last executing test programs: 1m25.151661433s ago: executing program 2 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB="00ad6a1177f4c0e2e5dd0c000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102000921000500012200000905"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x105c40) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) 1m23.811823321s ago: executing program 2 (id=51): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa42, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x4, 0x0) write$FUSE_WRITE(r3, &(0x7f00000000c0)={0x18}, 0xfffffdef) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000040)={0x800, 0x1}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@can_delroute={0x24, 0x19, 0x1, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000180)="0f0013440f20c0663503000000440f22c00f01c50f20c06635080000000f22c0baf80c66b872fe538666efbafc0cb00fee0f01cf0fdaf7d364106664d9e80f01ca", 0x41}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x402, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) (async) socket(0xa, 0x2, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa42, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000000), 0x4, 0x0) (async) write$FUSE_WRITE(r3, &(0x7f00000000c0)={0x18}, 0xfffffdef) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000040)={0x800, 0x1}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'veth0_vlan\x00'}) (async) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@can_delroute={0x24, 0x19, 0x1, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000180)="0f0013440f20c0663503000000440f22c00f01c50f20c06635080000000f22c0baf80c66b872fe538666efbafc0cb00fee0f01cf0fdaf7d364106664d9e80f01ca", 0x41}], 0x1, 0x0, 0x0, 0x0) (async) 1m23.811601978s ago: executing program 2 (id=52): r0 = socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x1a, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000640)="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", 0xa7e}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4004004, &(0x7f0000000540)={0x11, 0x8100, r3}, 0x14) 1m23.75517638s ago: executing program 2 (id=55): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)={[{@huge_advise}]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x283fe, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x8, @loopback, 0x3}, {0xa, 0x4e20, 0x6, @private1, 0x84}, 0x0, {[0x5, 0x9, 0xffff2350, 0x8, 0x3b1632fe, 0xd1, 0x9, 0x200]}}, 0x5c) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x9}, &(0x7f0000000240)=0x6, 0x0, 0x6, 0x400, 0x70, 0x40006, 0x60, 0x5}}], 0x58}, 0x0) 1m23.691729268s ago: executing program 2 (id=56): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1f, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000003b00)='@', 0x1}], 0x1, &(0x7f0000002880)=ANY=[], 0x98, 0x4000001}}], 0x1, 0x4004090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000000c0)={0x1, 0x48a6, 0x0, 0x0, 0x1}) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$I2C_SLAVE(r0, 0x703, 0x60) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x4, 0x2f, 0x0, @private0={0xfc, 0x3}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88f7}}}}}}}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1f, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000003b00)='@', 0x1}], 0x1, &(0x7f0000002880)=ANY=[], 0x98, 0x4000001}}], 0x1, 0x4004090) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x40045702, &(0x7f0000000000)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000000c0)={0x1, 0x48a6, 0x0, 0x0, 0x1}) (async) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) ioctl$I2C_SLAVE(r0, 0x703, 0x60) (async) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x4, 0x2f, 0x0, @private0={0xfc, 0x3}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88f7}}}}}}}, 0x0) (async) 1m22.101586178s ago: executing program 2 (id=86): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) syz_usb_disconnect(r0) 1m22.095206016s ago: executing program 32 (id=86): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) syz_usb_disconnect(r0) 1m16.719863517s ago: executing program 0 (id=179): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x440, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000008ec0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0x2000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004e40)={0x50, 0x0, r3, {0x7, 0x9}}, 0x50) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file0\x00', 0xa) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r7 = syz_io_uring_setup(0x40003e, &(0x7f0000000080)={0x0, 0x0, 0x800, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}) io_uring_enter(r7, 0x92, 0x0, 0x0, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r11, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1e3319aadae2e6175721a3cd4a6c66c9cfee5daacdbcb3897b6e22700fbd46912ddf7eb7352d91f237ec5be725134803691cf67b131474060a8cd133e39031b068d09a42aeb26efa04f6ffffffff367d00c3af4ef08164ccac32f47572baba8d61e4b203704edd4c84615ffcf58d5c5491", @ANYRES16=r5, @ANYRES32=r6, @ANYRES32=r4], 0x24}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) 1m16.581863867s ago: executing program 0 (id=182): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @rand_addr=0x64010101}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x3, 0x20000000, 0x4) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800332b01be7e8d0894febfea7fae65eeea000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r3}, 0x10) (rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcffff124e000000000000003700feff0400000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r7, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0xffff}}}}}}, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r5}, 0x10) (rerun: 64) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r8, &(0x7f0000000340)='./file0\x00') execveat(r8, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000140)={{0x7, 0x0, 0x2, 0x4}, 'syz0\x00', 0x28}) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x21, &(0x7f0000000000)=0xffffffff, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m16.499765508s ago: executing program 0 (id=183): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}}) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f00000056c0)='./file0\x00', 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000240)={0x11, 0x49, &(0x7f00000001c0)="1254233074c3f8ca6b4c811c3041d174665e508647f0b39b06f718fb71b1656fb3980d79635454569416d26a7d348193b69ef40250a53ce1d4c77448d0313e3db6aa4d6f42df167f69"}) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfe, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x6, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0xac}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000080)={0x1, [0x0, 0x1, 0x80000001], [{0x800, 0x4, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xfffffff0, 0x9, 0x1}, {0x96, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0xf11a, 0x5, 0x0, 0x1, 0x1}, {0x3, 0xfffffbff, 0x0, 0x1, 0x0, 0x1}, {0x2, 0xd6a0, 0x1, 0x1}, {0x8, 0x4a5, 0x0, 0x1, 0x1}, {0xa, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x7ff, 0x0, 0x0, 0x1}, {0x2, 0x7, 0x0, 0x1, 0x0, 0x1}], 0x6}) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7ffe03"}) 1m16.431632197s ago: executing program 0 (id=184): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(r0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000c40)={r2, r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chdir(&(0x7f0000000140)='./file0\x00') pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b08d25a80648c7494f90324fc60100002400a000000053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 1m16.429942214s ago: executing program 0 (id=185): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}, 0x1, 0x2000000000000000}, 0x0) pread64(r0, &(0x7f0000000000)=""/179, 0xb3, 0x73) (async) pread64(r0, &(0x7f0000000000)=""/179, 0xb3, 0x73) 1m16.231744418s ago: executing program 0 (id=186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r3 = dup(r1) connect$802154_dgram(r3, &(0x7f0000000080)={0x24, @short}, 0x14) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) write$binfmt_aout(r3, &(0x7f0000000740)={{0x108, 0x7, 0x5, 0x2, 0x20b, 0x7, 0x73, 0x7fffffff}, "", ['\x00']}, 0x120) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xf6, 0xd, 0x8, 0x9}, {0x9, 0x10, 0x5, 0x7f}]}) 1m16.230422791s ago: executing program 33 (id=186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r3 = dup(r1) connect$802154_dgram(r3, &(0x7f0000000080)={0x24, @short}, 0x14) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) write$binfmt_aout(r3, &(0x7f0000000740)={{0x108, 0x7, 0x5, 0x2, 0x20b, 0x7, 0x73, 0x7fffffff}, "", ['\x00']}, 0x120) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xf6, 0xd, 0x8, 0x9}, {0x9, 0x10, 0x5, 0x7f}]}) 44.89137587s ago: executing program 1 (id=494): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0xfffffffe, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f01, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x10006, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x5, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x10000, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x114c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000006a49e832f0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) (async) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0xfffffffe, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f01, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x10006, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x5, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x10000, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x114c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) (async) fchdir(r0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000006a49e832f0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 44.888775399s ago: executing program 1 (id=496): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x8000, 0x1}, {0x50, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x8, 0x40}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x71, 0x80001) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x8, 0x1b, 0x7, 0x3, "61b5e111ddaaab6b039216e4410a6728b1126b0642b048989cf9aa20701e054e"}) 44.800997169s ago: executing program 1 (id=502): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x184) close(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000400)=""/95, 0x217000, 0x1000, 0x6, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x100a049, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRES64=r0, @ANYRES16=r2, @ANYRESHEX=r1], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x20048080) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) close_range(r4, r2, 0x2) socket(0x10, 0x3, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x2000000000000052, &(0x7f0000000000)=ANY=[@ANYBLOB="0300"/13], &(0x7f0000000240)='GPL\x00', 0x7eb58e44, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 44.800863776s ago: executing program 1 (id=503): mount$tmpfs(0x0, 0x0, 0x0, 0x23510d4, &(0x7f0000000040)=ANY=[]) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0xf02, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0) mount(&(0x7f0000000180)=@md0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x804001, &(0x7f0000000240)='\x00') setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x1d7b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x14b}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x0, 0x1}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x20001080) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb}, 0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x800, 0x1) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, &(0x7f0000000340)) 44.731320871s ago: executing program 1 (id=504): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0x0, 0x30364d54, 0x9, 0x438, 0x1, @stepwise={{0xc, 0xfffffff8}, {0x7, 0x762a}, {0x7, 0x3ff}}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x800000f, 0x4, 0x100, 0x8, 0x1e, 0x7}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0xad3, 0x10}, 0xc) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000001c0)={0x7fffffff, 0x3, 0x7, 0x22, 0x3}) 41.799991476s ago: executing program 1 (id=538): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) creat(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffebc}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 41.792787531s ago: executing program 34 (id=538): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) creat(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffebc}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 12.771048188s ago: executing program 6 (id=793): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000003c0)=0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000100"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r2, 0x4}, 0x38) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="4b385aa3949100dc6626c892b3bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/124, 0x7c}], 0x2}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000980)=ANY=[@ANYRES8=r5, @ANYRESDEC], 0x12f4}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000f41cdd373170000400000000000000", @ANYRES32=r2, @ANYBLOB='\v\x00'/20, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="03000000030000000300"/28], 0x50) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="40010000100003000000000000000000fe80000000000000000000000000002300000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414bb00000000000000000000000000000000330000007f000001000000000000000000000000080000000000000000000000000000000600000000660000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000002000000000000000002000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d0000000000"], 0x140}}, 0x20000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00008ee000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c2b805000000b9030000000f01c166ba430066b8003866efc4c105f141d0f3260f35c4e17c50e8b8010000000f01d967650f01ca2e0f08", 0x39}], 0x1, 0x0, 0x0, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) syz_open_dev$vcsn(&(0x7f0000000000), 0x100000001, 0x100) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r10}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001500)="64cabf2dfb58fc090088a8ffff", 0xd}], 0x2}, 0x0) 11.501216191s ago: executing program 6 (id=812): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_procfs(r0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x200002, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e002803008c71ef288563"], 0xffdd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x9, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}]) r5 = dup(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r6 = socket(0xa, 0x6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000002140)=""/4096, &(0x7f00000000c0)=0x1000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0xfffffffffffffe95, 0x30, 0x871a15abc695fb3d, 0x4c, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) mmap(&(0x7f000008a000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x21ce1000) r8 = socket$inet(0x2, 0x2, 0x1) read$msr(r5, &(0x7f0000000480)=""/159, 0x9f) setsockopt$sock_int(r8, 0x1, 0x0, &(0x7f0000000440)=0x9, 0x4) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000100000000000000000000001f006b0000009500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000540)="2db153d8c12fdc18187fb15564170ba8fde4e065ee164f340f6211805d8be046aa50f1aaade582cbf74114055e12111811304bf1d234a60f4b70679424f07b214164e76b3ddd73626b1f96cfb55bb310a7d77e42087edd60d90afbd92ced3d66e3d11402f32450cf3df40b546dcce7e728da4d8c82837ddd9a20e12496c226ea19363c7174bd3009bb289c72cc760e5ce248ad6ae73758c9f6ca62f999e3db5d6e2f1b5a44f3e9dd8a06c3097df9f88f62397382cc57a1d82cfed36f7ce0827bafc7f72f74a18c87f3aa24ad2d51764fb9fcc82d4b27996292da5a8147db7f43028c407259857a76f01f67bb597f52") write$UHID_INPUT(r5, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0xf13) 9.547266361s ago: executing program 6 (id=824): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="003a00000000e86b1fbe3ee2e60ff37c41313db7777bd8b710f2b9418c74f806221dae7d35b10beab20f1e572aad31013a31eb9db2bf01078038c62af96de780d869d7c68fe7885e97b8a8a84cd5ed2317ad83e95a445601fb69f592d756318b7b0b09ab4316c34337b6fd8a7277ed21fe88058d45d04d49d901fca1a6a0225915e8c622d07a093a02f9ef526cfa14ca325f3ccb1ecaf55493b8ed17f432c0bbd514e310d187542d224654676ce867f5995d2b3a2c8103a023e7f80280a1736d234082e3993fc4d24c8e0503d517536d8014"], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x7b}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@mpls_newroute={0xd4, 0x18, 0x2, 0x70bd27, 0x25dfdbfd, {0x1c, 0x10, 0x10, 0x9, 0xfc, 0x0, 0x34, 0x8, 0x1000}, [@RTA_VIA={0x14, 0x12, {0x9}}, @RTA_OIF={0x8}, @RTA_NEWDST={0x84, 0x13, [{0x1000}, {0xffff9, 0x0, 0x1}, {0x2d1}, {0xe}, {0x40}, {0x0, 0x0, 0x1}, {0x97}, {0x2, 0x0, 0x1}, {}, {0x400, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6303}, {0x6, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0xa0fe}, {0x8, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x45, 0x0, 0x1}, {0x6}, {0x7, 0x0, 0x1}, {0x2}, {0x8}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xffff9}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5}, {0xe}, {0x3}]}, @RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}]}, 0xd4}}, 0x24000045) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x6, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], &(0x7f0000000080)='GPL\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r10}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r11, 0x34}, 0x10) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}, 0x0, 0x0, r4}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000080)=0x2) 8.210397831s ago: executing program 6 (id=838): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x3, 0x80}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_emit_ethernet(0x92, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x5c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8dffffff, 0x2}, @md5sig={0x13, 0x12, "ca0c73a263a2ef1df706fbd1dd9500"}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}, @mptcp=@remove_addr={0x1e, 0xe, 0x7, 0x0, "8a3d6de393730d29f70e7f"}]}}}}}}}}, 0x0) 8.210139727s ago: executing program 6 (id=839): r0 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002380)={0x12, {"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", 0x1000}}, 0x1006) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x4, 0x6, 0xa8, 0x10001, 0x24, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x20, 0x20, 0x215d319f, 0x3}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x24, 0x2, 0x1, "a677c17a5a000000000000000000000000000000000000000000004000", 0x31324d59}) 8.118509769s ago: executing program 6 (id=840): renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x40084) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000340)) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4140aecd, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000580)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x80015b1a, 0x0) (async) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '/dev/\x0e]\x1ei?sn\xdf{h ?(\xd7'}, {0x20, '/\x00e\x0e/kvm\x00'}, {0x20, '*.*&'}, {0x20, '!