00', &(0x7f0000001a40)={'ip6gre0\x00', r2, 0x2f, 0x5, 0x1, 0x62a4639b, 0xff3d4ce9f1e791ec, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x700, 0x8000, 0x10, 0x5}}) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001b00)="6237d1a0412949969347b02132b23be87c3542473f66a68f91ed357730f8561a678d2f83bacc1b6d06125b4836aef414c9b92f4e43530ff3741d2c817d5664e616a7336bd85947011a8112368645eae111103ff4d3fd33cdc8ac0ae255192d5c0451848aaf53b12a37bea4cc7bafb4c0627ffa27e6a915041eab20b959f607e1e5efbb223663b44e61af6393d3838c936042c26279179208aa402a43aaaa938b5297f29fd10ffa7688179b24fd8bcbf30ecfa2ffff255877c5120781d348e4b3fcbc0b73e473ca858c7fb9a65e68ae3735db84c4e770cecdc879e5417efe71c601149f01b3e184b5", 0xe8}, {&(0x7f0000001c00)="be07245f8e802e85d401518fb813f514e2c04c588a1b92cc6b064153098589fad755f2169d9f82fff115f8004e34077cdfa08f7a5323738ed67530d8cef5794d5977b2b5bbdf3cd0d1a89a28fce805903bd010419679dd462aad3535251c9f00aea9d938b12bdf2e2e5bb5e0acbe018a0ff989dd0068f7dce0bff8461259f03e711d14039922ef6d4c6d83efbecf28db0981710b61d475ce431f2ed22a41932af46d9ab6231ffe1553c16054e3dba11ec7874fc223093dd91a36a4c390d45d1ae61a40fd7aac59b6540abf17d4fd", 0xce}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="2c287a7986a0ca4c51bd8fdb6fafafa28d2218445ad088459507eaea172ac8a71b1201a0019120fa4bf94aca71bdf74912f1b8c3759d27ed2cb5f84a248cfaaf72b33b7b1164de485904edf6c927328e83e7d5796b4110140049f4c21c6046c20b7bf2a72a186fd49f467638de50034810870c162033e5717350b7d514d14298b36e55c61256813adb0c4adfb161a059d4df9b48c033417f1fa47ba8a960718fbb46ab99e11809169b4405bd74615cf70db7f950e046e0038a789939a36afb7b65b5ab659bd8a5a3fe06066c227df56a280fb4707178652d3f2a86e575dea61aa2", 0xe1}, {&(0x7f0000002e00)="14486e26a1acb359445e468be71c42f2374a83ee9394190968477f111296d11f3e5d50376c98591c7daddb03347d81cb741464a32445bc3f187ccd530f67be467175b3b75c47bf683e392c216ba67ad5aa5939a3187a5b93fc69a1b25d44a7c44f9b332b8c16a6126cd94e1d435072c4c5760df00fe88373f1488cb04f3b34", 0x7f}], 0x5}}], 0x1, 0x4004040) epoll_create1(0x80000) recvmsg$can_j1939(r4, &(0x7f0000003140)={&(0x7f0000002f40)=@ax25={{0x3, @null}, [@netrom, @netrom, @null, @default, @null, @netrom, @remote, @rose]}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002fc0)=""/173, 0xad}], 0x1, &(0x7f00000030c0)=""/126, 0x7e}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000003180), r3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000031c0)=0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000003200)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000003240)={"f0597628133af27a982950fab8a65e9f", r7, r8, {0x7, 0x93}, {0x100000000, 0xfffffc01}, 0x2, [0x0, 0x0, 0x4, 0x4, 0x1, 0x6, 0xfffffffffffffffc, 0x8000000000000000, 0x8, 0x78e, 0x400000, 0x5, 0x4b, 0x2, 0xffff, 0x5b7]}) sendto$unix(r4, &(0x7f0000003340)="1687c3c1190c8b1ca93808c2e60f018edb4bbc88ed0e2777b8ab6f6747be06bf127414cfe99219e275b57f4e98", 0x2d, 0x24000090, 0x0, 0x0) 1.542025428s ago: executing program 2 (id=2658): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}}, [@srcaddr={0x14, 0xd, @in=@private=0xa010102}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x969f}]}, 0x44}}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000040)=ANY=[@ANYBLOB="0d2212f67e4e87"]) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad5600008100000800"/24, 0x18) (async) r4 = accept4$alg(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000001c0)="87e19da170700d4817c4e2ef8ac8a0f6147c969acd8795780a", 0x19}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x8004) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x6299, 0x0, 0x1, 0x333}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000, 0x0, 0x30004880}, 0x91) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) (async, rerun: 32) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) sendmmsg$inet(r8, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x240080e4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) (rerun: 64) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TCFLSH(r0, 0x400455c8, 0x0) (rerun: 64) 1.274711795s ago: executing program 5 (id=2659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x102fd210) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) mmap(&(0x7f0000129000/0x4000)=nil, 0x4000, 0xa, 0x4000010, r0, 0x41445000) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) 868.721684ms ago: executing program 3 (id=2660): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) close_range(r0, r0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8], [0x10000], [0x7]], '\x00', [{0xffffffff}, {0x0, 0x10}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}], '\x00', 0x1000}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x17, 0x0, 0xa9}) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ppoll(&(0x7f0000000180)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000180)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0) 867.155675ms ago: executing program 5 (id=2661): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r2, 0x0, 0xc, 0x0, &(0x7f0000000040)) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x3, 0x3}}, 0x2e) (async) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='vfat\x00', 0x0, 0x0) 727.575119ms ago: executing program 5 (id=2662): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) (async) timer_settime(0x0, 0x0, 0x0, 0x0) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) r1 = accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x30, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) poll(0x0, 0x0, 0x9) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3d696e7465358665619ffe7bbee27f4ea6c4afab11244f7776653d737461"]) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3d696e7465358665619ffe7bbee27f4ea6c4afab11244f7776653d737461"]) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000111401000000000000000000080001000000000008004f0000000000080003"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001300)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r6, @ANYRES64, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="0600fd00000000000a00340002020202020200001400fe00a7bba3b5b1cfc70c00010000000000002ac9d9ef9e724de2f9d92b4455db5f2c25fa3bf93ac12a7154fc6dfc8f4ee4586f017114ea2a7a832346f5157cb264076414a1b58c5f63ca6a53b3c88da44decb9a4624bf5c5529268c3cd1318589d0b7244a56a520e6f39a691ba77f37fd734565702db626ba23773144c0cc50ce06cde6d43093e78e0599c51a1fcefb40c5d91879d816ee526ec302b19fb95e2f58673724b"], 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r6, @ANYRES64, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="0600fd00000000000a00340002020202020200001400fe00a7bba3b5b1cfc70c00010000000000002ac9d9ef9e724de2f9d92b4455db5f2c25fa3bf93ac12a7154fc6dfc8f4ee4586f017114ea2a7a832346f5157cb264076414a1b58c5f63ca6a53b3c88da44decb9a4624bf5c5529268c3cd1318589d0b7244a56a520e6f39a691ba77f37fd734565702db626ba23773144c0cc50ce06cde6d43093e78e0599c51a1fcefb40c5d91879d816ee526ec302b19fb95e2f58673724b"], 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0xc810) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 726.419082ms ago: executing program 5 (id=2663): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000020000000000000f01"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0xc0049364, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 514.384093ms ago: executing program 5 (id=2664): socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800683a00fc010000000000000000000000000000fe800000e4edc7c1d4ee30bcdfe48900001a19bb46908d32fc00aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc0000000000000000000000000000000004040201000000fc0200000000000000000000f7916d00000000fe88000000000000000000000000000188000000000000000401090000000000"], 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x1, {0x0, 0x2a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 227.825846ms ago: executing program 0 (id=2665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x40}]}}}]}, 0x40}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8042, 0x182) fcntl$setlease(r2, 0x400, 0x1) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 98.253285ms ago: executing program 0 (id=2666): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000680)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80160, 0x0) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x1) (async, rerun: 64) close_range(r3, 0xffffffffffffffff, 0x0) (rerun: 64) write$P9_RFSYNC(r3, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE(r2, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000140)=""/101, 0x65, 0x3, 0xc21, 0xfff, 0xfffffffe, 0x2}}, 0x120) (async, rerun: 64) r5 = dup(r4) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000000000000000fffff000000000000900020073792b32000000000500040000000000050005000200000010000300686173683a69702c6d616300050001"], 0x54}}, 0x0) 1.038624ms ago: executing program 0 (id=2667): r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000003ac0)="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", 0x1013, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000001a80)=""/4096}) syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000003ac0)="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", 0x1013}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000001a80)=""/4096}) (async) 809.785µs ago: executing program 3 (id=2668): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@getqdisc={0x34, 0x26, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x86689449f2e71da9, 0x6}, {0x4, 0xffe0}, {0xb, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) 0s ago: executing program 0 (id=2669): r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0x7) r1 = socket$inet6(0xa, 0x80002, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000e3fef9044d564b"]) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfc, 0x0, 0x6}]}, 0x10) (async) r5 = socket$inet6(0xa, 0x3, 0x26) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80}}, 0x4, 0x1, 0x1, 0x9, 0xc0, 0x3d, 0xd}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r7, 0x24, "0e05877c1d4da932cddd23fb965753d56d46958388b4406445088a5a522fc2f34365894a"}, &(0x7f0000000200)=0x2c) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_cmd={0x1c, 0x9, 0x2, 0x8001, 0x1f, 0x5, 0x10, 0x6, 0x2e, 0x7, 0x1ff, 0x1, 0x6, 0x4, 0x67, 0x3, [0xffffccc8]}}) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000100)={0x90000, 0x0, [0x4, 0x200, 0x2, 0x3, 0x0, 0x56, 0xf, 0x80000000]}) kernel console output (not intermixed with test programs): ioctl, please convert it to SG_IO [ 138.349355][T10643] overlayfs: invalid origin (0000) [ 138.350270][ T10] Registered IR keymap rc-empty [ 138.351122][ T10] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 138.376920][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 138.445266][T10648] netlink: 'syz.2.1617': attribute type 2 has an invalid length. [ 138.508856][T10572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10572 comm=syz.0.1587 [ 138.515599][ T8407] usb 5-1: USB disconnect, device number 17 [ 138.515696][ C0] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 139.301723][T10678] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (8), value rounded to 0 ms [ 139.464830][T10699] 9pnet_virtio: no channels available for device syz [ 140.655632][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805fd71400: rx timeout, send abort [ 141.193779][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805fd71400: abort rx timeout. Force session deactivation [ 141.293508][T10719] __nla_validate_parse: 12 callbacks suppressed [ 141.293519][T10719] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1637'. [ 142.592632][T10733] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 142.601349][T10733] CIFS mount error: No usable UNC path provided in device string! [ 142.601349][T10733] [ 142.604808][T10733] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 142.876975][T10778] openvswitch: netlink: Duplicate or invalid key (type 0). [ 142.879264][T10778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.079529][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'. [ 143.111791][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 143.170946][T10811] block nbd0: shutting down sockets [ 143.209592][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 143.209603][ T40] audit: type=1400 audit(1747984641.411:688): avc: denied { nlmsg_read } for pid=10819 comm="syz.0.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.230305][T10821] team0: Port device gtp0 added [ 143.267053][T10824] tipc: Started in network mode [ 143.269313][T10824] tipc: Node identity 4, cluster identity 4711 [ 143.271793][T10824] tipc: Node number set to 4 [ 143.281176][T10824] pim6reg527: entered allmulticast mode [ 143.325702][T10828] netlink: 'syz.2.1661': attribute type 10 has an invalid length. [ 143.328720][T10828] bond0: (slave wlan1): Opening slave failed [ 143.856642][T10846] input: syz0 as /devices/virtual/input/input14 [ 144.644268][T10870] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 144.647136][T10870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.651852][T10870] vhci_hcd vhci_hcd.0: Device attached [ 144.654488][T10871] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 144.659792][ T84] vhci_hcd: stop threads [ 144.661223][ T84] vhci_hcd: release socket [ 144.662690][ T84] vhci_hcd: disconnect device [ 144.673189][T10875] xt_l2tp: unknown flags: 17 [ 144.820574][ T40] audit: type=1400 audit(1747984642.917:689): avc: denied { bind } for pid=10880 comm="syz.5.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.894817][T10885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=10885 comm=syz.5.1675 [ 145.195048][T10900] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1679'. [ 145.207347][ T40] audit: type=1400 audit(1747984643.282:690): avc: denied { shutdown } for pid=10899 comm="syz.0.1679" lport=60474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.215604][ T40] audit: type=1400 audit(1747984643.282:691): avc: denied { read } for pid=10899 comm="syz.0.1679" lport=60474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.304802][ T40] audit: type=1400 audit(1747984643.366:692): avc: denied { getopt } for pid=10901 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.312852][ T40] audit: type=1400 audit(1747984643.385:693): avc: denied { setattr } for pid=10901 comm="syz.0.1680" name="RAW" dev="sockfs" ino=36296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.443859][ T7997] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.010389][ T40] audit: type=1400 audit(1747984644.030:694): avc: denied { name_bind } for pid=10912 comm="syz.5.1682" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 146.058098][T10915] netlink: 'syz.5.1683': attribute type 1 has an invalid length. [ 146.058098][T10916] netlink: 'syz.5.1683': attribute type 1 has an invalid length. [ 146.058119][T10916] netlink: 16022 bytes leftover after parsing attributes in process `syz.5.1683'. [ 146.060581][T10915] netlink: 16022 bytes leftover after parsing attributes in process `syz.5.1683'. [ 146.070811][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1683'. [ 146.360901][ T40] audit: type=1400 audit(1747984644.358:695): avc: denied { associate } for pid=10926 comm="syz.3.1687" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 146.364251][T10925] netlink: 'syz.0.1686': attribute type 1 has an invalid length. [ 146.384342][T10932] hugetlbfs: Unknown parameter 'ª¶]' [ 146.393097][ T40] audit: type=1400 audit(1747984644.377:696): avc: denied { remount } for pid=10929 comm="syz.3.1688" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 146.396317][ C2] vkms_vblank_simulate: vblank timer overrun [ 146.411250][T10925] netlink: 'syz.0.1686': attribute type 2 has an invalid length. [ 146.466605][ T40] audit: type=1400 audit(1747984644.461:697): avc: denied { setopt } for pid=10933 comm="syz.3.