last executing test programs: 39.57043048s ago: executing program 3 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605"], 0x58}}, 0x0) r1 = syz_io_uring_setup(0x20005c2, &(0x7f0000000300)={0x0, 0x4, 0x40, 0x8000, 0x1f0}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000", @ANYRESOCT], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x3}, [], {0x4, 0x3}, [], {0x10, 0x5}, {0x20, 0x4}}, 0x24, 0x1) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x112) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r6) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000085}, 0x4040) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)="000000004190ec340270ec8be985640b1e7b870e623e9bba47a01d4761289932ba43c806d26373b04efa65e3473cbead419f03be732fe53bb6ae48e8b2c97f67a8bd7656f0de169aa99dfe8d28f5a108f74a888b62614942f7fbc3260729c987c21b36b72b3b547e9c5ba1238d", 0x6d, 0x40000100, 0x1}) io_uring_enter(r1, 0x13c2, 0x0, 0x0, 0x0, 0x0) 39.471586602s ago: executing program 3 (id=1696): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8948, &(0x7f0000000580)={'vlan0\x00', 0x7}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000040)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 39.470842482s ago: executing program 3 (id=1697): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:pinentry_exec_t:s0', 0x20, '/sbin/dhclient'}, 0x49) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x4}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MAP={0x24, 0xe, {0x89c0, 0x9, 0x300000, 0x1, 0x4, 0xa}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 39.411234136s ago: executing program 3 (id=1698): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x10) memfd_secret(0x0) (async) r1 = memfd_secret(0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000040)=0x1, 0x4) r2 = inotify_init1(0x80800) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000340)={r5, 0x1, 0x7ef5, 0x6, &(0x7f0000000300)=[{0x0, 0x9, 0xe29, 0x3}, {0x4, 0x1, 0x29, 0x5}, {0xc, 0x3, 0x8dfd, 0xfffb}, {0x4, 0x0, 0x81, 0x6}, {0x8000, 0x6, 0x8, 0xfff}, {0x0, 0xffff, 0x2, 0x6}]}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020) dup(r4) (async) r6 = dup(r4) write$P9_RSTATFS(r6, &(0x7f00000023c0)={0x43, 0x9, 0x1, {0xe, 0xfffffffa, 0xd, 0xfd6, 0x8, 0x100000001, 0xd, 0x8000, 0x81}}, 0x43) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002440)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x81af, '\x00', 0x0, r1, 0x4, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002440)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x81af, '\x00', 0x0, r1, 0x4, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) fcntl$getownex(r7, 0x10, &(0x7f00000024c0)) (async) fcntl$getownex(r7, 0x10, &(0x7f00000024c0)={0x0, 0x0}) bind$bt_hci(r1, &(0x7f0000002500)={0x1f, 0x3, 0x1}, 0x6) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r9) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r9) r10 = syz_open_procfs(r8, &(0x7f0000002540)='net/l2cap\x00') r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000002680)={&(0x7f0000002580)=""/212, 0x1110000, 0x800, 0x8, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000002680)={&(0x7f0000002580)=""/212, 0x1110000, 0x800, 0x8, 0x3}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000026c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000002700)) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000002740)='./cgroup.cpu/syz1\x00', &(0x7f0000002780)='/dev/uinput\x00', 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000002840)={0xa35, 0x48, '\x00', 0x0, &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000002840)={0xa35, 0x48, '\x00', 0x0, &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sysctl(r6, &(0x7f0000002880)='1\x00', 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f00000028c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) 39.410611053s ago: executing program 3 (id=1700): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x15}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 39.341437283s ago: executing program 3 (id=1701): r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080)=0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0xbdb, &(0x7f00000000c0), &(0x7f0000000000)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, r1, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0xa3dd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) 24.3602463s ago: executing program 32 (id=1701): r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080)=0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0xbdb, &(0x7f00000000c0), &(0x7f0000000000)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, r1, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0xa3dd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) 20.240929858s ago: executing program 4 (id=1879): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0xc) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x10, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20004041) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000300)=""/4096) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x0, "7a525f68a658fa82e8f59f359166edcbad0eca"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000001300)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x3) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ad21d1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}}, 0x0) 20.188474356s ago: executing program 4 (id=1882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}}, 0x0) 20.128764275s ago: executing program 4 (id=1885): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x180000) connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "1425c709"}, @local, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0x4, "d11d3cc3"}, @local=@item_012={0x2, 0x2, 0x0, "dc35"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x250, 0x268, 0x300, 0x250, 0x268, 0x360, 0x460, 0x460, 0x360, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x24, 0x0, 0x0, 0x5, 0x9, 0x0, 0x18}}}, @common=@frag={{0x30}, {[0x2, 0x4], 0x8, 0x30, 0x4}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x2}}}, {{@ipv6={@private2, @mcast2, [], [], 'vlan0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1a, 0x0, 0x20000000, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 20.128047148s ago: executing program 1 (id=1887): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0x104, 0x16, 0x411, 0xffffffff, 0x0, {{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffd, 0x0, 0x10, 0x200, 0x2}, {@in=@multicast1, 0x0, 0x32}, @in=@local, {0x380, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfffffffffffffffd}, {0x5d4}, {0x0, 0x0, 0x8}, 0x8000, 0xfffffffe, 0x2, 0x2}, 0x0, 0x6}, [@lastused={0xc, 0xf, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x881}, 0x0) r3 = fanotify_init(0xf00, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000080)={0x0, 0x0, 0x0, @raw}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48011}, 0x8000) fanotify_mark(r3, 0x105, 0x40009975, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.010975986s ago: executing program 1 (id=1888): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x20004084) 20.010514727s ago: executing program 1 (id=1889): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000ac0)=0xb3, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="82abb2cd1d035bfa816aed22dca699b940d47559f0674ab1c6b08f60c34580272550c4315d765d150e282cd7", 0x2c}], 0x1}}], 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090200000000000000006622720f0000000800030023de", @ANYRES32=r5, @ANYBLOB="05002e000000000005002f0001"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000003c0)="0f00910a00baf80c66b864458f8866efbafc0c66edf2673e0f019e020000000f20e06635000200000f22e066b8009077810f23c80f21f86635080030000f23f8baa000b82e2def0f79b561ff260f01cf77e8baf80c66b86c4a3b8a66efbafc0c66b8d05c000066ef"}], 0x1, 0x0, 0x0, 0x0) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r13) r14 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r13, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r15}]}}}, @IFLA_LINKINFO={0x28, 0xd, 0x0, 0x1, @veth={{0x9, 0x9e00}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x64}}, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) dup(r16) ioctl$KVM_SET_MSRS(r16, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000000000019350300000000000004000000000000000200000000000000010000000000000040fdff00000000000400000000000000"]) 19.661131099s ago: executing program 1 (id=1898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000c0007800500150006000000050005000a000000050001000700000045000400000000000900020073797a310000000016000300686173742c706f72742c6e6574000000"], 0x5c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'rose0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x100}) getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'bridge_slave_1\x00', 0x400}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000005200210900000000000000001c"], 0x24}}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=r3], 0x20}}, 0x0) 19.540942541s ago: executing program 1 (id=1901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) clock_adjtime(0x6, &(0x7f0000000000)={0x7fff, 0xffffffffffffffff, 0xbe, 0x7, 0x1, 0x3, 0x3, 0x9, 0x4, 0xfffffffffffffffd, 0xa091, 0x7fffffffffffffff, 0x1e1c, 0x3, 0x52f, 0x1ff, 0x8d, 0x1, 0x7fc0, 0x10000, 0x4, 0x5, 0x5, 0x1, 0xfffffffffffffffc, 0x8}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xf41cd3d9764ff73d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x10) statx(r2, 0x0, 0x1000, 0x20, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)=ANY=[@ANYBLOB="eb1ad0e35b632991dd96c08afdc9f94158c1e3e0b337ddc79b21e456d9a2ce75ec470d0c4e11a5f7176b5d681ee8cb9e36dc3e17aa169b2a756110230bc91ca7c451738b4344d78d4a746a656a1326fa8344353f76d017dfb84a94b9ea284e9841ce31fd38a1c3cf58f678473bb02012eca2bde430d520b147719a8f2335fb6fbbb381ce5157592540d5489c", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x400c0c0) 19.48121827s ago: executing program 1 (id=1902): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x7fffdf7ff000}}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}]}) chroot(&(0x7f0000000000)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) userfaultfd(0x1) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x7fffdf7ff000}}) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}]}) (async) chroot(&(0x7f0000000000)='./file0/file0\x00') (async) 18.481487489s ago: executing program 4 (id=1915): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0xc843, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r4, 0x0, &(0x7f0000004500)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0xec, 0x29, 0x9, 0x70bd2b, 0x0, {0x2}, [@nested={0xd8, 0x1, 0x0, 0x1, [@typed={0xd2, 0x6, 0x0, 0x0, @str='\x805b4#\x9a\xed\xd4k\xd4\xf1\xb5\xa9p\xa5\t\x19\xf9\xf9\xcf\xbe6\xc3\xfeO\x00\xbc|\xb7\xbc0\xc1r\b\xf0\xed\xbb\xdb\xb0\xe2k\xd8C\x18\xf8-\x9e0C\xdb!\x1cb\v=a\xea\xe3y>N\x81\xc9\xb7\x14\\\x8f%/\xf4Is\x9d_DV\xcd\xa1py\xe9\x0fY\xad\xd2\xf2d\xa0&M\xf3(4\x05s\x9d\xa7\x85\x97=\xbe\xb5\xc4*\xb0t\xd1\x10\x1f\xaf\xfb\xcd\x05\xba\xfc\xf4\xa3c\xb1\xeca\xfdqvk\r\xe3\xae\xc6\xff.B\xc1\xd7\xcct\t\xf3Lm\x90\x90$FyB\x9e\xa9\xac\xd6\xddR\x10\xf5\xadm\x95hi\xb2q}\xc3/9=\xa0\x806Wb\xf0\x97a\xa9\xed\x00x\xab0\xa0g\xba2\xc7\xda#\xba\xfa\xe9@\xe5\b\xd0\x1b\x11e=\xdc\xf0\xef u\xc6\xac\xac'}]}]}, 0xec}}, 0x844) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) shutdown(r0, 0x0) 17.760948706s ago: executing program 4 (id=1917): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x80002, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x1, 0x40, 0x4, 0x2}}}, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x802}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xb) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37]}}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket(0x15, 0x5, 0x0) (async) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) (async) socket$inet6(0xa, 0x80002, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x1, 0x40, 0x4, 0x2}}}, 0xa) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x802}) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xb) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37]}}]}) (async) 17.541364215s ago: executing program 4 (id=1920): pipe(&(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x2, 0x0, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000280)={0x0, 0x30, &(0x7f0000000500)={&(0x7f0000000200)={0x2c, r5, 0x2, 0x0, 0x2, {{0xa}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0x0, 0x6, @device_b}]}, 0xffffffffffffff9d}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x800, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@measure}]}}) 17.528831428s ago: executing program 33 (id=1920): pipe(&(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x2, 0x0, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000280)={0x0, 0x30, &(0x7f0000000500)={&(0x7f0000000200)={0x2c, r5, 0x2, 0x0, 0x2, {{0xa}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0x0, 0x6, @device_b}]}, 0xffffffffffffff9d}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x800, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@measure}]}}) 9.620844228s ago: executing program 0 (id=1955): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="660a0000000000006111940000000000180000000000008adf008523c917467dcb5f1fb283e0b166fcc30000000000009500000000000000de0e76dbd66ad55c83ce6d6e26b232dc343bd5fcce4c51ccdcf40090c775ce2ab4a4fa2e907ff3fb9a7b1a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) flock(0xffffffffffffffff, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x3666b165f8ff1357}) ioctl$TUNGETVNETLE(r1, 0x400454dc, &(0x7f0000001940)) r2 = syz_io_uring_setup(0xd7c, &(0x7f00000035c0)={0x0, 0x8009e19, 0x800, 0x3, 0x79}, &(0x7f0000000000), &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[r3], 0x1) read$qrtrtun(r3, &(0x7f00000004c0)=""/57, 0x39) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000a5"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xc6, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xe1, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) write(r0, &(0x7f0000000080)="739a92038d53d90745eea3f71a30bb61cddd0b00506c670685ed5c89d170c7fcb156fd79365790051a4c7b189ea3b7f2087ada589ebf08f460cdb69ddedea3fb325e207383d6f1a65cec54aaceea6095a17e786d81f72de9d6e907feec2f5363a6feae1bf3f83fba13170ece41d905c8aadaa15b454e7c20c4387e96da95b4b2f868f63047515c0706eaae115e846e6f2a5c8b0854f6f17343884948afdabe80c6098008cfd346172ae0c3b636b06e1c5eda94b395d72f06f9224233012e0c0d", 0xc0) 9.511211903s ago: executing program 0 (id=1956): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x20004084) 9.504016605s ago: executing program 0 (id=1957): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0xf0, 0x10, 0x400, 0x0, 0x0, {{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast2, 0x2, 0x3c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60}}, 0xf0}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r5}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000140)={0x2}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r6}, 0x18) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 9.503775789s ago: executing program 0 (id=1958): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x60001) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x4, 0xfffc, 0x98, "2a0000004a261028f0430300000b41e69e6b83b916a500"}) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x4, 0xfffc, 0x98, "2a0000004a261028f0430300000b41e69e6b83b916a500"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x7, 0x13, r1, 0x0) (async) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x7, 0x13, r1, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 9.300924064s ago: executing program 0 (id=1959): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000165000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = getpgrp(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x0, r2}) (async) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}, 0x4041) pipe(&(0x7f0000000000)) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) (async) close(r3) 5.520189984s ago: executing program 0 (id=1959): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000165000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = getpgrp(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x0, r2}) (async) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}, 0x4041) pipe(&(0x7f0000000000)) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) (async) close(r3) 4.522856062s ago: executing program 34 (id=1902): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x7fffdf7ff000}}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}]}) chroot(&(0x7f0000000000)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) userfaultfd(0x1) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x7fffdf7ff000}}) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}]}) (async) chroot(&(0x7f0000000000)='./file0/file0\x00') (async) 4.241010273s ago: executing program 2 (id=2015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a\x00'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) sendto$inet6(r1, &(0x7f0000000040)="0b118f2b4190be586d04d99304c7975dfca451f6a36e5e11c583738f22bfc241adfd70c9456ea4fe6a5e0716c24ab3", 0xfffffffffffffea5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000002440)={0x14}, 0xc3ec}}, 0x0) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="55b18246", 0x4}], 0x1}, 0x20000801) creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x80000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000c40)={@ptr={0x77682a85, 0x0, 0x0, 0x0, 0x0, 0x14}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2c}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xc}}, &(0x7f0000000140)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000001980)=""/236, &(0x7f0000000080)=0x18) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r9, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.379932318s ago: executing program 2 (id=2021): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xec) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xec) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 2.520102497s ago: executing program 2 (id=2022): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x20004084) 2.515289757s ago: executing program 2 (id=2023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x7, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000a80)={0x0, 