+}-'}, {0x20, '#'}], 0xa, "7054079d65bdc2227c122cd31da99b7f24f67097d6922e2ef026101ea69c99ef64cb0678ae48e21151de7e5ff980877e537da18065fc7dbb63819cd73a87b373fc51683579a8efda214c4c31cfae2b1b8d814eeea300f2f5ec091dd1a8202fddbe90b098111b31998368fa5d1fa19739649302fa7bb9248d6db7098a11ea90f2e5797f2ebb4910f781f2a4ae409d17367931e8d503d7013c36a01c77c59063dbd346ea04ecd265be9abf7500122cda4399ccf1f6e0df7111f38ba226db87"}, 0xf3) (async) r9 = syz_open_dev$rtc(&(0x7f0000000200), 0xa, 0x80400) ioctl$RTC_EPOCH_SET(r9, 0x4008700e, 0xd28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x50e635c, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r10, 0xc4c85513, 0x0) (async) r11 = syz_open_dev$evdev(&(0x7f0000000280), 0x7f, 0x2000) ioctl$EVIOCRMFF(r11, 0x40044581, &(0x7f00000002c0)=0xff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 4.290418149s ago: executing program 5 (id=885): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000df00000000000000d6b9f6fb45a3ab3f9fb05a7b1e2d13cfb4c5977d5f32069e4df9e30eadb3e0d73988e4020cd0717e98ef7f4c0afcd0e218ad6a597ec85032c29dec05e0e340a1201356a0b3aa05639a830d705164376e4e4beb5f6c9e1b1a37337a4a0cec41757233125c3e703f6d7e30bc822cea90c10aa78e8481c34aed32b499726a7dedf3e9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='mmap_lock_acquire_returned\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030020001200600000000404730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x4181, 0x0) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000040)=0x4, &(0x7f00000000c0)=0x4) open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./bus\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x63, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x8, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@TCA_RATE={0x0, 0x5, {0x1, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 4.286552661s ago: executing program 5 (id=887): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0x78) bpf$MAP_CREATE(0x1100000000000000, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f00000021c0)=0x1, 0x4) recvmsg(r3, &(0x7f00000033c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="f3d2d4ba2000b070eeb800078ee8f020beb400b800088ee8bad004b090eef30fc73226660f1c86d28e440f20c0663508000000440f22c0f2a6"}], 0xaaaaaaaaaaaadcf, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) fcntl$addseals(r0, 0x409, 0x4) copy_file_range(r0, &(0x7f0000000000), r0, 0x0, 0x1, 0x0) 4.110469853s ago: executing program 5 (id=891): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f00000000c0)=0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)={0x38, r7, 0xf05, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={r10, 0x10001}, &(0x7f00000000c0)=0xc) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x84, &(0x7f0000000140)={r13, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r13, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r14, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) 3.430801253s ago: executing program 4 (id=895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000005180)={0x2020}, 0x2020) (async) read$FUSE(r10, &(0x7f0000005180)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ftruncate(r3, 0xff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.930729196s ago: executing program 4 (id=897): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x71, 0x80001) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x8, 0x1b, 0x7, 0x3, "61b5e111ddaaab6b039216e4410a6728b1126b0642b048989cf9aa20701e054e"}) 1.881439188s ago: executing program 5 (id=898): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f00000016c0)=[{0xfffffffffffffffe, &(0x7f0000000000)=0x40, 0x2}, {0x36, &(0x7f0000000040)=0x8, 0x82}, {0x8000000000000001, &(0x7f0000000080)=0x4, 0x2}, {0x2, &(0x7f00000000c0)=0x4, 0x2}, {0xc03f, &(0x7f0000000100)=0x80000001, 0x82}, {0x3ff, &(0x7f0000000140)=0x8, 0x186}, {0x1, &(0x7f0000000180)=0x2, 0x82}, {0x4, &(0x7f00000001c0)=0x1, 0x82}, {0xa, &(0x7f0000000200)=0x6, 0x2}, {0x9, &(0x7f0000000240)=0x6, 0x82}, {0x1000, &(0x7f0000000280)=0x7ff, 0x82}, {0x7, &(0x7f00000002c0)=0x5e2, 0x2a3ab7ea2659c393}, {0x6, &(0x7f0000000300)=0x6, 0x2}, {0x7fffffffffffffff, &(0x7f0000000340)=0x81, 0x82}, {0x6, &(0x7f0000000380)=0x40, 0x82}, {0x3, &(0x7f00000003c0)=0x8001, 0x2}, {0xc, &(0x7f0000000400)=0xd5cd, 0x80}, {0xb17, &(0x7f0000000440)=0x54, 0x2}, {0x4, &(0x7f0000000480)=0x7fffffff, 0x2}, {0xfffffffffffffffa, &(0x7f00000004c0)=0xfffffffffffffff9, 0x82}, {0x9, &(0x7f0000000500)=0x2ba7, 0x80}, {0x200, &(0x7f0000000540), 0x82}, {0xffffffffffffffff, &(0x7f0000000580)=0x2, 0x2}, {0x80, &(0x7f00000005c0)=0x7fffffff, 0x82}, {0x8, &(0x7f0000000600)=0xf, 0x82}, {0x3, &(0x7f0000000640)=0x5df, 0x2}, {0x1ff, &(0x7f0000000680)=0x4, 0x2}, {0x7, &(0x7f00000006c0)=0x1000, 0x82}, {0x0, &(0x7f0000000700)=0x4a, 0x2}, {0x0, &(0x7f0000000740), 0x2}, {0x7, &(0x7f0000000780)=0x7f, 0x82}, {0x8, &(0x7f00000007c0)=0x1, 0x2}, {0x7f, &(0x7f0000000800)=0x8, 0x2}, {0x10, &(0x7f0000000840)=0x1922, 0x82}, {0x6, &(0x7f0000000880)=0x200, 0x2}, {0x3, &(0x7f00000008c0)=0x1000, 0x2}, {0xfffffffffffffffe, &(0x7f0000000900)=0x81, 0x82}, {0x4, &(0x7f0000000940)=0x5, 0x82}, {0xffffffffffffff21, &(0x7f0000000980)=0x4, 0x82}, {0x7fffffff, &(0x7f00000009c0)=0x4, 0x2}, {0x7fffffff, &(0x7f0000000a00)=0x7, 0x82}, {0xb, &(0x7f0000000a40)=0x2, 0x2}, {0xfffffffffffffff7, &(0x7f0000000a80)=0x1000}, {0x0, &(0x7f0000000ac0)=0x7, 0x82}, {0x1, &(0x7f0000000b00)=0x401, 0x82}, {0x9fa, &(0x7f0000000b40)=0x9, 0x80}, {0x1, &(0x7f0000000b80)=0x2, 0x747d95adbe804a23}, {0xe4, &(0x7f0000000bc0)=0x5, 0x82}, {0x7, &(0x7f0000000c00)=0x1, 0x82}, {0x6, &(0x7f0000000c40)=0x12, 0x82}, {0x10001, &(0x7f0000000c80)=0x7, 0x2}, {0x5, &(0x7f0000000cc0)=0x4, 0x82}, {0x4, &(0x7f0000000d00)=0xe, 0x82}, {0x5, &(0x7f0000000d40)=0x2, 0x2}, {0x7, &(0x7f0000000d80)=0x4, 0x2}, {0x6, &(0x7f0000000dc0)=0x4, 0x82}, {0x6, &(0x7f0000000e00), 0x82}, {0x8, &(0x7f0000000e40)=0x7, 0x82}, {0x7, &(0x7f0000000e80)=0x7, 0x2}, {0x101, &(0x7f0000000ec0)=0x412f, 0x2}, {0x7, &(0x7f0000000f00)=0x4, 0x2}, {0x401, &(0x7f0000000f40)=0x8, 0x82}, {0x6, &(0x7f0000000f80)=0x8001, 0x82}, {0x5, &(0x7f0000000fc0)=0x3, 0x82}, {0x2, &(0x7f0000001000)=0x80000000, 0x82}, {0x9, &(0x7f0000001040)=0x2, 0x2}, {0x44dad7cd, &(0x7f0000001080)=0x5, 0x82}, {0x5, &(0x7f00000010c0)=0x8000000000000001, 0x82}, {0x1ff, &(0x7f0000001100)=0x8, 0x2}, {0x7, &(0x7f0000001140)=0x6, 0x82}, {0x5, &(0x7f0000001180)=0x7f, 0x1c830b7c4b67536f}, {0x3, &(0x7f00000011c0)=0x4, 0x2}, {0xce8, &(0x7f0000001200)=0xa, 0x82}, {0x80, &(0x7f0000001240)=0x7, 0x2}, {0x20000000000, &(0x7f0000001280)=0x7ff, 0x82}, {0xbc1, &(0x7f00000012c0), 0x82}, {0x5, &(0x7f0000001300)=0x1, 0x82}, {0xcc, &(0x7f0000001340)=0xe64, 0x2}, {0x4, &(0x7f0000001380)=0x8e22, 0x2}, {0x1, &(0x7f00000013c0)=0x3c6, 0x82}, {0x8, &(0x7f0000001400)=0x2, 0x2}, {0x4, &(0x7f0000001440)=0x7, 0x82}, {0x7f, &(0x7f0000001480)=0xb, 0x2}, {0x7, &(0x7f00000014c0)=0xe, 0x82}, {0xfb4, &(0x7f0000001500)=0xfff, 0x82}, {0x0, &(0x7f0000001540)=0x5, 0x2}, {0xfffffffff1472486, &(0x7f0000001580)=0x1, 0x2}, {0x0, &(0x7f00000015c0)=0x1, 0x82}, {0xfffffffffffffffc, &(0x7f0000001600)=0x3, 0x82}, {0x10001, &(0x7f0000001640)=0x8000000000000001, 0x2}, {0x8, &(0x7f0000001680)=0x9, 0x2}], 0x5b, 0x0, &(0x7f0000001f80)={0x77359400}, 0x0) futex(&(0x7f000000cffc)=0x40000080, 0xa, 0x1, 0x0, 0x0, 0x2) 1.821385573s ago: executing program 4 (id=899): setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000000)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8c200, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8c200, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x2, [0x0, 0x0]}) connect$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0xffff, 0x8, 0x7, 0x7, 0x75, @multicast}, 0x10) (async) connect$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0xffff, 0x8, 0x7, 0x7, 0x75, @multicast}, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SET_ENDIAN(0x14, 0x2) (async) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000340)) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) prctl$PR_SET_ENDIAN(0x14, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x19c, 0x3c, 0x100, 0x8, 0x25dfdbfd, {0x1d}, [@nested={0x18, 0xf4, 0x0, 0x1, [@typed={0x14, 0x31, 0x0, 0x0, @ipv6=@private2}]}, @generic="b30aaf39dfa95cbc2380f864fd7a39b1ff02f33224c7a8cad13331d82cfef0c6198b4b44e03c281685cfc530fd8879e200c67d259e670129cec3a7f7170d45349df89623b93577d13f64a6003c223b12bb650a472f2a47700434aa25b39314a076fa5316c142400856ed1df9f9a0a2976c2ece37437f240ec91610b38d98cc6202ae6dd1", @typed={0x4, 0x101}, @nested={0xc, 0x30, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @u32=0x2b8}]}, @generic="93d4fdf6d9aa78c3daabcbb310ccb6975d99c58de38ed26d30", @typed={0x4, 0x97}, @generic="3350ad5e0097adf781e28d7ea0ad9a1c36fb91111ae4137c577aab095c63dc2eaf7bccb08c4b8a99aa52e9d0a95e1951e7378702555045e2e1807a74a3e2b776a286a2a35f2fc1232222f3dcc65c72058f245cf90c44347911655875b4", @generic="f50e3eb8c96505bf3e238101208ee07cb8d2ebf117b4daf9b1c67d6fc0e2f489474d87f83d295705bdfdf83edea62c0efa7a469b4449c4a5bd7a059aea5ee14c0707fa4fac471f3477f8916f86c680f31624ac6406c39ff9aa201179afd9a4"]}, 0x19c}, 0x1, 0x0, 0x0, 0x140400c0}, 0x40) pipe(&(0x7f0000000600)) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) prctl$PR_SET_ENDIAN(0x14, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000a80)={{0x0, 0x0, 0x8, 0x402, 'syz0\x00', 0x2000}, 0x0, 0x1, 0x7, r1, 0x2, 0x8, 'syz1\x00', &(0x7f0000000a40)=['\xbb\xbb\xbb\xbb\xbb\xbb', '\x00'], 0x7}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x1) r7 = accept(r3, &(0x7f0000000d40)=@in={0x2, 0x0, @private}, &(0x7f0000000dc0)=0x80) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000e00)=0x2500, 0x4) prctl$PR_SET_ENDIAN(0x14, 0x0) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f0000000e80)) (async) ioctl$SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f0000000e80)) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000ec0)) (async) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000ec0)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000f00)=0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000f80), r3) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f80), r3) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x84004004}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x120, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x357}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9787}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x84004004}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x120, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x357}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9787}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) 1.82089309s ago: executing program 4 (id=901): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r2) (async, rerun: 32) r3 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x4}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr, 0x1}}, @sadb_lifetime={0x4, 0x4, 0xc84a}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}]}, 0xb0}}, 0x84) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB="08000d000000000008003f000802"], 0x4c}}, 0x0) 1.770976462s ago: executing program 4 (id=902): r0 = getegid() setfsgid(r0) (async) setfsgid(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) geteuid() (async) r2 = geteuid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) fchown(r1, r2, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2102, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc) r6 = io_uring_setup(0x6bad, &(0x7f00000000c0)={0x0, 0xc5ee, 0x200, 0x2, 0x8e, 0x0, r5}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000140)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101180, 0x40) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101180, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f00000002c0)={0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) (async) read$FUSE(r4, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) fstat(r1, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000023c0), &(0x7f0000002400)=0xc) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000023c0)={0x0, 0x0, 0x0}, &(0x7f0000002400)=0xc) write$FUSE_ATTR(r7, &(0x7f0000002440)={0x78, 0x0, r8, {0x6ac, 0x2, 0x0, {0x5, 0x1, 0x8001, 0xac, 0x2, 0xfffffffffffffffd, 0xa, 0x6, 0x7, 0xc000, 0x3, r9, r10, 0x6, 0x2}}}, 0x78) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f00000024c0)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x4, @remote, 0x8}, @in={0x2, 0x9, @remote}], 0x3c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f00000024c0)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x4, @remote, 0x8}, @in={0x2, 0x9, @remote}], 0x3c) recvfrom$rxrpc(r7, &(0x7f0000002500)=""/58, 0x3a, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002540), &(0x7f0000002580)=0xc) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002540), &(0x7f0000002580)=0xc) r11 = syz_open_dev$cec(&(0x7f00000025c0), 0x0, 0x40200) ioctl$CEC_DQEVENT(r11, 0xc0506107, &(0x7f0000002600)) (async) ioctl$CEC_DQEVENT(r11, 0xc0506107, &(0x7f0000002600)) sync_file_range(r1, 0xff, 0xffffffffffffffff, 0x6) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000002680)=""/87) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000002700)={@private, @multicast1, 0x0}, &(0x7f0000002740)=0xc) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000002780)=r12) 1.021488967s ago: executing program 5 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000000)="db968a9abcc192f2242fbea094874b813a80bd53da2c5aa8b8590f3114efb08fe3c8e37f76428eb82948c0969616b3a4201fb17c7f9a7cd6c3f016add3e3c903fe4a9291f766d1ddc8ca356048a9b11960ca38957a00ebd9b95f18cf233fba24d8ffc45afe430b93db0392e83246b544d5bf15c3efaff74004570df5b6588b3b", 0x80}, {&(0x7f0000000080)="c59a8159554c2b787ef56e4b9f976ab906fabefe0eac8bc4c0898455b7343e2cd9290207e28c5a267420ac680c04e25679fcb13181ec8d49571acf41531a0234b76791d3a21b8cd6be255573503478caa20ce8aa31f9f5f71636e7ad5401b1ff85d709d6d84faeca4b67e38d1ea36b778cc99a98e447b541", 0x78}], 0x3, 0x5, 0x0) 911.099258ms ago: executing program 4 (id=906): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000699100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000011070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 521.281677ms ago: executing program 5 (id=907): mount$9p_rdma(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000)={'trans=rdma,', {'port', 0x3d, 0x4e22}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0xffffff17, 0x3, 0x403}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x402}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$inet6(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="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", 0xfb}, {&(0x7f0000000400)="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", 0x2d6}], 0x2}, 0x40001080) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "fd9192068590ef44", "4ded6853efa14266912ec2cb350be183", "15861006", "84d6d4ab8749281f"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 141.311385ms ago: executing program 3 (id=915): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000440)={0x2a2b751f, [[0x0, 0x80000001, 0xfffffffd, 0xfffffffd, 0x10000, 0xc0ec, 0x3ff, 0x85a], [0x1, 0xd415, 0x763, 0x2, 0x7, 0x7, 0xfffffe00, 0x9], [0x7, 0x2, 0xfffffffe, 0xd1d, 0x2, 0x5, 0xeb, 0x5d48]], '\x00', [{0x7fffffff, 0x3, 0x0, 0x0, 0x1, 0x1}, {0xf598, 0xd, 0x1}, {0x4, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x1, 0x1, 0x0, 0x1}, {0x96f, 0x6, 0x1, 0x1, 0x1, 0x1}, {0xffff43d9, 0x81, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x7, 0x1, 0x1, 0x1}, {0x139, 0x6, 0x1, 0x1, 0x0, 0x1}, {0xfffffff2, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x89, 0x80, 0x0, 0x0, 0x1}, {0x7, 0x0, 0x1, 0x1}, {0x2abd, 0x3ff, 0x0, 0x0, 0x1}], '\x00', 0xf5}) (async) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x2, @win={{0x9, 0x1117, 0xfffffffe, 0x1}, 0x0, 0xfcd1, &(0x7f0000000200)={{0x10000, 0x9, 0x9, 0xfffff001}, &(0x7f0000000080)={{0x6, 0x2, 0x240, 0x101}, &(0x7f0000000000)={{0x8, 0x7, 0x10000, 0xffffffff}}}}, 0x81, &(0x7f0000000100)="fcbf6f4d692ce29623e175ba6192478e17629dcfb24cc999c5222767521b6e0fe125c682b08732d8a9fda8d41f8381add440b3903e9cbdf65c91e33d0f5cd32313a81930fbebbd034ba055d9de47ac5c16de23c26f3eea3327eb8fd68474933d9fa496153756b8be5d52386c90181f95a1710072e882f9da9b4de2c9367b84f3158279f0e164b23a2fa67e7fade4ffe5a83d475fa4ff6771a54971d2543edb8df3a4283f7f25327626531a21e98329e2de5694c4465d9b1909a646d930068f266b3070599b24464380e0df090b7692f07df719552c1f487e7d381dabe7f2f5920e36491323", 0x38}}) 141.026578ms ago: executing program 3 (id=916): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000cc0)=0x1b) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r6}) read(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 61.289889ms ago: executing program 3 (id=917): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$9p(r3, &(0x7f0000000680)="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", 0xfb) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000023000000e60400d2c5975501801400020071797a5f74756e000000000007000000000000000400038004000100494c6a188682f03c02736e401a556640436539f108a3d58add0d56026cb0125f45fa563dd43fc96357b552764636ce0a9017b713082d84df968f001ddf899055569c3d517170bd28b958fb33c59045b11a6c4db307004de5a565c728b3fba5f20ba2bc21b42083095034ef6cbec61393e4d66f80ed193986c24632d2ca434dc49dfa1a12125a0e8c4a7226cfe7273a"], 0x38}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, &(0x7f0000000100)="3038e4bd67bec4ff6ce1d1999805d176f3ef550000000000000fbcf0e1afec81881b49fbb1b1b541a64f737a4171654325a08705f96863e33a62ebde554f0a9c6524588b33d5b84b3b", 0x0}, 0x50) write$uinput_user_dev(r4, &(0x7f0000001140)={'syz1\x00', {0xb207, 0x80}, 0x0, [0x7fffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x80000001], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x800]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="40000000140008002bbd7000fddbdf2502100000", @ANYRES32=r7, @ANYBLOB="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"], 0x40}}, 0x20044081) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}}, 0x801) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(r8, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r11, 0xc0045405, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) 60.952488ms ago: executing program 3 (id=918): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@var={0x6, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@var={0x6, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)={'a', ' *:* ', 'w\x00'}, 0x8) (async) write$cgroup_devices(r4, &(0x7f0000000280)={'a', ' *:* ', 'w\x00'}, 0x8) write$cgroup_devices(r4, &(0x7f0000000800)=ANY=[@ANYBLOB='b *:8 w'], 0x9) (async) write$cgroup_devices(r4, &(0x7f0000000800)=ANY=[@ANYBLOB='b *:8 w'], 0x9) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r6 = timerfd_create(0x8, 0x0) timerfd_settime(r6, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r6, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000440)={0x0, 0xfffffffffffffe0c, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={r7, r8, 0x1}) 450.377µs ago: executing program 3 (id=919): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x14, 0x20, 0xa, 0xff, 0x1, 0xff, 0x7, 0xa00}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x80a0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r2, 0x4b4b, &(0x7f0000001300)=""/193) 0s ago: executing program 3 (id=920): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='xdp_bulk_tx\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000140)={0x2, 0x1, 0x2, {0x5, 0x3, 0x9}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x83}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x1d4, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_USERDATA={0x64, 0xc, "d5e0e0b6773fd6bd524ecd9e32fec73e3aee7473377635dcaedacde478c14e45bc3e549b37d1e2259b4a378957e1a54b8883e5cd787027fc4a10c07884b2fd8f550013ec0074c8a03144f447ae18148e264a88dec58bbbf9d4b92ecfa8b89cc6"}, @NFTA_CHAIN_USERDATA={0xe2, 0xc, "24c26f582b426e7abf64e4bce1a3ca25f1232cb39b5c9026056a4d1fefdb3a6f4f0618f33ff2dbd958219f64ce87a13e264afbd01bc070b6699df81e6dd13fbfeb2872da50188cded3650e323637fdf8a902c98fc0e1d88f0fa9b3103067d185a2cfbd9a76b7ba7ef7251bb1ac41a3951448e0ca37146ba75c22192badcddf649f68c83b1bd241e4d311a6ee6ff5d1b62a4e0f0ad4351f5368859601e09532c997919f2022a9e68cf794ec7537b442d0c8762c944cf31c9f85ae519db331c43a2e1820d00a56b882616733b4ae9a71aab0f591c9134617b2f0342ac68820"}]}, @NFT_MSG_DELOBJ={0x1c8, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xa6, 0x8, "ac424c3e6b1847371051a1ceee70672b86332c53f3401b518b5e1024d5297c2c5b64b02d54b5673286ba3251ab585cf4c12f467757e9488e1f7e94c6872c0b8c112bc3cf4d512962eebf730f0d04e5cbc32e17b1748539a909df26b2c32c4a1328d4b745687868f4cc562f0b003318d92bded47285bee1fb8a7994eefd31456367230c5b2f1db363216ae9561056ceb8dc056c039e9d79ad304b7a9b1554a492ac1d"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xdf, 