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.478511][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1689'. [ 146.496470][T10938] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 146.526322][T10938] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.529490][T10938] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.532354][T10938] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.535109][T10938] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.540341][T10938] bond1: (slave geneve2): making interface the new active one [ 146.543350][T10938] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 146.549512][T10938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1690'. [ 146.553258][T10938] bond1: entered promiscuous mode [ 146.555473][T10938] geneve2: entered promiscuous mode [ 147.146120][T10968] vlan2: entered allmulticast mode [ 147.148463][T10968] bridge0: entered allmulticast mode [ 147.512874][T10998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1708'. [ 147.526662][T11020] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.555286][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 147.594786][ T67] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.704665][T11038] netlink: 'syz.2.1713': attribute type 12 has an invalid length. [ 147.743359][T11040] netlink: 'syz.0.1714': attribute type 28 has an invalid length. [ 147.752450][T11040] netlink: 'syz.0.1714': attribute type 3 has an invalid length. [ 147.754924][T11040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1714'. [ 147.827150][T11049] ip6gretap1: entered promiscuous mode [ 147.828855][T11049] ip6gretap1: entered allmulticast mode [ 147.841100][T11047] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1717'. [ 147.972976][T11063] SELinux: failed to load policy [ 148.084422][T11077] [U] zÍ»´iœùÊý®Ò[27| [ 148.086068][T11077] [U] ‘ÇhÉ£W`ëBsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Awc# ‚ýÙÔ =¡ÁgÎö®<ï [ 148.090395][T11077] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 148.093279][T11077] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 148.104234][T11077] [U] 8)¢¤X [ 148.105347][T11077] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 148.106978][T11077] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 148.109158][T11077] [U] ‰ϼcEv‹û @ý [ 148.110374][T11077] [U] aÆ„% [ 148.111410][T11077] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bxKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 148.117431][T11077] [U] éf1Ïp±3 [ 148.118639][T11077] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 148.120189][T11077] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 148.122520][T11077] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»› [ 148.129707][T11077] [U] ±U»Þ0¿XMj1 [ 148.131794][T11076] [U] ¯P¦õ’CµfÙ\ubÃmÅ^§À)¼Z¢¡ÞèæR»=e&àmÁ[+•%ÞB¸b`ÁE1î}td„¨kG>sìe­Í{(‡‚çÓ<¥D‡$¢Õ’|’^)c¹Íg#@8÷)}7Z_¸±+¢c’f£r¤°QÅ[°Ö˜[1ÆYÞÓxìÛxÑh [ 148.132780][T11080] fuse: Unknown parameter '¡KÐóh™|!' [ 148.188274][T11084] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1730'. [ 148.563721][T11104] fuse: Bad value for 'fd' [ 148.628258][T11111] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1737'. [ 148.641161][T11111] netlink: 'syz.2.1737': attribute type 39 has an invalid length. [ 148.842089][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 148.842102][ T40] audit: type=1400 audit(1747984646.678:707): avc: denied { name_bind } for pid=11118 comm="syz.5.1740" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 149.053414][T11132] fuse: Bad value for 'fd' [ 149.170628][ T40] audit: type=1400 audit(1747984646.986:708): avc: denied { create } for pid=11136 comm="syz.0.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.391179][ T1020] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 149.577677][ T1020] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.580223][T11169] fuse: Bad value for 'fd' [ 149.582671][ T1020] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.589759][ T1020] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 149.593883][ T1020] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.598756][ T1020] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.615122][ T1020] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.619800][ T1020] usb 8-1: config 0 descriptor?? [ 150.019513][T11191] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 150.022188][T11189] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 150.070362][ T1020] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 150.079227][ T1020] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 150.177943][ T40] audit: type=1400 audit(1747984647.931:709): avc: denied { create } for pid=11208 comm="syz.0.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 150.228807][T11211] pim6reg1: entered promiscuous mode [ 150.231022][T11211] pim6reg1: entered allmulticast mode [ 150.273775][ T40] audit: type=1400 audit(1747984648.015:710): avc: denied { getopt } for pid=11213 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.300991][T11206] Falling back ldisc for ttyS3. [ 150.332226][T11219] ksmbd: Unknown IPC event: 0, ignore. [ 150.563943][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1771'. [ 150.889959][ T40] audit: type=1400 audit(1747984648.595:711): avc: denied { append } for pid=11247 comm="syz.0.1780" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 150.899607][ T40] audit: type=1400 audit(1747984648.605:712): avc: denied { ioctl } for pid=11247 comm="syz.0.1780" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.227205][T11256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27006 sclass=netlink_route_socket pid=11256 comm=syz.0.1783 [ 151.320497][ T40] audit: type=1400 audit(1747984648.997:713): avc: denied { bind } for pid=11264 comm="syz.0.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 151.499889][ T40] audit: type=1400 audit(1747984649.166:714): avc: denied { bind } for pid=11275 comm="syz.0.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.506178][ T40] audit: type=1400 audit(1747984649.166:715): avc: denied { setattr } for pid=11277 comm="syz.2.1792" name="dev_mcast" dev="proc" ino=4026533309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 151.532165][ T40] audit: type=1400 audit(1747984649.194:716): avc: denied { create } for pid=11281 comm="syz.5.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 151.564974][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1796'. [ 151.566155][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1796'. [ 151.648197][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 151.651056][T11296] openvswitch: netlink: Flow key attr not present in new flow. [ 151.654038][T11296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12516 sclass=netlink_route_socket pid=11296 comm=syz.0.1798 [ 152.372071][ T64] usb 8-1: USB disconnect, device number 4 [ 152.667743][T11355] 9pnet_virtio: no channels available for device syz [ 152.744210][T11352] evm: overlay not supported [ 152.801976][ T1020] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 152.973188][ T1020] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.976817][ T1020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.983145][ T1020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 152.993590][ T1020] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.999000][ T1020] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.006535][ T1020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.015468][ T1020] usb 5-1: config 0 descriptor?? [ 153.159667][T11385] __nla_validate_parse: 3 callbacks suppressed [ 153.159678][T11385] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1831'. [ 153.166540][T11385] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1831'. [ 153.171420][T11385] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1831'. [ 153.362453][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 153.465588][ T1020] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 153.483482][ T1020] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 153.599991][T11413] netlink: 'syz.5.1841': attribute type 5 has an invalid length. [ 153.608863][T11413] ip6erspan0: entered promiscuous mode [ 153.616731][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1841'. [ 153.620141][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1841'. [ 153.622981][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1841'. [ 153.666128][T11419] netlink: 'syz.5.1843': attribute type 2 has an invalid length. [ 153.701445][T11422] kAFS: No cell specified [ 153.891183][T11437] netlink: 'syz.5.1848': attribute type 1 has an invalid length. [ 153.893695][T11437] netlink: 'syz.5.1848': attribute type 2 has an invalid length. [ 153.896347][T11437] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1848'. [ 154.053150][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 154.059470][T11442] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 154.065001][T11442] batadv_slave_1: entered promiscuous mode [ 154.197532][T11448] xt_l2tp: v2 doesn't support IP mode [ 154.468668][ T64] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 154.651788][ T64] usb 8-1: Using ep0 maxpacket: 32 [ 154.655276][ T64] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 154.657982][ T64] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 154.661689][ T64] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 154.665270][ T64] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 154.669299][ T64] usb 8-1: config 0 interface 0 has no altsetting 0 [ 154.673465][ T64] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 154.676344][ T64] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 154.678934][ T64] usb 8-1: Product: syz [ 154.680621][ T64] usb 8-1: Manufacturer: syz [ 154.682543][ T64] usb 8-1: SerialNumber: syz [ 154.687462][ T64] usb 8-1: config 0 descriptor?? [ 154.691049][ T64] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 154.696947][ T64] ldusb 8-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 154.760179][T11462] xt_hashlimit: size too large, truncated to 1048576 [ 154.818471][T11464] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1855'. [ 154.961914][ T64] usb 8-1: USB disconnect, device number 5 [ 154.965336][ T64] ldusb 8-1:0.0: LD USB Device #1 now disconnected [ 155.125675][T11475] netlink: 'syz.5.1860': attribute type 1 has an invalid length. [ 155.155317][T11475] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 155.158716][T11475] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 155.187878][T11475] bond1: (slave wireguard0): making interface the new active one [ 155.191075][T11475] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 155.264845][T11483] autofs4:pid:11483:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 155.406274][T11488] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 155.409734][T11488] SELinux: failed to load policy [ 155.512295][T11494] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 155.516409][T11494] SELinux: failed to load policy [ 155.534736][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 155.534747][ T40] audit: type=1400 audit(1747984652.935:727): avc: denied { setattr } for pid=11497 comm="syz.2.1865" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.684698][ T40] audit: type=1400 audit(1747984653.076:728): avc: denied { ioctl } for pid=11503 comm="syz.2.1869" path="/406/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 155.745816][ T64] usb 5-1: USB disconnect, device number 18 [ 155.902625][ T40] audit: type=1400 audit(1747984653.291:729): avc: denied { read } for pid=5330 comm="acpid" name="mouse6" dev="devtmpfs" ino=3031 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 155.909635][ T40] audit: type=1400 audit(1747984653.291:730): avc: denied { open } for pid=5330 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=3031 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 155.917810][ T40] audit: type=1400 audit(1747984653.291:731): avc: denied { ioctl } for pid=5330 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=3031 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 156.586309][T11559] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 156.761427][ T40] audit: type=1400 audit(1747984654.086:732): avc: denied { shutdown } for pid=11589 comm="syz.0.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 156.767726][ T40] audit: type=1400 audit(1747984654.095:733): avc: denied { read } for pid=11589 comm="syz.0.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 156.807373][T11595] 9pnet_virtio: no channels available for device syz [ 156.940359][ T40] audit: type=1400 audit(1747984654.254:734): avc: denied { setopt } for pid=11604 comm="syz.5.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 157.198632][T11622] 9pnet_virtio: no channels available for device syz [ 157.409377][ T40] audit: type=1400 audit(1747984654.694:735): avc: denied { write } for pid=11636 comm="syz.2.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 157.524672][T11646] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.925469][T11672] IPVS: Error connecting to the multicast addr [ 157.971495][T11676] 9pnet_virtio: no channels available for device syz [ 157.972016][ T40] audit: type=1400 audit(1747984655.218:736): avc: denied { create } for pid=11675 comm="syz.3.