0xe, 0x0, "134600cea4dd512d97d4188cbf77063777210096c337e2ffffff00", 0x30323953}) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.359923601s ago: executing program 2 (id=2025): timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_vlan\x00'}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x9220d18c8277c576, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x128, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 2.359600111s ago: executing program 5 (id=2026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="5b0f01c2c29c028ed0660f388236af0083ee2c0f20c06635000004200f22c0643e1f0fb7c2", 0x25}], 0x1, 0x0, 0x0, 0x0) (rerun: 64) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x10) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.359032187s ago: executing program 2 (id=2027): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000000)='9', 0x1) r4 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmmsg(r6, &(0x7f00000005c0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, r8, 0x1, 0x1, 0x1, 0x5, "3e2ab13e66a47db44e4f1c22fb8927af442a82de8679304a3565d3111f2be70e0207751d8dd9c1421630a57cde2eba8495df66f163d19e750ad56fa1abe896", 0x1a}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000001600)=[{0x1010, 0x10e, 0x2, "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"}, {0x50, 0x104, 0x5, "f53727b6819a685ff9c3fff7d82fa56a3efa53f8162052a8d21cd67fedb694b89f029aaede7040ce4cca50cb3b960465e957caf80c307a73df640e917f"}, {0x48, 0x88, 0x6, "e87b45948bbd3e31d2d4f35be0e835f6b490dfd9ac925164c3182e2c3006f05cdb08eb53b467d6dd80f8680ad1617d430e0988769b581cc2"}], 0x10a8}}], 0x1, 0x4000000) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) close(r3) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) 2.031217747s ago: executing program 5 (id=2028): r0 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = openat(r1, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00', &(0x7f0000000100)=""/39, 0x27) r6 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40000000000000061141c00000000000500000000000000950000000000000077ef761330e3afa3ef006715de46ba6dcd05b8b836a68a3a7b5690f0b42e4ab854774b830e10637b740bac97e18f42b35f9485e91a4b161fe2257dadc6c33d7ea953ce498567892b33b0d34ac6b93aa90f7c9c0fd0b9d8df7561e4067b0e4d514185c12458"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) r7 = inotify_init() ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000140)={0xeeee8000, 0xffff1000, 0xb28, 0x0, 0xa}) inotify_add_watch(r7, &(0x7f0000000300)='./bus\x00', 0xa2000a9b) write$binfmt_script(r4, &(0x7f00000000c0), 0x4) copy_file_range(r4, &(0x7f00000001c0), r3, 0x0, 0xfffffff7a003e45c, 0x10000000000000) 1.899343393s ago: executing program 5 (id=2029): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220001, 0xaa) mknodat$loop(r1, &(0x7f0000001600)='./file0\x00', 0xd148, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0xb5315258, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x1}}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, 0x0, 0x2}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x8000, 0xfffffffb, 0x5}}]}]}}}]}, 0x64}}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x8, 0x80, 0x1, 0x7, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x65, 0x0, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x43}, {[@ssrr={0x89, 0x3, 0x8f}, @noop]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="8000f2000a0002"], 0x28}}, 0x0) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000700)={'ip_vti0\x00', 0x0}) r16 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r16, &(0x7f0000000140)='`', 0x1, 0x0, &(0x7f0000000180)={0x21, 0x86dd, r15, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25020000002400018008000300000000000800030002000000080003000300000008000300020000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000800030002000000280001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r6, @ANYBLOB="08000300060000004400018008000100", @ANYRES32=r7, @ANYBLOB="08000300c2bc1e8c589a607b1276201b24000000000800030000000000140002006c6f000000000000000000000000000014000200626f6e645f736c6176655f3000000000500001800800010015e1641e582b075beec9c8f3b5dbfad9eb7295b6fb9405cdd8ff52dcb7352a5648f8326cec4787502413db10e0aaf9955ed62d089061d8504ad2d6cdc6c239b7011a6275818d652504234f93c9cc267f21ad7feb20f463e5582ac27f259c95a82c128299bb10cf86cdc6b76d416c1c1986c822037083b7ce4d918e2f9522bef0819af36834d531aabb6c", @ANYRES32=r8, @ANYBLOB="1400020076657468315f766c616e00000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="080003000200000008000100", @ANYRES32=r13, @ANYBLOB="080003000300000008000100", @ANYRES32=r15, @ANYBLOB], 0x110}, 0x1, 0x0, 0x0, 0x48004}, 0x20008000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3100000001367063693a7d0011000200303030303a30303a31302e30000000000800ab000100000008000b00000000060600110000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000000)={{@my=0x1}, 0x1, 0x2, 0x8}) 700.508045ms ago: executing program 5 (id=2030): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x40}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, &(0x7f0000000100)=0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000020000f0700000000000000000a00739083b7000012000100140002"], 0x30}}, 0x0) (async) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60"], 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000100)=0x4a41, 0x4) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r4, 0x1007}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000001040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba0000005f0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x600, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 620.431746ms ago: executing program 5 (id=2031): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x20004084) 620.129663ms ago: executing program 5 (id=2032): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000050) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x20040000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x4008090) ioctl$FS_IOC_GETVERSION(r6, 0x40025b0c, &(0x7f0000000040)) pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 88.816046ms ago: executing program 6 (id=2007): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x4040) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e21, @local}, 0x202, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000180)='ip_vti0\x00', 0xffffffffffffffff, 0x100000001, 0x100}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev}, &(0x7f0000000280)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@dellinkprop={0x44, 0x6d, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x24543, 0x600}, [@IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_GROUP={0x8, 0x1b, 0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FD={0x8, 0x1, r0}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000400)={0x2, 0x2}) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000440), &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x200040, 0x0) close_range(r0, r3, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x8b) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000091}, 0x4001) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/105, 0x69}, {&(0x7f0000000740)=""/91, 0x5b}, {&(0x7f00000007c0)=""/132, 0x84}], 0x3, 0x5, 0xffffff7b) recvfrom$inet(r0, &(0x7f00000008c0)=""/230, 0xe6, 0x0, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000a00)=[@in6={0xa, 0x4e22, 0x8, @loopback, 0x4}, @in6={0xa, 0x4e24, 0x6, @loopback, 0x434b}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @multicast1}], 0x58) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) bind$bt_rfcomm(r3, &(0x7f0000000ac0)={0x1f, @none, 0xc}, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x8000, 0x0) r6 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000b40)={0x8, 0x3, 0x1, 0x7, 0x6, 0x0, 0x8, 0x407, 0x0}, &(0x7f0000000b80)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000bc0)={r7, 0x2, 0xfff3}, &(0x7f0000000c00)=0x8) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000c40)={0xc025, 0x1}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x80000) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000d00)={0x0, 0x35, 0x8, 0xd, 0x4f, 0x6, &(0x7f0000000c80)="5311bbc0b122ba87f771d7ac9337b76b52708123bda3b21d35863e3702ebbd48589e12b876d146fd4d24fbfb59b7e173a4d0786a36102e66063951ce2d3711d499d66aa0e9b3e4225516d87e13a82e"}) shutdown(r2, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000000d40)={0x0, 0x8}) mount(&(0x7f0000000d80)=@sr0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)='squashfs\x00', 0x80020, &(0x7f0000000e40)='++)-@\x00') 0s ago: executing program 6 (id=2033): semget(0x0, 0x3, 0x121) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r0, 0x777c2000) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffd000/0x2000)=nil) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x238, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x150, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1c}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x60, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x238}, 0x1, 0x0, 0x0, 0xc040}, 0x20004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000040) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000540)) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) getsockopt$inet6_int(r5, 0x29, 0x17, &(0x7f00000005c0), &(0x7f0000000600)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r6, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfa, 0x33}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000080}, 0x40840) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x40}}, 0x4040800) ioctl$HIDIOCSUSAGES(r5, 0x501c4814, &(0x7f00000008c0)={{0x1, 0x2, 0x8, 0xe2b, 0xfffffffd, 0x1}, 0x310, [0x8, 0xb, 0x7, 0x4, 0x4a, 0x100, 0xb, 0x8, 0x3, 0x0, 0x7f, 0x1, 0x8, 0x800, 0x6, 0x146e, 0x2, 0x1, 0x8, 0xb, 0xffffffff, 0x931, 0x6, 0xb5, 0x7, 0x1c0000, 0x1, 0x6, 0x586, 0x7f, 0x3, 0x1000, 0x75, 0x80000001, 0x1ff, 0x1, 0xe91, 0x81, 0x2, 0x3, 0x40, 0x6, 0x18fb9fe, 0xffffff11, 0x5, 0x5, 0x9, 0xc, 0x5, 0x2, 0x1724, 0x6, 0x3, 0x18, 0x1, 0x3, 0x1e9e, 0x72, 0xec, 0xc, 0xf, 0x7, 0x79, 0x5, 0x3ff, 0x400, 0x80, 0x3ff, 0x1, 0x9, 0x2, 0x4, 0x7fffffff, 0xba, 0xa4d, 0xffffffff, 0x5, 0x4, 0x66f, 0x0, 0x9, 0x50, 0xe0, 0x5, 0x5, 0x5, 0xb, 0x1e, 0x0, 0x4, 0xcf19, 0x6, 0xfffff665, 0x6adc, 0x7, 0x4, 0x2, 0xffffffd4, 0x3, 0x0, 0xfffffff8, 0x8, 0x3, 0x7f, 0x2, 0xa0, 0x6, 0x80000000, 0x0, 0x2, 0x5fb, 0x9, 0x8, 0x7, 0x10000, 0x9, 0xcce, 0x6cd0, 0x2, 0x7fff, 0x20, 0x0, 0x3800000, 0x0, 0xb7b, 0xa, 0x77d, 0x7, 0x8, 0x4, 0xa, 0x7fff, 0xc, 0x2, 0x0, 0x68, 0x8, 0x9, 0x1000, 0x8, 0x3, 0x6847b459, 0xffffffff, 0x9, 0x400, 0x59a, 0x3, 0x10, 0xb36, 0x6000, 0x60000000, 0x8, 0xa4, 0x2, 0x2, 0x9, 0x4, 0x81, 0x9, 0x7, 0x74bb, 0x101, 0x8, 0x6, 0x9, 0x8000, 0x5, 0x3, 0xfffffffd, 0x1, 0x4, 0x2232, 0x1000, 0xd11f, 0x10, 0x82b, 0xedfc, 0x7, 0x0, 0x6, 0xd09, 0x5, 0x0, 0xff, 0xc, 0x8000, 0x8001, 0x3, 0x5, 0x6, 0xd4, 0x2, 0x6, 0x7f, 0x10001, 0xc, 0xb, 0x2, 0x2, 0xffffffff, 0x4, 0x81, 0x1, 0x5e, 0x3, 0x5bfb, 0x4, 0x7, 0x4, 0x1, 0x3, 0x0, 0x3, 0x998, 0x0, 0x4, 0x18b7705, 0x9, 0x5, 0xf72, 0x5, 0xfff, 0x7, 0x6, 0xfffffffb, 0x4, 0x7, 0x4, 0x2, 0x80000000, 0x6, 0x5, 0x5, 0x6, 0x2, 0x9, 0x5, 0x4, 0x22, 0x3, 0x9, 0x6, 0x54, 0x0, 0xf, 0x9, 0x6, 0x7, 0x35, 0x8, 0x101, 0x2abd659b, 0x7, 0x52d, 0x3, 0x3, 0x8, 0x10, 0x0, 0x5, 0x9, 0x1, 0x6, 0xfffffffb, 0xc000000, 0x8, 0x100, 0xffff, 0x101, 0x80000000, 0x101, 0x6, 0xa2cd, 0xc, 0x808, 0x1000, 0xbc, 0x7fff, 0xf, 0x8, 0x8000, 0x1, 0xffffffff, 0x9, 0x2, 0x1, 0x400, 0x7, 0x0, 0x5f, 0xfffff6bf, 0x5, 0x78c8, 0x100, 0x4, 0xa69, 0x7, 0x5, 0x82a, 0x1, 0x2, 0x5c4, 0x3, 0x741d, 0x2, 0xd, 0x401, 0x7fffffff, 0x31b, 0x7fffffff, 0x10001, 0x2, 0x9, 0x8, 0x400, 0x8, 0x7, 0x83e, 0xf3, 0x1, 0xffff608b, 0x1e22, 0x8, 0x8e, 0x401, 0x7fffffff, 0x6, 0x2000, 0xa2, 0x3, 0xfffffff6, 0x9, 0x7f, 0x6, 0x8, 0x7, 0x585, 0x8200000, 0x2, 0x8, 0x6b8, 0xf, 0xfffffff8, 0x4889d7da, 0x4, 0xc, 0x5, 0x6, 0xff, 0xe4, 0x6, 0x9, 0x8, 0x9, 0x40, 0x8, 0x7, 0x3, 0x8, 0xff, 0x1, 0x1, 0x40, 0x7, 0xab, 0xfc82, 0x4, 0xff, 0x0, 0x2, 0xf, 0x3791, 0x1, 0x7fff, 0x7, 0x2a0d, 0x81, 0x9, 0xfffffff7, 0x7, 0x5, 0x9, 0xbde7, 0x7, 0x3, 0xf, 0x40, 0x8, 0xffff, 0x2, 0x8fa, 0x7, 0x9, 0x3, 0x1, 0x40, 0xd240, 0x1, 0x5, 0x9, 0xfff, 0x3, 0x3, 0x1, 0x0, 0x708, 0x520, 0xbe3, 0x3, 0x100, 0x1e41, 0xfe2b, 0x4, 0x8, 0x8, 0xef3, 0x6, 0x8, 0x7, 0x7, 0x7, 0xf, 0x7fffffff, 0x5678, 0xf73, 0x401, 0xadbf, 0xff, 0xb4, 0x8, 0x5e, 0x8, 0x8, 0x6cb, 0x1, 0x6, 0x4, 0x9, 0x0, 0x0, 0x7f, 0xce0, 0xfffffff4, 0xfffffffb, 0x100, 0x1, 0xc61c, 0x40, 0x8, 0x8, 0x2, 0x405, 0x1, 0x1ff, 0xc, 0x1, 0xc, 0x8, 0x6, 0x80000001, 0x6, 0x9, 0x1ff, 0x6, 0x101, 0x80000000, 0x800, 0x8, 0x8, 0x0, 0xff, 0x5, 0x8000, 0x6, 0x101, 0x6, 0x7, 0x3c, 0x7, 0x6, 0x3800000, 0x4, 0x0, 0x1, 0x8, 0x5, 0x5, 0x10, 0x1, 0xfffffff8, 0x4, 0xab3, 0x9e1, 0x1, 0x800, 0x3, 0x47, 0x4f5, 0x7fff, 0x7ff, 0xffffff1b, 0x2, 0x0, 0x3, 0x2, 0xd88, 0x0, 0x2, 0x4, 0xd3b, 0x9, 0x3, 0x1, 0x2, 0xfffffff8, 0xa4e, 0x2, 0x6, 0xe266, 0x1, 0x0, 0x8001, 0x1, 0x8, 0x3ff, 0x0, 0xfffffff8, 0x9, 0x1, 0xe1, 0x977, 0x8, 0xace, 0x5, 0x8, 0x3, 0x0, 0x9, 0x8001, 0xffffff7f, 0x8, 0x8000, 0x4, 0x4, 0x7, 0x1e, 0x6, 0x58bc, 0x80, 0x80000000, 0x4, 0xeae9, 0x5, 0x98ab, 0x4, 0x7, 0xff41, 0x1, 0x7, 0xc3b, 0x4, 0x6, 0x5, 0x5, 0xb05, 0xc, 0x7f, 0x7, 0x64c, 0xfff, 0xbca, 0x3, 0x7fffffff, 0xfffffff9, 0x2f97, 0x3, 0x0, 0x10, 0x2, 0x6, 0xfffffffd, 0x2, 0xc, 0x1, 0x2, 0x3, 0x6, 0x7, 0x97, 0x4, 0xd, 0x40, 0x0, 0x7, 0xd, 0x30, 0x4, 0x1, 0x0, 0x4, 0x0, 0x3, 0x2, 0x6, 0x3, 0xb8, 0x9, 0x7, 0x6, 0x8, 0xc, 0x5, 0x9, 0x3, 0x200, 0x6, 0x7, 0x5, 0x5622, 0x6, 0x8, 0x2, 0x3, 0x4, 0x2, 0x1, 0x4, 0x7f, 0x7, 0x800, 0x6, 0x37b, 0x6, 0x5, 0x4, 0x400, 0xbda, 0xd747, 0x1f5, 0x1e, 0x0, 0x9, 0x7, 0xfffffff9, 0x8, 0x7ff, 0x93, 0xfffffff9, 0xee76, 0x1, 0x40, 0x2, 0x3, 0x3, 0x6, 0x3, 0x9, 0x8, 0x0, 0x9, 0x1000, 0x3, 0x3, 0x6, 0x3, 0xb, 0x0, 0x0, 0x5, 0xffff, 0x7, 0x8, 0x0, 0xc, 0x8, 0x6, 0x1, 0xfffffff4, 0x5, 0x3, 0x9, 0x3, 0x10000, 0x1, 0xb484, 0x9, 0x10, 0xbd2, 0x4, 0x4, 0x9, 0xffffffff, 0x1000, 0x6, 0x8, 0x0, 0x5, 0x3, 0x0, 0x4, 0x5, 0x0, 0xffffffff, 0x3, 0x4, 0x7, 0x5, 0xffffffff, 0x7, 0x8, 0x1, 0x10000, 0x8, 0xb, 0xd, 0x70, 0x2, 0x1, 0x1, 0x8001, 0x200, 0x7, 0xf7, 0x1, 0x4, 0x7f, 0x4, 0x0, 0x8, 0xb, 0x8000, 0x60000000, 0x7fffffff, 0x7, 0x9, 0x1, 0x3, 0x7fffffff, 0x10001, 0x5b4, 0x2000, 0x8, 0xb48f, 0x0, 0x0, 0x3, 0x3, 0xffffffff, 0xfd6c, 0x6, 0x8001, 0x80000000, 0x200, 0xf49, 0x5, 0xdfe4, 0x4, 0x3, 0x1, 0x9, 0x8, 0x9, 0x4, 0x7, 0x3da6, 0x4, 0x7fffffff, 0x2, 0xb, 0xa23, 0x8, 0x3, 0x7, 0x6, 0x5, 0xee, 0x100, 0x1ff, 0x80000001, 0x4b, 0xde, 0x7fffffff, 0x8, 0x0, 0xfffffff9, 0x0, 0xffff, 0x4eb, 0x8, 0x30, 0x1000, 0x9, 0x2, 0x2, 0x9, 0xfffffc01, 0x9, 0x7, 0x9, 0x2, 0x8, 0x8000, 0x9, 0x81, 0xfffffff9, 0x4, 0x3, 0x9, 0x8dce, 0x1c000000, 0x6817, 0x6, 0x40, 0x6, 0x67, 0x6, 0x7, 0x0, 0x7, 0x1, 0x6, 0x3, 0x0, 0x1, 0x80000001, 0x7, 0x1, 0x7fffffff, 0x3ff, 0x3, 0x611b, 0x9, 0x8000, 0x401, 0x5fe4, 0x7ff, 0x5, 0x7, 0x6, 0x8, 0x8, 0x20000, 0x9, 0x6, 0x0, 0x841, 0x8, 0x8, 0x0, 0x9, 0x8, 0x3, 0x1, 0x6, 0x2, 0x7f, 0x9, 0x6, 0x75bf, 0xc12c, 0x4d4d, 0x8, 0x10000, 0x3, 0x0, 0x684, 0x200, 0x3, 0xc, 0xfffffffa, 0x7, 0x3, 0x9, 0x8, 0x10, 0x3, 0x4, 0x6, 0x6, 0x1, 0xd0, 0x1000, 0x3, 0x7, 0x8, 0x8, 0xc245, 0x57, 0x2, 0x7, 0x3ff, 0x100, 0x1ffc000, 0x9, 0x5, 0x1, 0x0, 0xffff4b3d, 0x3, 0x3, 0x4, 0x5, 0x7, 0xdc, 0x9, 0x9, 0x7, 0xdb27, 0x9, 0x17, 0x0, 0xfffff000, 0x1a, 0x0, 0xff, 0x7, 0x94e4, 0x5, 0x401, 0x9, 0x2, 0x400, 0x7, 0x1000, 0x5, 0xb, 0xfffff801, 0x900f, 0x1ff, 0x1, 0x3b, 0x4, 0xa57, 0x2, 0xffffffbd, 0x9, 0x4, 0x16, 0xee, 0x3d3, 0x0, 0x1, 0x6, 0x9, 0xa56, 0x1, 0x7, 0x1, 0x7, 0x1, 0x99a, 0x1, 0x2, 0x5, 0x5, 0x6, 0x3, 0x8, 0x4, 0x5, 0x43d, 0x1000, 0xd, 0x6, 0x8, 0x0, 0xafa, 0x9, 0x8, 0x3, 0x3, 0x1, 0x6, 0x10001, 0x7f, 0x80, 0xf, 0x4, 0x3ff, 0x5, 0x7f, 0x81, 0x2, 0x4, 0x71d, 0x7, 0x200, 0xbd22, 0x3, 0x8, 0x2, 0x7, 0xffffb5a8, 0x6, 0x81, 0x80000001, 0x5, 0x1, 0x7, 0x7ff, 0x501, 0x5, 0x5, 0x7, 0x1ff, 0x1, 0x9, 0x8, 0x1, 0x8, 0x1, 0x8, 0x1, 0x8c7, 0x6, 0x0, 0x7, 0x1, 0x7, 0x6, 0x9, 0x3, 0x0, 0x8]}) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000001900)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x28}, "861c1b15ab2930bd6765148847e88a5fea3b315b18c89802503ba23aab7202972a9abfd44612db92"}, 0x2c) syslog(0x9, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001940), 0x169040) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0xf, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001ac0)={'syztnl0\x00', &(0x7f0000001a00)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x5, 0xd6f, {{0x20, 0x4, 0x0, 0x2, 0x80, 0x65, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local, {[@generic={0x86, 0xc, "5d34c6a7d9fdc2d9f58f"}, @rr={0x7, 0xb, 0x5a, [@remote, @remote]}, @timestamp={0x44, 0x20, 0xbc, 0x0, 0x4, [0xd, 0xb1, 0xffff, 0x9, 0x2, 0x2, 0x3ff]}, @timestamp_prespec={0x44, 0x14, 0x57, 0x3, 0x8, [{@multicast2, 0x2a}, {@multicast2, 0x1}]}, @end, @cipso={0x86, 0xc, 0x0, [{0x6, 0x6, "778a55e9"}]}, @rr={0x7, 0x13, 0xcb, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @rand_addr=0x64010102]}, @end]}}}}}) pipe2$watch_queue(&(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@base={0x20, 0x1, 0x38a, 0x1, 0xfae8cf372cebff40, r8, 0x9b29, '\x00', r9, r5, 0x1, 0x5, 0x3, 0x0, @value=r10, @void, @value=r4}, 0x50) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000001bc0)) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/asound/card3/oss_mixer\x00', 0x501342, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x98, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x20048085) kernel console output (not intermixed with test programs): 4847][T10989] min keysize : 32 [ 134.534847][T10989] max keysize : 48 [ 134.534847][T10989] ivsize : 16 [ 134.534847][T10989] chunksize : 16 [ 134.534847][T10989] walksize : 16 [ 134.534847][T10989] statesize : 0 [ 134.534847][T10989] [ 134.534847][T10989] name : __cbc(cast6) [ 134.534847][T10989] driver : cryptd(__cbc-cast6-avx) [ 134.534847][T10989] module : kernel [ 134.534847][T10989] priority : 250 [ 134.534847][T10989] refcnt : 1 [ 134.534847][T10989] selftest : passed [ 134.534847][T10989] internal : yes [ 134.534847][T10989] type : skcipher [ 134.534847][T10989] async : yes [ 134.534847][T10989] blocksize : 16 [ 134.534847][T10989] min keysize : 16 [ 134.534847][T10989] max keysize : 32 [ 134.534847][T10989] ivsize : 16 [ 134.534847][T10989] chunksize : 16 [ 134.534847][T10989] walksize : 16 [ 