0x8, "3fac0486523c11c45e21ed44d30d052620fde3a585b6ceb55c4c2cdd4ef8e40737ac4870d586dae89e70a5783d06e1df2e88802b15f0e3ebde067248a815f79472f98a85047b330fe2c8bc150373489a05f90d06459452ad67e21efa1939fdbff85f965d0d430b9ffd6958c79d2ac9733331aa98a8baf6f59d8261fb3d152debe484498851bf445c6889d077bb4b31f6a6340dba11100ad017cd2597887b21d11a8a8618e7d36710152a52da20ccb17c18849e8b977f0dedde4ec6db711b14c585f35b99581f23f3139a2edb8a78fed3d763d2b58d6200cd04a64a"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0xc0, 0x9, 0xa, 0xe76a00a5655b52a0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_USERDATA={0x99, 0xd, 0x1, 0x0, "81f006c217d1781ea89d04e8c838a17afef01e7179b3e751b391324298bf3bb7a47fbb58e2478471a210361ae94353777bc1fe91c1f1a510a71a4d59673d108ae521dec36e43168eefef12d9e2f4668394a8e405e962365b2c3f7622235263c5728b2d9a8700b712630b90b0d0b33223bb5975894efeee43417e461a3c1d3cdb28a874b514ac68528f7b1b90d84d9a7fb84407f1b4"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4d0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r9, 0x40084149, &(0x7f0000000040)=0x7fffffffffffffff) kernel console output (not intermixed with test programs): ing to 64 [ 48.875064][ T9] usb 6-1: config 0 interface 140 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 48.877854][ T9] usb 6-1: config 0 interface 140 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 48.880661][ T9] usb 6-1: config 0 interface 95 altsetting 185 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 48.884081][ T9] usb 6-1: config 0 interface 140 has no altsetting 0 [ 48.885816][ T9] usb 6-1: config 0 interface 95 has no altsetting 0 [ 48.903589][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=e88e, bcdDevice=1f.bd [ 48.906006][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.908087][ T9] usb 6-1: Product: à°Œ [ 48.909178][ T9] usb 6-1: Manufacturer: Ñ [ 48.910368][ T9] usb 6-1: SerialNumber:   [ 48.912544][ T9] usb 6-1: config 0 descriptor?? [ 48.914354][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.918201][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.921591][ T58] bond0 (unregistering): Released all slaves [ 48.927261][ T6791] hsr_slave_0: entered promiscuous mode [ 48.929234][ T6791] hsr_slave_1: entered promiscuous mode [ 48.931070][ T6791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.933038][ T6791] Cannot create hsr debugfs directory [ 49.332222][ T9] ftdi_sio 6-1:0.140: FTDI USB Serial Device converter detected [ 49.338366][ T9] ftdi_sio ttyUSB0: unknown device type: 0x1fbd [ 49.346604][ T9] ftdi_sio 6-1:0.95: FTDI USB Serial Device converter detected [ 49.349035][ T9] ftdi_sio ttyUSB1: unknown device type: 0x1fbd [ 49.354852][ T9] usb 6-1: USB disconnect, device number 6 [ 49.368437][ T9] ftdi_sio 6-1:0.140: device disconnected [ 49.371253][ T9] ftdi_sio 6-1:0.95: device disconnected [ 49.908124][ T6823] : entered promiscuous mode [ 49.938201][ T6838] __nla_validate_parse: 38 callbacks suppressed [ 49.938215][ T6838] netlink: 228 bytes leftover after parsing attributes in process `syz.3.197'. [ 49.972008][ T6791] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.987105][ T6791] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.988811][ T6849] overlayfs: missing 'lowerdir' [ 50.040829][ T6791] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.045923][ T6857] xt_hashlimit: overflow, try lower: 3/0 [ 50.049081][ T6791] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.093154][ T58] hsr_slave_0: left promiscuous mode [ 50.095038][ T58] hsr_slave_1: left promiscuous mode [ 50.096693][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.098634][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.100696][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.102605][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.118131][ T58] veth1_macvtap: left promiscuous mode [ 50.119604][ T58] veth0_macvtap: left promiscuous mode [ 50.120975][ T58] veth1_vlan: left promiscuous mode [ 50.122265][ T58] veth0_vlan: left promiscuous mode [ 50.375797][ T5941] Bluetooth: hci0: command tx timeout [ 50.641172][ T58] team0 (unregistering): Port device team_slave_1 removed [ 50.699961][ T58] team0 (unregistering): Port device team_slave_0 removed [ 50.763843][ T5941] Bluetooth: hci1: command tx timeout [ 50.776353][ T5941] Bluetooth: hci2: command 0x0407 tx timeout [ 52.444199][ T5941] Bluetooth: hci0: command tx timeout [ 52.843941][ T5941] Bluetooth: hci2: command 0x0407 tx timeout [ 52.969477][ T6845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.010070][ T6791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.016220][ T6791] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.020984][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.022979][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.028724][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.030813][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.065722][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.206'. [ 53.069284][ T39] kauditd_printk_skb: 30 callbacks suppressed [ 53.069292][ T39] audit: type=1400 audit(1731248925.184:459): avc: denied { ioctl } for pid=6880 comm="syz.4.206" path="socket:[14888]" dev="sockfs" ino=14888 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 53.108700][ T39] audit: type=1400 audit(1731248925.214:460): avc: denied { read write } for pid=6892 comm="syz.4.207" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.118574][ T39] audit: type=1400 audit(1731248925.224:461): avc: denied { open } for pid=6892 comm="syz.4.207" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.135946][ T6791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.176159][ T39] audit: type=1400 audit(1731248925.284:462): avc: denied { ioctl } for pid=6873 comm="syz.1.205" path="socket:[13922]" dev="sockfs" ino=13922 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 53.220973][ T6791] veth0_vlan: entered promiscuous mode [ 53.227131][ T6791] veth1_vlan: entered promiscuous mode [ 53.241671][ T6791] veth0_macvtap: entered promiscuous mode [ 53.245271][ T6791] veth1_macvtap: entered promiscuous mode [ 53.251865][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.255405][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.257849][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.260443][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.262881][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.265923][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.269865][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.272495][ T39] audit: type=1400 audit(1731248925.374:463): avc: denied { getopt } for pid=6920 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 53.276066][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.279981][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.282313][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.285573][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.292647][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.296200][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.299651][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.305518][ T6791] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.307921][ T6791] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.310273][ T6791] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.312525][ T6791] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.342686][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.346041][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.347134][ T6930] mkiss: ax0: crc mode is auto. [ 53.350001][ T39] audit: type=1400 audit(1731248925.454:464): avc: denied { append } for pid=6929 comm="syz.1.211" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.363582][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.363914][ T6001] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 53.365985][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.403356][ T6936] validate_nla: 27 callbacks suppressed [ 53.403366][ T6936] netlink: 'syz.5.187': attribute type 4 has an invalid length. [ 53.538793][ T6001] usb 9-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 53.542194][ T6001] usb 9-1: config 0 interface 0 has no altsetting 0 [ 53.546982][ T6001] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 53.549468][ T6001] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.551557][ T6001] usb 9-1: Product: syz [ 53.552841][ T6001] usb 9-1: Manufacturer: syz [ 53.556367][ T6001] usb 9-1: SerialNumber: syz [ 53.558639][ T6001] usb 9-1: config 0 descriptor?? [ 53.565230][ T6001] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected [ 53.567768][ T6001] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7 [ 53.570309][ T6001] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81 [ 53.572572][ T6001] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1 [ 53.576085][ T6001] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2 [ 53.577529][ T6968] syz.5.216 (6968): /proc/6966/oom_adj is deprecated, please use /proc/6966/oom_score_adj instead. [ 53.578671][ T6001] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85 [ 53.583573][ T6001] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5 [ 53.587186][ T6001] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 53.590609][ T6001] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83 [ 53.593278][ T6001] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 3 [ 53.595899][ T6001] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4 [ 53.597883][ T6001] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86 [ 53.600059][ T6001] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6 [ 53.602984][ T6001] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 53.641836][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'. [ 53.644867][ T6972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'. [ 53.648265][ T39] audit: type=1400 audit(1731248925.754:465): avc: denied { create } for pid=6973 comm="syz.5.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.653316][ T6972] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 53.653853][ T39] audit: type=1400 audit(1731248925.754:466): avc: denied { bind } for pid=6973 comm="syz.5.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.658376][ T6972] netlink: 52 bytes leftover after parsing attributes in process `syz.1.217'. [ 53.660657][ T39] audit: type=1400 audit(1731248925.754:467): avc: denied { read } for pid=6973 comm="syz.5.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.696139][ T6972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58026 sclass=netlink_route_socket pid=6972 comm=syz.1.217 [ 53.699545][ T39] audit: type=1400 audit(1731248925.804:468): avc: denied { write } for pid=6973 comm="syz.5.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.764088][ T6893] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 53.765479][ T6001] usb 9-1: USB disconnect, device number 2 [ 53.768354][ T6001] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 53.769779][ T6001] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 53.769942][ T6001] keyspan 9-1:0.0: device disconnected [ 53.799054][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.219'. [ 53.800052][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.219'. [ 53.866710][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.221'. [ 53.891049][ T7002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64084 sclass=netlink_route_socket pid=7002 comm=syz.5.222 [ 53.974120][ T7012] process 'syz.5.223' launched './file1' with NULL argv: empty string added [ 54.031723][ T7016] tipc: Started in network mode [ 54.033443][ T7016] tipc: Node identity ac1414aa, cluster identity 4711 [ 54.036053][ T7016] tipc: Enabled bearer , priority 10 [ 54.296032][ T7023] overlayfs: failed to resolve './file1': -2 [ 54.315944][ T7020] binder_alloc: 7019: pid 7019 spamming oneway? 1 buffers allocated for a total size of 4096 [ 54.533835][ T5941] Bluetooth: hci0: command tx timeout [ 55.035110][ T6001] tipc: Node number set to 2886997162 [ 56.603790][ T5941] Bluetooth: hci0: command tx timeout [ 66.086089][ T7145] bond0: entered promiscuous mode [ 66.087502][ T7145] bond_slave_0: entered promiscuous mode [ 66.088982][ T7145] bond_slave_1: entered promiscuous mode [ 66.089978][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 66.089987][ T39] audit: type=1400 audit(1731248938.194:483): avc: denied { ioctl } for pid=7143 comm="syz.4.229" path="/dev/ptyqd" dev="devtmpfs" ino=140 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 66.102850][ T39] audit: type=1400 audit(1731248938.204:484): avc: denied { read } for pid=7143 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.151959][ T7161] support for cryptoloop has been removed. Use dm-crypt instead. [ 66.167390][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 66.203501][ T7170] zonefs (nullb0) ERROR: Not a zoned block device [ 66.209520][ T7170] nftables ruleset with unbound set [ 66.237595][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.259718][ T39] audit: type=1400 audit(1731248938.364:485): avc: denied { ioctl } for pid=7144 comm="syz.3.230" path="/dev/input/event3" dev="devtmpfs" ino=1298 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.294713][ T7175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.410836][ T39] audit: type=1400 audit(1731248938.514:486): avc: denied { execute } for pid=7183 comm="syz.1.237" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=13135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 66.421242][ T39] audit: type=1400 audit(1731248938.514:487): avc: denied { create } for pid=7183 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 66.456215][ T7189] bond0: entered promiscuous mode [ 66.457603][ T7189] bond_slave_0: entered promiscuous mode [ 66.459211][ T7189] bond_slave_1: entered promiscuous mode [ 66.467214][ T7191] Bluetooth: MGMT ver 1.23 [ 66.511116][ T7197] netdevsim netdevsim1: Direct firmware load for ./file0/bus failed with error -2 [ 66.513601][ T7197] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0/bus [ 66.552003][ T7200] netdevsim netdevsim5: Direct firmware load for .Þ failed with error -2 [ 66.556516][ T7200] netdevsim netdevsim5: Falling back to sysfs fallback for: .Þ [ 66.994452][ T39] audit: type=1400 audit(1731248939.104:488): avc: denied { ioctl } for pid=7208 comm="syz.3.244" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0xaea0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 67.351991][ T39] audit: type=1400 audit(1731248939.454:489): avc: denied { mount } for pid=7212 comm="syz.1.245" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.390876][ T39] audit: type=1400 audit(1731248939.494:490): avc: denied { map } for pid=7212 comm="syz.1.245" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.455455][ T7217] binder: 7216:7217 ioctl c0306201 20005dc0 returned -11 [ 67.456277][ T39] audit: type=1400 audit(1731248939.564:491): avc: denied { accept } for pid=7224 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 67.510074][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.247'. [ 67.545571][ T39] audit: type=1400 audit(1731248939.654:492): avc: denied { create } for pid=7228 comm="syz.5.249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1 [ 67.575599][ T7231] kvm: emulating exchange as write [ 67.604071][ T7236] netlink: 4088 bytes leftover after parsing attributes in process `syz.5.252'. [ 67.606773][ T7242] netlink: 4088 bytes leftover after parsing attributes in process `syz.5.252'. [ 67.662369][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 67.677208][ T7251] hugetlbfs: Bad value for 'uid' [ 67.678510][ T7251] hugetlbfs: Bad value for 'uid' [ 67.688040][ T7254] netlink: 'syz.4.257': attribute type 21 has an invalid length. [ 67.935352][ T7271] bio_check_eod: 4 callbacks suppressed [ 67.935363][ T7271] syz.1.263: attempt to access beyond end of device [ 67.935363][ T7271] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 67.940147][ T7271] qnx6: unable to read the first superblock [ 67.941806][ T7271] syz.1.263: attempt to access beyond end of device [ 67.941806][ T7271] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 67.945112][ T7271] qnx6: unable to read the first superblock [ 67.946640][ T7271] qnx6: unable to read the first superblock [ 67.953427][ T7271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 67.956052][ T827] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 68.046054][ T7275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.264'. [ 68.120449][ T7283] syz.1.266: attempt to access beyond end of device [ 68.120449][ T7283] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 68.124993][ T827] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 68.125649][ T7283] XFS (nbd1): SB validate failed with error -5. [ 68.127218][ T827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.141561][ T827] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 68.144006][ T827] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 68.146160][ T827] usb 9-1: Manufacturer: syz [ 68.152083][ T827] usb 9-1: config 0 descriptor?? [ 68.197385][ T7291] xt_hashlimit: size too large, truncated to 1048576 [ 68.197859][ T827] rc_core: IR keymap rc-hauppauge not found [ 68.200912][ T827] Registered IR keymap rc-empty [ 68.203163][ T827] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 68.206646][ T827] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input6 [ 68.260983][ T7295] xt_hashlimit: size too large, truncated to 1048576 [ 68.264833][ T7295] syz.1.267: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 68.269434][ T7295] CPU: 0 UID: 0 PID: 7295 Comm: syz.1.267 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 68.272087][ T7295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.274783][ T7295] Call Trace: [ 68.275668][ T7295] [ 68.276433][ T7295] dump_stack_lvl+0x16c/0x1f0 [ 68.277644][ T7295] warn_alloc+0x24d/0x3a0 [ 68.278790][ T7295] ? __pfx_warn_alloc+0x10/0x10 [ 68.280115][ T7295] ? __get_vm_area_node+0x190/0x2d0 [ 68.281490][ T7295] ? __get_vm_area_node+0x1bc/0x2d0 [ 68.282861][ T7295] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 68.284463][ T7295] ? __pfx___lock_acquire+0x10/0x10 [ 68.285810][ T7295] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 68.287348][ T7295] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 68.288978][ T7295] ? __pfx_lock_release+0x10/0x10 [ 68.290318][ T7295] ? trace_lock_acquire+0x14a/0x1d0 [ 68.291686][ T7295] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 68.293233][ T7295] vmalloc_noprof+0x6b/0x90 [ 68.294417][ T7295] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 68.295944][ T7295] hashlimit_mt_check_common+0x8b0/0x1450 [ 68.297379][ T7295] hashlimit_mt_check+0x71/0x90 [ 68.298650][ T7295] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 68.300079][ T7295] xt_check_match+0x284/0xa50 [ 68.301327][ T7295] ? mem_cgroup_css_alloc+0x832/0x1cf0 [ 68.302756][ T7295] ? __pfx_xt_check_match+0x10/0x10 [ 68.304150][ T7295] ? xt_find_target+0x1ee/0x290 [ 68.305441][ T7295] ? xt_find_match+0x1f2/0x290 [ 68.306731][ T7295] find_check_entry.constprop.0+0x34d/0xa20 [ 68.308280][ T7295] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 68.309973][ T7295] ? kvfree+0x47/0x50 [ 68.311047][ T7295] translate_table+0xd06/0x17b0 [ 68.312336][ T7295] ? __pfx_translate_table+0x10/0x10 [ 68.313720][ T7295] ? __might_fault+0xe3/0x190 [ 68.314971][ T7295] do_ip6t_set_ctl+0x605/0xc40 [ 68.316236][ T7295] ? rcu_is_watching+0x12/0xc0 [ 68.317498][ T7295] ? trace_contention_end+0xea/0x140 [ 68.318891][ T7295] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 68.320280][ T7295] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 68.321856][ T7295] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 68.323424][ T7295] nf_setsockopt+0x8a/0xf0 [ 68.324608][ T7295] ipv6_setsockopt+0x135/0x170 [ 68.325878][ T7295] rawv6_setsockopt+0xd7/0x680 [ 