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 157.974311][T11676] 9pnet_virtio: no channels available for device /dev/loop3 [ 158.005885][T11683] autofs4:pid:11683:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 158.083408][T11694] sp0: Synchronizing with TNC [ 158.299918][T11704] program syz.3.1929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.574796][T11733] 9pnet_virtio: no channels available for device syz [ 159.087120][T11746] fuse: Bad value for 'fd' [ 159.553594][T11766] syz.3.1946: attempt to access beyond end of device [ 159.553594][T11766] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 159.557628][T11766] vxfs: unable to read disk superblock at 1 [ 159.559604][T11766] syz.3.1946: attempt to access beyond end of device [ 159.559604][T11766] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 159.566949][T11766] vxfs: unable to read disk superblock at 8 [ 159.571221][T11766] vxfs: can't find superblock. [ 159.891088][T11798] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.893988][T11798] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.896628][T11798] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.899346][T11798] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.173102][T11822] Cannot find del_set index 128 as target [ 160.251882][T11835] x_tables: duplicate underflow at hook 2 [ 160.355449][T11844] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.432435][T11849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5132 sclass=netlink_tcpdiag_socket pid=11849 comm=syz.3.1972 [ 160.486587][T11851] 8021q: VLANs not supported on ip6tnl0 [ 160.490789][T11851] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 160.493934][T11851] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.535607][T11855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=11855 comm=syz.3.1974 [ 160.780373][T11880] syz.0.1981: attempt to access beyond end of device [ 160.780373][T11880] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 160.786564][T11880] (syz.0.1981,11880,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 160.791620][T11878] xt_connbytes: Forcing CT accounting to be enabled [ 160.793627][T11878] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 160.806799][T11880] (syz.0.1981,11880,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 160.810383][T11880] (syz.0.1981,11880,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 160.813231][T11880] (syz.0.1981,11880,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 160.868154][T11886] 9pnet_virtio: no channels available for device syz [ 160.961191][T11897] netlink: 'syz.2.1988': attribute type 27 has an invalid length. [ 161.015063][T11897] __nla_validate_parse: 9 callbacks suppressed [ 161.015077][T11897] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1988'. [ 161.113406][T11905] xt_l2tp: invalid flags combination: c [ 161.551747][T11925] netlink: 'syz.5.1994': attribute type 3 has an invalid length. [ 161.554188][T11925] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1994'. [ 161.558258][T11925] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1994'. [ 161.562146][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 161.564887][T11928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1995'. [ 161.646647][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'. [ 161.672626][T11936] netlink: 'syz.3.1999': attribute type 64 has an invalid length. [ 161.675814][T11936] netlink: 'syz.3.1999': attribute type 4 has an invalid length. [ 161.678157][T11936] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1999'. [ 161.935583][T11945] netlink: 'syz.0.2003': attribute type 10 has an invalid length. [ 161.954938][T11945] hsr_slave_0: left promiscuous mode [ 161.963472][T11945] hsr_slave_1: left promiscuous mode [ 162.028669][T11947] fuse: blksize only supported for fuseblk [ 162.147773][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2007'. [ 162.150838][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2007'. [ 162.264029][T11966] fuse: Unknown parameter 'grou00000000000000000000' [ 162.440529][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 162.440541][ T40] audit: type=1400 audit(1747984659.399:740): avc: denied { audit_write } for pid=11976 comm="syz.2.2015" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.449419][ T8407] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 162.453002][ T40] audit: type=1107 audit(1747984659.399:741): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='qT†dsž`púXöXG›†¹Ô»‹<õ¾|ÎããVb' [ 162.505729][ T40] audit: type=1400 audit(1747984659.455:742): avc: denied { write } for pid=11978 comm="syz.2.2016" path="socket:[40680]" dev="sockfs" ino=40680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.616309][ T8407] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.619884][ T8407] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.637520][ T8407] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 162.640736][ T8407] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.644613][ T8407] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.649143][ T8407] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.653810][ T8407] usb 10-1: config 0 descriptor?? [ 162.893640][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2019'. [ 163.099435][ T8407] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 163.123346][ T8407] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 163.523495][ C0] sched: DL replenish lagged too much [ 163.524080][ T40] audit: type=1400 audit(1747984660.419:743): avc: denied { write } for pid=11997 comm="syz.3.2020" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 163.533338][ T40] audit: type=1400 audit(1747984660.419:744): avc: denied { open } for pid=11997 comm="syz.3.2020" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 163.543993][ T40] audit: type=1400 audit(1747984660.428:745): avc: denied { write } for pid=11997 comm="syz.3.2020" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.552229][ T40] audit: type=1400 audit(1747984660.437:746): avc: denied { mount } for pid=11997 comm="syz.3.2020" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 163.604584][ T40] audit: type=1400 audit(1747984660.484:747): avc: denied { getopt } for pid=11999 comm="syz.3.2021" lport=37051 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 163.612093][ T40] audit: type=1400 audit(1747984660.484:748): avc: denied { bind } for pid=11999 comm="syz.3.2021" lport=37051 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 163.622115][ T40] audit: type=1400 audit(1747984660.484:749): avc: denied { node_bind } for pid=11999 comm="syz.3.2021" saddr=ff02::1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 164.309213][T12010] bond0: Error: Cannot enslave bond to itself. [ 164.355886][T12016] sp0: Synchronizing with TNC [ 164.388353][T12016] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 164.392824][T12016] SELinux: failed to load policy [ 164.501546][T12037] fuse: Unknown parameter 'group_i00000000000000000000' [ 164.535424][T12041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12041 comm=syz.2.2035 [ 164.668260][ T57] usb 10-1: reset high-speed USB device number 11 using dummy_hcd [ 164.817591][ T57] usb 10-1: device descriptor read/64, error -32 [ 165.073735][ T57] usb 10-1: reset high-speed USB device number 11 using dummy_hcd [ 165.234734][ T57] usb 10-1: device descriptor read/64, error -32 [ 165.512483][ T57] usb 10-1: reset high-speed USB device number 11 using dummy_hcd [ 165.534547][ T57] usb 10-1: device descriptor read/8, error -32 [ 166.186313][T12121] xfs: Unknown parameter 'discardÜT¡ëŽ V!F¾ˆ-†Îå‡ÀG©@Zã#Õ.Ï‹}Ñ]Ü¥jJšpVåJ:G] [ 166.186313][T12121] s#Ú7 [ 166.186313][T12121] ¾° `³«ÙìMÐvËe4š]­ìÁª¢ Ö$eNhO<ªò@Æ3>‹5ù ¢ëzK£ìœ™Ç2_u‚ïy!ê[Â%Ÿ"'5£üäK‘©ì[˜(' [ 166.278297][T12132] netlink: 'syz.3.2061': attribute type 3 has an invalid length. [ 166.356347][T12142] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 166.400038][ T64] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 166.406508][T12148] __nla_validate_parse: 3 callbacks suppressed [ 166.406518][T12148] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2069'. [ 166.488148][ T8407] usb 10-1: USB disconnect, device number 11 [ 166.573965][ T64] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.577766][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 166.581597][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 166.582035][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 166.586354][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 166.590870][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 166.594070][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.598704][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 166.602544][ T64] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.606626][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 166.609212][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.613806][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 166.619986][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 166.620278][ T64] usb 7-1: config 0 descriptor?? [ 166.623940][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 166.629134][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 166.633133][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 167.076879][ T64] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 167.091840][ T64] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 167.397869][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'. [ 167.401733][T12161] bridge_slave_1: left allmulticast mode [ 167.404117][T12161] bridge_slave_1: left promiscuous mode [ 167.412284][T12161] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.428706][T12161] bridge_slave_0: left allmulticast mode [ 167.431201][T12161] bridge_slave_0: left promiscuous mode [ 167.433352][T12161] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.896009][T12185] netlink: 3696 bytes leftover after parsing attributes in process `syz.5.2080'. [ 167.899039][T12185] netlink: 3696 bytes leftover after parsing attributes in process `syz.5.2080'. [ 167.936962][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 167.936974][ T40] audit: type=1400 audit(1747984664.534:760): avc: denied { read } for pid=12186 comm="syz.3.2081" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 168.098002][T12204] fuse: Bad value for 'fd' [ 168.181801][T12210] overlayfs: missing 'lowerdir' [ 168.323674][ T29] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 168.494803][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 168.498932][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 168.502460][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.506679][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.510590][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.514652][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.520176][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 168.523926][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.623086][ T64] usb 7-1: reset high-speed USB device number 13 using dummy_hcd [ 168.749749][ T29] usb 5-1: usb_control_msg returned -32 [ 168.751715][ T29] usbtmc 5-1:16.0: can't read capabilities [ 168.762566][ T64] usb 7-1: device descriptor read/64, error -32 [ 168.923808][ T40] audit: type=1400 audit(1747984665.470:761): avc: denied { map } for pid=12218 comm="syz.5.2090" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.932288][ T40] audit: type=1400 audit(1747984665.470:762): avc: denied { execute } for pid=12218 comm="syz.5.2090" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.029280][ T64] usb 7-1: reset high-speed USB device number 13 using dummy_hcd [ 169.126908][T12198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.129573][T12217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.129789][T12198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.135520][T12217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.140720][ T6048] usb 5-1: USB disconnect, device number 19 [ 169.190101][ T64] usb 7-1: device descriptor read/64, error -32 [ 169.392686][ T29] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 169.467946][ T64] usb 7-1: reset high-speed USB device number 13 using dummy_hcd [ 169.489275][ T64] usb 7-1: device descriptor read/8, error -32 [ 169.575961][ T29] usb 10-1: config 0 has no interfaces? [ 169.577806][ T29] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.580681][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.584702][ T29] usb 10-1: config 0 descriptor?? [ 169.715062][T12236] netlink: 'syz.2.2096': attribute type 5 has an invalid length. [ 169.720895][T12236] ip6erspan0: entered promiscuous mode [ 169.977624][ T40] audit: type=1326 audit(1747984666.452:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.2.2102" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e5678e969 code=0x0 [ 170.387086][ T6048] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 170.471084][ T5994] usb 7-1: USB disconnect, device number 13 [ 170.538434][T12278] xfrm1: entered allmulticast mode [ 170.575984][ T6048] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.582724][ T6048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 170.591278][ T6048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 170.596537][ T6048] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.604576][ T6048] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.610791][ T6048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.616353][ T6048] usb 5-1: config 0 descriptor?? [ 170.895846][T12294] batadv_slave_1: entered promiscuous mode [ 170.899586][T12292] batadv_slave_1: left promiscuous mode [ 171.065746][ T6048] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 171.068312][ T40] audit: type=1400 audit(1747984667.472:764): avc: denied { ioctl } for pid=12301 comm="syz.2.2117" path="socket:[43344]" dev="sockfs" ino=43344 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.086379][ T6048] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 171.156811][ T5994] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 171.306354][ T5994] usb 8-1: device descriptor read/64, error -71 [ 171.584347][ T5994] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 171.616537][T12309] 9pnet: p9_errstr2errno: server reported unknown error ‡io,ignoreqv, [ 171.745409][ T5994] usb 8-1: device descriptor read/64, error -71 [ 171.866750][ T5994] usb usb8-port1: attempt power cycle [ 171.937078][ C3] net_ratelimit: 23532 callbacks suppressed [ 171.937093][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 171.942972][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 171.946897][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 171.950893][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 171.954731][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 171.958753][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 171.962716][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 171.966659][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 171.970891][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 171.975179][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 172.257839][ T5994] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 172.279795][ T5994] usb 8-1: device descriptor read/8, error -71 [ 172.328139][ T64] usb 10-1: USB disconnect, device number 12 [ 172.526797][ T1326] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 172.557165][ T5994] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 172.589679][ T5994] usb 8-1: device descriptor read/8, error -71 [ 172.674737][ T1326] usb 5-1: device descriptor read/64, error -32 [ 172.708630][ T5994] usb usb8-port1: unable to enumerate USB device [ 172.941992][ T1326] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 173.091676][ T1326] usb 5-1: device descriptor read/64, error -32 [ 173.369679][ T1326] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 173.391221][ T1326] usb 5-1: device descriptor read/8, error -32 [ 173.486349][T12325] (unnamed net_device) (uninitialized): (slave ip_vti0): Device is not bonding slave [ 173.490962][T12325] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip_vti0) [ 173.499517][T12325] overlayfs: missing 'lowerdir' [ 173.521858][T12325] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25458 sclass=netlink_tcpdiag_socket pid=12325 comm=syz.0.2123 [ 173.557281][T12327] fuse: Invalid rootmode [ 173.604891][T12329] macsec0: entered promiscuous mode [ 173.606668][T12329] macsec0: entered allmulticast mode [ 173.608438][T12329] veth1_macvtap: entered allmulticast mode [ 173.710899][T12333] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12333 comm=syz.0.2127 [ 173.895620][T12341] netlink: 'syz.5.2129': attribute type 1 has an invalid length. [ 173.898118][T12341] netlink: 'syz.5.2129': attribute type 2 has an invalid length. [ 174.025143][T12348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2132'. [ 174.073772][T12355] fuse: Invalid rootmode [ 174.121080][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2135'. [ 174.130774][T12361] 9pnet_virtio: no channels available for device syz [ 174.259274][ T40] audit: type=1400 audit(1747984670.455:765): avc: denied { ioctl } for pid=12376 comm="syz.3.2141" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.315628][ T5974] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 174.354444][ T29] usb 5-1: USB disconnect, device number 20 [ 174.575250][T12393] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 174.581275][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2146'. [ 174.645647][T12394] fuse: Invalid rootmode [ 174.693481][ T5974] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.703914][ T5974] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.727943][ T5974] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 174.731791][ T5974] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.736805][ T5974] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.743429][ T40] audit: type=1400 audit(1747984670.914:766): avc: denied { setopt } for pid=12397 comm="syz.3.