134.534847][T10989] statesize : 0 [ 134.534847][T10989] [ 134.534847][T10989] name : __ecb(cast5) [ 134.534847][T10989] driver : cryptd(__ecb-cast5-avx) [ 134.534847][T10989] module : kernel [ 134.534847][T10989] priority : 250 [ 134.534847][T10989] refcnt : 1 [ 134.537778][T10989] fuse: Unknown parameter '00000000000678262132 [ 134.537778][T10989] ' [ 134.972329][ T39] audit: type=1400 audit(1732539707.150:810): avc: denied { watch } for pid=11000 comm="syz.2.1490" path="/379/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 134.990272][ T5351] bcm5974 6-1:0.0: could not read from device [ 134.992995][ T5351] bcm5974 6-1:0.0: could not read from device [ 135.004026][ T5351] bcm5974 6-1:0.0: could not read from device [ 135.004708][ T8] usb 6-1: USB disconnect, device number 11 [ 135.012963][T11004] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1491'. [ 135.013734][T11005] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1492'. [ 135.029210][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1491'. [ 135.105412][ T39] audit: type=1400 audit(1732539707.290:811): avc: denied { create } for pid=11012 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.109650][ T5947] cgroup: fork rejected by pids controller in /syz1 [ 135.115885][ T39] audit: type=1400 audit(1732539707.300:812): avc: denied { write } for pid=11012 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.123082][T11013] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1495'. [ 135.127412][ T39] audit: type=1400 audit(1732539707.300:813): avc: denied { nlmsg_write } for pid=11012 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.134684][ T39] audit: type=1400 audit(1732539707.300:814): avc: denied { nlmsg_read } for pid=11012 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.229063][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1498'. [ 135.466437][T11039] netlink: 'syz.0.1505': attribute type 5 has an invalid length. [ 135.468698][T11039] netlink: 'syz.0.1505': attribute type 33 has an invalid length. [ 135.503261][T11044] cgroup: subsys name conflicts with all [ 135.505083][T11044] cgroup: subsys name conflicts with all [ 135.506657][T11044] cgroup: subsys name conflicts with all [ 135.509240][T11044] cgroup: subsys name conflicts with all [ 135.510858][T11044] cgroup: subsys name conflicts with all [ 135.512494][T11044] cgroup: subsys name conflicts with all [ 135.513545][T11045] xt_TPROXY: Can be used only with -p tcp or -p udp [ 135.514049][T11044] cgroup: subsys name conflicts with all [ 135.518060][T11044] cgroup: subsys name conflicts with all [ 135.519708][T11044] cgroup: subsys name conflicts with all [ 135.521323][T11044] cgroup: subsys name conflicts with all [ 135.522952][T11044] cgroup: subsys name conflicts with all [ 135.524872][T11044] cgroup: subsys name conflicts with all [ 135.525299][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 135.526435][T11044] cgroup: subsys name conflicts with all [ 135.530665][T11044] cgroup: subsys name conflicts with all [ 135.530780][T11045] erspan1: entered promiscuous mode [ 135.532300][T11044] cgroup: subsys name conflicts with all [ 135.533539][T11045] erspan1: entered allmulticast mode [ 135.537953][T11044] cgroup: subsys name conflicts with all [ 135.541496][T11044] cgroup: subsys name conflicts with all [ 135.544832][T11044] cgroup: subsys name conflicts with all [ 135.546427][T11044] cgroup: subsys name conflicts with all [ 135.548366][T11044] cgroup: subsys name conflicts with all [ 135.549204][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.549906][T11044] cgroup: subsys name conflicts with all [ 135.553231][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.553295][T11044] cgroup: subsys name conflicts with all [ 135.556092][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.556669][T11044] cgroup: subsys name conflicts with all [ 135.560153][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.560659][T11044] cgroup: subsys name conflicts with all [ 135.563814][T11044] cgroup: subsys name conflicts with all [ 135.564016][ T5963] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 135.567388][T11044] cgroup: subsys name conflicts with all [ 135.569681][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.571392][T11044] cgroup: subsys name conflicts with all [ 135.579096][T11044] cgroup: subsys name conflicts with all [ 135.582266][T11044] cgroup: subsys name conflicts with all [ 135.583867][T11044] cgroup: subsys name conflicts with all [ 135.585647][T11044] cgroup: subsys name conflicts with all [ 135.587246][T11044] cgroup: subsys name conflicts with all [ 135.588782][T11044] cgroup: subsys name conflicts with all [ 135.625012][T11053] vlan2: entered allmulticast mode [ 135.626382][T11053] erspan0: entered allmulticast mode [ 135.664354][T11046] chnl_net:caif_netlink_parms(): no params data found [ 135.665883][T11053] Mount JFS Failure: -22 [ 135.742248][T11046] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.744208][T11046] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.746354][T11046] bridge_slave_0: entered allmulticast mode [ 135.748372][T11046] bridge_slave_0: entered promiscuous mode [ 135.752680][T11046] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.754676][T11046] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.756595][T11046] bridge_slave_1: entered allmulticast mode [ 135.758599][T11046] bridge_slave_1: entered promiscuous mode [ 135.788818][T11046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.793914][T11046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.795789][T11077] binder: 11076:11077 unknown command 0 [ 135.798299][T11077] binder: 11076:11077 ioctl c0306201 20000340 returned -22 [ 135.829313][T11046] team0: Port device team_slave_0 added [ 135.832201][T11046] team0: Port device team_slave_1 added [ 135.866972][T11046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.868807][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.875695][T11046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.878764][T11085] tipc: Started in network mode [ 135.880081][T11085] tipc: Node identity ac1414aa, cluster identity 4711 [ 135.883733][T11085] tipc: Enabled bearer , priority 10 [ 135.893823][T11046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.896696][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.903272][T11046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.914474][ T58] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 135.927911][T11088] devpts: called with bogus options [ 135.928584][T11046] hsr_slave_0: entered promiscuous mode [ 135.929629][ T39] audit: type=1400 audit(1732539708.110:815): avc: denied { remount } for pid=11087 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 135.936540][T11046] hsr_slave_1: entered promiscuous mode [ 135.938333][T11046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.940300][T11046] Cannot create hsr debugfs directory [ 136.044289][T11046] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.047929][T11046] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.074527][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 136.077069][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.079593][ T58] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.081882][ T58] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.084290][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.093726][ T58] usb 5-1: config 0 descriptor?? [ 136.136690][T11046] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.139252][T11046] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.198927][T11046] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.201614][T11046] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.269355][T11046] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.271913][T11046] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.461853][ T35] usb 5-1: USB disconnect, device number 22 [ 136.466057][T11046] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.472920][T11046] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.476448][T11046] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.480693][T11046] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.488535][T11108] trusted_key: encrypted_key: insufficient parameters specified [ 136.522153][T11046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.530522][T11046] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.533946][T11110] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 136.536117][T11111] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 136.539004][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.540896][ T7230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.543724][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.545678][ T7230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.619608][T11046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.635949][T11046] veth0_vlan: entered promiscuous mode [ 136.640267][T11046] veth1_vlan: entered promiscuous mode [ 136.650995][T11046] veth0_macvtap: entered promiscuous mode [ 136.654360][T11046] veth1_macvtap: entered promiscuous mode [ 136.656009][ T5951] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 136.661605][T11046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.664524][T11046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.667053][T11046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.669716][T11046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.672246][T11046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.675119][T11046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.678215][T11046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.682533][T11046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.685347][T11046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.687860][T11046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.690515][T11046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.693055][T11046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.696085][T11046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.698649][T11046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.701332][T11046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.705262][T11046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.708978][T11046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.711307][T11046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.713623][T11046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.716374][T11046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.758100][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.760313][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.771900][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.773931][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.806106][ T5951] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.808895][ T5951] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.811178][ T5951] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.814680][ T5951] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.817279][ T5951] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 136.820131][ T5951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.826635][ T5951] hub 8-1:1.0: bad descriptor, ignoring hub [ 136.828297][ T5951] hub 8-1:1.0: probe with driver hub failed with error -5 [ 136.830306][ T5951] cdc_wdm 8-1:1.0: skipping garbage [ 136.831676][ T5951] cdc_wdm 8-1:1.0: skipping garbage [ 136.837996][ T5951] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 136.844542][ T5951] cdc_wdm 8-1:1.0: Unknown control protocol [ 136.859161][T11126] Cannot find del_set index 4 as target [ 136.896777][ T5951] tipc: Node number set to 2886997162 [ 136.912333][T11134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.918410][T11134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.009458][T11135] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 137.072104][T11141] random: crng reseeded on system resumption [ 137.560040][T11153] delete_channel: no stack [ 137.574152][T11105] cdc_wdm 8-1:1.0: Error autopm - -16 [ 137.574233][ T5951] usb 8-1: USB disconnect, device number 15 [ 137.641424][T11158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11158 comm=syz.0.1536 [ 137.645153][ T5953] Bluetooth: hci0: command tx timeout [ 137.693772][T11165] loop2: detected capacity change from 0 to 7 [ 137.696736][T11165] Dev loop2: unable to read RDB block 7 [ 137.698810][T11165] loop2: AHDI p1 p2 [ 137.700270][T11165] loop2: partition table partially beyond EOD, truncated [ 137.700943][T11167] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 137.704681][T11165] loop2: p1 size 150995200 extends beyond EOD, truncated [ 137.719858][ T8242] udevd[8242]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 137.724584][ T5951] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 137.832215][T11184] IPv4: Oversized IP packet from 172.20.20.24 [ 137.834480][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 137.836263][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 137.914648][ T5951] usb 8-1: Using ep0 maxpacket: 8 [ 137.917225][ T5951] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.920218][ T5951] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.925308][ T5951] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.928132][ T5951] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.930614][ T5951] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 137.939453][ T5951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.949554][ T5951] hub 8-1:1.0: bad descriptor, ignoring hub [ 137.951136][ T5951] hub 8-1:1.0: probe with driver hub failed with error -5 [ 137.962820][ T5951] cdc_wdm 8-1:1.0: skipping garbage [ 137.964294][ T5951] cdc_wdm 8-1:1.0: skipping garbage [ 137.969868][ T5951] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 137.970632][T11195] netlink: 'syz.1.1548': attribute type 11 has an invalid length. [ 137.971447][ T5951] cdc_wdm 8-1:1.0: Unknown control protocol [ 138.218189][T11215] __nla_validate_parse: 3 callbacks suppressed [ 138.218201][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 138.246107][T11217] ./file0: Can't lookup blockdev [ 138.264817][ T5956] usb 8-1: USB disconnect, device number 16 [ 138.606331][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 138.654568][T11227] netlink: 'syz.2.1558': attribute type 14 has an invalid length. [ 138.690809][T11235] xt_recent: Unsupported userspace flags (00000076) [ 138.766264][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 138.766275][ T39] audit: type=1400 audit(1732539710.950:823): avc: denied { connect } for pid=11241 comm="syz.3.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.776409][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 138.779777][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 138.786300][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.789658][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.792336][ T9] usb 6-1: Product: 메쯘擺⛇é”è˜î§ç¤ºé´ºë«¶áˆŸà¿ì½ºïŒæ™™è¹™î–šì¡›í’”떟ゼ☒ìꑊ喒磷驩äˆä–넧惽蓿ቩꌘ䪃ç”ܣ웨챮ê¹ëŸ’总ವã¡ï½¾á¶¹æ‡ž [ 138.798586][ T9] usb 6-1: Manufacturer: 哶镊ἕຩي䋯ìžà¨‰ [ 138.800909][ T9] usb 6-1: SerialNumber: І [ 139.214532][ T9] cdc_ncm 6-1:1.0: bind() failure [ 139.217624][ T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 139.219873][ T9] cdc_ncm 6-1:1.1: bind() failure [ 139.224202][ T9] usb 6-1: USB disconnect, device number 12 [ 139.714495][ T5953] Bluetooth: hci0: command tx timeout [ 139.787832][T11273] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1571'. [ 139.791450][ T39] audit: type=1400 audit(1732539711.970:824): avc: denied { bind } for pid=11272 comm="syz.1.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.949927][T11284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11284 comm=syz.1.1575 [ 139.953401][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'. [ 140.478363][T11299] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 140.732777][T11309] overlayfs: conflicting options: userxattr,redirect_dir=on [ 140.740342][T11311] netlink: 'syz.2.1586': attribute type 10 has an invalid length. [ 140.743025][T11311] bond0: (slave bond_slave_0): Releasing backup interface [ 140.744502][ T58] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 140.747072][T11311] bond_slave_0: left promiscuous mode [ 140.881188][ T39] audit: type=1326 audit(1732539713.060:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11315 comm="syz.2.1588" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18d577e819 code=0x0 [ 140.915647][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 140.920961][T11321] netlink: 'syz.2.1589': attribute type 19 has an invalid length. [ 140.921362][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.928194][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.934837][ T58] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.938127][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.940792][ T58] usb 5-1: Product: syz [ 140.942230][ T58] usb 5-1: Manufacturer: 衴ޠ綂בּ慠â’ﶻ붅頮슀꿷떎즂å”á‹ì¸”튗ã¥èŽä¯°ãŸ–ì²é¤¸ã•¶ë•›ë·¾ì«á†§è¬·ä·¾é‘¦ã©§á¾¥æ ³ë‚¦î…Žï¬«áŽ–黳㕴䗪䢗ꊷîˆåª§ã¤ˆì³žï½“ꕞㄫ谲ⓒ旅㒵؞ऌ鵘↕逯諞ᘚ⥼妗귡ꭆ泌鸘Ƚã®ìº½ç…臓꾧语⻫⥧ᅶ浅ↀ얥⼃糚褳ህ㖓è ê²ªâ¬‹ã½œï§™éŽç„„ç–²à¡ã¸¦áŒ“쎙æ‘衬ꄸ쨖鄷䞋ₜ髽 [ 140.953279][ T58] usb 5-1: SerialNumber: syz [ 141.025224][T11324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.172492][ T58] usb 5-1: 0:2 : does not exist [ 141.183069][ T58] usb 5-1: USB disconnect, device number 23 [ 141.203336][T11332] kvm: pic: non byte write [ 141.296641][ T39] audit: type=1400 audit(1732539713.480:826): avc: denied { mounton } for pid=11334 comm="syz.2.1592" path="/417/file1/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 141.374918][ T8242] udevd[8242]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.480726][ T39] audit: type=1400 audit(1732539713.660:827): avc: denied { watch watch_reads } for pid=11347 comm="syz.2.1595" path="pipe:[43419]" dev="pipefs" ino=43419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 141.525298][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 141.562908][ T5953] Bluetooth: hci1: unexpected event for opcode 0x2007 [ 141.566143][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1598'. [ 141.615921][T11362] nbd: must specify an index to disconnect [ 141.702677][ T39] audit: type=1400 audit(1732539713.880:828): avc: denied { execute } for pid=11363 comm="syz.1.1601" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.955183][ T30] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 142.103424][T11374] 9pnet: Could not find request transport: tap [ 142.104581][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 142.108383][ T30] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 142.111095][ T30] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 142.113866][ T30] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 142.117559][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.120487][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 142.123521][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 142.139418][ T30] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 142.145632][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.155265][ T30] usb 5-1: config 0 descriptor?? [ 142.189221][T11390] syz.2.1608 (11390): drop_caches: 4 [ 142.236958][ T39] audit: type=1400 audit(1732539714.420:829): avc: denied { remount } for pid=11391 comm="syz.1.1609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 142.242162][ T39] audit: type=1400 audit(1732539714.420:830): avc: denied { create } for pid=11391 comm="syz.1.