68.327148][ T7295] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 68.328552][ T7295] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 68.330099][ T7295] ? selinux_socket_setsockopt+0x6a/0x80 [ 68.331591][ T7295] ? sock_common_setsockopt+0x2e/0xf0 [ 68.333004][ T7295] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 68.334558][ T7295] do_sock_setsockopt+0x222/0x480 [ 68.335893][ T7295] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 68.337337][ T7295] ? __rcu_read_unlock+0x2b4/0x580 [ 68.338697][ T7295] ? fdget+0x176/0x210 [ 68.339792][ T7295] __sys_setsockopt+0x1a4/0x270 [ 68.341071][ T7295] ? __pfx___sys_setsockopt+0x10/0x10 [ 68.342469][ T7295] ? lock_acquire+0x2f/0xb0 [ 68.343646][ T7295] __x64_sys_setsockopt+0xbd/0x160 [ 68.344968][ T7295] ? do_syscall_64+0x91/0x250 [ 68.346164][ T7295] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.347484][ T7295] do_syscall_64+0xcd/0x250 [ 68.348678][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.350237][ T7295] RIP: 0033:0x7f7c47b7e719 [ 68.351427][ T7295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.356411][ T7295] RSP: 002b:00007f7c4898a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.358577][ T7295] RAX: ffffffffffffffda RBX: 00007f7c47d36130 RCX: 00007f7c47b7e719 [ 68.360649][ T7295] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 68.362708][ T7295] RBP: 00007f7c47bf139e R08: 0000000000000588 R09: 0000000000000000 [ 68.364657][ T7295] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 68.366718][ T7295] R13: 0000000000000001 R14: 00007f7c47d36130 R15: 00007fffc135c4a8 [ 68.368812][ T7295] [ 68.372274][ T7295] Mem-Info: [ 68.373193][ T7295] active_anon:7135 inactive_anon:0 isolated_anon:0 [ 68.373193][ T7295] active_file:12806 inactive_file:38344 isolated_file:0 [ 68.373193][ T7295] unevictable:1768 dirty:38 writeback:0 [ 68.373193][ T7295] slab_reclaimable:11624 slab_unreclaimable:72307 [ 68.373193][ T7295] mapped:17530 shmem:2471 pagetables:906 [ 68.373193][ T7295] sec_pagetables:312 bounce:0 [ 68.373193][ T7295] kernel_misc_reclaimable:0 [ 68.373193][ T7295] free:476989 free_pcp:3989 free_cma:0 [ 68.384849][ T7295] Node 0 active_anon:28540kB inactive_anon:0kB active_file:51208kB inactive_file:153300kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:70104kB dirty:144kB writeback:0kB shmem:6348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:12592kB pagetables:3624kB sec_pagetables:1248kB all_unreclaimable? no [ 68.393278][ T7295] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 68.401423][ T7295] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.408547][ T7295] lowmem_reserve[]: 0 1214 0 0 0 [ 68.409924][ T7295] Node 0 DMA32 free:309960kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:28540kB inactive_anon:0kB active_file:51208kB inactive_file:153300kB unevictable:3536kB writepending:144kB present:2080628kB managed:1272196kB mlocked:0kB bounce:0kB free_pcp:11220kB local_pcp:1804kB free_cma:0kB [ 68.417767][ T7295] lowmem_reserve[]: 0 0 0 0 0 [ 68.419076][ T7295] Node 1 Normal free:1582552kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:76kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:5096kB local_pcp:128kB free_cma:0kB [ 68.426607][ T7295] lowmem_reserve[]: 0 0 0 0 0 [ 68.427919][ T7295] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 68.431156][ T7295] Node 0 DMA32: 3*4kB (UME) 77*8kB (UME) 421*16kB (ME) 261*32kB (UME) 239*64kB (ME) 34*128kB (ME) 28*256kB (ME) 22*512kB (UM) 10*1024kB (UME) 14*2048kB (UME) 53*4096kB (UM) = 309796kB [ 68.435880][ T7295] Node 1 Normal: 2*4kB (ME) 9*8kB (UME) 14*16kB (ME) 151*32kB (UME) 43*64kB (UME) 30*128kB (UME) 8*256kB (UE) 6*512kB (UME) 1*1024kB (U) 2*2048kB (ME) 381*4096kB (M) = 1582544kB [ 68.440360][ T7295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.442775][ T7295] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 68.445678][ T7295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.448192][ T7295] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 68.450651][ T7295] 53625 total pagecache pages [ 68.451008][ T6001] usb 9-1: USB disconnect, device number 3 [ 68.451863][ T7295] 0 pages in swap cache [ 68.454583][ T7295] Free swap = 124996kB [ 68.455649][ T7295] Total swap = 124996kB [ 68.456713][ T7295] 1048443 pages RAM [ 68.458556][ T7295] 0 pages HighMem/MovableOnly [ 68.459967][ T7295] 281073 pages reserved [ 68.460990][ T7295] 0 pages cma reserved [ 68.706619][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 69.064282][ T6001] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 69.214210][ T6001] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 69.217156][ T6001] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.219547][ T6001] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.222507][ T6001] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.225162][ T6001] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.227459][ T6001] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.230438][ T6001] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.233538][ T6001] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.235991][ T6001] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.238826][ T6001] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.241576][ T6001] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.244268][ T6001] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.247071][ T6001] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.249524][ T6001] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.251949][ T6001] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.254955][ T6001] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.257472][ T6001] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.259951][ T6001] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.262822][ T6001] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.265234][ T6001] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.267518][ T6001] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.270708][ T6001] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.273158][ T6001] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.275615][ T6001] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.278499][ T6001] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.281692][ T6001] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 69.284164][ T6001] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 69.286392][ T6001] usb 6-1: Product: syz [ 69.287531][ T6001] usb 6-1: Manufacturer: syz [ 69.288757][ T6001] usb 6-1: SerialNumber: syz [ 69.291171][ T6001] usb 6-1: config 0 descriptor?? [ 69.294819][ T6001] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 69.497312][ T7319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.500536][ T7319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.512579][ T1013] usb 6-1: USB disconnect, device number 7 [ 69.517040][ T1013] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 69.915718][ T7375] binder: 7374:7375 ioctl c0306201 0 returned -14 [ 69.917569][ T7375] binder: 7374:7375 ioctl c0306201 0 returned -14 [ 70.041155][ T7387] xt_hashlimit: size too large, truncated to 1048576 [ 70.050880][ T7389] netlink: 112 bytes leftover after parsing attributes in process `syz.3.291'. [ 70.055167][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.291'. [ 70.062698][ T7389] input: syz0 as /devices/virtual/input/input7 [ 70.095122][ T7386] kvm: pic: non byte write [ 70.412514][ T7424] unsupported nlmsg_type 40 [ 70.504528][ T827] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 70.593915][ T30] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 70.654996][ T827] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 70.658052][ T827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 70.660882][ T827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 70.663390][ T827] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.666896][ T827] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.669499][ T827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.672725][ T827] usb 6-1: config 0 descriptor?? [ 70.745630][ T30] usb 10-1: not running at top speed; connect to a high speed hub [ 70.750291][ T30] usb 10-1: config 2 has an invalid interface number: 241 but max is 3 [ 70.752732][ T30] usb 10-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 70.756010][ T30] usb 10-1: config 2 has an invalid interface number: 178 but max is 3 [ 70.758106][ T30] usb 10-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 70.760895][ T30] usb 10-1: config 2 has an invalid interface number: 199 but max is 3 [ 70.763600][ T30] usb 10-1: config 2 has an invalid interface number: 6 but max is 3 [ 70.766987][ T30] usb 10-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 70.770336][ T30] usb 10-1: config 2 has an invalid descriptor of length 249, skipping remainder of the config [ 70.773033][ T30] usb 10-1: config 2 has 5 interfaces, different from the descriptor's value: 4 [ 70.775403][ T30] usb 10-1: config 2 has no interface number 0 [ 70.777016][ T30] usb 10-1: config 2 has no interface number 1 [ 70.778577][ T30] usb 10-1: config 2 has no interface number 2 [ 70.780405][ T30] usb 10-1: config 2 has no interface number 4 [ 70.782026][ T30] usb 10-1: config 2 interface 241 altsetting 2 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 70.785179][ T30] usb 10-1: config 2 interface 241 altsetting 2 endpoint 0x8F has invalid maxpacket 56310, setting to 64 [ 70.787953][ T30] usb 10-1: config 2 interface 241 altsetting 2 endpoint 0x9 has an invalid bInterval 63, changing to 4 [ 70.790911][ T30] usb 10-1: config 2 interface 241 altsetting 2 endpoint 0xC has an invalid bInterval 37, changing to 4 [ 70.793977][ T30] usb 10-1: config 2 interface 241 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 70.796714][ T30] usb 10-1: config 2 interface 241 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 70.799465][ T30] usb 10-1: config 2 interface 241 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 70.802791][ T30] usb 10-1: config 2 interface 241 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 70.806463][ T30] usb 10-1: config 2 interface 241 altsetting 2 has an endpoint descriptor with address 0x11, changing to 0x1 [ 70.809842][ T30] usb 10-1: config 2 interface 241 altsetting 2 has an endpoint descriptor with address 0x27, changing to 0x7 [ 70.813363][ T30] usb 10-1: config 2 interface 241 altsetting 2 endpoint 0x7 has invalid maxpacket 16455, setting to 64 [ 70.817182][ T30] usb 10-1: config 2 interface 241 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 70.820488][ T30] usb 10-1: config 2 interface 241 altsetting 2 has 12 endpoint descriptors, different from the interface descriptor's value: 10 [ 70.824157][ T30] usb 10-1: config 2 interface 3 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 70.827049][ T30] usb 10-1: config 2 interface 3 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 70.830513][ T30] usb 10-1: config 2 interface 3 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 70.833625][ T30] usb 10-1: config 2 interface 3 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 70.836059][ T7443] orangefs_mount: mount request failed with -4 [ 70.836523][ T30] usb 10-1: config 2 interface 3 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 70.840662][ T30] usb 10-1: config 2 interface 3 altsetting 3 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 70.843450][ T30] usb 10-1: config 2 interface 3 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 70.847144][ T30] usb 10-1: config 2 interface 3 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 70.850860][ T30] usb 10-1: config 2 interface 3 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 70.854551][ T30] usb 10-1: config 2 interface 3 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 70.858381][ T30] usb 10-1: config 2 interface 3 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 70.861922][ T30] usb 10-1: config 2 interface 3 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 70.865378][ T30] usb 10-1: config 2 interface 178 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 70.868110][ T30] usb 10-1: config 2 interface 178 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 70.870826][ T30] usb 10-1: config 2 interface 178 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 70.873540][ T30] usb 10-1: config 2 interface 178 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 70.876654][ T30] usb 10-1: config 2 interface 178 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 70.879370][ T30] usb 10-1: config 2 interface 178 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 70.882865][ T30] usb 10-1: config 2 interface 199 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 70.886296][ T30] usb 10-1: config 2 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 70.889517][ T30] usb 10-1: config 2 interface 241 has no altsetting 0 [ 70.891265][ T30] usb 10-1: config 2 interface 3 has no altsetting 0 [ 70.892903][ T30] usb 10-1: config 2 interface 178 has no altsetting 0 [ 70.896183][ T30] usb 10-1: New USB device found, idVendor=0451, idProduct=8140, bcdDevice=f2.7d [ 70.898494][ T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.900690][ T30] usb 10-1: Product: Ð¥ [ 70.902095][ T30] usb 10-1: Manufacturer: à § [ 70.903921][ T30] usb 10-1: SerialNumber: syz [ 70.911909][ T7420] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 71.007021][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.009015][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.080435][ T827] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 71.095658][ T827] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 71.118285][ T30] hub 10-1:2.241: bad descriptor, ignoring hub [ 71.119969][ T30] hub 10-1:2.241: probe with driver hub failed with error -5 [ 71.125501][ T30] hub 10-1:2.3: bad descriptor, ignoring hub [ 71.127067][ T30] hub 10-1:2.3: probe with driver hub failed with error -5 [ 71.131008][ T30] hub 10-1:2.178: bad descriptor, ignoring hub [ 71.132598][ T30] hub 10-1:2.178: probe with driver hub failed with error -5 [ 71.137842][ T30] hub 10-1:2.199: bad descriptor, ignoring hub [ 71.139637][ T30] hub 10-1:2.199: probe with driver hub failed with error -5 [ 71.143555][ T30] hub 10-1:2.6: bad descriptor, ignoring hub [ 71.145172][ T30] hub 10-1:2.6: probe with driver hub failed with error -5 [ 71.181722][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 71.181733][ T39] audit: type=1400 audit(1731248943.284:506): avc: denied { ioctl } for pid=7456 comm="syz.4.310" path="socket:[16678]" dev="sockfs" ino=16678 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 71.184350][ T30] usb 10-1: USB disconnect, device number 2 [ 71.184445][ T7457] __nla_validate_parse: 2 callbacks suppressed [ 71.184458][ T7457] netlink: 40 bytes leftover after parsing attributes in process `syz.4.310'. [ 71.189717][ T39] audit: type=1400 audit(1731248943.294:507): avc: denied { create } for pid=7456 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.239012][ T7462] syz.3.308: attempt to access beyond end of device [ 71.239012][ T7462] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 71.243301][ T7462] syz.3.308: attempt to access beyond end of device [ 71.243301][ T7462] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 71.247637][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 71.250688][ T7462] syz.3.308: attempt to access beyond end of device [ 71.250688][ T7462] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 71.254464][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 71.257343][ T7462] syz.3.308: attempt to access beyond end of device [ 71.257343][ T7462] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 71.260591][ T7462] syz.3.308: attempt to access beyond end of device [ 71.260591][ T7462] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 71.263809][ T7458] nbd3: detected capacity change from 0 to 131072 [ 71.264029][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 71.270625][ T7462] block nbd3: Send control failed (result -89) [ 71.272378][ T7462] block nbd3: Request send failed, requeueing [ 71.274709][ T5941] block nbd3: Receive control failed (result -32) [ 71.275856][ T1196] block nbd3: Dead connection, failed to find a fallback [ 71.278264][ T1196] block nbd3: shutting down sockets [ 71.279719][ T1196] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.283980][ T7298] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.287254][ T7298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 71.290226][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 71.291957][ T7298] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.294953][ T7298] Buffer I/O error on dev nbd3, logical block 1, async page read [ 71.296963][ T7462] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.300097][ T7298] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.302541][ T7298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 71.305413][ T7298] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.307862][ T7298] Buffer I/O error on dev nbd3, logical block 1, async page read [ 71.309760][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 71.312247][ T7298] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.314692][ T7462] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.316191][ T7298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 71.317099][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 71.319910][ T7298] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.326017][ T7298] Buffer I/O error on dev nbd3, logical block 1, async page read [ 71.329829][ T7462] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.332270][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 71.333174][ T7298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 71.334825][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16383, location=16383 [ 71.336764][ T7298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 71.339213][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16127, location=16127 [ 71.341160][ T7298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 71.343773][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16382, location=16382 [ 71.346556][ T7298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 71.349706][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16126, location=16126 [ 71.350665][ T7298] ldm_validate_partition_table(): Disk read failed. [ 71.353124][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16381, location=16381 [ 71.355093][ T7298] Dev nbd3: unable to read RDB block 0 [ 71.357449][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16125, location=16125 [ 71.358972][ T7298] nbd3: unable to read partition table [ 71.361256][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16233, location=16233 [ 71.366240][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=15977, location=15977 [ 71.368773][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16231, location=16231 [ 71.371399][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=15975, location=15975 [ 71.374050][ T7462] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 71.374935][ T7298] ldm_validate_partition_table(): Disk read failed. [ 71.376587][ T7462] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 71.378620][ T7298] Dev nbd3: unable to read RDB block 0 [ 71.382759][ T7298] nbd3: unable to read partition table [ 71.411542][ T5982] usb 6-1: USB disconnect, device number 8 [ 71.427432][ T39] audit: type=1400 audit(1731248943.534:508): avc: denied { write } for pid=7468 comm="syz.3.313" name="ip6_mr_vif" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 71.474228][ T39] audit: type=1804 audit(1731248943.574:509): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.313" name="/newroot/72/bus/file1" dev="overlay" ino=412 res=1 errno=0 [ 71.496200][ T7477] syz.1.316: attempt to access beyond end of device [ 71.496200][ T7477] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 71.500163][ T7477] gfs2: error -5 reading superblock [ 71.503450][ T7477] sctp: [Deprecated]: syz.1.316 (pid 7477) Use of int in maxseg socket option. [ 71.503450][ T7477] Use struct sctp_assoc_value instead [ 71.651135][ T39] audit: type=1400 audit(1731248943.754:510): avc: denied { listen } for pid=7496 comm="syz.5.