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 174.783014][ T5974] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.793908][ T5974] usb 10-1: config 0 descriptor?? [ 174.897520][T12407] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 175.029770][T12417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2154'. [ 175.044330][T12417] bond0: entered allmulticast mode [ 175.047660][T12417] bond_slave_0: entered allmulticast mode [ 175.050569][T12417] bond_slave_1: entered allmulticast mode [ 175.054196][ T40] audit: type=1400 audit(1747984671.194:767): avc: denied { setopt } for pid=12418 comm="syz.0.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 175.071554][ T40] audit: type=1400 audit(1747984671.213:768): avc: denied { write } for pid=12418 comm="syz.0.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 175.115965][ T40] audit: type=1400 audit(1747984671.260:769): avc: denied { read } for pid=12421 comm="syz.3.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.312071][ T5974] usbhid 10-1:0.0: can't add hid device: -71 [ 175.314480][ T5974] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 175.378047][ T5974] usb 10-1: USB disconnect, device number 13 [ 175.779354][T12452] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 175.782642][T12452] overlayfs: failed to set xattr on upper [ 175.784829][T12452] overlayfs: ...falling back to redirect_dir=nofollow. [ 175.791960][T12452] overlayfs: ...falling back to index=off. [ 175.794940][T12452] overlayfs: ...falling back to uuid=null. [ 175.933694][T12418] delete_channel: no stack [ 175.957501][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2166'. [ 175.967672][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2166'. [ 176.012513][T12459] can: request_module (can-proto-4) failed. [ 176.062710][T12464] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2167'. [ 176.231368][T12468] tmpfs: Bad value for 'mpol' [ 176.285118][T12471] vlan2: entered promiscuous mode [ 176.286879][T12471] bridge0: entered promiscuous mode [ 176.288993][T12471] vlan2: entered allmulticast mode [ 176.290665][T12471] bridge0: entered allmulticast mode [ 176.338993][T12472] mkiss: ax0: crc mode is auto. [ 176.484157][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 176.658418][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2175'. [ 176.665995][T12489] macsec0: entered promiscuous mode [ 176.693321][ T40] audit: type=1400 audit(1747984672.728:770): avc: denied { bind } for pid=12490 comm="syz.3.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.701903][ T40] audit: type=1400 audit(1747984672.728:771): avc: denied { name_bind } for pid=12490 comm="syz.3.2177" src=28324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 176.758559][ T29] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 176.922466][ T29] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.927896][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 176.932666][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 176.936734][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.942467][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.946659][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.952925][ T29] usb 7-1: config 0 descriptor?? [ 177.205032][T12497] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2178'. [ 177.242439][T12500] bad cache= option: none·þ‰õ [ 177.242439][T12500] [ 177.244855][T12500] CIFS: VFS: bad cache= option: none·þ‰õ [ 177.292061][T12502] netlink: 'syz.0.2180': attribute type 8 has an invalid length. [ 177.293093][ C3] net_ratelimit: 22629 callbacks suppressed [ 177.293103][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 177.293564][ T40] audit: type=1400 audit(1747984673.290:772): avc: denied { append } for pid=12501 comm="syz.0.2180" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 177.293595][ T40] audit: type=1400 audit(1747984673.290:773): avc: denied { map } for pid=12501 comm="syz.0.2180" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 177.293617][ T40] audit: type=1400 audit(1747984673.290:774): avc: denied { write execute } for pid=12501 comm="syz.0.2180" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 177.322032][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 177.325982][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 177.330031][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 177.333975][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 177.338209][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 177.342153][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 177.346151][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 177.350171][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 177.354091][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:b3:d4:06:b9:77, vlan:0) [ 177.396484][ T29] usbhid 7-1:0.0: can't add hid device: -71 [ 177.398418][ T29] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 177.416173][ T29] usb 7-1: USB disconnect, device number 14 [ 177.476625][T12512] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 177.478744][T12512] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 177.481238][T12512] vhci_hcd vhci_hcd.0: Device attached [ 177.483445][T12514] vhci_hcd: connection closed [ 177.483634][ T1145] vhci_hcd: stop threads [ 177.494916][ T1145] vhci_hcd: release socket [ 177.500592][ T1145] vhci_hcd: disconnect device [ 177.599904][T12521] fuse: Unknown parameter 'user00000000000000000000' [ 177.782012][T12532] 9pnet_fd: p9_fd_create_unix (12532): problem connecting socket: éq‰Y’3aK: -91 [ 177.988243][T12551] netlink: 'syz.2.2195': attribute type 10 has an invalid length. [ 177.991203][T12551] bridge0: port 4(veth0_to_bridge) entered disabled state [ 177.993614][T12551] bridge0: port 3(vlan2) entered disabled state [ 177.995744][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.171587][T12562] gfs2: Unknown parameter 'discardyÐ àHÇÂl' [ 178.390622][T12593] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 178.412224][T12593] kvm: pic: level sensitive irq not supported [ 178.413260][T12593] kvm: pic: non byte read [ 178.479884][T12596] nbd5: detected capacity change from 0 to 4294967296 [ 178.483023][T12592] block nbd5: shutting down sockets [ 178.936747][T12639] fuse: Unknown parameter 'user_i00000000000000000000' [ 179.124075][ T1040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.128201][ T1040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.210471][ T1040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.214748][ T1040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.304651][ T1040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.308882][ T1040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.355170][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.359161][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.362445][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.366865][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.371181][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.381782][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.386225][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.391901][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.396114][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.401104][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.445872][ T1040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.449442][ T1040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.562280][T12644] chnl_net:caif_netlink_parms(): no params data found [ 179.791484][ T1040] team0: Port device gtp0 removed [ 179.801117][ T1040] bond1 (unregistering): (slave geneve2): Releasing active interface [ 179.803800][ T1040] geneve2 (unregistering): left promiscuous mode [ 180.119178][T12670] xt_l2tp: v2 doesn't support IP mode [ 180.123336][ T1040] bond0 (unregistering): Released all slaves [ 180.125186][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 180.125198][ T40] audit: type=1400 audit(1747984675.937:781): avc: denied { setattr } for pid=12669 comm="syz.2.2230" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.132795][ T1040] bond1 (unregistering): Released all slaves [ 180.135940][ T40] audit: type=1400 audit(1747984675.946:782): avc: denied { write } for pid=12669 comm="syz.2.2230" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.144982][ T40] audit: type=1400 audit(1747984675.946:783): avc: denied { open } for pid=12669 comm="syz.2.2230" path="/514/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.188412][T12644] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.191336][T12644] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.193627][T12644] bridge_slave_0: entered allmulticast mode [ 180.196273][T12644] bridge_slave_0: entered promiscuous mode [ 180.200236][T12644] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.202568][T12644] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.204820][T12644] bridge_slave_1: entered allmulticast mode [ 180.207480][T12644] bridge_slave_1: entered promiscuous mode [ 180.225380][ T1040] tipc: Left network mode [ 180.242654][T12644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.247466][T12644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.252588][T12673] fuse: Unknown parameter 'user_id00000000000000000000' [ 180.298794][T12644] team0: Port device team_slave_0 added [ 180.302506][T12644] team0: Port device team_slave_1 added [ 180.336733][T12644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.338923][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.348137][T12644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.354641][T12644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.356897][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.366880][T12644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.407943][T12678] __nla_validate_parse: 11 callbacks suppressed [ 180.407959][T12678] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2233'. [ 180.413047][T12678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2233'. [ 180.434585][T12644] hsr_slave_0: entered promiscuous mode [ 180.437323][T12644] hsr_slave_1: entered promiscuous mode [ 180.511838][T12680] SELinux: syz.3.2234 (12680) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 180.642100][T12693] netlink: 604 bytes leftover after parsing attributes in process `syz.2.2238'. [ 180.701240][ T1040] veth1_macvtap: left allmulticast mode [ 180.703577][ T1040] veth1_macvtap: left promiscuous mode [ 180.705380][ T1040] veth0_macvtap: left allmulticast mode [ 180.707177][ T1040] veth0_macvtap: left promiscuous mode [ 180.709195][ T1040] veth1_vlan: left promiscuous mode [ 180.710844][ T1040] veth0_vlan: left promiscuous mode [ 180.766696][ T1040] pim6reg527 (unregistering): left allmulticast mode [ 181.647893][ T5946] Bluetooth: hci0: command tx timeout [ 181.903212][T12690] netlink: 'syz.2.2238': attribute type 29 has an invalid length. [ 181.906362][T12691] netlink: 'syz.2.2238': attribute type 29 has an invalid length. [ 181.963558][ T40] audit: type=1400 audit(1747984677.658:784): avc: denied { read append } for pid=12701 comm="syz.2.2241" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.973638][T12705] fuse: Unknown parameter 'user_id00000000000000000000' [ 181.993983][ T40] audit: type=1400 audit(1747984677.686:785): avc: denied { read } for pid=12706 comm="syz.3.2244" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 182.004162][ T40] audit: type=1400 audit(1747984677.686:786): avc: denied { open } for pid=12706 comm="syz.3.2244" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 182.013064][ T40] audit: type=1400 audit(1747984677.686:787): avc: denied { ioctl } for pid=12706 comm="syz.3.2244" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 182.249873][T12728] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2250'. [ 182.302341][T12728] xt_socket: unknown flags 0xc [ 182.307111][ T24] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 182.338630][ T40] audit: type=1400 audit(1747984678.004:788): avc: denied { write } for pid=12733 comm="syz.5.2251" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 182.345989][ T40] audit: type=1400 audit(1747984678.004:789): avc: denied { open } for pid=12733 comm="syz.5.2251" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 182.366419][ T1040] IPVS: stop unused estimator thread 0... [ 182.442508][T12737] netlink: 'syz.5.2252': attribute type 3 has an invalid length. [ 182.446033][T12737] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2252'. [ 182.449602][T12737] NCSI netlink: No device for ifindex 0 [ 182.467839][ T24] usb 8-1: device descriptor read/64, error -71 [ 182.481989][T12644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.498226][T12644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.510269][T12644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.516423][T12644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.516804][T12737] 9pnet_virtio: no channels available for device syz [ 182.594796][T12644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.612995][T12644] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.621349][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.623575][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.632265][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.634678][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.723921][ T24] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 182.773469][T12644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.798524][T12644] veth0_vlan: entered promiscuous mode [ 182.803731][T12644] veth1_vlan: entered promiscuous mode [ 182.821242][T12644] veth0_macvtap: entered promiscuous mode [ 182.825154][T12644] veth1_macvtap: entered promiscuous mode [ 182.845112][T12644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.845202][T12754] overlay: ./file1 is not a directory [ 182.852296][T12644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.858504][T12644] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.861286][T12644] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.864831][T12644] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.867586][T12644] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.884362][ T24] usb 8-1: device descriptor read/64, error -71 [ 182.913833][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.917602][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.934481][T10452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.937349][T10452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.983654][T12757] fuse: Bad value for 'fd' [ 183.014948][ T24] usb usb8-port1: attempt power cycle [ 183.023906][T12759] xt_l2tp: v2 tid > 0xffff: 150994944 [ 183.103401][T12765] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 183.105889][T12765] UDF-fs: Scanning with blocksize 2048 failed [ 183.108455][T12765] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 183.110841][T12765] UDF-fs: Scanning with blocksize 4096 failed [ 183.137391][T12765] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2259'. [ 183.175572][ T40] audit: type=1400 audit(1747984678.799:790): avc: denied { append } for pid=12769 comm="syz.2.2261" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 183.288687][T12773] net_ratelimit: 2297 callbacks suppressed [ 183.288703][T12773] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.296015][T12773] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 