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 142.247365][ T39] audit: type=1326 audit(1732539714.430:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.2.1608" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d577e819 code=0x7ffc0000 [ 142.253241][ T39] audit: type=1326 audit(1732539714.430:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.2.1608" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d577e819 code=0x7ffc0000 [ 142.359950][ T30] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 142.365342][ T30] usb 5-1: USB disconnect, device number 24 [ 142.367829][ T30] usblp0: removed [ 142.717102][T11418] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 11418 comm: syz.3.1618) [ 142.770180][T11425] tmpfs: Unknown parameter 'measure' [ 142.794915][ T6023] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 142.912201][T11431] trusted_key: encrypted_key: insufficient parameters specified [ 142.954540][ T6023] usb 5-1: Using ep0 maxpacket: 32 [ 142.957216][ T6023] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 142.959397][ T6023] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 142.961587][ T6023] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 142.963860][ T6023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.966761][ T6023] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 142.969180][ T6023] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 142.972553][ T6023] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 142.975276][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.978310][ T6023] usb 5-1: config 0 descriptor?? [ 143.054777][T11442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1624'. [ 143.093894][T11445] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1625'. [ 143.189742][ T6023] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 143.254237][T11450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.257585][T11450] bond_slave_1: left promiscuous mode [ 143.261246][T11450] bond0 (unregistering): (slave team0): Releasing backup interface [ 143.264052][T11450] team0: left promiscuous mode [ 143.265539][T11450] team_slave_0: left promiscuous mode [ 143.267493][T11450] team_slave_1: left promiscuous mode [ 143.270798][T11450] bond0 (unregistering): Released all slaves [ 143.395301][T11369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1603'. [ 143.397679][T11369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1603'. [ 143.404107][ T30] usb 5-1: USB disconnect, device number 25 [ 143.410380][ T30] usblp0: removed [ 143.497178][T11468] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 143.507693][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 143.509462][ T211] Bluetooth: hci4: Frame reassembly failed (-84) [ 143.580659][T11470] binder: 11469:11470 ioctl c00c6211 0 returned -14 [ 143.642555][T11475] netlink: 'syz.1.1632': attribute type 4 has an invalid length. [ 143.648268][T11475] netlink: 'syz.1.1632': attribute type 4 has an invalid length. [ 143.938475][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 143.938485][ T39] audit: type=1400 audit(1732539716.120:847): avc: denied { create } for pid=11488 comm="syz.0.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.955588][ T39] audit: type=1400 audit(1732539716.120:848): avc: denied { listen } for pid=11488 comm="syz.0.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.962958][ T39] audit: type=1400 audit(1732539716.120:849): avc: denied { ioctl } for pid=11488 comm="syz.0.1636" path="socket:[41827]" dev="sockfs" ino=41827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 144.147757][T11516] kvm: pic: non byte read [ 144.271493][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 144.516041][T11589] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1654'. [ 144.519205][T11589] netlink: 'syz.1.1654': attribute type 8 has an invalid length. [ 144.560138][T11591] netlink: 'syz.0.1655': attribute type 1 has an invalid length. [ 144.562731][T11591] netlink: 'syz.0.1655': attribute type 2 has an invalid length. [ 144.566207][T11595] netlink: 344 bytes leftover after parsing attributes in process `syz.0.1655'. [ 144.566571][ T39] audit: type=1400 audit(1732539716.750:850): avc: denied { ioctl } for pid=11590 comm="syz.0.1655" path="socket:[43717]" dev="sockfs" ino=43717 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.598467][T11602] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1657'. [ 144.604712][ T39] audit: type=1400 audit(1732539716.750:851): avc: denied { read write } for pid=5950 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.622776][ T39] audit: type=1400 audit(1732539716.750:852): avc: denied { open } for pid=5950 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.639943][ T39] audit: type=1400 audit(1732539716.750:853): avc: denied { ioctl } for pid=5950 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.672227][T11615] sp0: Synchronizing with TNC [ 144.705866][T11623] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1663'. [ 144.709451][ T39] audit: type=1400 audit(1732539716.890:854): avc: denied { setopt } for pid=11621 comm="syz.2.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.783604][T11629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50677 sclass=netlink_route_socket pid=11629 comm=syz.1.1665 [ 144.809074][T11633] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1666'. [ 144.812144][T11633] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1666'. [ 144.858279][T11636] usb usb1: usbfs: process 11636 (syz.2.1667) did not claim interface 0 before use [ 144.864677][ T8] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 144.934291][ T30] libceph: connect (1)[c::]:6789 error -101 [ 144.936345][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 144.962079][T11648] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1672'. [ 144.965773][T11648] @: renamed from vlan0 (while UP) [ 144.971884][T11650] random: crng reseeded on system resumption [ 145.035676][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.038096][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.040403][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.043162][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.046022][ T8] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 145.047452][T11654] fuse: Bad value for 'fd' [ 145.048350][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.056171][ T8] hub 5-1:1.0: bad descriptor, ignoring hub [ 145.057735][ T8] hub 5-1:1.0: probe with driver hub failed with error -5 [ 145.059711][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 145.061794][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 145.065969][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 145.067976][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 145.152638][T11642] ceph: No mds server is up or the cluster is laggy [ 145.484619][ T58] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 145.554688][ T5963] Bluetooth: hci4: command 0x1003 tx timeout [ 145.555026][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 145.615600][ T58] usb 7-1: device descriptor read/64, error -71 [ 145.854553][ T58] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 145.984561][ T58] usb 7-1: device descriptor read/64, error -71 [ 146.040186][T11695] "syz.3.1685" (11695) uses obsolete ecb(arc4) skcipher [ 146.098776][ T58] usb usb7-port1: attempt power cycle [ 146.165744][T11610] cdc_wdm 5-1:1.0: Error autopm - -16 [ 146.167511][ T8] usb 5-1: USB disconnect, device number 26 [ 146.434594][ T58] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 146.465251][ T58] usb 7-1: device descriptor read/8, error -71 [ 146.654868][ T8] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 146.724518][ T58] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 146.744951][ T58] usb 7-1: device descriptor read/8, error -71 [ 146.794519][ T8] usb 5-1: device descriptor read/64, error -71 [ 146.856013][ T58] usb usb7-port1: unable to enumerate USB device [ 147.044630][ T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 147.096689][T11728] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 147.138532][ T39] audit: type=1326 audit(1732539719.320:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.1.1699" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb9697e819 code=0x0 [ 147.175149][ T8] usb 5-1: device descriptor read/64, error -71 [ 147.285330][ T8] usb usb5-port1: attempt power cycle [ 147.627660][ T8] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 147.644970][ T8] usb 5-1: device descriptor read/8, error -71 [ 147.904744][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 147.924939][ T8] usb 5-1: device descriptor read/8, error -71 [ 148.037830][ T8] usb usb5-port1: unable to enumerate USB device [ 148.059494][T11747] futex_wake_op: syz.1.1704 tries to shift op by 32; fix this program [ 148.205274][T11750] overlay: ./file0 is not a directory [ 148.207043][ T39] audit: type=1400 audit(1732539720.390:856): avc: denied { mounton } for pid=11748 comm="syz.1.1705" path="/75/file0/bus" dev="ramfs" ino=44953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 148.528353][T11752] netlink: 'syz.1.1706': attribute type 3 has an invalid length. [ 148.778317][T11758] __nla_validate_parse: 6 callbacks suppressed [ 148.778328][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'. [ 148.812755][T11760] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1710'. [ 148.844526][ T6023] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 148.984596][ T5951] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 148.986835][ T6023] usb 6-1: device descriptor read/64, error -71 [ 149.114481][ T5951] usb 5-1: device descriptor read/64, error -71 [ 149.234727][ T6023] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 149.367718][ T6023] usb 6-1: device descriptor read/64, error -71 [ 149.487373][ T6023] usb usb6-port1: attempt power cycle [ 149.539989][ T39] audit: type=1400 audit(1732539721.720:857): avc: denied { append } for pid=11769 comm="syz.0.1713" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 149.566621][ T5953] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 149.571374][T11772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1714'. [ 149.624160][ T39] audit: type=1400 audit(1732539721.800:858): avc: denied { execute } for pid=11773 comm="syz.0.1715" path="/dev/audio1" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 149.854569][ T6023] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 149.876707][ T6023] usb 6-1: device descriptor read/8, error -71 [ 150.114677][ T6023] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 150.145096][ T6023] usb 6-1: device descriptor read/8, error -71 [ 150.195949][T11786] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 150.255378][ T39] audit: type=1400 audit(1732539722.440:859): avc: denied { ioctl } for pid=11789 comm="syz.2.1719" path="socket:[47180]" dev="sockfs" ino=47180 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 150.264563][ T6023] usb usb6-port1: unable to enumerate USB device [ 150.382773][ T39] audit: type=1326 audit(1732539722.560:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11802 comm="syz.2.1721" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18d577e819 code=0x0 [ 150.619741][ T39] audit: type=1326 audit(1732539722.800:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.0.1717" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b62b7e819 code=0x7fc00000 [ 151.259176][T11811] netlink: 'syz.2.1724': attribute type 1 has an invalid length. [ 151.261920][T11811] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1724'. [ 151.312059][T11816] netlink: 'syz.2.1725': attribute type 7 has an invalid length. [ 151.314054][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 151.322566][T11816] xt_l2tp: v2 tid > 0xffff: 150994944 [ 151.513439][T11824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11824 comm=syz.0.1728 [ 151.791022][T11843] lo: entered promiscuous mode [ 151.792850][T11844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1733'. [ 151.795355][T11843] autofs: Unknown parameter 'sit0' [ 151.804096][T11844] lo: left promiscuous mode [ 151.841945][ T39] audit: type=1400 audit(1732539724.020:862): avc: denied { setattr } for pid=11847 comm="syz.0.1734" name="[io_uring]" dev="anon_inodefs" ino=46382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.057265][ T39] audit: type=1400 audit(1732539724.240:863): avc: denied { read } for pid=11870 comm="syz.1.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 152.337587][T11892] overlayfs: conflicting options: metacopy=off,verity=on [ 152.362369][T11892] syz.2.1749 (11892) used greatest stack depth: 20368 bytes left [ 152.456897][ T39] audit: type=1400 audit(1732539724.640:864): avc: denied { append } for pid=11893 comm="syz.2.1750" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.543655][T11899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1752'. [ 152.547940][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 152.918408][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 152.921679][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 152.924766][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 152.928848][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 152.931844][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 152.935117][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 152.939606][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 152.943516][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 152.946550][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 152.949499][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 153.004874][T11917] 9pnet_virtio: no channels available for device syz [ 153.054569][ T30] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 153.225029][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 153.228326][ T30] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 153.231146][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.234177][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.237228][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.240274][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.244308][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.247266][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.331850][ T39] audit: type=1400 audit(1732539725.510:865): avc: denied { name_connect } for pid=11926 comm="syz.1.1760" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 153.445856][T11928] block nbd1: shutting down sockets [ 153.454150][ T30] usb 5-1: usb_control_msg returned -32 [ 153.455838][ T30] usbtmc 5-1:16.0: can't read capabilities [ 153.599507][T11943] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 153.602018][ T39] audit: type=1400 audit(1732539725.780:866): avc: denied { listen } for pid=11926 comm="syz.1.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.611093][T11927] IPVS: stopping master sync thread 11943 ... [ 153.637007][ T5953] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 153.639334][ T5953] Bluetooth: hci2: Injecting HCI hardware error event [ 153.642815][ T5953] Bluetooth: hci2: hardware error 0x00 [ 153.679246][T11946] program syz.1.1761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.725550][T11949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1762'. [ 153.811515][T11912] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -32 [ 153.824875][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.831590][ T30] usb 5-1: USB disconnect, device number 33 [ 154.489578][T11981] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 154.491641][T11981] netlink: 'syz.2.1775': attribute type 2 has an invalid length. [ 154.493614][T11981] netlink: 16074 bytes leftover after parsing attributes in process `syz.2.1775'. [ 154.787598][T12002] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 154.823414][T12005] afs: Unknown parameter 'dyite' [ 154.855744][T12007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1782'. [ 154.884533][T12015] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 154.960057][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 154.960072][ T39] audit: type=1326 audit(1732539727.140:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.1.1787" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb9697e819 code=0x0 [ 155.076601][T12035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1787'. [ 155.096241][T12035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1787'. [ 155.357643][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 155.360697][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 155.714537][ T5953] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 155.816325][T12061] overlayfs: conflicting options: userxattr,redirect_dir=on [ 156.011725][T12068] xt_TCPMSS: Only works on TCP SYN packets [ 156.067185][T12077] xt_hashlimit: size too large, truncated to 1048576 [ 156.121095][T12080] netlink: 'syz.1.1803': attribute type 1 has an invalid length. [ 156.129038][T12080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.144566][T12080] bond1: (slave gretap1): making interface the new active one [ 156.147744][T12080] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 156.253298][T12083] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1804'. [ 156.324858][ T39] audit: type=1400 audit(1732539728.500:878): avc: denied { create } for pid=12087 comm="syz.0.