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.656804][ T39] audit: type=1400 audit(1731248943.754:511): avc: denied { accept } for pid=7496 comm="syz.5.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.717950][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 71.757314][ T39] audit: type=1400 audit(1731248943.864:512): avc: denied { create } for pid=7511 comm="syz.5.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.795753][ T39] audit: type=1400 audit(1731248943.904:513): avc: denied { write } for pid=7516 comm="syz.5.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.800865][ T7517] netlink: 48 bytes leftover after parsing attributes in process `syz.5.325'. [ 71.827489][ T39] audit: type=1400 audit(1731248943.934:514): avc: denied { map } for pid=7520 comm="syz.1.326" path="socket:[18642]" dev="sockfs" ino=18642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 71.862195][ T7533] netlink: 'syz.5.329': attribute type 1 has an invalid length. [ 71.863602][ T7531] hugetlbfs: syz.1.328 (7531): Using mlock ulimits for SHM_HUGETLB is obsolete [ 71.867819][ T7508] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.869739][ T7508] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.872131][ T7508] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.881643][ T7508] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.996527][ T7533] bond1: entered promiscuous mode [ 71.997978][ T7533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.084164][ T7564] tipc: Enabling of bearer rejected, media not registered [ 72.138836][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.5.334'. [ 72.193783][ T30] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 72.235061][ T827] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 72.355185][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.358486][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.362848][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.365872][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.393807][ T827] usb 8-1: Using ep0 maxpacket: 16 [ 72.398241][ T827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.401743][ T827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58879, setting to 1024 [ 72.404580][ T827] usb 8-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 72.406814][ T827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.409895][ T827] usb 8-1: config 0 descriptor?? [ 72.411719][ T7557] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 72.571490][ T30] usb 6-1: usb_control_msg returned -32 [ 72.572963][ T30] usbtmc 6-1:16.0: can't read capabilities [ 72.620059][ T827] usbhid 8-1:0.0: can't add hid device: -71 [ 72.621681][ T827] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 72.627691][ T827] usb 8-1: USB disconnect, device number 3 [ 72.962918][ T39] audit: type=1400 audit(1731248945.064:515): avc: denied { getopt } for pid=7576 comm="syz.5.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.054947][ T7587] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.339'. [ 73.057486][ T7581] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.339'. [ 73.090616][ T7591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.107691][ T7596] tipc: Started in network mode [ 73.109052][ T7596] tipc: Node identity 9, cluster identity 4711 [ 73.110847][ T7596] tipc: Node number set to 9 [ 73.240456][ T7622] sp0: Synchronizing with TNC [ 73.269941][ T7626] vivid-007: disconnect [ 73.279490][ T7625] vivid-007: reconnect [ 73.405423][ T7640] 9pnet_virtio: no channels available for device syz [ 73.598687][ T7653] raw_sendmsg: syz.3.361 forgot to set AF_INET. Fix it! [ 73.893829][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.893866][ T5946] Bluetooth: hci2: command 0x0407 tx timeout [ 74.073787][ T30] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 74.223763][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 74.226404][ T30] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.228606][ T30] usb 8-1: config 0 has no interface number 0 [ 74.230604][ T30] usb 8-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 74.234402][ T7699] netlink: 76 bytes leftover after parsing attributes in process `syz.5.375'. [ 74.234452][ T30] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 74.239482][ T30] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.241856][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.244931][ T30] usb 8-1: config 0 descriptor?? [ 74.249497][ T30] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 74.454075][ T6001] usb 8-1: USB disconnect, device number 4 [ 74.458290][ T7715] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 74.467041][ T6001] iowarrior 8-1:0.1: I/O-Warror #1 now disconnected [ 74.745940][ T7724] /dev/sr0: Can't open blockdev [ 74.905188][ T7725] /dev/sr0: Can't open blockdev [ 74.930300][ T7728] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 74.974763][ T1013] usb 6-1: USB disconnect, device number 9 [ 74.986299][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.385'. [ 74.988619][ T7735] IPv6: NLM_F_REPLACE set, but no existing node found! [ 74.999262][ T7737] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.386'. [ 75.001689][ T7737] netlink: 183228 bytes leftover after parsing attributes in process `syz.1.386'. [ 75.057907][ T7744] mkiss: ax0: crc mode is auto. [ 75.205403][ T7756] ip6t_rpfilter: unknown options [ 75.222189][ T7766] binder: BINDER_SET_CONTEXT_MGR already set [ 75.224192][ T7766] binder: 7765:7766 ioctl 40046207 0 returned -16 [ 75.224237][ T7766] binder: BINDER_SET_CONTEXT_MGR already set [ 75.224421][ T7766] binder: 7765:7766 ioctl 40046207 0 returned -16 [ 75.224452][ T7766] binder: BINDER_SET_CONTEXT_MGR already set [ 75.224457][ T7766] binder: 7765:7766 ioctl 40046207 0 returned -16 [ 75.224489][ T7766] binder: BINDER_SET_CONTEXT_MGR already set [ 75.224493][ T7766] binder: 7765:7766 ioctl 40046207 0 returned -16 [ 75.224523][ T7766] binder: BINDER_SET_CONTEXT_MGR already set [ 75.224528][ T7766] binder: 7765:7766 ioctl 40046207 0 returned -16 [ 75.224567][ T7766] binder: BINDER_SET_CONTEXT_MGR already set [ 75.241495][ T7766] binder: 7765:7766 ioctl 40046207 0 returned -16 [ 75.264995][ T7775] overlayfs: disabling nfs_export due to verity=on [ 75.275357][ T7771] trusted_key: syz.5.395 sent an empty control message without MSG_MORE. [ 75.293108][ T7778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7778 comm=syz.1.397 [ 75.683778][ T30] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 75.845715][ T30] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.850462][ T30] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.853053][ T30] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.858152][ T30] usb 10-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 75.860517][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.869991][ T30] usb 10-1: config 0 descriptor?? [ 75.870541][ T7837] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 75.870541][ T7837] program syz.3.413 not setting count and/or reply_len properly [ 75.964218][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.126144][ T73] cfg80211: failed to load regulatory.db [ 76.523840][ T5941] Bluetooth: hci4: command 0x1003 tx timeout [ 76.524025][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.565815][ T30] usbhid 10-1:0.0: can't add hid device: -71 [ 76.566291][ T7861] FAT-fs (nullb0): bogus number of reserved sectors [ 76.567445][ T30] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 76.568345][ T30] usb 10-1: USB disconnect, device number 3 [ 76.569288][ T7861] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 76.645912][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 76.645924][ T39] audit: type=1400 audit(1731248948.754:544): avc: denied { mounton } for pid=7860 comm="syz.4.421" path="/80/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 76.645936][ T7862] fuse: Bad value for 'group_id' [ 76.645948][ T7862] fuse: Bad value for 'group_id' [ 76.926791][ T7869] overlayfs: missing 'workdir' [ 76.942466][ T5984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.953979][ T5984] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 77.001207][ T39] audit: type=1400 audit(1731248949.104:545): avc: denied { ioctl } for pid=7877 comm="syz.3.427" path="socket:[17238]" dev="sockfs" ino=17238 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.037256][ T7880] __nla_validate_parse: 1 callbacks suppressed [ 77.037266][ T7880] netlink: 48 bytes leftover after parsing attributes in process `syz.3.428'. [ 77.183780][ T73] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 77.217750][ T39] audit: type=1400 audit(1731248949.324:546): avc: denied { ioctl } for pid=7890 comm="syz.3.430" path="socket:[17319]" dev="sockfs" ino=17319 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.237155][ T7894] 9pnet_virtio: no channels available for device 127.0.0.1 [ 77.313503][ T39] audit: type=1400 audit(1731248949.414:547): avc: denied { write } for pid=7905 comm="syz.5.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 77.314630][ T7907] netlink: 16 bytes leftover after parsing attributes in process `syz.5.434'. [ 77.334438][ T73] usb 6-1: Using ep0 maxpacket: 8 [ 77.337337][ T73] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 77.340125][ T73] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 77.342795][ T73] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.345369][ T73] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.348748][ T73] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.351059][ T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.385712][ T7912] ERROR: device name not specified. [ 77.558100][ T7924] overlay: ./bus is not a directory [ 77.561272][ T73] usb 6-1: GET_CAPABILITIES returned 0 [ 77.562736][ T73] usbtmc 6-1:16.0: can't read capabilities [ 77.762383][ T73] usb 6-1: USB disconnect, device number 10 [ 77.973965][ T39] audit: type=1400 audit(1731248950.084:548): avc: denied { read } for pid=7933 comm="syz.4.442" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.979872][ T39] audit: type=1400 audit(1731248950.084:549): avc: denied { open } for pid=7933 comm="syz.4.442" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.983322][ T7934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.442'. [ 77.990316][ T7934] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 77.996743][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 78.044460][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.078591][ T39] audit: type=1400 audit(1731248950.184:550): avc: denied { write } for pid=7937 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.080680][ T7938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=7938 comm=syz.4.444 [ 78.196921][ T7949] input: syz0 as /devices/virtual/input/input9 [ 78.494356][ T7996] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 78.505010][ T39] audit: type=1400 audit(1731248950.614:551): avc: denied { ioctl } for pid=7999 comm="syz.1.456" path="socket:[18418]" dev="sockfs" ino=18418 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.512802][ T39] audit: type=1400 audit(1731248950.614:552): avc: denied { ioctl } for pid=7994 comm="syz.3.455" path="socket:[19676]" dev="sockfs" ino=19676 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 78.556931][ T39] audit: type=1400 audit(1731248950.664:553): avc: denied { create } for pid=8010 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 78.645648][ T8022] bond0: entered promiscuous mode [ 78.647108][ T8022] bond_slave_0: entered promiscuous mode [ 78.648759][ T8022] bond_slave_1: entered promiscuous mode [ 78.674647][ T8024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.460'. [ 78.708848][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 78.855877][ T8021] bond0: left promiscuous mode [ 78.857148][ T8021] bond_slave_0: left promiscuous mode [ 78.859184][ T8021] bond_slave_1: left promiscuous mode [ 78.908971][ T8040] Bluetooth: MGMT ver 1.23 [ 78.926936][ T8040] syz.5.465: attempt to access beyond end of device [ 78.926936][ T8040] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 78.931170][ T8040] syz.5.465: attempt to access beyond end of device [ 78.931170][ T8040] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 78.936962][ T8040] syz.5.465: attempt to access beyond end of device [ 78.936962][ T8040] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 78.940354][ T8040] syz.5.465: attempt to access beyond end of device [ 78.940354][ T8040] nbd5: rw=0, sector=18, nr_sectors = 2 limit=0 [ 78.943559][ T8040] syz.5.465: attempt to access beyond end of device [ 78.943559][ T8040] nbd5: rw=0, sector=30, nr_sectors = 2 limit=0 [ 78.946818][ T8040] syz.5.465: attempt to access beyond end of device [ 78.946818][ T8040] nbd5: rw=0, sector=36, nr_sectors = 2 limit=0 [ 78.951148][ T8040] VFS: unable to find oldfs superblock on device nbd5 [ 79.316574][ T8099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.486'. [ 79.392534][ T8109] fuse: Bad value for 'user_id' [ 79.394948][ T8109] fuse: Bad value for 'user_id' [ 79.398009][ T8109] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 79.407030][ T8109] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 79.453556][ T8114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.474222][ T8116] ebt_among: src integrity fail: 100 [ 79.567336][ T8139] netlink: 76 bytes leftover after parsing attributes in process `syz.5.499'. [ 79.570452][ T8139] netlink: 76 bytes leftover after parsing attributes in process `syz.5.499'. [ 79.570932][ T8138] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 79.574495][ T8138] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 79.578055][ T8138] vhci_hcd vhci_hcd.0: Device attached [ 79.580696][ T8140] vhci_hcd: connection closed [ 79.582235][ T12] vhci_hcd: stop threads [ 79.586416][ T12] vhci_hcd: release socket [ 79.587996][ T12] vhci_hcd: disconnect device [ 79.609926][ T8149] xt_hashlimit: size too large, truncated to 1048576 [ 79.881885][ T8157] program syz.5.505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.153999][ T827] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 80.162705][ T8164] overlay: ./bus is not a directory [ 80.294144][ T827] usb 10-1: device descriptor read/64, error -71 [ 80.294993][ T5946] Bluetooth: hci2: command 0x0407 tx timeout [ 80.295885][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 80.300318][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 80.563927][ T827] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 80.713755][ T827] usb 10-1: device descriptor read/64, error -71 [ 80.824674][ T827] usb usb10-port1: attempt power cycle [ 80.977273][ T1013] IPVS: starting estimator thread 0... [ 80.980032][ T8219] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 80.981948][ T8219] tipc: Enabled bearer , priority 10 [ 81.033868][ T8231] fuse: Bad value for 'group_id' [ 81.035380][ T8231] fuse: Bad value for 'group_id' [ 81.038192][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 81.073890][ T8224] IPVS: using max 36 ests per chain, 86400 per kthread [ 81.113793][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 81.163835][ T827] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 81.184423][ T827] usb 10-1: device descriptor read/8, error -71 [ 81.393817][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 81.443814][ T827] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 81.474166][ T827] usb 10-1: device descriptor read/8, error -71 [ 81.537947][ T8267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=8267 comm=syz.4.535 [ 81.594723][ T827] usb usb10-port1: unable to enumerate USB device [ 81.923784][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 82.373793][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 82.373815][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.375638][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 82.661047][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.732992][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.736388][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.738684][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.741143][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.747228][ T5941] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.750486][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.760466][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.764477][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.767254][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.767660][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.776611][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.779776][ T5946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.782144][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.850727][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.869123][ T8272] chnl_net:caif_netlink_parms(): no params data found [ 82.952112][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.956854][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.958720][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.960482][ T8272] bridge_slave_0: entered allmulticast mode [ 82.962357][ T8272] bridge_slave_0: entered promiscuous mode [ 82.965243][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.967431][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.969714][ T8272] bridge_slave_1: entered allmulticast mode [ 82.971712][ T8272] bridge_slave_1: entered promiscuous mode [ 82.995450][ T8272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.999301][ T8272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.003819][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 83.040754][ T8272] team0: Port device team_slave_0 added [ 83.049251][ T8272] team0: Port device team_slave_1 added [ 83.072406][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.074479][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.081932][ T8272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.094856][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.096723][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.103418][ T8272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.144949][ T8272] hsr_slave_0: entered promiscuous mode [ 83.146939][ T8272] hsr_slave_1: entered promiscuous mode [ 83.148790][ T8272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.151195][ T8272] Cannot create hsr debugfs directory [ 83.167721][ T41] bridge_slave_1: left allmulticast mode [ 83.169185][ T41] bridge_slave_1: left promiscuous mode [ 83.170675][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.176134][ T41] bridge_slave_0: left allmulticast mode [ 83.177686][ T41] bridge_slave_0: left promiscuous mode [ 83.179197][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.425018][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.427337][ T41] bond_slave_0: left promiscuous mode [ 83.430076][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.432711][ T41] bond_slave_1: left promiscuous mode [ 83.435396][ T41] bond0 (unregistering): Released all slaves [ 83.440028][ T41] bond1 (unregistering): Released all slaves [ 83.598396][ T8272] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 83.601888][ T8272] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 83.605378][ T8272] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 83.608705][ T8272] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 83.666577][ T8272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.676964][ T8272] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.681759][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.683834][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.695410][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.697230][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.706866][ T41] hsr_slave_0: left promiscuous mode [ 83.709815][ T41] hsr_slave_1: left promiscuous mode [ 83.715350][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.717333][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.719658][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.721545][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.739455][ T41] veth1_macvtap: left promiscuous mode [ 83.740874][ T41] veth0_macvtap: left promiscuous mode [ 83.742285][ T41] veth1_vlan: left promiscuous mode [ 83.743603][ T41] veth0_vlan: left promiscuous mode [ 84.053741][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 84.313545][ T41] team0 (unregistering): Port device team_slave_1 removed [ 84.386335][ T41] team0 (unregistering): Port device team_slave_0 removed [ 84.847304][ T5941] Bluetooth: hci2: command tx timeout [ 84.921937][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'. [ 84.942601][ T8312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.545'. [ 85.021769][ T8272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.040108][ T8332] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.547'. [ 85.042435][ T8332] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 85.060730][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 85.060739][ T39] audit: type=1400 audit(1731248957.164:575): avc: denied { read write } for pid=8330 comm="syz.5.547" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.070181][ T39] audit: type=1400 audit(1731248957.164:576): avc: denied { open } for pid=8330 comm="syz.5.547" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.077608][ T39] audit: type=1400 audit(1731248957.164:577): avc: denied { ioctl } for pid=8336 comm="syz.4.548" path="socket:[20295]" dev="sockfs" ino=20295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 85.093781][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 85.122164][ T39] audit: type=1400 audit(1731248957.224:578): avc: denied { ioctl } for pid=8330 comm="syz.5.547" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.160323][ T8272] veth0_vlan: entered promiscuous mode [ 85.164182][ T8272] veth1_vlan: entered promiscuous mode [ 85.173501][ T8272] veth0_macvtap: entered promiscuous mode [ 85.178031][ T8272] veth1_macvtap: entered promiscuous mode [ 85.192333][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.196690][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.199152][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.201739][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.206922][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.210144][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.218161][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.222074][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.228191][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.230717][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.233387][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.236725][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.245420][ T8272] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.247716][ T8272] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.250015][ T8272] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.252172][ T8272] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.288678][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.290768][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.300385][ T41] IPVS: stop unused estimator thread 0... [ 85.311964][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.314455][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.466025][ T8389] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 85.569079][ T8409] netlink: 'syz.4.562': attribute type 10 has an invalid length. [ 85.571089][ T8409] bond0: left promiscuous mode [ 85.572321][ T8409] bond_slave_0: left promiscuous mode [ 85.575519][ T8409] bond_slave_1: left promiscuous mode [ 85.581516][ T8409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.585096][ T8409] team0: Port device bond0 added [ 85.627823][ T39] audit: type=1400 audit(1731248957.734:579): avc: denied { read } for pid=8405 comm="syz.3.561" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.119836][ T8443] 9pnet_fd: Insufficient options for proto=fd [ 86.133788][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 86.141949][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.567'. [ 86.233842][ T73] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 86.383820][ T73] usb 10-1: Using ep0 maxpacket: 8 [ 86.386709][ T73] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 86.389361][ T73] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.392372][ T73] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.395299][ T73] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.398392][ T73] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.402462][ T73] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.404963][ T73] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.545993][ T39] audit: type=1400 audit(1731248958.654:580): avc: denied { sys_chroot } for pid=8454 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 86.551559][ T39] audit: type=1400 audit(1731248958.654:581): avc: denied { setgid } for pid=8454 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 86.611994][ T73] usb 10-1: usb_control_msg returned -32 [ 86.613566][ T73] usbtmc 10-1:16.0: can't read capabilities [ 86.923777][ T5941] Bluetooth: hci2: command tx timeout [ 86.973528][ T8458] usbtmc 10-1:16.0: INITIATE_CLEAR returned 0 [ 87.063139][ T8463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8463 comm=syz.4.571 [ 87.067583][ T8463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.571'. [ 87.083467][ T8463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8463 comm=syz.4.571 [ 87.110474][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 87.113276][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.572'. [ 87.117909][ T8469] gtp0: entered promiscuous mode [ 87.119193][ T8469] gtp0: entered allmulticast mode [ 87.173773][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 87.176496][ T8474] Illegal XDP return value 1161921857 on prog (id 114) dev syz_tun, expect packet loss! [ 87.180063][ T9] usb 10-1: USB disconnect, device number 8 [ 87.183768][ T8474] netlink: 'syz.4.573': attribute type 24 has an invalid length. [ 87.229429][ T8478] VFS: unable to find oldfs superblock on device nullb0 [ 87.232754][ T39] audit: type=1400 audit(1731248959.334:582): avc: denied { write } for pid=8477 comm="syz.4.575" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 87.703100][ T8488] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.578'. [ 87.707696][ T8488] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 87.789841][ T8497] bond1: entered allmulticast mode [ 88.203777][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 88.654749][ T39] audit: type=1400 audit(1731248960.764:583): avc: denied { map } for pid=8514 comm="syz.4.587" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.659969][ T8507] IPVS: You probably need to specify IP address on multicast interface. [ 88.660340][ T39] audit: type=1400 audit(1731248960.764:584): avc: denied { execute } for pid=8514 comm="syz.4.587" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.670766][ T8507] IPVS: Error connecting to the multicast addr [ 88.737129][ T8528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8528 comm=syz.5.590 [ 88.740455][ T8528] netlink: 'syz.5.590': attribute type 1 has an invalid length. [ 88.751031][ T8528] bond2: entered promiscuous mode [ 88.752723][ T8528] bond2: entered allmulticast mode [ 88.754963][ T8528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.763287][ T8528] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 88.768384][ T8528] bond2: (slave batadv1): making interface the new active one [ 88.770839][ T8528] batadv1: entered promiscuous mode [ 88.772669][ T8528] batadv1: entered allmulticast mode [ 88.775289][ T8533] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 88.777044][ T8528] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 89.013772][ T5941] Bluetooth: hci2: command tx timeout [ 89.053749][ T57] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 89.076083][ T8556] netlink: 19 bytes leftover after parsing attributes in process `syz.6.596'. [ 89.239761][ T57] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.242126][ T57] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.243774][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 89.246197][ T57] usb 10-1: Product: syz [ 89.247402][ T57] usb 10-1: Manufacturer: syz [ 89.248666][ T57] usb 10-1: SerialNumber: syz [ 89.260739][ T57] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 89.408162][ T57] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 90.024004][ T8554] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 90.026267][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.596'. [ 90.057349][ T1948] hid-generic 0000:0000:0000.0005: item fetching failed at offset 0/1 [ 90.059669][ T1948] hid-generic 0000:0000:0000.0005: probe with driver hid-generic failed with error -22 [ 90.081333][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 90.081343][ T39] audit: type=1400 audit(1731248962.184:586): avc: denied { connect } for pid=8562 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.088992][ T39] audit: type=1400 audit(1731248962.194:587): avc: denied { ioctl } for pid=8562 comm="syz.3.600" path="socket:[22352]" dev="sockfs" ino=22352 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 90.089350][ T8563] netlink: 'syz.3.600': attribute type 39 has an invalid length. [ 90.096086][ T8566] UBIFS error (pid: 8566): cannot open "ubifs", error -22 [ 90.141956][ T39] audit: type=1400 audit(1731248962.244:588): avc: denied { getopt } for pid=8562 comm="syz.3.600" lport=47431 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 90.231016][ T8585] afs: Unknown parameter 'dont_appraise' [ 90.282173][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.609'. [ 90.284469][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 90.350839][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.611'. [ 90.373861][ T7421] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 90.453992][ T57] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 90.457081][ T57] ath9k_htc: Failed to initialize the device [ 90.476173][ T57] usb 10-1: ath9k_htc: USB layer deinitialized [ 90.544317][ T7421] usb 8-1: Using ep0 maxpacket: 8 [ 90.546849][ T7421] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 90.548934][ T7421] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 90.549630][ T8605] netlink: 276 bytes leftover after parsing attributes in process `syz.6.613'. [ 90.551577][ T7421] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.557249][ T7421] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.559582][ T7421] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.564711][ T7421] usbtmc 8-1:16.0: bulk endpoints not found [ 90.611778][ T8611] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 91.069568][ T8636] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.623'. [ 91.083778][ T5941] Bluetooth: hci2: command tx timeout [ 91.140183][ T39] audit: type=1400 audit(1731248963.244:589): avc: denied { shutdown } for pid=8639 comm="syz.4.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.156718][ T39] audit: type=1400 audit(1731248963.264:590): avc: denied { audit_control } for pid=8639 comm="syz.4.624" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 91.323777][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 91.818577][ T1445] usb 10-1: USB disconnect, device number 9 [ 91.859543][ T39] audit: type=1400 audit(1731248963.964:591): avc: denied { remount } for pid=8651 comm="syz.5.626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 91.865309][ T8652] xt_cluster: node mask cannot exceed total number of nodes [ 91.987659][ T39] audit: type=1400 audit(1731248964.094:592): avc: denied { create } for pid=8663 comm="syz.5.631" name="#25" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.993623][ T39] audit: type=1400 audit(1731248964.094:593): avc: denied { link } for pid=8663 comm="syz.5.631" name="#25" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.999277][ T39] audit: type=1400 audit(1731248964.094:594): avc: denied { rename } for pid=8663 comm="syz.5.631" name="#26" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.030213][ T8668] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.030539][ T39] audit: type=1400 audit(1731248964.134:595): avc: denied { write } for pid=8667 comm="syz.4.633" path="socket:[24827]" dev="sockfs" ino=24827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.122562][ T8675] IPVS: persistence engine module ip_vs_pe_t not found [ 92.217729][ T8686] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 92.224743][ T8686] ipip0: entered promiscuous mode [ 92.373859][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 92.591169][ T8709] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.738504][ T8721] sp0: Synchronizing with TNC [ 92.823834][ T1013] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 92.974225][ T1013] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 92.977052][ T1013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.979451][ T1013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.982244][ T1013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 92.985385][ T1013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.987674][ T1013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.990417][ T1013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 92.992830][ T1013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.995446][ T1013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.997091][ T8736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.649'. [ 92.998153][ T1013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 92.998879][ T1013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.004669][ T1013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.007430][ T1013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 93.009871][ T1013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.012166][ T1013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.014989][ T1013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 93.017358][ T1013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.019601][ T1013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.022549][ T1013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 93.025580][ T1013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.028032][ T1013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.030787][ T1013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 93.033187][ T1013] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.035833][ T1013] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.038541][ T1013] usb 11-1: config 0 interface 0 has no altsetting 0 [ 93.041641][ T1013] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 93.044223][ T1013] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 93.046341][ T1013] usb 11-1: Product: syz [ 93.047438][ T1013] usb 11-1: Manufacturer: syz [ 93.048633][ T1013] usb 11-1: SerialNumber: syz [ 93.054908][ T1013] usb 11-1: config 0 descriptor?? [ 93.062620][ T1013] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 93.096437][ T7421] usb 8-1: USB disconnect, device number 5 [ 93.154742][ T8760] Bluetooth: MGMT ver 1.23 [ 93.158005][ T8760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 93.159980][ T8763] tipc: Can't bind to reserved service type 1 [ 93.160244][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 93.262997][ T8757] overlayfs: failed to set uuid (161/file1, err=-1); falling back to uuid=null. [ 93.265615][ T8757] overlayfs: failed to verify upper root origin [ 93.286323][ T5983] usb 11-1: USB disconnect, device number 2 [ 93.297265][ T5983] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 93.320893][ T8770] netlink: 88 bytes leftover after parsing attributes in process `syz.3.660'. [ 93.323339][ T8770] netlink: 40 bytes leftover after parsing attributes in process `syz.3.660'. [ 93.403772][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 93.570803][ T8800] PM: Enabling pm_trace changes system date and time during resume. [ 93.570803][ T8800] PM: Correct system time has to be restored manually after resume. [ 93.653845][ T1948] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 93.742352][ T8821] binder_alloc: 8820: binder_alloc_buf, no vma [ 93.823760][ T1948] usb 8-1: Using ep0 maxpacket: 32 [ 93.826663][ T1948] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.829587][ T1948] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 93.830580][ T8830] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 93.833912][ T1948] usb 8-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 93.840637][ T1948] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.842704][ T1948] usb 8-1: Product: syz [ 93.843792][ T1948] usb 8-1: Manufacturer: syz [ 93.844950][ T1948] usb 8-1: SerialNumber: syz [ 93.847185][ T1948] usb 8-1: config 0 descriptor?? [ 93.966472][ T7421] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 94.037072][ T8837] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.043549][ T8837] 9pnet_fd: Insufficient options for proto=fd [ 94.107239][ T8848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.110149][ T8848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.137713][ T7421] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.140224][ T7421] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 94.142392][ T7421] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 94.145205][ T7421] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 94.147555][ T7421] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.153965][ T8822] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 94.156455][ T7421] hub 9-1:1.0: bad descriptor, ignoring hub [ 94.156886][ T1013] usb 8-1: USB disconnect, device number 6 [ 94.157995][ T7421] hub 9-1:1.0: probe with driver hub failed with error -5 [ 94.162396][ T7421] cdc_wdm 9-1:1.0: skipping garbage [ 94.163927][ T7421] cdc_wdm 9-1:1.0: skipping garbage [ 94.167543][ T7421] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 94.169037][ T7421] cdc_wdm 9-1:1.0: Unknown control protocol [ 94.209650][ T8856] netlink: 'syz.5.684': attribute type 10 has an invalid length. [ 94.215445][ T8856] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 94.219229][ T1445] IPVS: starting estimator thread 0... [ 94.303795][ T8863] IPVS: using max 36 ests per chain, 86400 per kthread [ 94.443776][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 94.938900][ T8912] program syz.5.700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.942870][ T8914] program syz.5.700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.278739][ T8822] cdc_wdm 9-1:1.0: Error autopm - -16 [ 95.278881][ T1013] usb 9-1: USB disconnect, device number 4 [ 95.493778][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 96.523995][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 97.573781][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 98.603750][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 99.643872][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 100.693817][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 101.724020][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 102.763831][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 103.813764][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 104.853751][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 105.883853][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 106.923943][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 107.963870][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 108.043011][ T9005] netlink: 'syz.3.708': attribute type 10 has an invalid length. [ 108.054527][ T9005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.057484][ T9005] team0: Port device bond0 added [ 108.058878][ T9002] __nla_validate_parse: 2 callbacks suppressed [ 108.058887][ T9002] netlink: 24 bytes leftover after parsing attributes in process `syz.5.710'. [ 108.062828][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 108.062835][ T39] audit: type=1400 audit(1731248980.164:608): avc: denied { bind } for pid=9013 comm="syz.6.