183.300821][T12773] bridge_slave_0: default FDB implementation only supports local addresses [ 183.408296][ T24] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 183.440844][ T24] usb 8-1: device descriptor read/8, error -71 [ 183.455233][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'. [ 183.458843][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'. [ 183.718261][ T24] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 183.741475][ T24] usb 8-1: device descriptor read/8, error -71 [ 183.857320][ T67] Bluetooth: hci0: command tx timeout [ 183.859305][ T24] usb usb8-port1: unable to enumerate USB device [ 183.859791][T12778] dlm: Unknown command passed to DLM device : 255 [ 183.859791][T12778] [ 184.057832][T12784] 9pnet_fd: Insufficient options for proto=fd [ 184.246654][T12786] CIFS mount error: No usable UNC path provided in device string! [ 184.246654][T12786] [ 184.249795][T12786] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 184.333702][T12798] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.338192][T12798] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.425753][T12798] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.429764][T12798] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.466594][T12805] fuse: Unknown parameter '0x0000000000000005' [ 184.514461][T12798] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.517714][T12798] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.611888][T12798] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.615390][T12798] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.724638][T12798] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.727492][T12798] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.737587][T12798] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.740235][T12798] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.753576][T12798] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.759732][T12798] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.777687][T12798] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.781121][T12798] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.791268][T12820] pim6reg1: entered promiscuous mode [ 184.792995][T12820] pim6reg1: entered allmulticast mode [ 184.818703][T12829] fuse: Unknown parameter '0x0000000000000005' [ 184.928805][T12840] 9pnet_virtio: no channels available for device syz [ 184.931137][T12840] 9pnet_virtio: no channels available for device syz [ 184.933517][T12840] 9pnet_virtio: no channels available for device syz [ 184.935811][T12840] 9pnet_virtio: no channels available for device syz [ 184.938297][T12840] 9pnet_virtio: no channels available for device syz [ 184.940616][T12840] 9pnet_virtio: no channels available for device syz [ 184.942886][T12840] 9pnet_virtio: no channels available for device syz [ 184.945220][T12840] 9pnet_virtio: no channels available for device syz [ 184.947656][T12840] 9pnet_virtio: no channels available for device syz [ 184.949927][T12840] 9pnet_virtio: no channels available for device syz [ 184.952202][T12840] 9pnet_virtio: no channels available for device syz [ 184.954468][T12840] 9pnet_virtio: no channels available for device syz [ 184.955104][T12837] batadv_slave_1: entered promiscuous mode [ 184.956828][T12840] 9pnet_virtio: no channels available for device syz [ 184.963031][T12840] 9pnet_virtio: no channels available for device syz [ 184.965343][T12840] 9pnet_virtio: no channels available for device syz [ 184.967733][T12840] 9pnet_virtio: no channels available for device syz [ 184.970387][T12840] 9pnet_virtio: no channels available for device syz [ 184.974195][T12840] 9pnet_virtio: no channels available for device syz [ 184.976930][T12840] 9pnet_virtio: no channels available for device syz [ 184.979269][T12840] 9pnet_virtio: no channels available for device syz [ 184.981898][T12840] 9pnet_virtio: no channels available for device syz [ 184.984263][T12840] 9pnet_virtio: no channels available for device syz [ 184.986636][T12840] 9pnet_virtio: no channels available for device syz [ 184.989070][T12840] 9pnet_virtio: no channels available for device syz [ 184.991570][T12840] 9pnet_virtio: no channels available for device syz [ 184.993897][T12840] 9pnet_virtio: no channels available for device syz [ 184.996340][T12840] 9pnet_virtio: no channels available for device syz [ 184.998828][T12840] 9pnet_virtio: no channels available for device syz [ 185.001207][T12840] 9pnet_virtio: no channels available for device syz [ 185.003638][T12840] 9pnet_virtio: no channels available for device syz [ 185.005988][T12840] 9pnet_virtio: no channels available for device syz [ 185.009182][T12840] 9pnet_virtio: no channels available for device syz [ 185.011842][T12840] 9pnet_virtio: no channels available for device syz [ 185.051662][T12841] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.2284'. [ 185.056394][T12841] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2284'. [ 185.289810][ T57] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 185.401955][T12858] kvm: pic: non byte read [ 185.404503][T12858] kvm: pic: level sensitive irq not supported [ 185.404737][T12858] kvm: pic: non byte read [ 185.410528][T12858] kvm: pic: level sensitive irq not supported [ 185.410761][T12858] kvm: pic: non byte read [ 185.451856][ T57] usb 5-1: device descriptor read/64, error -71 [ 185.508610][T12869] fuse: Unknown parameter '0x0000000000000005' [ 185.738768][ T57] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 185.815560][T12835] batadv_slave_1: left promiscuous mode [ 185.888309][ T57] usb 5-1: device descriptor read/64, error -71 [ 186.017764][ T57] usb usb5-port1: attempt power cycle [ 186.045125][T12897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.080826][ T67] Bluetooth: hci0: command 0x040f tx timeout [ 186.390830][ T57] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 186.396765][T12910] netlink: 'syz.3.2306': attribute type 1 has an invalid length. [ 186.400190][T12911] netlink: 'syz.3.2306': attribute type 1 has an invalid length. [ 186.406339][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 186.406355][ T40] audit: type=1400 audit(1747984681.821:794): avc: denied { write } for pid=12909 comm="syz.3.2306" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.423674][ T57] usb 5-1: device descriptor read/8, error -71 [ 186.451441][T12916] binder: 12914:12916 ioctl c0306201 200000000640 returned -22 [ 186.672570][ T40] audit: type=1400 audit(1747984682.073:795): avc: denied { ioctl } for pid=12940 comm="syz.5.2314" path="socket:[45830]" dev="sockfs" ino=45830 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.680556][ T40] audit: type=1400 audit(1747984682.073:796): avc: denied { read } for pid=12940 comm="syz.5.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.690267][ T57] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 186.712268][ T57] usb 5-1: device descriptor read/8, error -71 [ 186.730024][ T40] audit: type=1400 audit(1747984682.120:797): avc: denied { getopt } for pid=12940 comm="syz.5.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 186.756717][T12944] kvm: kvm [12943]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 186.840066][ T57] usb usb5-port1: unable to enumerate USB device [ 187.001872][T12948] __nla_validate_parse: 1 callbacks suppressed [ 187.001886][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2316'. [ 187.006757][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2316'. [ 187.028811][T12950] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 187.261694][T12969] tmpfs: Bad value for 'mpol' [ 187.307216][T12972] fuse: Unknown parameter '0x0000000000000005' [ 187.582935][T12988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=12988 comm=syz.2.2326 [ 187.583597][ T40] audit: type=1400 audit(1747984682.915:798): avc: denied { remount } for pid=12986 comm="syz.2.2326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 187.655729][ T40] audit: type=1400 audit(1747984682.990:799): avc: denied { execute } for pid=12991 comm="syz.5.2327" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 188.090700][ T5974] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 188.251058][ T5974] usb 10-1: Using ep0 maxpacket: 8 [ 188.259593][ T5974] usb 10-1: config 8 has an invalid interface number: 249 but max is 0 [ 188.267669][ T5974] usb 10-1: config 8 has no interface number 0 [ 188.270408][ T5974] usb 10-1: config 8 interface 249 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.277455][ T5974] usb 10-1: config 8 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 188.281746][ T5974] usb 10-1: config 8 interface 249 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 188.288608][ T5974] usb 10-1: config 8 interface 249 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 188.293103][T13007] fuse: Unknown parameter 'fd0x0000000000000005' [ 188.296000][ T5974] usb 10-1: config 8 interface 249 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 188.300404][ T5974] usb 10-1: config 8 interface 249 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 188.305408][ T5974] usb 10-1: config 8 interface 249 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 188.309899][ T5974] usb 10-1: config 8 interface 249 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 188.316591][ T5974] usb 10-1: New USB device found, idVendor=12d1, idProduct=6143, bcdDevice=2f.c3 [ 188.318934][ T67] Bluetooth: hci0: command 0x040f tx timeout [ 188.320338][ T5974] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.326259][ T5974] usb 10-1: Product: ㊠[ 188.328024][ T5974] usb 10-1: Manufacturer: Ñ• [ 188.329898][ T5974] usb 10-1: SerialNumber: ë³è®é° Ü­ì€€â‘¯à§¡ë¼»æ†Œí› ê·”釣ްé¼è•†í‹‚᳥╨è¤ïµ´ä¥§í“”至åä›×¿í±ë¥¹å’®í˜©Óªíˆ†ä·Ÿ [ 188.409007][T13015] netlink: 'syz.0.2335': attribute type 10 has an invalid length. [ 188.417462][T13015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.425383][T13015] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 188.472913][ T40] audit: type=1400 audit(1747984683.747:800): avc: denied { setopt } for pid=13023 comm="syz.0.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.495009][T13018] Bluetooth: MGMT ver 1.23 [ 188.497332][T13018] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 188.507148][T13018] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 188.571500][ T5974] option 10-1:8.249: GSM modem (1-port) converter detected [ 188.579624][ T5974] usb 10-1: USB disconnect, device number 14 [ 188.586733][ T5974] option 10-1:8.249: device disconnected [ 189.135751][T13041] netpci0: tun_chr_ioctl cmd 1074025672 [ 189.137589][T13041] netpci0: ignored: set checksum disabled [ 189.159742][ T5946] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 189.314935][ T40] audit: type=1400 audit(1747984684.543:801): avc: denied { getopt } for pid=13053 comm="syz.5.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.324185][T13054] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2347'. [ 189.408826][T13059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=13059 comm=syz.3.2348 [ 189.418099][T13059] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2348'. [ 189.418145][T13062] 0·: renamed from hsr0 (while UP) [ 189.424836][T13062] 0·: entered allmulticast mode [ 189.426468][T13062] hsr_slave_0: entered allmulticast mode [ 189.428660][T13062] hsr_slave_1: entered allmulticast mode [ 189.430854][T13062] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 189.436998][T13059] 1·: renamed from 70· (while UP) [ 189.440313][T13059] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 189.461603][ T40] audit: type=1400 audit(1747984684.683:802): avc: denied { accept } for pid=13060 comm="syz.0.2350" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.468141][ T40] audit: type=1400 audit(1747984684.683:803): avc: granted { setsecparam } for pid=13060 comm="syz.0.2350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 189.608695][ T5927] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 189.769004][ T5927] usb 10-1: Using ep0 maxpacket: 16 [ 189.772538][ T5927] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.775497][ T5927] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 189.778379][ T5927] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.788231][ T5927] usb 10-1: config 0 descriptor?? [ 190.122888][ T5998] usb 10-1: USB disconnect, device number 15 [ 190.206365][T13092] 9pnet_virtio: no channels available for device syz [ 190.386953][T13109] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.457974][T13118] program syz.2.2367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.463391][T13119] netlink: 'syz.0.2366': attribute type 12 has an invalid length. [ 190.528604][ T5946] Bluetooth: hci0: command 0x040f tx timeout [ 190.768715][T13148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2379'. [ 190.780142][T13153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2379'. [ 190.822119][T13156] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2381'. [ 190.896456][T13161] syz.3.2383 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 191.271939][T13176] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2388'. [ 191.637940][T13189] cgroup: none used incorrectly [ 191.759819][ T40] kauditd_printk_skb: 778 callbacks suppressed [ 191.759837][ T40] audit: type=1400 audit(1747984686.825:1582): avc: denied { recv } for pid=5919 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39026 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.774792][ T40] audit: type=1400 audit(1747984686.825:1583): avc: denied { read write } for pid=9502 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.785701][ T40] audit: type=1400 audit(1747984686.825:1584): avc: denied { open } for pid=9502 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.794058][ T40] audit: type=1400 audit(1747984686.825:1585): avc: denied { ioctl } for pid=9502 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.804036][ T40] audit: type=1400 audit(1747984686.825:1586): avc: denied { recv } for pid=5920 comm="syz-executor" saddr=127.0.0.1 src=39026 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.827930][ T40] audit: type=1400 audit(1747984686.825:1587): avc: denied { recv } for pid=5919 comm="sshd-session" saddr=10.0.2.2 src=45664 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.847010][ T40] audit: type=1400 audit(1747984686.881:1588): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39026 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.855614][ T40] audit: type=1400 audit(1747984686.881:1589): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=39026 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.863866][ T40] audit: type=1400 audit(1747984686.881:1590): avc: denied { recv } for pid=5919 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39026 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.873298][ T40] audit: type=1400 audit(1747984686.881:1591): avc: denied { recv } for pid=13197 comm="syz.3.2396" saddr=10.0.2.2 src=45664 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.881760][T13198] netlink: 'syz.3.2396': attribute type 12 has an invalid length. [ 191.942643][T13212] fuse: Bad value for 'fd' [ 191.991819][T13215] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2400'. [ 192.542140][T13237] bridge1: entered promiscuous mode [ 192.599635][T13239] openvswitch: netlink: Missing valid actions attribute. [ 192.602601][T13239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.707375][T13245] 9pnet_virtio: no channels available for device syz [ 192.751771][ T5946] Bluetooth: hci0: command 0x040f tx timeout [ 192.851539][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2410'. [ 