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 156.559122][T12106] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 156.562739][T12106] cramfs: wrong magic [ 156.942037][T12113] syz.2.1812[12113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.942088][T12113] syz.2.1812[12113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.946729][T12113] syz.2.1812[12113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.964388][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 156.972583][ T39] audit: type=1400 audit(1732539729.150:880): avc: denied { bind } for pid=12112 comm="syz.2.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 156.983250][ T39] audit: type=1400 audit(1732539729.150:879): avc: denied { bind } for pid=12112 comm="syz.2.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 156.990031][ T39] audit: type=1400 audit(1732539729.160:881): avc: denied { ioctl } for pid=12112 comm="syz.2.1812" path="socket:[45838]" dev="sockfs" ino=45838 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.464841][ T1461] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 157.630074][ T1461] usb 7-1: Using ep0 maxpacket: 8 [ 157.633862][ T1461] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.637370][ T1461] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.639849][ T1461] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.642213][ T1461] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.645653][ T1461] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.647836][ T1461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.852526][ T1461] usb 7-1: usb_control_msg returned -32 [ 157.853964][ T1461] usbtmc 7-1:16.0: can't read capabilities [ 157.934526][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 157.939947][ T5956] usb 7-1: USB disconnect, device number 15 [ 158.094609][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 158.097867][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 158.100428][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.104190][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.108207][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.112026][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.120258][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 158.122845][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.126641][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.130392][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.133997][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.145146][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 158.147758][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.151525][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.155329][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.159159][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.173806][ T25] usb 5-1: string descriptor 0 read error: -22 [ 158.175861][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 158.178930][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.186364][ T25] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 158.401379][ T5956] usb 5-1: USB disconnect, device number 34 [ 158.591952][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'. [ 158.594390][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'. [ 159.593128][T12209] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 159.649657][T12214] netpci0: tun_chr_ioctl cmd 1074025676 [ 159.651572][T12214] netpci0: owner set to 0 [ 159.861650][ T39] audit: type=1400 audit(1732539732.040:882): avc: denied { bind } for pid=12217 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.874765][ T1461] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 160.004506][ T1461] usb 7-1: device descriptor read/64, error -71 [ 160.254500][ T1461] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 160.384619][ T1461] usb 7-1: device descriptor read/64, error -71 [ 160.506744][ T1461] usb usb7-port1: attempt power cycle [ 160.593856][T12223] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 160.866804][ T1461] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 160.898877][ T1461] usb 7-1: device descriptor read/8, error -71 [ 161.134603][ T1461] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 161.165427][ T1461] usb 7-1: device descriptor read/8, error -71 [ 161.274808][ T1461] usb usb7-port1: unable to enumerate USB device [ 161.349668][T12227] tc_dump_action: action bad kind [ 161.874915][ T7234] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 162.197575][T12249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1847'. [ 162.218859][ T5951] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 162.269954][T12254] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 162.272018][T12254] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1851'. [ 162.307048][ T5963] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.312482][ T5963] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.315667][ T5963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.325045][ T5963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.334830][ T5963] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 162.337486][ T5963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.365400][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 162.367886][ T5951] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 162.370007][ T5951] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 162.372826][ T5951] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 162.375896][ T5951] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 162.379183][ T5951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 162.382354][ T5951] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 162.385258][ T5951] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 162.387340][ T5951] usb 5-1: Product: syz [ 162.388392][ T5951] usb 5-1: Manufacturer: syz [ 162.389535][ T5951] usb 5-1: SerialNumber: syz [ 162.392274][ T5951] usb 5-1: config 0 descriptor?? [ 162.394956][ T5951] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 162.397796][ T5951] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 162.447786][T12256] chnl_net:caif_netlink_parms(): no params data found [ 162.504482][T12256] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.506771][T12256] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.509055][T12256] bridge_slave_0: entered allmulticast mode [ 162.511492][T12256] bridge_slave_0: entered promiscuous mode [ 162.513877][T12256] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.516316][T12256] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.518262][T12256] bridge_slave_1: entered allmulticast mode [ 162.520494][T12256] bridge_slave_1: entered promiscuous mode [ 162.554572][T12256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.558082][T12256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.601145][ T9] usb 5-1: USB disconnect, device number 35 [ 162.602334][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 162.608910][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 162.611649][ T7234] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.621802][T12256] team0: Port device team_slave_0 added [ 162.625568][T12256] team0: Port device team_slave_1 added [ 162.647351][T12256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.649043][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.655826][T12256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.660000][T12256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.661741][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.668053][T12256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.690562][T12256] hsr_slave_0: entered promiscuous mode [ 162.692643][T12256] hsr_slave_1: entered promiscuous mode [ 162.697044][T12256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.699048][T12256] Cannot create hsr debugfs directory [ 162.711163][ T7234] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.722281][T12267] netlink: 'syz.2.1852': attribute type 39 has an invalid length. [ 162.732421][T12267] bridge0: port 3(veth0_to_bridge) entered blocking state [ 162.734338][T12267] bridge0: port 3(veth0_to_bridge) entered disabled state [ 162.736295][T12267] veth0_to_bridge: entered allmulticast mode [ 162.738436][T12267] veth0_to_bridge: entered promiscuous mode [ 162.765609][ T39] audit: type=1326 audit(1732539734.950:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.2.1853" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18d577e819 code=0x0 [ 162.787937][ T7234] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.825642][T12256] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.828547][T12256] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.831592][T12256] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.834495][T12256] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.843168][T12256] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.845115][T12256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.847233][T12256] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.849097][T12256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.865417][ T7234] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.888308][T12256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.895065][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.897995][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.912458][T12256] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.920512][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.922401][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.928593][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.930446][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.963666][ T7234] bridge_slave_1: left allmulticast mode [ 162.966346][ T7234] bridge_slave_1: left promiscuous mode [ 162.968509][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.971441][ T7234] bridge_slave_0: left allmulticast mode [ 162.972900][ T7234] bridge_slave_0: left promiscuous mode [ 162.975208][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.128952][T12274] kvm: kvm [12273]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000005a) = 0x0 [ 163.132600][T12277] netlink: 'syz.1.1854': attribute type 10 has an invalid length. [ 163.249318][ T7234]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.253852][ T7234]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.258009][ T7234]  (unregistering): Released all slaves [ 163.269600][T12256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.272314][T12256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.276011][T12274] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1854'. [ 163.282312][T12277] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 163.337844][T12283] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 163.410629][T12289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1856'. [ 163.423275][T12256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.553386][T12256] veth0_vlan: entered promiscuous mode [ 163.553695][T12316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1859'. [ 163.558480][T12316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1859'. [ 163.561017][T12316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1859'. [ 163.564218][T12316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1859'. [ 163.569979][T12256] veth1_vlan: entered promiscuous mode [ 163.583806][ T7234] hsr_slave_0: left promiscuous mode [ 163.589457][ T7234] hsr_slave_1: left promiscuous mode [ 163.591480][ T7234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.593566][ T7234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.599772][ T7234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.601762][ T7234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.631560][ T7234] veth1_macvtap: left promiscuous mode [ 163.633282][ T7234] veth0_macvtap: left promiscuous mode [ 163.636131][ T7234] veth1_vlan: left promiscuous mode [ 163.637597][ T7234] veth0_vlan: left promiscuous mode [ 164.355864][ T5963] Bluetooth: hci4: command tx timeout [ 164.434275][ T7234] team0 (unregistering): Port device team_slave_1 removed [ 164.490369][T12338] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1863'. [ 164.521614][ T7234] team0 (unregistering): Port device team_slave_0 removed [ 165.096149][T12336] netlink: 'syz.1.1863': attribute type 29 has an invalid length. [ 165.102776][T12256] veth0_macvtap: entered promiscuous mode [ 165.106686][T12256] veth1_macvtap: entered promiscuous mode [ 165.128061][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 165.139800][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.142457][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.145452][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.148159][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.150642][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.153309][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.156966][T12256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.161356][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.164070][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.167463][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.170264][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.173050][T12344] overlayfs: failed to resolve './bus': -2 [ 165.173350][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.173365][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.173388][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.184941][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.188045][T12256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.191491][T12256] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.193753][T12256] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.196057][T12256] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.198294][T12256] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.256937][ T39] audit: type=1400 audit(1732539737.440:884): avc: denied { setopt } for pid=12349 comm="syz.0.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 165.331609][ T7226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.333558][ T7226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.373417][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.380011][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.635533][ T1461] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 165.689633][T12380] tmpfs: Unknown parameter 'gGƒJð]æä†ÕR Ðblock_ÞJmlimit„ÜÒcÓVz˜ìWžYÆÔÆ»ÞjBÄ•y' [ 165.810759][ T1461] usb 7-1: config 0 has no interfaces? [ 165.813779][ T1461] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 165.816360][ T1461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.818565][ T1461] usb 7-1: Product: syz [ 165.822084][ T1461] usb 7-1: Manufacturer: syz [ 165.824530][ T1461] usb 7-1: SerialNumber: syz [ 165.832057][ T1461] usb 7-1: config 0 descriptor?? [ 165.924549][ T39] audit: type=1400 audit(1732539738.040:885): avc: denied { ioctl } for pid=12389 comm="syz.4.1873" path="socket:[48880]" dev="sockfs" ino=48880 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.065895][T12394] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.147587][ T6023] usb 7-1: USB disconnect, device number 20 [ 166.435540][ T5963] Bluetooth: hci4: command tx timeout [ 166.468428][ T39] audit: type=1400 audit(1732539738.640:886): avc: denied { watch } for pid=12447 comm="syz.1.1887" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 166.474578][ T39] audit: type=1400 audit(1732539738.640:887): avc: denied { watch_sb watch_reads } for pid=12447 comm="syz.1.1887" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.596240][T12461] netlink: 'syz.1.1889': attribute type 13 has an invalid length. [ 166.601917][T12461] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 166.605143][T12461] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 166.607241][T12461] gretap2: entered promiscuous mode [ 166.608637][T12461] gretap2: entered allmulticast mode [ 166.655472][ T6718] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 166.677199][ T39] audit: type=1400 audit(1732539738.860:888): avc: denied { ioctl } for pid=12470 comm="syz.0.1891" path="socket:[51330]" dev="sockfs" ino=51330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 166.685929][ T39] audit: type=1400 audit(1732539738.860:889): avc: denied { read } for pid=12470 comm="syz.0.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 166.707684][ T39] audit: type=1400 audit(1732539738.890:890): avc: denied { accept } for pid=12475 comm="syz.2.