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.062854][ T39] audit: type=1400 audit(1731248980.164:609): avc: denied { connect } for pid=9013 comm="syz.6.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.079900][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.111089][ T9023] dns_resolver: Unsupported server list version (126) [ 108.112182][ T9026] netlink: 96 bytes leftover after parsing attributes in process `syz.5.716'. [ 108.118888][ T9025] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.120357][ T9026] xt_CT: No such helper "pptp" [ 108.150794][ T39] audit: type=1400 audit(1731248980.254:610): avc: denied { append } for pid=9016 comm="syz.3.714" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.174234][ T9027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.177943][ T9027] batadv_slave_0: entered promiscuous mode [ 108.181227][ T9027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.185794][ T9027] netlink: 7 bytes leftover after parsing attributes in process `syz.4.713'. [ 108.188235][ T9027] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 108.205081][ T9036] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 108.213928][ T9023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.215432][ T9023] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.217746][ T9023] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.356015][ T9050] netlink: 'syz.6.718': attribute type 2 has an invalid length. [ 108.382137][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 108.385572][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 108.396772][ T9061] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 108.427219][ T9064] hfs: invalid gid -1 [ 108.428377][ T9064] hfs: unable to parse mount options [ 108.434566][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.729'. [ 108.445864][ T9058] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 108.453748][ T1133] Bluetooth: hci4: Frame reassembly failed (-84) [ 108.457783][ T9064] input: syz0 as /devices/virtual/input/input10 [ 108.482094][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 108.683844][ T30] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 108.835044][ T30] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.837228][ T30] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 108.837240][ T30] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.839069][ T9097] binder: Bad value for 'max' [ 108.841963][ T39] audit: type=1400 audit(1731248980.944:611): avc: denied { write } for pid=9094 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 108.843034][ T30] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 108.852141][ T30] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 108.857930][ T30] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.858074][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.738'. [ 108.860203][ T30] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.864494][ T30] usb 9-1: Product: syz [ 108.865558][ T30] usb 9-1: Manufacturer: syz [ 108.869854][ T30] cdc_wdm 9-1:1.0: skipping garbage [ 108.871291][ T30] cdc_wdm 9-1:1.0: skipping garbage [ 108.872925][ T39] audit: type=1400 audit(1731248980.974:612): avc: denied { create } for pid=9105 comm="syz.3.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 108.873045][ T30] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 108.880612][ T30] cdc_wdm 9-1:1.0: Unknown control protocol [ 109.003809][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 109.057645][ T39] audit: type=1400 audit(1731248981.164:613): avc: denied { mount } for pid=9118 comm="syz.3.744" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 109.063218][ T39] audit: type=1400 audit(1731248981.164:614): avc: denied { read } for pid=9118 comm="syz.3.744" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 109.068887][ T39] audit: type=1400 audit(1731248981.164:615): avc: denied { open } for pid=9118 comm="syz.3.744" path="/184/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 109.070229][ T30] usb 9-1: USB disconnect, device number 5 [ 109.075026][ T39] audit: type=1400 audit(1731248981.174:616): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 109.087570][ T9124] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=9124 comm=syz.3.745 [ 109.123099][ T9127] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 109.148687][ T39] audit: type=1400 audit(1731248981.254:617): avc: denied { connect } for pid=9128 comm="syz.5.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 109.223405][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 109.513885][ T57] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 109.548645][ T9146] netlink: 'syz.3.752': attribute type 9 has an invalid length. [ 109.550688][ T9146] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.752'. [ 109.600326][ T9153] 9pnet_fd: Insufficient options for proto=fd [ 109.667258][ T57] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.669771][ T57] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 109.672529][ T57] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.675137][ T57] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 109.677917][ T57] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 109.682170][ T57] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.686636][ T57] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.689380][ T57] usb 9-1: Product: syz [ 109.689396][ T57] usb 9-1: Manufacturer: syz [ 109.697257][ T57] cdc_wdm 9-1:1.0: skipping garbage [ 109.697275][ T57] cdc_wdm 9-1:1.0: skipping garbage [ 109.699329][ T57] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 109.699348][ T57] cdc_wdm 9-1:1.0: Unknown control protocol [ 110.053792][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 110.293823][ T5946] Bluetooth: hci2: command 0x0405 tx timeout [ 110.451397][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 110.453196][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 110.455654][ T73] usb 9-1: USB disconnect, device number 6 [ 110.533862][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 110.533963][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 110.585742][ T9207] usb usb1: usbfs: process 9207 (syz.6.768) did not claim interface 0 before use [ 110.644706][ T9208] netlink: 'syz.6.768': attribute type 1 has an invalid length. [ 110.714577][ T9203] input: syz0 as /devices/virtual/input/input11 [ 110.805472][ T9217] dccp_close: ABORT with 188 bytes unread [ 110.883860][ T9217] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.940595][ T9222] veth1_macvtap: left promiscuous mode [ 111.083759][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 111.223857][ T5984] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 111.315652][ T9251] batman_adv: batadv0: Adding interface: erspan1 [ 111.317496][ T9251] batman_adv: batadv0: The MTU of interface erspan1 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.324457][ T9251] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 111.357790][ T9256] erspan0: entered promiscuous mode [ 111.360101][ T9256] macvtap1: entered promiscuous mode [ 111.362029][ T9256] macvtap1: entered allmulticast mode [ 111.364535][ T9256] erspan0: entered allmulticast mode [ 111.373977][ T5984] usb 8-1: Using ep0 maxpacket: 8 [ 111.387155][ T5984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.390120][ T5984] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.392426][ T5984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.395995][ T5984] usb 8-1: config 0 descriptor?? [ 111.408936][ T9260] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 111.412587][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.414843][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.574957][ T9276] input: syz0 as /devices/virtual/input/input12 [ 111.602439][ T5984] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 111.686555][ T9280] xt_socket: unknown flags 0x8 [ 111.704077][ T827] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 111.804983][ T9222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.806925][ T9222] IPv6: NLM_F_CREATE should be set when creating new route [ 111.808836][ T9222] IPv6: NLM_F_CREATE should be set when creating new route [ 111.815981][ T5983] usb 8-1: USB disconnect, device number 7 [ 111.820476][ T5983] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 111.864039][ T827] usb 10-1: Using ep0 maxpacket: 8 [ 111.867494][ T827] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.870854][ T827] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.874479][ T827] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.878109][ T827] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.882241][ T827] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.885276][ T827] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.943946][ T55] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 112.092707][ T827] usb 10-1: GET_CAPABILITIES returned 0 [ 112.093758][ T55] usb 11-1: Using ep0 maxpacket: 8 [ 112.094883][ T827] usbtmc 10-1:16.0: can't read capabilities [ 112.096698][ T55] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 112.099069][ T55] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.101920][ T55] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.106611][ T55] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.109468][ T55] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.113495][ T55] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 112.115482][ T55] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.118361][ T55] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.121345][ T55] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.124477][ T55] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.128090][ T55] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 112.130040][ T55] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.132900][ T55] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.133789][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 112.137932][ T55] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.140810][ T55] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.145953][ T55] usb 11-1: string descriptor 0 read error: -22 [ 112.147598][ T55] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.150233][ T55] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.154876][ T55] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 112.358907][ T55] usb 11-1: USB disconnect, device number 3 [ 112.557966][ T9343] netlink: 'syz.4.809': attribute type 1 has an invalid length. [ 112.560073][ T9343] netlink: 'syz.4.809': attribute type 1 has an invalid length. [ 112.676622][ T9352] netlink: 'syz.3.811': attribute type 5 has an invalid length. [ 112.714843][ T9353] syz.4.810(9353): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 112.934004][ T5941] Bluetooth: hci2: command 0x0405 tx timeout [ 112.948304][ T9355] syzkaller0: entered promiscuous mode [ 112.949788][ T9355] syzkaller0: entered allmulticast mode [ 113.173816][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 113.444443][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 113.444453][ T39] audit: type=1326 audit(1731248985.554:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.4.810" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6557e719 code=0x7fc00000 [ 113.536464][ T9364] x_tables: duplicate underflow at hook 2 [ 113.562322][ T9371] syzkaller1: entered promiscuous mode [ 113.563944][ T9371] syzkaller1: entered allmulticast mode [ 113.584684][ T39] audit: type=1400 audit(1731248985.694:637): avc: denied { mounton } for pid=9373 comm="syz.3.817" path="/213/file1/bus" dev="autofs" ino=26483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 113.585157][ T9374] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 113.596480][ T9374] overlayfs: conflicting options: userxattr,verity=on [ 113.623160][ T9376] can0: slcan on ptm0. [ 113.696076][ T39] audit: type=1400 audit(1731248985.804:638): avc: denied { map } for pid=9382 comm="syz.4.819" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.701914][ T39] audit: type=1400 audit(1731248985.804:639): avc: denied { execute } for pid=9382 comm="syz.4.819" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.873810][ T73] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 114.048224][ T73] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 114.050147][ T73] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 114.052913][ T73] usb 8-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.056515][ T73] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 114.058545][ T73] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 114.061205][ T73] usb 8-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.068415][ T73] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 114.070353][ T73] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 114.073103][ T73] usb 8-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.085585][ T73] usb 8-1: string descriptor 0 read error: -22 [ 114.087208][ T73] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 114.089690][ T73] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.106860][ T73] adutux 8-1:168.0: interrupt endpoints not found [ 114.213757][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 114.307673][ T827] usb 8-1: USB disconnect, device number 8 [ 114.457488][ T55] usb 10-1: USB disconnect, device number 10 [ 114.843556][ T9391] __nla_validate_parse: 10 callbacks suppressed [ 114.843575][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.821'. [ 114.849936][ T39] audit: type=1400 audit(1731248986.954:640): avc: denied { map } for pid=9393 comm="syz.4.822" path="socket:[28890]" dev="sockfs" ino=28890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.924267][ T9376] can0 (unregistered): slcan off ptm0. [ 115.003913][ T5941] Bluetooth: hci2: command 0x0405 tx timeout [ 115.055172][ T9413] input: syz0 as /devices/virtual/input/input13 [ 115.114201][ T9415] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.829'. [ 115.135717][ T9417] tipc: Enabling of bearer rejected, failed to enable media [ 115.165478][ T827] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 115.243755][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 115.293842][ T5984] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 115.313771][ T827] usb 11-1: Using ep0 maxpacket: 32 [ 115.316330][ T827] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.318473][ T827] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.320623][ T827] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.322973][ T827] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.325705][ T827] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.328077][ T827] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.331289][ T827] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.333605][ T827] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.336881][ T827] usb 11-1: config 0 descriptor?? [ 115.465094][ T5984] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.467321][ T5984] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.469914][ T5984] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.472181][ T5984] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.477104][ T5984] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.479488][ T5984] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.481570][ T5984] usb 9-1: Product: syz [ 115.482718][ T5984] usb 9-1: Manufacturer: syz [ 115.489329][ T5984] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 115.540376][ T9401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.542738][ T9401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.553154][ T827] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 115.558359][ T827] usb 11-1: USB disconnect, device number 4 [ 115.562334][ T827] usblp0: removed usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 115.598418][ C2] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 115.734903][ T9433] netlink: 'syz.3.834': attribute type 10 has an invalid length. [ 115.740546][ T9433] team0: Device ipvlan1 failed to register rx_handler [ 115.784688][ T30] usb 9-1: USB disconnect, device number 7 [ 116.007793][ T39] audit: type=1400 audit(1731248988.114:641): avc: denied { create } for pid=9440 comm="syz.5.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 116.033841][ T73] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 116.194889][ T73] usb 8-1: Using ep0 maxpacket: 8 [ 116.197395][ T73] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 116.199616][ T73] usb 8-1: config 179 has no interface number 0 [ 116.201230][ T73] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 116.204088][ T73] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 116.206681][ T73] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.209474][ T73] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 25620, setting to 1024 [ 116.212175][ T73] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 116.215390][ T73] usb 8-1: config 179 interface 65 has no altsetting 0 [ 116.217225][ T73] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 116.219509][ T73] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.223462][ T9435] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.224413][ T9435] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.229609][ T73] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input14 [ 116.274096][ T5346] input input14: unable to receive magic message: -110 [ 116.283670][ T5346] input input14: unable to receive magic message: -32 [ 116.283813][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 116.301923][ T5346] input input14: unable to receive magic message: -32 [ 116.314910][ T5346] input input14: unable to receive magic message: -32 [ 116.319102][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 116.324055][ T5346] input input14: unable to receive magic message: -32 [ 116.329829][ T5346] input input14: unable to receive magic message: -32 [ 116.434856][ T9435] input input14: unable to receive magic message: -32 [ 116.438793][ T39] audit: type=1400 audit(1731248988.544:642): avc: denied { connect } for pid=9434 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.440730][ T827] usb 8-1: USB disconnect, device number 9 [ 116.440814][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 116.443637][ T39] audit: type=1400 audit(1731248988.544:643): avc: denied { setopt } for pid=9434 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.449015][ T827] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 116.553988][ T30] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 116.651666][ T9489] syz.4.844: attempt to access beyond end of device [ 116.651666][ T9489] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 116.661745][ T39] audit: type=1326 audit(1731248988.764:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9488 comm="syz.4.844" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f6557e719 code=0x0 [ 116.667790][ T39] audit: type=1326 audit(1731248988.774:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9488 comm="syz.4.844" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f6557e719 code=0x0 [ 116.683788][ T30] usb 11-1: device descriptor read/64, error -71 [ 116.811383][ T9541] overlayfs: overlapping lowerdir path [ 116.814985][ T9543] overlayfs: overlapping lowerdir path [ 116.932131][ T30] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 116.980816][ T9559] x_tables: duplicate underflow at hook 2 [ 117.002709][ T9561] syz_tun: entered allmulticast mode [ 117.013387][ T9562] syz_tun: left allmulticast mode [ 117.063860][ T30] usb 11-1: device descriptor read/64, error -71 [ 117.068709][ T9567] openvswitch: netlink: Actions may not be safe on all matching packets [ 117.126089][ T9569] hfs: invalid gid -1 [ 117.127462][ T9569] hfs: unable to parse mount options [ 117.173977][ T30] usb usb11-port1: attempt power cycle [ 117.173983][ T827] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 117.196338][ T9578] netlink: 'syz.5.857': attribute type 10 has an invalid length. [ 117.200978][ T9578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.204241][ T9578] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 117.212974][ T9574] ubi0: attaching mtd0 [ 117.216895][ T9574] ubi0: scanning is finished [ 117.218129][ T9574] ubi0: empty MTD device detected [ 117.277317][ T9574] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 117.279248][ T9574] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 117.281056][ T9574] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 117.282803][ T9574] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 117.284910][ T9574] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 117.286641][ T9574] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 117.289097][ T9574] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1013299964 [ 117.291618][ T9574] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 117.295279][ T9589] ubi0: background thread "ubi_bgt0d" started, PID 9589 [ 117.297915][ T9585] ubi0: detaching mtd0 [ 117.303177][ T9585] ubi0: mtd0 is detached [ 117.323836][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 117.344954][ T827] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.347625][ T827] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.350787][ T827] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.353009][ T827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.359588][ T827] usb 9-1: config 0 descriptor?? [ 117.363670][ T827] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 117.513822][ T30] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 117.534487][ T30] usb 11-1: device descriptor read/8, error -71 [ 117.773795][ T30] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 117.794187][ T30] usb 11-1: device descriptor read/8, error -71 [ 117.903908][ T30] usb usb11-port1: unable to enumerate USB device [ 118.373872][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 119.189392][ T9611] netlink: 84 bytes leftover after parsing attributes in process `syz.3.869'. [ 119.192070][ T9611] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 119.288451][ T9624] CUSE: DEVNAME unspecified [ 119.403754][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 119.481053][ T9632] overlayfs: conflicting lowerdir path [ 119.651942][ T9636] pim6reg1: entered promiscuous mode [ 119.655158][ T9636] pim6reg1: entered allmulticast mode [ 119.846167][ T827] usb 9-1: USB disconnect, device number 8 [ 119.901931][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 120.111024][ T9676] vxfs: WRONG superblock magic 00000000 at 1 [ 120.113051][ T9676] vxfs: WRONG superblock magic 00000000 at 8 [ 120.114731][ T9676] vxfs: can't find superblock. [ 120.116548][ T9676] netlink: 44 bytes leftover after parsing attributes in process `syz.3.884'. [ 120.158457][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 120.158468][ T39] audit: type=1400 audit(1731248992.264:649): avc: denied { getopt } for pid=9668 comm="syz.4.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.197735][ T9686] No such timeout policy "syz1" [ 120.210220][ T9683] kvm: pic: non byte write [ 120.270272][ T9693] netlink: 112 bytes leftover after parsing attributes in process `syz.3.889'. [ 120.273271][ T9693] trusted_key: encrypted_key: keylen parameter is missing [ 120.453812][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 120.924707][ T9701] netlink: 'syz.4.892': attribute type 39 has an invalid length. [ 121.483936][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 122.443870][ T5946] Bluetooth: hci2: command 0x0405 tx timeout [ 122.446661][ T9695] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.478193][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 122.533781][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 122.597615][ T9727] netlink: 'syz.3.900': attribute type 4 has an invalid length. [ 122.621483][ T9727] netlink: 'syz.3.900': attribute type 17 has an invalid length. [ 122.632552][ T39] audit: type=1400 audit(1731248994.734:650): avc: denied { setattr } for pid=9737 comm="syz.4.902" name="NETLINK" dev="sockfs" ino=36057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.659656][ T39] audit: type=1400 audit(1731248994.764:651): avc: denied { write } for pid=9741 comm="syz.3.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 122.701944][ T9744] mkiss: ax0: crc mode is auto. [ 123.563775][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 123.862700][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.905'. [ 124.112751][ T9762] netlink: 72 bytes leftover after parsing attributes in process `syz.3.911'. [ 124.162725][ T39] audit: type=1400 audit(1731248996.264:652): avc: denied { write } for pid=9765 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.215445][ T9768] hpfs: bad mount options. [ 124.341833][ T9777] netlink: 36 bytes leftover after parsing attributes in process `syz.3.917'. [ 124.404675][ T9783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.919'. [ 124.407116][ T9783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.919'. [ 124.436017][ T9785] ------------[ cut here ]------------ [ 124.438184][ T9785] WARNING: CPU: 1 PID: 9785 at drivers/gpu/drm/vkms/vkms_crtc.c:100 vkms_get_vblank_timestamp+0x185/0x1e0 [ 124.441127][ T9785] Modules linked in: SYZFAIL: failed to recv rpc [ 124.442501][ T9785] CPU: 1 UID: 0 PID: 9785 Comm: syz.3.920 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 124.447023][ T9785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 124.449801][ T9785] RIP: 0010:vkms_get_vblank_timestamp+0x185/0x1e0 [ 124.451593][ T9785] Code: e0 fb e8 9e 39 ce fb 48 89 e9 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 50 48 89 45 00 eb c0 e8 9c 4c e0 fb 90 <0f> 0b 90 eb b5 e8 11 d6 41 fc e9 dc fe ff ff 48 89 df e8 94 d6 41 [ 124.457284][ T9785] RSP: 0018:ffffc90004ed7810 EFLAGS: 00010283 [ 124.458870][ T9785] RAX: 00000000000021dc RBX: 0000001cf2aa193f RCX: ffffc900076d4000 [ 124.460933][ T9785] RDX: 0000000000040000 RSI: ffffffff85ad2eb4 RDI: 0000000000000006 [ 124.463257][ T9785] RBP: ffffc90004ed7978 R08: 0000000000000006 R09: 0000001cf2aa193f [ 124.465418][ T9785] R10: 0000001cf2aa193f R11: 0000000000000000 R12: 0000001cf2aa193f [ 124.467500][ T9785] R13: ffff88802012c000 R14: 0000000000004e20 R15: ffffffff85ad2d30 [ 124.469619][ T9785] FS: 00007fe3453f66c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 124.472004][ T9785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.473914][ T9785] CR2: 0000000000000000 CR3: 0000000027156000 CR4: 0000000000352ef0 [ 124.476060][ T9785] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.478162][ T9785] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.480861][ T9785] Call Trace: [ 124.481776][ T9785] [ 124.482595][ T9785] ? __warn+0xea/0x3d0 [ 124.483791][ T9785] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 124.485365][ T9785] ? report_bug+0x3c0/0x580 [ 124.486630][ T9785] ? handle_bug+0x54/0xa0 [ 124.487832][ T9785] ? exc_invalid_op+0x17/0x50 [ 124.489126][ T9785] ? asm_exc_invalid_op+0x1a/0x20 [ 124.490526][ T9785] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 124.492162][ T9785] ? vkms_get_vblank_timestamp+0x184/0x1e0 [ 124.493895][ T9785] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 124.495478][ T9785] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.497087][ T9785] drm_crtc_get_last_vbltimestamp+0x103/0x1b0 [ 124.498721][ T9785] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 124.500476][ T9785] drm_crtc_next_vblank_start+0x182/0x300 [ 124.501981][ T9785] drm_atomic_helper_wait_for_fences+0x1fc/0x820 [ 124.503668][ T9785] ? vkms_prepare_fb+0x5f/0xb0 [ 124.505052][ T9785] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 124.506835][ T9785] drm_atomic_helper_commit+0x1cf/0x380 [ 124.508317][ T9785] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 124.509913][ T9785] drm_atomic_commit+0x229/0x300 [ 124.511216][ T9785] ? __pfx_drm_atomic_commit+0x10/0x10 [ 124.512625][ T9785] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 124.514441][ T9785] ? __pfx___drm_printfn_info+0x10/0x10 [ 124.515890][ T9785] ? drm_client_rotation+0x4d9/0x6a0 [ 124.517267][ T9785] drm_client_modeset_commit_atomic+0x6b0/0x800 [ 124.518902][ T9785] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 124.520685][ T9785] drm_client_modeset_commit_locked+0x14d/0x580 [ 124.522315][ T9785] drm_client_modeset_commit+0x4f/0x80 [ 124.523802][ T9785] drm_fb_helper_lastclose+0xc7/0x160 [ 124.525201][ T9785] ? __pfx_drm_fbdev_shmem_client_restore+0x10/0x10 [ 124.526893][ T9785] drm_fbdev_shmem_client_restore+0x2c/0x40 [ 124.528475][ T9785] drm_client_dev_restore+0x188/0x2a0 [ 124.529893][ T9785] drm_release+0x2c2/0x360 [ 124.531106][ T9785] ? __pfx_drm_release+0x10/0x10 [ 124.532402][ T9785] __fput+0x3f6/0xb60 [ 124.533456][ T9785] task_work_run+0x14e/0x250 [ 124.533852][ T5941] Bluetooth: hci2: command 0x0405 tx timeout [ 124.534759][ T9785] ? __pfx_task_work_run+0x10/0x10 [ 124.537527][ T9785] ? selinux_file_ioctl+0xb4/0x270 [ 124.538879][ T9785] syscall_exit_to_user_mode+0x27b/0x2a0 [ 124.540356][ T9785] do_syscall_64+0xda/0x250 [ 124.541604][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.543219][ T9785] RIP: 0033:0x7fe346f7e719 [ 124.544512][ T9785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.549632][ T9785] RSP: 002b:00007fe3453f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 124.551857][ T9785] RAX: 0000000000000000 RBX: 00007fe347135f80 RCX: 00007fe346f7e719 [ 124.553928][ T9785] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 124.555983][ T9785] RBP: 00007fe346ff139e R08: 0000000000000000 R09: 0000000000000000 [ 124.558074][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.560189][ T9785] R13: 0000000000000000 R14: 00007fe347135f80 R15: 00007ffd63b4ac38 [ 124.562273][ T9785] [ 124.563049][ T9785] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.564939][ T9785] CPU: 1 UID: 0 PID: 9785 Comm: syz.3.920 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 124.567660][ T9785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.570436][ T9785] Call Trace: [ 124.571289][ T9785] [ 124.572075][ T9785] dump_stack_lvl+0x3d/0x1f0 [ 124.573287][ T9785] panic+0x71d/0x800 [ 124.574333][ T9785] ? __pfx_panic+0x10/0x10 [ 124.575546][ T9785] ? show_trace_log_lvl+0x29d/0x3d0 [ 124.576944][ T9785] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 124.578514][ T9785] check_panic_on_warn+0xab/0xb0 [ 124.579841][ T9785] __warn+0xf6/0x3d0 [ 124.580877][ T9785] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 124.582438][ T9785] report_bug+0x3c0/0x580 [ 124.583669][ T9785] handle_bug+0x54/0xa0 [ 124.584856][ T9785] exc_invalid_op+0x17/0x50 [ 124.586107][ T9785] asm_exc_invalid_op+0x1a/0x20 [ 124.587432][ T9785] RIP: 0010:vkms_get_vblank_timestamp+0x185/0x1e0 [ 124.589128][ T9785] Code: e0 fb e8 9e 39 ce fb 48 89 e9 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 50 48 89 45 00 eb c0 e8 9c 4c e0 fb 90 <0f> 0b 90 eb b5 e8 11 d6 41 fc e9 dc fe ff ff 48 89 df e8 94 d6 41 [ 124.594232][ T9785] RSP: 0018:ffffc90004ed7810 EFLAGS: 00010283 [ 124.595948][ T9785] RAX: 00000000000021dc RBX: 0000001cf2aa193f RCX: ffffc900076d4000 [ 124.598068][ T9785] RDX: 0000000000040000 RSI: ffffffff85ad2eb4 RDI: 0000000000000006 [ 124.600189][ T9785] RBP: ffffc90004ed7978 R08: 0000000000000006 R09: 0000001cf2aa193f [ 124.602304][ T9785] R10: 0000001cf2aa193f R11: 0000000000000000 R12: 0000001cf2aa193f [ 124.604421][ T9785] R13: ffff88802012c000 R14: 0000000000004e20 R15: ffffffff85ad2d30 [ 124.606555][ T9785] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 124.608184][ T9785] ? vkms_get_vblank_timestamp+0x184/0x1e0 [ 124.609698][ T9785] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.611257][ T9785] drm_crtc_get_last_vbltimestamp+0x103/0x1b0 [ 124.612818][ T9785] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 124.614515][ T9785] drm_crtc_next_vblank_start+0x182/0x300 [ 124.615994][ T9785] drm_atomic_helper_wait_for_fences+0x1fc/0x820 [ 124.617656][ T9785] ? vkms_prepare_fb+0x5f/0xb0 [ 124.618919][ T9785] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 124.620694][ T9785] drm_atomic_helper_commit+0x1cf/0x380 [ 124.622146][ T9785] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 124.623722][ T9785] drm_atomic_commit+0x229/0x300 [ 124.625001][ T9785] ? __pfx_drm_atomic_commit+0x10/0x10 [ 124.626424][ T9785] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 124.628101][ T9785] ? __pfx___drm_printfn_info+0x10/0x10 [ 124.629553][ T9785] ? drm_client_rotation+0x4d9/0x6a0 [ 124.630980][ T9785] drm_client_modeset_commit_atomic+0x6b0/0x800 [ 124.632653][ T9785] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 124.634476][ T9785] drm_client_modeset_commit_locked+0x14d/0x580 [ 124.636144][ T9785] drm_client_modeset_commit+0x4f/0x80 [ 124.637619][ T9785] drm_fb_helper_lastclose+0xc7/0x160 [ 124.639099][ T9785] ? __pfx_drm_fbdev_shmem_client_restore+0x10/0x10 [ 124.640822][ T9785] drm_fbdev_shmem_client_restore+0x2c/0x40 [ 124.642385][ T9785] drm_client_dev_restore+0x188/0x2a0 [ 124.643799][ T9785] drm_release+0x2c2/0x360 [ 124.644959][ T9785] ? __pfx_drm_release+0x10/0x10 [ 124.646259][ T9785] __fput+0x3f6/0xb60 [ 124.647368][ T9785] task_work_run+0x14e/0x250 [ 124.648620][ T9785] ? __pfx_task_work_run+0x10/0x10 [ 124.650000][ T9785] ? selinux_file_ioctl+0xb4/0x270 [ 124.651393][ T9785] syscall_exit_to_user_mode+0x27b/0x2a0 [ 124.652893][ T9785] do_syscall_64+0xda/0x250 [ 124.654117][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.655706][ T9785] RIP: 0033:0x7fe346f7e719 [ 124.656904][ T9785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.661962][ T9785] RSP: 002b:00007fe3453f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 124.664175][ T9785] RAX: 0000000000000000 RBX: 00007fe347135f80 RCX: 00007fe346f7e719 [ 124.666259][ T9785] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 124.668289][ T9785] RBP: 00007fe346ff139e R08: 0000000000000000 R09: 0000000000000000 [ 124.670364][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.672375][ T9785] R13: 0000000000000000 R14: 00007fe347135f80 R15: 00007ffd63b4ac38 [ 124.674401][ T9785] [ 124.675809][ T9785] Kernel Offset: disabled [ 124.677039][ T9785] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:29:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffea00006b2140 RCX=ffffffff81c62e0f RDX=ffff8880265fc880 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff88801c2f6000 RSP=ffffc90004067408 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffc900040674e0 R14=0000000000000000 R15=ffff88807ffd7540 RIP=ffffffff818d7b50 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa5cf067d60 CR3=000000000df7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5ce50c6a3 00007fa5ce50c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfb14e310 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555716fc4a8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555571773163 0000555571772a90 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000037393835 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2880080012b0030e 020012ae0303fe02 0012ac0302020012 aa0303fe020012a8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 014c800402ad9608 0001000004080606 0118c20810000810 0018100006044f86 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0482c01000148004 0100000008060601 4480000200072808 0014e00300100014 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d00300100014c003 02100014b0033810 0013900328800800 12b0030e020012ae ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0303fe020012ac03 02020012aa0303fe 020012a803140200 12a60340020012a4 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b8b85 RDI=ffffffff9aaebc40 RBP=ffffffff9aaebc00 RSP=ffffc90004ed7178 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff850b8b20 R15=0000000000000000 RIP=ffffffff850b8baf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe3453f66c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000027156000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=03b62b152ab67613 5e6ced39abf29977 03b62b152ab67613 5e6ced39abf29977 03b62b152ab67613 5e6ced39abf29977 03b62b152ab67613 5e6ced39abf29977 ZMM18=6364d38d4977e987 a5ec904c1d432fea 6364d38d4977e987 a5ec904c1d432fea 6364d38d4977e987 a5ec904c1d432fea 6364d38d4977e987 a5ec904c1d432fea ZMM19=e406000000000000 0000000000000008 e406000000000000 0000000000000007 e406000000000000 0000000000000006 e406000000000000 0000000000000005 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=ac4c5cc7ac4c5cc7 ac4c5cc7ac4c5cc7 ac4c5cc7ac4c5cc7 ac4c5cc7ac4c5cc7 ac4c5cc7ac4c5cc7 ac4c5cc7ac4c5cc7 ac4c5cc7ac4c5cc7 ac4c5cc7ac4c5cc7 ZMM22=bf3295c2bf3295c2 bf3295c2bf3295c2 bf3295c2bf3295c2 bf3295c2bf3295c2 bf3295c2bf3295c2 bf3295c2bf3295c2 bf3295c2bf3295c2 bf3295c2bf3295c2 ZMM23=7c807ee97c807ee9 7c807ee97c807ee9 7c807ee97c807ee9 7c807ee97c807ee9 7c807ee97c807ee9 7c807ee97c807ee9 7c807ee97c807ee9 7c807ee97c807ee9 ZMM24=3ca5ad0a3ca5ad0a 3ca5ad0a3ca5ad0a 3ca5ad0a3ca5ad0a 3ca5ad0a3ca5ad0a 3ca5ad0a3ca5ad0a 3ca5ad0a3ca5ad0a 3ca5ad0a3ca5ad0a 3ca5ad0a3ca5ad0a ZMM25=b0ca4157b0ca4157 b0ca4157b0ca4157 b0ca4157b0ca4157 b0ca4157b0ca4157 b0ca4157b0ca4157 b0ca4157b0ca4157 b0ca4157b0ca4157 b0ca4157b0ca4157 ZMM26=68c64fcc68c64fcc 68c64fcc68c64fcc 68c64fcc68c64fcc 68c64fcc68c64fcc 68c64fcc68c64fcc 68c64fcc68c64fcc 68c64fcc68c64fcc 68c64fcc68c64fcc ZMM27=a3879008a3879008 a3879008a3879008 a3879008a3879008 a3879008a3879008 a3879008a3879008 a3879008a3879008 a3879008a3879008 a3879008a3879008 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=df040000df040000 df040000df040000 df040000df040000 df040000df040000 df040000df040000 df040000df040000 df040000df040000 df040000df040000 info registers vcpu 2 CPU#2 RAX=00000000000fcd77 RBX=0000000000000002 RCX=ffffffff8b237429 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1b3c0 RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f58c8 R15=0000000000000000 RIP=ffffffff8b23880f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555583ab7808 CR3=00000000566e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1ad3c800 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f023cff223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f023cff2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f023cff2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f023cff2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f023cff22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f023cff23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000f6aa3 RBX=0000000000000003 RCX=ffffffff8b237429 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1b3c0 RBP=ffffed1003b5b488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801dada440 R14=ffffffff905f58c8 R15=0000000000000000 RIP=ffffffff8b23880f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3bcc39 CR3=0000000027156000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe346ff223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe346ff2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe346ff2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe346ff2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe346ff22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe346ff23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe347c6d100 00007fe34710c440 00007fe347100004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe34710c498 00007fe34710c490 00007fe34710c488 00007fe34710c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000