193.027128][T13275] syzkaller0: entered promiscuous mode [ 193.028953][T13275] syzkaller0: entered allmulticast mode [ 194.269874][T13283] netlink: 'syz.2.2418': attribute type 12 has an invalid length. [ 194.332252][T13306] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.538718][T13317] overlay: filesystem on ./bus not supported as upperdir [ 194.720003][T13335] wg2: entered promiscuous mode [ 194.721609][T13335] wg2: entered allmulticast mode [ 194.726795][T13335] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13335 comm=syz.0.2434 [ 194.966119][T13347] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.990828][T13345] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2437'. [ 195.746898][T13367] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.750414][T13343] overlayfs: statfs failed on './file0' [ 195.805408][T13371] autofs: Bad value for 'fd' [ 195.907221][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 196.057755][T13373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.150933][T13396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2450'. [ 196.250206][T13396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.257898][T13409] netlink: 'syz.3.2454': attribute type 64 has an invalid length. [ 196.262086][T13409] netlink: 'syz.3.2454': attribute type 4 has an invalid length. [ 196.264694][T13409] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2454'. [ 196.271721][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 196.392939][ T29] hid-generic 4414:0008:0003.0011: hidraw1: HID v0.05 Device [syz1] on syz0 [ 196.409195][T13416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2455'. [ 196.949036][T13460] netlink: 'syz.5.2468': attribute type 1 has an invalid length. [ 196.964886][T13460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.985465][T13460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.988750][T13460] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 196.993041][T13460] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 197.026120][T13466] erspan0: entered allmulticast mode [ 197.034411][T13466] bond3: (slave erspan0): making interface the new active one [ 197.037358][T13466] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 197.113568][ T40] kauditd_printk_skb: 1533 callbacks suppressed [ 197.113580][ T40] audit: type=1400 audit(1747984691.829:3125): avc: denied { ioctl } for pid=8412 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 197.125308][ T40] audit: type=1400 audit(1747984691.848:3126): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39026 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 197.132937][ T40] audit: type=1400 audit(1747984691.848:3127): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=39026 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 197.141807][ T40] audit: type=1400 audit(1747984691.848:3128): avc: denied { recv } for pid=5919 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39026 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 197.152880][ T40] audit: type=1400 audit(1747984691.848:3129): avc: denied { recv } for pid=5919 comm="sshd-session" saddr=10.0.2.2 src=45664 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 197.162113][ T40] audit: type=1400 audit(1747984691.848:3130): avc: denied { recv } for pid=5919 comm="sshd-session" saddr=10.0.2.2 src=45664 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 197.172681][ T40] audit: type=1400 audit(1747984691.848:3131): avc: denied { recv } for pid=5919 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39026 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 197.180959][ T40] audit: type=1400 audit(1747984691.848:3132): avc: denied { create } for pid=13470 comm="syz.5.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.186984][ T40] audit: type=1400 audit(1747984691.857:3133): avc: denied { bind } for pid=13470 comm="syz.5.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.195338][ T40] audit: type=1400 audit(1747984691.857:3134): avc: denied { setopt } for pid=13470 comm="syz.5.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.475957][T13500] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2479'. [ 197.509990][T13502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2480'. [ 198.163682][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2493'. [ 198.193301][ T5950] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 198.332293][ T8407] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 198.378833][ T5950] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.381486][ T5950] usb 5-1: config 0 has no interface number 0 [ 198.383555][ T5950] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 198.387133][ T5950] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 198.390516][ T5950] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.393392][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.399315][ T5950] usb 5-1: config 0 descriptor?? [ 198.403402][T13532] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.426629][ T5950] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 198.495280][ T8407] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.499545][ T8407] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.505057][ T8407] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.508697][ T8407] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.515359][ T8407] usb 10-1: config 0 descriptor?? [ 198.519836][ T8407] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 198.564537][T13540] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2494'. [ 198.575046][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2494'. [ 198.679245][T13540] team0: Port device team_slave_0 removed [ 198.756390][ T5950] usb 5-1: USB disconnect, device number 25 [ 198.815877][T13543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2495'. [ 198.850690][T13545] netlink: 'syz.3.2496': attribute type 29 has an invalid length. [ 198.945084][T13547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2497'. [ 198.948252][T13547] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2497'. [ 199.310970][T13569] @ÿ: renamed from veth1 (while UP) [ 199.425946][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.472137][T13593] syz.2.2508: attempt to access beyond end of device [ 199.472137][T13593] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 199.475825][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2505'. [ 199.477948][T13593] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 199.698701][T13605] binder: 13604:13605 unknown command 0 [ 199.700630][T13605] binder: 13604:13605 ioctl c0306201 200000000140 returned -22 [ 199.702090][T13609] netlink: 'syz.3.2512': attribute type 10 has an invalid length. [ 199.706595][T13609] macvlan0: entered promiscuous mode [ 199.708537][T13609] macvlan0: entered allmulticast mode [ 199.714955][T13609] veth1_vlan: entered allmulticast mode [ 199.719798][T13609] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 200.077335][ T8407] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 200.248903][ T8407] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.253322][ T8407] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 200.260077][ T8407] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.264092][ T8407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.271623][ T8407] usb 5-1: config 0 descriptor?? [ 200.346027][T13629] netlink: 'syz.3.2519': attribute type 1 has an invalid length. [ 200.349080][T13629] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2519'. [ 200.425280][T13634] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2521'. [ 200.535144][ T1110] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 200.537346][ T1110] ata1: failed to read log page 10h (errno=-5) [ 200.539330][ T1110] ata1.00: exception Emask 0x1 SAct 0x1000 SErr 0x0 action 0x0 [ 200.541719][ T1110] ata1.00: irq_stat 0x40000000 [ 200.543254][ T1110] ata1.00: failed command: WRITE FPDMA QUEUED [ 200.546124][ T1110] ata1.00: cmd 61/18:60:ae:0a:10/00:00:00:00:00/40 tag 12 ncq dma 12288 out [ 200.546124][ T1110] res 50/04:00:00:00:00/00:00:00:00:00/a0 Emask 0x1 (device error) [ 200.551772][ T1110] ata1.00: status: { DRDY } [ 200.553262][ T1110] ata1.00: error: { ABRT } [ 200.555473][ T1110] ata1.00: configured for UDMA/100 [ 200.557978][ T1110] ata1: EH complete [ 200.571130][ T8407] usb 5-1: string descriptor 0 read error: -71 [ 200.574185][ T8407] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 200.585514][ T8407] usb 5-1: USB disconnect, device number 26 [ 200.712688][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.719600][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.722606][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.728781][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.731940][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.732215][T13645] netlink: 'syz.3.2523': attribute type 58 has an invalid length. [ 200.736710][T13645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2523'. [ 200.745685][ T46] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.751269][ T46] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.852798][ T46] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.857321][ T46] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.875413][T13643] chnl_net:caif_netlink_parms(): no params data found [ 200.950404][T13643] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.952884][T13643] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.955131][T13643] bridge_slave_0: entered allmulticast mode [ 200.957815][T13643] bridge_slave_0: entered promiscuous mode [ 200.963566][ T46] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.966604][ T46] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.973282][T13643] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.975615][T13643] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.978099][T13643] bridge_slave_1: entered allmulticast mode [ 200.980920][T13643] bridge_slave_1: entered promiscuous mode [ 201.016933][T13643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.021569][T13643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.064291][ T46] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.067694][ T46] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.077889][T13643] team0: Port device team_slave_0 added [ 201.082680][T13643] team0: Port device team_slave_1 added [ 201.118112][T13643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.120317][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.128543][T13643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.133451][T13643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.135615][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.143876][T13643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.204430][T13643] hsr_slave_0: entered promiscuous mode [ 201.206889][T13643] hsr_slave_1: entered promiscuous mode [ 201.209461][T13643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.214677][T13643] Cannot create hsr debugfs directory [ 201.292874][ T8407] usb 10-1: USB disconnect, device number 16 [ 201.348834][ T46] veth0_to_bridge: left allmulticast mode [ 201.350800][ T46] veth0_to_bridge: left promiscuous mode [ 201.357813][ T46] bridge0: port 4(veth0_to_bridge) entered disabled state [ 201.361736][ T46] vlan2: left promiscuous mode [ 201.363263][ T46] bond0: left promiscuous mode [ 201.364748][ T46] bond_slave_0: left promiscuous mode [ 201.366534][ T46] bond_slave_1: left promiscuous mode [ 201.376354][ T46] bridge0: port 3(vlan2) entered disabled state [ 201.380067][ T46] bridge_slave_1: left allmulticast mode [ 201.381818][ T46] bridge_slave_1: left promiscuous mode [ 201.383769][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.388582][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.468622][T13667] xt_hashlimit: size too large, truncated to 1048576 [ 202.050788][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.053766][ T46] bond_slave_0: left allmulticast mode [ 202.056819][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.059908][ T46] bond_slave_1: left allmulticast mode [ 202.062592][ T46] bond0 (unregistering): Released all slaves [ 202.069692][ T46] bond1 (unregistering): Released all slaves [ 202.076440][ T46] bond2 (unregistering): Released all slaves [ 202.084707][ T46] bond3 (unregistering): Released all slaves [ 202.112790][T13673] 8021q: VLANs not supported on gre0 [ 202.119380][T13682] geneve3: entered promiscuous mode [ 202.121235][T13682] geneve3: entered allmulticast mode [ 202.250985][T13690] syz.5.2538 uses old SIOCAX25GETINFO [ 202.426924][ T1326] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 202.470546][ T40] kauditd_printk_skb: 1314 callbacks suppressed [ 202.470562][ T40] audit: type=1400 audit(1747984696.852:4449): avc: denied { create } for pid=13694 comm="syz.5.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 202.484288][ T40] audit: type=1400 audit(1747984696.862:4450): avc: denied { read } for pid=13694 comm="syz.5.2540" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 202.501029][ T40] audit: type=1400 audit(1747984696.871:4451): avc: denied { recv } for pid=18 comm="rcu_exp_gp_kthr" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39026 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.511153][ T40] audit: type=1400 audit(1747984696.871:4452): avc: denied { recv } for pid=18 comm="rcu_exp_gp_kthr" saddr=127.0.0.1 src=39026 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.521180][ T46] hsr_slave_0: left promiscuous mode [ 202.522590][T13695] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 202.522912][ T40] audit: type=1400 audit(1747984696.871:4453): avc: denied { recv } for pid=18 comm="rcu_exp_gp_kthr" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39026 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.522940][ T40] audit: type=1400 audit(1747984696.871:4454): avc: denied { recv } for pid=6150 comm="udevd" saddr=10.0.2.2 src=45664 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.522964][ T40] audit: type=1400 audit(1747984696.871:4455): avc: denied { recv } for pid=5994 comm="kworker/1:3" saddr=10.0.2.2 src=45664 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.522986][ T40] audit: type=1400 audit(1747984696.871:4456): avc: denied { recv } for pid=5919 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39026 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.556786][ T46] hsr_slave_1: left promiscuous mode [ 202.556877][ T40] audit: type=1400 audit(1747984696.871:4457): avc: denied { recv } for pid=5919 comm="sshd-session" saddr=127.0.0.1 src=39026 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.559346][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.566372][ T1326] usb 8-1: device descriptor read/64, error -71 [ 202.568988][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.571410][ T40] audit: type=1400 audit(1747984696.871:4458): avc: denied { read open } for pid=13694 comm="syz.5.2540" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 202.581291][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.583687][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.607799][ T46] veth1_macvtap: left promiscuous mode [ 202.609688][ T46] veth0_macvtap: left promiscuous mode [ 202.611481][ T46] veth1_vlan: left promiscuous mode [ 202.613106][ T46] veth0_vlan: left promiscuous mode [ 202.633443][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 202.671427][ T46] pim6reg (unregistering): left allmulticast mode [ 202.787691][T13704] /dev/sr0: Can't open blockdev [ 202.824882][ T1326] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 