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.727629][T12477] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 166.778332][ T39] audit: type=1400 audit(1732539738.960:891): avc: denied { sys_chroot } for pid=12484 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 166.781683][T12482] IPVS: set_ctl: invalid protocol: 0 172.30.0.1:20003 [ 166.783831][ T39] audit: type=1400 audit(1732539738.960:892): avc: denied { setgid } for pid=12484 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 166.815657][ T6718] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.818578][ T6718] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.821125][ T6718] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.824372][ T6718] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.826985][ T6718] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.829848][ T6718] usb 9-1: config 0 descriptor?? [ 166.907144][T12493] netlink: 'syz.2.1899': attribute type 39 has an invalid length. [ 167.114539][ T1461] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 167.240516][ T6718] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 167.242752][ T6718] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 167.245835][ T6718] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 167.275798][ T1461] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 167.279417][ T1461] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 167.285591][ T1461] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.287993][ T1461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.290172][ T1461] usb 5-1: Product: syz [ 167.291283][ T1461] usb 5-1: Manufacturer: syz [ 167.292800][ T1461] usb 5-1: SerialNumber: syz [ 167.385225][T12508] __nla_validate_parse: 3 callbacks suppressed [ 167.385236][T12508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1905'. [ 167.426497][T12511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1906'. [ 167.508983][T12442] xt_hashlimit: overflow, rate too high: 0 [ 167.511312][ T5992] usb 9-1: USB disconnect, device number 2 usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 167.531854][ T1461] cdc_ncm 5-1:1.0: bind() failure [ 167.538914][ T1461] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 167.540701][ T1461] cdc_ncm 5-1:1.1: bind() failure [ 167.543870][ T1461] usb 5-1: USB disconnect, device number 36 [ 167.644178][T12524] xt_l2tp: missing protocol rule (udp|l2tpip) [ 167.646988][T12524] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 167.649831][T12526] ax25_connect(): syz.2.1911 uses autobind, please contact jreuter@yaina.de [ 167.653465][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'. [ 167.656485][T12526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1911'. [ 167.777829][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 167.777840][ T39] audit: type=1400 audit(1732539739.960:898): avc: denied { map } for pid=12527 comm="syz.2.1912" path="/proc/sys/net/ipv4/vs/am_droprate" dev="proc" ino=52273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 167.857772][ T39] audit: type=1400 audit(1732539740.040:899): avc: denied { validate_trans } for pid=12532 comm="syz.2.1913" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 167.966288][ T7226] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 168.063244][ T39] audit: type=1400 audit(1732539740.240:900): avc: denied { map } for pid=12542 comm="syz.4.1915" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 168.072982][ T39] audit: type=1400 audit(1732539740.250:901): avc: denied { read write } for pid=12542 comm="syz.4.1915" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 168.527074][ T5963] Bluetooth: hci4: command tx timeout [ 168.773909][T12549] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1916'. [ 169.008226][ T70] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.071040][ T70] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.134733][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.134789][ T6023] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 169.140283][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.142841][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.145717][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.148385][ T5953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 169.150601][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.175664][ T70] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.234041][ T70] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.253041][T12555] chnl_net:caif_netlink_parms(): no params data found [ 169.295762][ T6023] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 169.298575][ T6023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.301470][ T6023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.302285][T12555] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.303941][ T6023] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 169.307387][T12555] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.311099][T12555] bridge_slave_0: entered allmulticast mode [ 169.311527][ T6023] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 169.313111][T12555] bridge_slave_0: entered promiscuous mode [ 169.315346][ T6023] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 169.318916][ T6023] usb 7-1: Manufacturer: syz [ 169.320566][T12555] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.320950][ T6023] usb 7-1: config 0 descriptor?? [ 169.322458][T12555] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.325758][T12555] bridge_slave_1: entered allmulticast mode [ 169.327811][T12555] bridge_slave_1: entered promiscuous mode [ 169.353829][T12555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.368541][T12555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.409592][T12555] team0: Port device team_slave_0 added [ 169.422868][T12555] team0: Port device team_slave_1 added [ 169.433726][ T70] bridge_slave_1: left allmulticast mode [ 169.436589][ T70] bridge_slave_1: left promiscuous mode [ 169.439232][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.442563][ T70] bridge_slave_0: left allmulticast mode [ 169.444075][ T70] bridge_slave_0: left promiscuous mode [ 169.445919][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.699234][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.703034][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.706500][ T70] bond0 (unregistering): Released all slaves [ 169.710973][ T70] bond1 (unregistering): Released all slaves [ 169.723931][T12555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.725873][T12555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.732694][T12555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.737408][ T6023] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 169.743409][ T6023] appleir 0003:05AC:8243.0008: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 169.761555][T12555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.763330][T12555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.771597][T12555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.811931][T12555] hsr_slave_0: entered promiscuous mode [ 169.813980][T12555] hsr_slave_1: entered promiscuous mode [ 169.818239][T12555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.821911][T12555] Cannot create hsr debugfs directory [ 169.974287][T12555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.979672][T12555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.982760][T12555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.986710][T12555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.001915][T12555] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.003784][T12555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.005730][T12555] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.007572][T12555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.028586][ T70] hsr_slave_0: left promiscuous mode [ 170.030399][ T70] hsr_slave_1: left promiscuous mode [ 170.031840][ T35] usb 7-1: USB disconnect, device number 21 [ 170.033838][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.038497][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.040902][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.042855][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.068453][ T70] veth1_macvtap: left promiscuous mode [ 170.069875][ T70] veth0_macvtap: left promiscuous mode [ 170.071342][ T70] veth1_vlan: left promiscuous mode [ 170.072641][ T70] veth0_vlan: left promiscuous mode [ 170.817462][ T70] team0 (unregistering): Port device team_slave_1 removed [ 170.834601][ T5992] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 170.919653][ T70] team0 (unregistering): Port device team_slave_0 removed [ 170.984568][ T5992] usb 7-1: Using ep0 maxpacket: 8 [ 170.989411][ T5992] usb 7-1: unable to get BOS descriptor or descriptor too short [ 170.992440][ T5992] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 170.995246][ T5992] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 170.997867][ T5992] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 171.001134][ T5992] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 171.005037][ T5992] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 171.007935][ T5992] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 46, changing to 9 [ 171.010831][ T5992] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49990, setting to 1024 [ 171.014636][ T5992] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 171.016939][ T5992] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 171.019883][ T5992] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 171.022255][ T5992] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 171.025529][ T5992] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 171.028429][ T5992] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 46, changing to 9 [ 171.031282][ T5992] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49990, setting to 1024 [ 171.035073][ T5992] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 171.037378][ T5992] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 171.039390][ T5992] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 171.041813][ T5992] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 171.044975][ T5992] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 171.048016][ T5992] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 46, changing to 9 [ 171.050864][ T5992] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49990, setting to 1024 [ 171.055899][ T5992] usb 7-1: string descriptor 0 read error: -22 [ 171.057588][ T5992] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 171.059960][ T5992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.068273][ T5992] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 171.245875][ T5963] Bluetooth: hci3: command tx timeout [ 171.281179][T12576] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 171.719813][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.727013][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.757260][T12555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.764345][T12555] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.780964][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.782886][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.786611][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.788594][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.909544][T12555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.061395][T12555] veth0_vlan: entered promiscuous mode [ 172.067084][T12555] veth1_vlan: entered promiscuous mode [ 172.085850][T12555] veth0_macvtap: entered promiscuous mode [ 172.091214][T12555] veth1_macvtap: entered promiscuous mode [ 172.098608][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.101394][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.103960][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.107015][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.109580][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.112305][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.115728][T12555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.120379][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.123152][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.125771][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.128434][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.130960][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.133510][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.136249][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.138872][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.141733][T12555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.146071][T12555] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.148393][T12555] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.150567][T12555] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.152856][T12555] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.189542][ T7234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.194709][ T7234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.199235][ T7234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.202989][ T7234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.164687][T12649] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 173.166232][T12649] [U] J"—e:ÀÆ" [ 173.259782][ T39] audit: type=1400 audit(1732539745.440:902): avc: denied { create } for pid=12661 comm="syz.5.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.314822][ T5963] Bluetooth: hci3: command tx timeout [ 173.318437][ T39] audit: type=1400 audit(1732539745.500:903): avc: denied { connect } for pid=12666 comm="syz.5.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.320836][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1929'. [ 173.323414][ T39] audit: type=1400 audit(1732539745.500:904): avc: denied { listen } for pid=12666 comm="syz.5.1929" lport=44598 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.326293][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1929'. [ 173.327413][ T6718] usb 7-1: USB disconnect, device number 22 [ 173.331733][ T39] audit: type=1400 audit(1732539745.500:905): avc: denied { accept } for pid=12666 comm="syz.5.1929" lport=44598 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.404284][T12672] pim6reg1: entered promiscuous mode [ 173.406682][T12672] pim6reg1: entered allmulticast mode [ 173.592568][T12684] blktrace: Concurrent blktraces are not allowed on nullb0 [ 173.659369][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1936'. [ 173.662701][ T39] audit: type=1400 audit(1732539745.840:906): avc: denied { watch watch_reads } for pid=12691 comm="syz.5.1936" path="/proc/52/task" dev="proc" ino=52472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 173.937089][ T39] audit: type=1400 audit(1732539746.120:907): avc: denied { setopt } for pid=12698 comm="syz.2.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.938239][T12699] IPVS: Unknown mcast interface: vlan0 [ 174.075442][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 174.079913][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 174.082258][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 174.163510][T12713] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 174.166103][T12713] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 174.417613][T12718] Bluetooth: MGMT ver 1.23 [ 174.433970][T12718] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 174.435772][T12718] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.439301][T12718] vhci_hcd vhci_hcd.0: Device attached [ 174.634615][ T58] vhci_hcd: vhci_device speed not set [ 174.675314][ T9] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 174.704679][ T58] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 174.825824][ T9] usb 10-1: config 0 has no interfaces? [ 174.827326][ T9] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.829726][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.833093][ T9] usb 10-1: config 0 descriptor?? [ 175.014876][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1946'. [ 175.039066][T12721] vhci_hcd: cannot find a urb of seqnum 239 max seqnum 1 [ 175.042790][ T1176] vhci_hcd: stop threads [ 175.044246][ T1176] vhci_hcd: release socket [ 175.049296][ T1176] vhci_hcd: disconnect device [ 175.063614][ T1461] usb 10-1: USB disconnect, device number 2 [ 175.083454][T12732] random: crng reseeded on system resumption [ 175.140281][ T39] audit: type=1400 audit(1732539747.320:908): avc: denied { map } for pid=12731 comm="syz.2.1948" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 175.716220][ T5963] Bluetooth: hci3: command tx timeout [ 175.723542][T12739] Bluetooth: hci4: Frame reassembly failed (-84) [ 175.727763][T12739] Bluetooth: hci4: Frame reassembly failed (-84) [ 175.730354][T12739] Bluetooth: hci4: Frame reassembly failed (-84) [ 175.732804][ T7227] Bluetooth: hci4: Frame reassembly failed (-84) [ 175.741554][T12739] Bluetooth: hci4: Frame reassembly failed (-84) [ 175.743179][ T7227] Bluetooth: hci4: Frame reassembly failed (-84) [ 175.745210][T12739] Bluetooth: hci4: Frame reassembly failed (-84) [ 175.747102][T12739] Bluetooth: hci4: Frame reassembly failed (-84) [ 176.640477][T12744] binder: 12743:12744 ioctl 894b 200001c0 returned -22 [ 176.816777][ T39] audit: type=1400 audit(1732539749.000:909): avc: denied { ioctl } for pid=12746 comm="syz.0.1953" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 176.859948][ T39] audit: type=1400 audit(1732539749.040:910): avc: denied { bind } for pid=12748 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.865793][ T39] audit: type=1400 audit(1732539749.040:911): avc: denied { execute } for pid=12748 comm="syz.0.1954" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 176.911237][T12754] program syz.0.1955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.112192][ T6365] bond0: (slave syz_tun): Releasing backup interface [ 177.427614][ T5962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.431543][ T5962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.437144][ T5962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.440431][ T5962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.443721][ T5962] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.446957][ T5962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.597251][T12779] chnl_net:caif_netlink_parms(): no params data found [ 177.678531][T12779] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.680505][T12779] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.682285][T12779] bridge_slave_0: entered allmulticast mode [ 177.684365][T12779] bridge_slave_0: entered promiscuous mode [ 177.688625][T12779] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.691106][T12779] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.693124][T12779] bridge_slave_1: entered allmulticast mode [ 177.695801][T12779] bridge_slave_1: entered promiscuous mode [ 177.721667][T12779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.728021][T12779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.763627][T12779] team0: Port device team_slave_0 added [ 177.769064][T12779] team0: Port device team_slave_1 added [ 177.793856][T12779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.794585][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 177.796562][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 177.798510][T12779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.814580][T12779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.819915][T12779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.822402][T12779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.831870][T12779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.873430][T12814] vxfs: WRONG superblock magic 00000000 at 1 [ 177.879278][T12814] vxfs: WRONG superblock magic 00000000 at 8 [ 177.880971][T12814] vxfs: can't find superblock. [ 177.886828][T12779] hsr_slave_0: entered promiscuous mode [ 