202.853364][T13705] xt_bpf: check failed: parse error [ 202.932604][ T67] Bluetooth: hci3: command tx timeout [ 202.972004][ T1326] usb 8-1: device descriptor read/64, error -71 [ 203.101025][ T1326] usb usb8-port1: attempt power cycle [ 203.292092][ T46] team0 (unregistering): Port device team_slave_1 removed [ 203.379775][ T46] team0 (unregistering): Port device team_slave_0 removed [ 203.474441][ T1326] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 203.507978][ T1326] usb 8-1: device descriptor read/8, error -71 [ 203.763144][ T1326] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 203.786048][ T1326] usb 8-1: device descriptor read/8, error -71 [ 203.902712][ T1326] usb usb8-port1: unable to enumerate USB device [ 204.029189][T13707] __nla_validate_parse: 1 callbacks suppressed [ 204.029200][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 204.194927][T13643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.216112][T13643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.232215][T13643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.242049][T13643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.301723][T13643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.316230][T13643] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.333105][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.335423][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.349266][T10451] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.351673][T10451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.658553][T13643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.663679][T13765] program syz.0.2559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.696857][T13643] veth0_vlan: entered promiscuous mode [ 204.709658][T13643] veth1_vlan: entered promiscuous mode [ 204.733703][T13643] veth0_macvtap: entered promiscuous mode [ 204.749809][T13643] veth1_macvtap: entered promiscuous mode [ 204.762060][T13643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.770508][T13643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.776530][T13643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.779396][T13643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.781897][T13643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.784460][T13643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.831105][T13780] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.834261][T13780] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.837129][T13780] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.839960][T13780] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.851725][T13780] tmpfs: Unknown parameter 'nr_inopes' [ 204.860502][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.862770][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.881016][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.883285][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.031994][T13787] veth1_to_batadv: entered promiscuous mode [ 205.034193][T13787] macsec1: entered promiscuous mode [ 205.042776][T13789] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 205.044886][T13789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.051261][T13789] vhci_hcd vhci_hcd.0: Device attached [ 205.055765][T13790] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 205.059017][T10451] vhci_hcd: stop threads [ 205.060550][T10451] vhci_hcd: release socket [ 205.061972][T10451] vhci_hcd: disconnect device [ 205.140755][T13795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2567'. [ 205.152880][ T67] Bluetooth: hci3: command tx timeout [ 205.334506][T13798] netlink: 'syz.0.2568': attribute type 10 has an invalid length. [ 205.345285][ T1326] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 205.442090][T13807] fuse: Bad value for 'user_id' [ 205.443794][T13807] fuse: Bad value for 'user_id' [ 205.517572][ T1326] usb 7-1: too many configurations: 164, using maximum allowed: 8 [ 205.521366][ T1326] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 205.523740][ T1326] usb 7-1: can't read configurations, error -61 [ 205.597000][T13810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.611282][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2574'. [ 205.615459][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2574'. [ 205.618274][T13813] netlink: 'syz.0.2574': attribute type 6 has an invalid length. [ 205.640135][T13810] IPVS: persistence engine module ip_vs_pe_s not found [ 205.676788][ T1326] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 205.680814][T13820] Invalid logical block size (-2147483648) [ 205.698566][T13818] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 205.724825][T13826] No control pipe specified [ 205.850507][ T1326] usb 7-1: too many configurations: 164, using maximum allowed: 8 [ 205.854624][ T1326] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 205.857088][ T1326] usb 7-1: can't read configurations, error -61 [ 205.859679][ T1326] usb usb7-port1: attempt power cycle [ 205.868248][T13839] random: crng reseeded on system resumption [ 206.061553][ T8407] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 206.195084][T13850] pim6reg: entered allmulticast mode [ 206.199415][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2585'. [ 206.202570][ T8407] usb 5-1: device descriptor read/64, error -71 [ 206.208200][T13850] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 206.232567][ T1326] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 206.254130][ T29] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 206.259026][ T1326] usb 7-1: too many configurations: 164, using maximum allowed: 8 [ 206.262838][ T1326] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 206.266016][ T1326] usb 7-1: can't read configurations, error -61 [ 206.291176][T13851] pim6reg: left allmulticast mode [ 206.403632][ T29] usb 8-1: device descriptor read/64, error -71 [ 206.414347][ T1326] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 206.438764][ T1326] usb 7-1: too many configurations: 164, using maximum allowed: 8 [ 206.442556][ T1326] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 206.444937][ T1326] usb 7-1: can't read configurations, error -61 [ 206.447375][ T1326] usb usb7-port1: unable to enumerate USB device [ 206.457133][ T8407] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 206.596221][ T8407] usb 5-1: device descriptor read/64, error -71 [ 206.660371][ T29] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 206.703798][T13864] IPVS: persistence engine module ip_vs_pe_s not found [ 206.714862][ T8407] usb usb5-port1: attempt power cycle [ 206.822057][ T29] usb 8-1: device descriptor read/64, error -71 [ 206.938359][ T29] usb usb8-port1: attempt power cycle [ 207.077231][ T8407] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 207.100958][ T8407] usb 5-1: device descriptor read/8, error -71 [ 207.312362][ T29] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 207.335639][ T29] usb 8-1: device descriptor read/8, error -71 [ 207.387189][ T8407] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 207.387262][ T67] Bluetooth: hci3: command tx timeout [ 207.409779][ T8407] usb 5-1: device descriptor read/8, error -71 [ 207.526398][ T8407] usb usb5-port1: unable to enumerate USB device [ 207.590406][ T29] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 207.612802][ T29] usb 8-1: device descriptor read/8, error -71 [ 207.729711][ T29] usb usb8-port1: unable to enumerate USB device [ 207.825660][ T40] kauditd_printk_skb: 931 callbacks suppressed [ 207.825677][ T40] audit: type=1400 audit(1747984701.857:5390): avc: denied { read write } for pid=8412 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.841024][ T40] audit: type=1400 audit(1747984701.857:5391): avc: denied { read write open } for pid=8412 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.851476][ T40] audit: type=1400 audit(1747984701.857:5392): avc: denied { ioctl } for pid=8412 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.862250][ T40] audit: type=1400 audit(1747984701.857:5393): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=45664 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 207.873215][ T40] audit: type=1400 audit(1747984701.885:5394): avc: denied { read } for pid=13873 comm="syz.5.2593" name="v4l-subdev1" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.882672][ T40] audit: type=1400 audit(1747984701.885:5395): avc: denied { open } for pid=13873 comm="syz.5.2593" path="/dev/v4l-subdev1" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.893590][ T40] audit: type=1400 audit(1747984701.885:5396): avc: denied { ioctl } for pid=13873 comm="syz.5.2593" path="/dev/v4l-subdev1" dev="devtmpfs" ino=966 ioctlcmd=0x5647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.904809][ T40] audit: type=1400 audit(1747984701.904:5397): avc: denied { read write } for pid=8412 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.914004][ T40] audit: type=1400 audit(1747984701.904:5398): avc: denied { read write open } for pid=8412 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.923400][ T40] audit: type=1400 audit(1747984701.904:5399): avc: denied { ioctl } for pid=8412 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.103280][T13890] netlink: 'syz.5.2597': attribute type 10 has an invalid length. [ 208.354486][T13899] vlan2: entered promiscuous mode [ 208.356142][T13899] bond0: entered promiscuous mode [ 208.358348][T13899] bond_slave_0: entered promiscuous mode [ 208.360361][T13899] bond_slave_1: entered promiscuous mode [ 208.481646][T13903] netlink: 3696 bytes leftover after parsing attributes in process `syz.5.2601'. [ 208.484685][T13903] netlink: 3696 bytes leftover after parsing attributes in process `syz.5.2601'. [ 208.636728][T13913] program syz.5.2605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.640880][T13913] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 208.706813][T13916] binder: 13915:13916 ioctl c0306201 2000000001c0 returned -14 [ 208.999776][T13938] sctp: [Deprecated]: syz.5.2614 (pid 13938) Use of int in max_burst socket option. [ 208.999776][T13938] Use struct sctp_assoc_value instead [ 209.079454][T13840] syz.3.2581 (13840) used greatest stack depth: 17992 bytes left [ 209.128347][ T1140] syzkaller0: tun_net_xmit 76 [ 209.131879][ T1140] syzkaller0: tun_net_xmit 48 [ 209.271963][T13950] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 209.600663][ T67] Bluetooth: hci3: command tx timeout [ 210.833812][T13954] netlink: 'syz.3.2619': attribute type 5 has an invalid length. [ 210.869157][T13973] netlink: 'syz.5.2624': attribute type 4 has an invalid length. [ 210.893807][ T5927] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 211.004418][T13986] macvlan0: Device is already in use. [ 211.018864][T13988] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2630'. [ 211.032743][ T5927] usb 7-1: device descriptor read/64, error -71 [ 211.035810][T13984] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 211.178692][T14008] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 211.285488][T14016] netlink: 'syz.5.2640': attribute type 2 has an invalid length. [ 211.288119][T14016] netlink: 46 bytes leftover after parsing attributes in process `syz.5.2640'. [ 211.302011][ T5927] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 211.398119][T14032] /dev/sg0: Can't lookup blockdev [ 211.460391][ T5927] usb 7-1: device descriptor read/64, error -71 [ 211.493948][T14038] binder: 14037:14038 ioctl 4018620d 0 returned -22 [ 211.578501][ T5927] usb usb7-port1: attempt power cycle [ 211.770537][ T5974] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 211.909572][ T5974] usb 8-1: device descriptor read/64, error -71 [ 211.941398][ T5927] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 211.969337][ T5927] usb 7-1: device descriptor read/8, error -71 [ 212.025579][T14045] sp0: Synchronizing with TNC [ 212.035963][T14044] [U] è [ 212.178557][ T5974] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 212.219702][ T5927] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 212.241806][ T5927] usb 7-1: device descriptor read/8, error -71 [ 212.300498][T14055] xfrm1: entered allmulticast mode [ 212.315549][ T5974] usb 8-1: device descriptor read/64, error -71 [ 212.360858][ T5927] usb usb7-port1: unable to enumerate USB device [ 212.391547][ T5998] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 212.433564][ T5974] usb usb8-port1: attempt power cycle [ 212.504914][T14067] random: crng reseeded on system resumption [ 212.552081][ T5998] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 212.555462][ T5998] usb 5-1: config index 0 descriptor too short (expected 65412, got 99) [ 212.558132][ T5998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.564276][ T5998] usb 5-1: config index 1 descriptor too short (expected 65412, got 99) [ 212.566911][ T5998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.571134][ T5998] usb 5-1: config index 2 descriptor too short (expected 65412, got 99) [ 212.574622][ T5998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.579198][ T5998] usb 5-1: config index 3 descriptor too short (expected 65412, got 99) [ 212.581880][ T5998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.586149][ T5998] usb 5-1: config index 4 descriptor too short (expected 65412, got 99) [ 212.589014][ T5998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.594867][ T5998] usb 5-1: config index 5 descriptor too short (expected 65412, got 99) [ 212.597605][ T5998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.601642][ T5998] usb 5-1: config index 6 descriptor too short (expected 65412, got 99) [ 212.604391][ T5998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.609153][ T5998] usb 5-1: config index 7 descriptor too short (expected 65412, got 99) [ 212.611951][ T5998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.618840][ T5998] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 212.621841][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.624398][ T5998] usb 5-1: Product: syz [ 212.625940][ T5998] usb 5-1: Manufacturer: syz [ 212.627806][ T5998] usb 5-1: SerialNumber: syz [ 212.637620][ T5998] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 212.670428][ T5927] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 212.796678][ T5974] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 212.819454][ T5974] usb 8-1: device descriptor read/8, error -71 [ 213.085279][ T5974] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 213.119182][ T5974] usb 8-1: device descriptor read/8, error -71 [ 213.237379][ T40] kauditd_printk_skb: 907 callbacks suppressed [ 213.237395][ T40] audit: type=1400 audit(1747984706.917:6307): avc: denied { ioctl } for pid=14037 comm="syz.3.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.247525][ T5974] usb usb8-port1: unable to enumerate USB device [ 213.273864][ T40] audit: type=1400 audit(1747984706.945:6308): avc: denied { ioctl } for pid=14046 comm="syz.0.2649" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.389076][ T40] audit: type=1400 audit(1747984707.058:6309): avc: denied { recv } for pid=5920 comm="syz-executor" saddr=127.0.0.1 src=39026 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 213.401048][ T40] audit: type=1400 audit(1747984707.058:6310): avc: denied { read write } for pid=8412 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.409621][ T40] audit: type=1400 audit(1747984707.058:6311): avc: denied { read write open } for pid=8412 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.417536][ T40] audit: type=1400 audit(1747984707.058:6312): avc: denied { ioctl } for pid=8412 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.427201][ T40] audit: type=1400 audit(1747984707.067:6313): avc: denied { recv } for pid=46 comm="kworker/u32:2" saddr=10.0.2.2 src=45664 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 213.436358][ T40] audit: type=1400 audit(1747984707.086:6314): avc: denied { create } for pid=14072 comm="syz.5.