177.889118][T12779] hsr_slave_1: entered promiscuous mode [ 177.894486][T12779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.896492][T12779] Cannot create hsr debugfs directory [ 177.972221][T12817] cgroup: No subsys list or none specified [ 177.973451][T12822] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1968'. [ 178.086338][T12779] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.090289][T12779] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.175524][T12779] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.178123][T12779] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.265681][T12779] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.268230][T12779] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.357495][T12779] bond0: (slave netdevsim0): Releasing backup interface [ 178.361114][T12779] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.363722][T12779] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.439443][T12856] veth0: entered promiscuous mode [ 178.459115][T12856] veth0: left promiscuous mode [ 178.528721][T12779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.537299][T12779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.548365][T12779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.551474][T12779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.596416][T12779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.605336][T12779] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.616903][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.618845][ T7229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.629922][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.631703][ T7229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.656652][T12779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.735318][T12883] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1980'. [ 178.737720][T12885] netlink: 'syz.2.1981': attribute type 4 has an invalid length. [ 178.742896][T12885] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 178.773630][T12779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.791248][T12779] veth0_vlan: entered promiscuous mode [ 178.795859][T12779] veth1_vlan: entered promiscuous mode [ 178.800046][T12885] bad cache= option: none [ 178.800046][T12885] [ 178.803020][T12885] CIFS: VFS: bad cache= option: none [ 178.814392][T12779] veth0_macvtap: entered promiscuous mode [ 178.817522][T12779] veth1_macvtap: entered promiscuous mode [ 178.826396][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.829758][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.832095][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.839174][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.841495][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.843962][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.848078][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 178.849362][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.853144][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.855133][T12891] fuse: Unknown parameter '' [ 178.856304][T12779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.861044][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.863975][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.866915][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.869454][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.871888][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.874513][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.876911][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.879384][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.881737][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.884268][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.887300][T12779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.901380][T12779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.903550][T12779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.906315][T12779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.908464][T12779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.951918][ T7234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.953880][ T7234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.966584][T12902] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1986'. [ 178.974400][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.976737][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.019286][T12916] devpts: called with bogus options [ 179.203974][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 179.203989][ T39] audit: type=1326 audit(1732539751.380:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.2.1989" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18d577e819 code=0x0 [ 179.284468][ T5951] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 179.332379][T12927] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.466747][ T5951] usb 10-1: config 0 has no interfaces? [ 179.468239][ T5951] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=64.46 [ 179.470609][ T5951] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.473663][ T5951] usb 10-1: config 0 descriptor?? [ 179.531774][T12932] ubi0: attaching mtd0 [ 179.536043][T12932] ubi0: scanning is finished [ 179.537291][T12932] ubi0: empty MTD device detected [ 179.603139][T12932] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 179.605221][T12932] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 179.606998][T12932] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 179.608763][T12932] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 179.610730][T12932] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 179.612490][T12932] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 179.615289][T12932] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1164013971 [ 179.617837][T12932] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 179.623840][T12935] ubi0: background thread "ubi_bgt0d" started, PID 12935 [ 179.660187][T12938] random: crng reseeded on system resumption [ 179.804618][ T58] vhci_hcd: vhci_device speed not set [ 179.888988][T12947] xt_limit: Overflow, try lower: 1207959552/384 [ 180.724594][ T25] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 180.895234][ T25] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.898250][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 180.901068][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.903878][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.907202][ T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.909461][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.912586][ T25] usb 7-1: config 0 descriptor?? [ 180.914335][T12978] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.082955][ T7234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.272456][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.281105][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.284220][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.289038][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.294614][ T5953] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 181.296622][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.319890][T12978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.322763][T12978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.336911][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.339109][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.340951][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.342832][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.344757][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.346645][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.348583][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.350455][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.352310][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.354130][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.356096][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.357957][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.360068][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.361849][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.363682][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 181.365789][ T25] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 181.369908][ T25] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 181.408999][T12981] chnl_net:caif_netlink_parms(): no params data found [ 181.467186][T12981] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.469024][T12981] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.470875][T12981] bridge_slave_0: entered allmulticast mode [ 181.472810][T12981] bridge_slave_0: entered promiscuous mode [ 181.475433][T12981] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.477240][T12981] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.479071][T12981] bridge_slave_1: entered allmulticast mode [ 181.481013][T12981] bridge_slave_1: entered promiscuous mode [ 181.502332][T12981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.505802][T12981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.530598][T12981] team0: Port device team_slave_0 added [ 181.535538][T12981] team0: Port device team_slave_1 added [ 181.545307][ T30] usb 7-1: USB disconnect, device number 23 [ 181.566165][T12981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.568601][T12981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.577050][T12981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.583369][T12981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.587856][T12981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.596321][T12981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.628458][T12981] hsr_slave_0: entered promiscuous mode [ 181.631041][T12981] hsr_slave_1: entered promiscuous mode [ 181.633404][T12981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.636375][T12981] Cannot create hsr debugfs directory [ 181.975488][ T9] usb 10-1: USB disconnect, device number 3 [ 182.007128][ T39] audit: type=1400 audit(1732539754.190:915): avc: denied { getopt } for pid=12991 comm="syz.5.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.103412][T13001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2009'. [ 182.112564][T13001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2009'. [ 182.135979][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2010'. [ 182.138964][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2010'. [ 182.141763][T13003] netlink: 'syz.5.2010': attribute type 18 has an invalid length. [ 182.204799][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.211648][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.214172][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.216741][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.218838][ T5953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 182.220741][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.250297][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2014'. [ 182.296511][ T39] audit: type=1400 audit(1732539754.480:916): avc: denied { transfer } for pid=13020 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 182.304693][ T39] audit: type=1400 audit(1732539754.480:917): avc: denied { getopt } for pid=13020 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.335047][T13007] chnl_net:caif_netlink_parms(): no params data found [ 182.393117][T13007] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.394176][ T39] audit: type=1400 audit(1732539754.570:918): avc: denied { bind } for pid=13027 comm="syz.5.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.395924][T13007] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.400043][ T39] audit: type=1400 audit(1732539754.570:919): avc: denied { listen } for pid=13027 comm="syz.5.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.402806][T13007] bridge_slave_0: entered allmulticast mode [ 182.410683][T13007] bridge_slave_0: entered promiscuous mode [ 182.415482][T13007] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.417320][T13007] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.419148][T13007] bridge_slave_1: entered allmulticast mode [ 182.421121][T13007] bridge_slave_1: entered promiscuous mode [ 182.448898][T13007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.453673][T13007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.509540][T13007] team0: Port device team_slave_0 added [ 182.515272][T13007] team0: Port device team_slave_1 added [ 182.535138][T13007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.536921][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.543275][T13007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.547145][T13035] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.547323][T13007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.550976][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.557537][T13007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.584898][T13007] hsr_slave_0: entered promiscuous mode [ 182.588293][T13007] hsr_slave_1: entered promiscuous mode [ 182.590180][T13007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.592191][T13007] Cannot create hsr debugfs directory [ 182.602940][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2019'. [ 182.652938][ T39] audit: type=1400 audit(1732539754.830:920): avc: denied { map } for pid=13040 comm="syz.5.2020" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.674475][ T39] audit: type=1400 audit(1732539754.830:921): avc: denied { execute } for pid=13040 comm="syz.5.2020" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.816152][ T7234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.898753][ T7234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.979674][ T7234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.090179][ T7234] bridge_slave_1: left allmulticast mode [ 183.091592][ T7234] bridge_slave_1: left promiscuous mode [ 183.093042][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.096990][ T7234] bridge_slave_0: left allmulticast mode [ 183.098441][ T7234] bridge_slave_0: left promiscuous mode [ 183.099980][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.212512][T13053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13053 comm=syz.2.2021 [ 183.216088][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 183.218278][T13053] netlink: 'syz.2.2021': attribute type 11 has an invalid length. [ 183.220285][T13053] netlink: 'syz.2.2021': attribute type 13 has an invalid length. [ 183.324933][ T5963] Bluetooth: hci2: command tx timeout [ 183.584865][ T7234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.589884][ T7234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.594141][ T7234] bond0 (unregistering): Released all slaves [ 184.139003][ T39] audit: type=1400 audit(1732539756.320:922): avc: denied { append } for pid=13087 comm="syz.5.2024" path="/47/file0/cgroup.kill" dev="9p" ino=37617945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 184.145716][ T39] audit: type=1400 audit(1732539756.330:923): avc: denied { map } for pid=13087 comm="syz.5.2024" path="/47/file0/cgroup.kill" dev="9p" ino=37617945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 184.170302][T13091] xt_recent: Unsupported userspace flags (00000076) [ 184.248546][ T7234] hsr_slave_0: left promiscuous mode [ 184.250718][ T7234] hsr_slave_1: left promiscuous mode [ 184.253002][ T7234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.260445][ T7234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.263555][ T7234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.265579][ T7234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.284802][ T5963] Bluetooth: hci0: command tx timeout [ 184.299202][ T7234] veth1_macvtap: left promiscuous mode [ 184.300706][ T7234] veth0_macvtap: left promiscuous mode [ 184.302168][ T7234] veth1_vlan: left promiscuous mode [ 184.303553][ T7234] veth0_vlan: left promiscuous mode [ 184.465995][ T30] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 184.547359][T13112] (syz.5.2028,13112,0):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 184.547378][ T39] audit: type=1400 audit(1732539756.730:924): avc: denied { create } for pid=13111 comm="syz.5.2028" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 184.590762][ T39] audit: type=1400 audit(1732539756.770:925): avc: denied { watch_reads } for pid=13111 comm="syz.5.2028" path="/" dev="ocfs2_dlmfs" ino=54595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.599505][ T39] audit: type=1400 audit(1732539756.770:926): avc: denied { getattr } for pid=13111 comm="syz.5.2028" name="/" dev="ocfs2_dlmfs" ino=54595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 184.624521][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 184.630047][ T30] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 184.632422][ T30] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 184.634598][ T30] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 184.637058][ T30] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 184.640093][ T30] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 184.643057][ T30] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 184.646231][ T30] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 184.649624][ T30] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 184.651986][ T30] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 184.654036][ T30] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 184.656975][ T30] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 184.660248][ T30] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 184.663262][ T30] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 184.667253][ T30] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 184.671531][ T30] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 184.674031][ T30] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 184.676559][ T30] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 184.679037][ T30] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 184.682095][ T30] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 184.685191][ T30] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 184.688139][ T30] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 184.692832][ T30] usb 7-1: string descriptor 0 read error: -22 [ 184.695188][ T30] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 