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.442803][ T40] audit: type=1400 audit(1747984707.086:6315): avc: denied { write } for pid=14072 comm="syz.5.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.450765][ T40] audit: type=1400 audit(1747984707.114:6316): avc: denied { recv } for pid=0 comm="swapper/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39026 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 213.532733][T14074] 9pnet_virtio: no channels available for device syz [ 213.791436][ T5927] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 213.794026][ T5927] ath9k_htc: Failed to initialize the device [ 213.820796][ T5927] usb 5-1: ath9k_htc: USB layer deinitialized [ 214.250694][ T8407] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 214.389514][ T8407] usb 8-1: device descriptor read/64, error -71 [ 214.646099][ T8407] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 214.873099][T14100] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2662'. [ 215.352472][ T5950] usb 5-1: USB disconnect, device number 31 [ 215.504948][T14112] binder: BINDER_SET_CONTEXT_MGR already set [ 215.507435][T14112] binder: 14111:14112 ioctl 4018620d 200000000100 returned -16 [ 215.510146][T14112] binder: BINDER_SET_CONTEXT_MGR already set [ 215.512388][T14112] binder: 14111:14112 ioctl 4018620d 200000000100 returned -16 [ 215.515022][T14112] binder: BINDER_SET_CONTEXT_MGR already set [ 215.516950][T14112] binder: 14111:14112 ioctl 4018620d 200000000100 returned -16 [ 215.519874][T14112] binder: BINDER_SET_CONTEXT_MGR already set [ 215.521811][T14112] binder: 14111:14112 ioctl 4018620d 200000000100 returned -16 [ 215.525116][T14112] binder: BINDER_SET_CONTEXT_MGR already set [ 215.527254][T14112] binder: 14111:14112 ioctl 4018620d 200000000100 returned -16 [ 215.529913][T14112] binder: BINDER_SET_CONTEXT_MGR already set [ 215.531951][T14112] binder: 14111:14112 ioctl 4018620d 200000000100 returned -16 [ 215.535697][T14112] binder: BINDER_SET_CONTEXT_MGR already set [ 215.537831][T14112] binder: 14111:14112 ioctl 4018620d 200000000100 returned -16 [ 215.540580][T14112] binder: BINDER_SET_CONTEXT_MGR already set [ 215.542533][T14112] binder: 14111:14112 ioctl 4018620d 200000000100 returned -16 [ 215.545913][T14112] binder: BINDER_SET_CONTEXT_MGR already set [ 215.547937][T14112] binder: 14111:14112 ioctl 4018620d 200000000100 returned -16 [ 215.550712][T14112] binder: BINDER_SET_CONTEXT_MGR already set [ 215.552819][T14112] binder: 14111:14112 ioctl 4018620d 200000000100 returned -16 [ 215.555745][T14112] binder: BINDER_SET_CONTEXT_MGR already set [ 215.557888][T14112] binder: 14111:14112 ioctl 4018620d 200000000100 returned -16 [ 215.659012][T14124] ================================================================== [ 215.661671][T14124] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x21d2/0x43c0 [ 215.664568][T14124] Write of size 1280 at addr ffffc90006a51b40 by task vivid-000-vid-c/14124 [ 215.668138][T14124] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.669414][T14124] CPU: 0 UID: 0 PID: 14124 Comm: vivid-000-vid-c Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 215.669429][T14124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.669437][T14124] Call Trace: [ 215.669441][T14124] [ 215.669445][T14124] dump_stack_lvl+0x116/0x1f0 [ 215.669463][T14124] print_report+0xc3/0x670 [ 215.669479][T14124] ? __virt_addr_valid+0x5e/0x590 [ 215.669496][T14124] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 215.669512][T14124] kasan_report+0xe0/0x110 [ 215.669523][T14124] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 215.669539][T14124] kasan_check_range+0xef/0x1a0 [ 215.669553][T14124] __asan_memcpy+0x3c/0x60 [ 215.669568][T14124] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 215.669591][T14124] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 215.669609][T14124] vivid_fillbuff+0x8d2/0x4250 [ 215.669624][T14124] ? do_raw_spin_lock+0x12c/0x2b0 [ 215.669641][T14124] ? __pfx_vivid_fillbuff+0x10/0x10 [ 215.669660][T14124] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 215.669670][T14124] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.669686][T14124] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 215.669701][T14124] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 215.669717][T14124] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 215.669732][T14124] vivid_thread_vid_cap+0x454/0xda0 [ 215.669748][T14124] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 215.669763][T14124] ? do_raw_spin_lock+0x12c/0x2b0 [ 215.669775][T14124] ? find_held_lock+0x2b/0x80 [ 215.669789][T14124] ? rcu_is_watching+0x12/0xc0 [ 215.669801][T14124] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 215.669816][T14124] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.669830][T14124] ? __kthread_parkme+0x19e/0x250 [ 215.669846][T14124] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 215.669860][T14124] kthread+0x3c2/0x780 [ 215.669870][T14124] ? __pfx_kthread+0x10/0x10 [ 215.669880][T14124] ? __pfx_kthread+0x10/0x10 [ 215.669889][T14124] ? __pfx_kthread+0x10/0x10 [ 215.669898][T14124] ? __pfx_kthread+0x10/0x10 [ 215.669908][T14124] ? rcu_is_watching+0x12/0xc0 [ 215.669920][T14124] ? __pfx_kthread+0x10/0x10 [ 215.669930][T14124] ret_from_fork+0x45/0x80 [ 215.669941][T14124] ? __pfx_kthread+0x10/0x10 [ 215.669950][T14124] ret_from_fork_asm+0x1a/0x30 [ 215.669969][T14124] [ 215.669973][T14124] [ 215.699755][T14126] debugfs: Bad value for 'uid' [ 215.699828][T14124] The buggy address belongs to the virtual mapping at [ 215.699828][T14124] [ffffc90006a4f000, ffffc90006a53000) created by: [ 215.699828][T14124] vb2_vmalloc_alloc+0x135/0x3f0 [ 215.704544][T14126] debugfs: Bad value for 'uid' [ 215.704951][T14124] [ 215.704958][T14124] The buggy address belongs to the physical page: [ 215.728557][T14126] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2670'. [ 215.729236][T14124] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880481baf70 pfn:0x481ba [ 215.729251][T14124] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 215.729265][T14124] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 215.729274][T14124] raw: ffff8880481baf70 0000000000000000 00000001ffffffff 0000000000000000 [ 215.770103][T14124] page dumped because: kasan: bad access detected [ 215.772262][T14124] page_owner tracks the page as allocated [ 215.774108][T14124] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 14123, tgid 14122 (syz.0.2669), ts 215657676076, free_ts 215651313105 [ 215.780238][T14124] post_alloc_hook+0x181/0x1b0 [ 215.781793][T14124] get_page_from_freelist+0x135c/0x3920 [ 215.783765][T14124] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 215.785736][T14124] alloc_pages_mpol+0x1fb/0x550 [ 215.787652][T14124] alloc_pages_noprof+0x131/0x390 [ 215.789413][T14124] __vmalloc_node_range_noprof+0x732/0x1540 [ 215.791283][T14124] vmalloc_user_noprof+0x6b/0x90 [ 215.792850][T14124] vb2_vmalloc_alloc+0x135/0x3f0 [ 215.794442][T14124] __vb2_queue_alloc+0x8c6/0x1280 [ 215.796093][T14124] vb2_core_reqbufs+0xa90/0xfe0 [ 215.797808][T14124] __vb2_init_fileio+0x3f1/0x1100 [ 215.799400][T14124] __vb2_perform_fileio+0x9c2/0x1660 [ 215.801071][T14124] vb2_fop_read+0x215/0x3e0 [ 215.802533][T14124] v4l2_read+0x229/0x360 [ 215.803921][T14124] vfs_readv+0x6bf/0x8a0 [ 215.805262][T14124] do_preadv+0x1af/0x270 [ 215.806691][T14124] page last free pid 5998 tgid 5998 stack trace: [ 215.808767][T14124] __free_frozen_pages+0x69d/0xff0 [ 215.810372][T14124] vfree+0x176/0x960 [ 215.811676][T14124] delayed_vfree_work+0x56/0x70 [ 215.813291][T14124] process_one_work+0x9cf/0x1b70 [ 215.815026][T14124] worker_thread+0x6c8/0xf10 [ 215.816689][T14124] kthread+0x3c2/0x780 [ 215.818079][T14124] ret_from_fork+0x45/0x80 [ 215.819510][T14124] ret_from_fork_asm+0x1a/0x30 [ 215.821041][T14124] [ 215.821817][T14124] Memory state around the buggy address: [ 215.823578][T14124] ffffc90006a51f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 215.826153][T14124] ffffc90006a51f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 215.828659][T14124] >ffffc90006a52000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 215.831152][T14124] ^ [ 215.832452][T14124] ffffc90006a52080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 215.834988][T14124] ffffc90006a52100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 215.837588][T14124] ================================================================== [ 215.853206][T14124] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 215.855534][T14124] CPU: 0 UID: 0 PID: 14124 Comm: vivid-000-vid-c Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 215.859348][T14124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.862733][T14124] Call Trace: [ 215.863825][T14124] [ 215.864822][T14124] dump_stack_lvl+0x3d/0x1f0 [ 215.866374][T14124] panic+0x71c/0x800 [ 215.868079][T14124] ? __pfx_panic+0x10/0x10 [ 215.869567][T14124] ? irqentry_exit+0x3b/0x90 [ 215.871057][T14124] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.872711][T14124] ? preempt_schedule_thunk+0x16/0x30 [ 215.874450][T14124] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 215.876312][T14124] ? preempt_schedule_common+0x44/0xc0 [ 215.878115][T14124] ? check_panic_on_warn+0x1f/0xb0 [ 215.879774][T14124] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 215.881549][T14124] check_panic_on_warn+0xab/0xb0 [ 215.883136][T14124] end_report+0x107/0x170 [ 215.884522][T14124] kasan_report+0xee/0x110 [ 215.885995][T14124] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 215.888093][T14124] kasan_check_range+0xef/0x1a0 [ 215.889774][T14124] __asan_memcpy+0x3c/0x60 [ 215.891291][T14124] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 215.893380][T14124] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 215.895351][T14124] vivid_fillbuff+0x8d2/0x4250 [ 215.897285][T14124] ? do_raw_spin_lock+0x12c/0x2b0 [ 215.899325][T14124] ? __pfx_vivid_fillbuff+0x10/0x10 [ 215.901438][T14124] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 215.903665][T14124] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.905664][T14124] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 215.907814][T14124] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 215.909789][T14124] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 215.912065][T14124] vivid_thread_vid_cap+0x454/0xda0 [ 215.914263][T14124] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 215.916689][T14124] ? do_raw_spin_lock+0x12c/0x2b0 [ 215.918660][T14124] ? find_held_lock+0x2b/0x80 [ 215.920603][T14124] ? rcu_is_watching+0x12/0xc0 [ 215.922610][T14124] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 215.924992][T14124] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.927154][T14124] ? __kthread_parkme+0x19e/0x250 [ 215.928883][T14124] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 215.930814][T14124] kthread+0x3c2/0x780 [ 215.932215][T14124] ? __pfx_kthread+0x10/0x10 [ 215.933761][T14124] ? __pfx_kthread+0x10/0x10 [ 215.935359][T14124] ? __pfx_kthread+0x10/0x10 [ 215.937051][T14124] ? __pfx_kthread+0x10/0x10 [ 215.938556][T14124] ? rcu_is_watching+0x12/0xc0 [ 215.940184][T14124] ? __pfx_kthread+0x10/0x10 [ 215.941697][T14124] ret_from_fork+0x45/0x80 [ 215.943200][T14124] ? __pfx_kthread+0x10/0x10 [ 215.944704][T14124] ret_from_fork_asm+0x1a/0x30 [ 215.946536][T14124] [ 215.948555][T14124] Kernel Offset: disabled [ 215.950210][T14124] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:18:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f9bb5 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc90005bc7168 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9adfe560 R15=ffffffff854f9b50 RIP=ffffffff854f9bdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3b48a5 CR3=000000002ee1b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f991a411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f991a411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f991a411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f991a411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f991a411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f991a411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000376f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000144c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802f062f58 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8dbbedb3 RDI=ffffffff8bf4a2a0 RBP=ffffffff8e3bfc00 RSP=ffffc9000431f700 R8 =0000000000000007 R9 =000000000007ffff R10=0000000000000006 R11=0000000000000000 R12=ffff88802f062440 R13=0000000000000001 R14=00000000ffffffff R15=0000000000000001 RIP=ffffffff8b6d2622 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efd2d4e7d60 CR3=000000003719c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd2c9836a3 00007efd2c9836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed7a6c940 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555673bbb12 00005555673bb6b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555673bb6a8 00005555673baee0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03048210000bd003 0410000bc0031e10 000bb0030910000b a0030e10000b9003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010b80040884c5ba b608000100001408 0606011ec6039010 000c80031fa41000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0bf0031010000be0 03048210000bd003 0410000bc0031e10 000bb0030910000b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0030e10000b9003 0008000b88034080 8008000b80030180 04001000041472f0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07c2100001a00308 10000ab203301000 0aa2030010000a92 0302c59410000a82 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000258527 RBX=0000000000000002 RCX=ffffffff8b6d3419 RDX=0000000000000000 RSI=ffffffff8dbe43c5 RDI=ffffffff8bf4a2a0 RBP=ffffed1003ad9910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6cc880 R14=ffffffff90852d10 R15=0000000000000000 RIP=ffffffff8b6d1caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001200 CR3=000000005b933000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff12e56ff0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecb0611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecb0611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecb0611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecb0611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecb0611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecb0611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000025400b RBX=0000000000000003 RCX=ffffffff8b6d3419 RDX=0000000000000000 RSI=ffffffff8dbe43c5 RDI=ffffffff8bf4a2a0 RBP=ffffed1003b5c000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dae0000 R14=ffffffff90852d10 R15=0000000000000000 RIP=ffffffff8b6d1caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f991a372720 CR3=0000000107688000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff847d6d10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f991a411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f991a411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f991a411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f991a411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f991a411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f991a411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000