184.697605][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.706381][ T30] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 185.113373][ T7234] team0 (unregistering): Port device team_slave_1 removed [ 185.202816][ T7234] team0 (unregistering): Port device team_slave_0 removed [ 185.404520][ T5963] Bluetooth: hci2: command tx timeout [ 185.812419][T13119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2027'. [ 185.818922][T12981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.828364][T12981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.833339][T12981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.840668][T12981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.878687][T13007] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.897214][T13007] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.908667][T13007] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.917342][T13007] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 186.003852][T12981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.027378][T12981] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.030987][T13007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.034282][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.036222][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.045100][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.046944][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.054055][T13007] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.062356][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.064254][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.070937][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.072794][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.102584][T12981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.122285][T13007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.125809][T12981] veth0_vlan: entered promiscuous mode [ 186.129656][T12981] veth1_vlan: entered promiscuous mode [ 186.138276][T12981] veth0_macvtap: entered promiscuous mode [ 186.142856][T12981] veth1_macvtap: entered promiscuous mode [ 186.149759][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.152537][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.155980][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.158691][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.161202][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.163880][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.166479][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.169158][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.172248][T12981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.175674][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.178399][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.181008][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.183709][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.186597][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.189419][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.191989][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.195630][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.198458][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.201338][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.204467][T12981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.204639][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 186.215197][T12981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.218022][T12981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.220636][T12981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.223286][T12981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.251029][T13007] veth0_vlan: entered promiscuous mode [ 186.258553][ T7227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.259370][T13007] veth1_vlan: entered promiscuous mode [ 186.260682][ T7227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.275527][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.277621][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.285662][T13007] veth0_macvtap: entered promiscuous mode [ 186.288745][T13007] veth1_macvtap: entered promiscuous mode [ 186.294682][T13007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.297408][T13007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.300197][T13007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.302907][T13007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.306152][T13007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.308860][T13007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.311447][T13007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.314138][T13007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.316720][T13007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.319402][T13007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.323664][T13007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.330931][T13007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.340486][T13007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.343044][T13007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.346427][T13007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.348969][T13007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.351650][T13007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.354127][T13007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.357068][ T5963] Bluetooth: hci0: command tx timeout [ 186.358529][T13007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.361047][T13007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.363722][T13007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.364511][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 186.366304][T13007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.368739][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.370299][T13007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.372787][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.378162][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.380820][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.382130][T13007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.384241][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.388991][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.400354][T13007] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.402907][T13007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.405683][T13007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.408088][T13007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.442906][ T7227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.445866][ T7227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.456844][ T7234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.458903][ T7234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 Connection to localhost closed by remote host. [ 186.589610][ C1] ================================================================== [ 186.591621][ C1] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0 [ 186.593610][ C1] Read of size 8 at addr ffff8880239be498 by task kworker/u32:2/45 [ 186.596123][ C1] [ 186.597459][ C1] CPU: 1 UID: 0 PID: 45 Comm: kworker/u32:2 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 186.600518][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.603245][ C1] Workqueue: bat_events batadv_nc_worker [ 186.604634][ C1] Call Trace: [ 186.605478][ C1] [ 186.606196][ C1] dump_stack_lvl+0x116/0x1f0 [ 186.607369][ C1] print_report+0xc3/0x620 [ 186.608493][ C1] ? __virt_addr_valid+0x5e/0x590 [ 186.609747][ C1] ? __phys_addr+0xc6/0x150 [ 186.610865][ C1] kasan_report+0xd9/0x110 [ 186.611954][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 186.613278][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 186.614582][ C1] selinux_ip_output+0x1e0/0x1f0 [ 186.615815][ C1] ? __pfx_selinux_ip_output+0x10/0x10 [ 186.617192][ C1] nf_hook_slow+0xbb/0x200 [ 186.618292][ C1] nf_hook+0x386/0x6d0 [ 186.619327][ C1] ? __pfx_dst_output+0x10/0x10 [ 186.620559][ C1] ? __pfx_nf_hook+0x10/0x10 [ 186.621733][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 186.623432][ C1] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 186.624867][ C1] ? __pfx_dst_output+0x10/0x10 [ 186.626059][ C1] ? __ip_make_skb+0x1150/0x1d00 [ 186.627284][ C1] ? do_csum+0x26f/0x2d0 [ 186.628367][ C1] __ip_local_out+0x339/0x640 [ 186.629524][ C1] ? __pfx_dst_output+0x10/0x10 [ 186.630708][ C1] ip_push_pending_frames+0xa0/0x5b0 [ 186.632045][ C1] ip_send_unicast_reply+0xd0e/0x1650 [ 186.633418][ C1] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 186.634861][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 186.636170][ C1] ? __pfx_mark_lock+0x10/0x10 [ 186.637403][ C1] ? find_held_lock+0x2d/0x110 [ 186.638601][ C1] ? tcp_v4_send_reset+0x1fe5/0x2f20 [ 186.639939][ C1] ? __pfx_lock_release+0x10/0x10 [ 186.641169][ C1] ? ktime_get+0x206/0x300 [ 186.642315][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 186.643824][ C1] tcp_v4_send_reset+0x129b/0x2f20 [ 186.645049][ C1] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 186.646372][ C1] ? __pfx_inet_ehashfn+0x10/0x10 [ 186.647614][ C1] ? hlock_class+0x4e/0x130 [ 186.648734][ C1] ? __lock_acquire+0xcc5/0x3c40 [ 186.649953][ C1] ? __inet_lookup_established+0x4bc/0x800 [ 186.651392][ C1] ? __pfx_tcp_timewait_state_process+0x10/0x10 [ 186.652958][ C1] ? __asan_memmove+0x3c/0x60 [ 186.654146][ C1] ? tcp_v4_rcv+0x371d/0x4390 [ 186.655323][ C1] tcp_v4_rcv+0x371d/0x4390 [ 186.656478][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 186.657716][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 186.659050][ C1] ? rcu_is_watching+0x12/0xc0 [ 186.660253][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 186.661444][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 186.662769][ C1] ip_local_deliver_finish+0x316/0x570 [ 186.664123][ C1] ip_local_deliver+0x18e/0x1f0 [ 186.665347][ C1] ip_sublist_rcv_finish+0x2c1/0x620 [ 186.666635][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 186.667947][ C1] ip_list_rcv_finish.constprop.0+0x559/0x720 [ 186.669439][ C1] ? __pfx_ip_list_rcv_finish.constprop.0+0x10/0x10 [ 186.671029][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 186.672296][ C1] ip_list_rcv+0x339/0x450 [ 186.673524][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 186.674738][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 186.676050][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 186.677352][ C1] __netif_receive_skb_list_core+0x755/0x950 [ 186.678913][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 186.680593][ C1] ? rcu_is_watching+0x12/0xc0 [ 186.681844][ C1] ? ktime_get_with_offset+0x273/0x3a0 [ 186.683397][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 186.684982][ C1] ? lock_acquire+0x2f/0xb0 [ 186.686360][ C1] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 186.687994][ C1] netif_receive_skb_list_internal+0x753/0xdb0 [ 186.689580][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 186.691295][ C1] ? e1000_alloc_rx_buffers+0x764/0xd30 [ 186.692785][ C1] ? napi_gro_receive+0x66a/0xc60 [ 186.694210][ C1] napi_complete_done+0x218/0x940 [ 186.695526][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 186.696969][ C1] e1000_clean+0xa28/0x2700 [ 186.698150][ C1] ? __pfx_mark_lock+0x10/0x10 [ 186.699396][ C1] ? __pfx_e1000_clean+0x10/0x10 [ 186.700823][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.702209][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 186.703596][ C1] ? process_backlog+0xd08/0x15f0 [ 186.704938][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 186.706389][ C1] net_rx_action+0xa94/0x1010 [ 186.707667][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 186.709024][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 186.710397][ C1] ? sched_clock+0x38/0x60 [ 186.711634][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 186.712953][ C1] ? mark_held_locks+0x9f/0xe0 [ 186.714230][ C1] handle_softirqs+0x213/0x8f0 [ 186.715523][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 186.716931][ C1] __irq_exit_rcu+0x109/0x170 [ 186.718144][ C1] irq_exit_rcu+0x9/0x30 [ 186.719220][ C1] common_interrupt+0xbf/0xe0 [ 186.720429][ C1] [ 186.721168][ C1] [ 186.721906][ C1] asm_common_interrupt+0x26/0x40 [ 186.723263][ C1] RIP: 0010:__rcu_read_lock+0xbe/0xf0 [ 186.724590][ C1] Code: 7e 48 8d bb 44 04 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1f 8b 83 44 04 00 00 <3d> ff ff ff 3f 7f 07 5b 5d c3 cc cc cc cc 90 0f 0b 90 5b 5d c3 cc [ 186.729566][ C1] RSP: 0018:ffffc900007d7b08 EFLAGS: 00000246 [ 186.731181][ C1] RAX: 0000000000000001 RBX: ffff88801fd82440 RCX: ffff88801bf406c0 [ 186.733272][ C1] RDX: 0000000000000000 RSI: ffffffff8af2369d RDI: ffff88801fd82884 [ 186.735395][ C1] RBP: ffff88801fd82440 R08: 0000000000000004 R09: 0000000000000080 [ 186.737500][ C1] R10: 0000000000000052 R11: 0000000000000002 R12: dffffc0000000000 [ 186.739594][ C1] R13: ffff88804db398a8 R14: 0000000000000052 R15: ffffffff8af22d50 [ 186.741675][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 186.743179][ C1] ? batadv_nc_process_nc_paths.part.0+0x9d/0x3e0 [ 186.744887][ C1] batadv_nc_process_nc_paths.part.0+0xc1/0x3e0 [ 186.746545][ C1] batadv_nc_worker+0xcc8/0x1060 [ 186.747872][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 186.749314][ C1] ? rcu_is_watching+0x12/0xc0 [ 186.750567][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 186.751876][ C1] ? process_one_work+0x921/0x1ba0 [ 186.753181][ C1] ? lock_acquire+0x2f/0xb0 [ 186.754330][ C1] ? process_one_work+0x921/0x1ba0 [ 186.755628][ C1] process_one_work+0x9c5/0x1ba0 [ 186.756940][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 186.758290][ C1] ? __pfx_process_one_work+0x10/0x10 [ 186.759670][ C1] ? rcu_is_watching+0x12/0xc0 [ 186.760908][ C1] ? assign_work+0x1a0/0x250 [ 186.762110][ C1] worker_thread+0x6c8/0xf00 [ 186.763576][ C1] ? __pfx_worker_thread+0x10/0x10 [ 186.764857][ C1] kthread+0x2c1/0x3a0 [ 186.765915][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.767279][ C1] ? __pfx_kthread+0x10/0x10 [ 186.768469][ C1] ret_from_fork+0x45/0x80 [ 186.769610][ C1] ? __pfx_kthread+0x10/0x10 [ 186.770791][ C1] ret_from_fork_asm+0x1a/0x30 [ 186.772012][ C1] [ 186.772826][ C1] [ 186.773457][ C1] The buggy address belongs to the object at ffff8880239be420 [ 186.773457][ C1] which belongs to the cache tw_sock_TCP of size 288 [ 186.776974][ C1] The buggy address is located 120 bytes inside of [ 186.776974][ C1] allocated 288-byte region [ffff8880239be420, ffff8880239be540) [ 186.780501][ C1] [ 186.781138][ C1] The buggy address belongs to the physical page: [ 186.782777][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x239be [ 186.784978][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 186.787104][ C1] memcg:ffff88804b287601 [ 186.788196][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 186.790063][ C1] page_type: f5(slab) [ 186.791075][ C1] raw: 00fff00000000040 ffff88810437c640 dead000000000122 0000000000000000 [ 186.793474][ C1] raw: 0000000000000000 0000000080170017 00000001f5000000 ffff88804b287601 [ 186.795655][ C1] head: 00fff00000000040 ffff88810437c640 dead000000000122 0000000000000000 [ 186.797842][ C1] head: 0000000000000000 0000000080170017 00000001f5000000 ffff88804b287601 [ 186.799971][ C1] head: 00fff00000000001 ffffea00008e6f81 ffffffffffffffff 0000000000000000 [ 186.802206][ C1] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 186.804584][ C1] page dumped because: kasan: bad access detected [ 186.806284][ C1] page_owner tracks the page as allocated [ 186.807787][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 45, tgid 45 (kworker/u32:2), ts 186588626106, free_ts 186574597214 [ 186.812757][ C1] post_alloc_hook+0x2d1/0x350 [ 186.814023][ C1] get_page_from_freelist+0xfce/0x2f80 [ 186.815479][ C1] __alloc_pages_noprof+0x223/0x25a0 [ 186.816868][ C1] alloc_pages_mpol_noprof+0x2c9/0x610 [ 186.818337][ C1] new_slab+0x2c9/0x410 [ 186.819461][ C1] ___slab_alloc+0xdac/0x1880 [ 186.820706][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 186.822118][ C1] kmem_cache_alloc_noprof+0x2a7/0x2f0 [ 186.823587][ C1] inet_twsk_alloc+0x120/0x970 [ 186.824884][ C1] tcp_time_wait+0x5f/0xe10 [ 186.826096][ C1] tcp_rcv_state_process+0x4935/0x4c40 [ 186.827557][ C1] tcp_v4_do_rcv+0x1ad/0xa90 [ 186.828787][ C1] tcp_v4_rcv+0x33a8/0x4390 [ 186.829990][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 186.831462][ C1] ip_local_deliver_finish+0x316/0x570 [ 186.832898][ C1] ip_local_deliver+0x18e/0x1f0 [ 186.834187][ C1] page last free pid 5366 tgid 5366 stack trace: [ 186.835877][ C1] free_unref_page+0x661/0x1080 [ 186.837187][ C1] qlist_free_all+0x4e/0x120 [ 186.838412][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 186.839859][ C1] __kasan_slab_alloc+0x69/0x90 [ 186.841154][ C1] kmem_cache_alloc_noprof+0x121/0x2f0 [ 186.842649][ C1] getname_flags.part.0+0x4c/0x550 [ 186.844007][ C1] getname+0x8d/0xe0 [ 186.845055][ C1] do_sys_openat2+0x104/0x1e0 [ 186.846310][ C1] __x64_sys_openat+0x175/0x210 [ 186.847623][ C1] do_syscall_64+0xcd/0x250 [ 186.848832][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.850415][ C1] [ 186.851055][ C1] Memory state around the buggy address: [ 186.852546][ C1] ffff8880239be380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.854658][ C1] ffff8880239be400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.856748][ C1] >ffff8880239be480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.858875][ C1] ^ [ 186.860190][ C1] ffff8880239be500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.862278][ C1] ffff8880239be580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.864388][ C1] ================================================================== [ 186.866552][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.867152][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 186.868244][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 186.868252][ C1] CPU: 1 UID: 0 PID: 45 Comm: kworker/u32:2 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 186.868264][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.868281][ C1] Workqueue: bat_events batadv_nc_worker [ 186.868299][ C1] Call Trace: [ 186.868302][ C1] [ 186.868308][ C1] dump_stack_lvl+0x3d/0x1f0 [ 186.868322][ C1] panic+0x71d/0x800 [ 186.868336][ C1] ? mark_held_locks+0x9f/0xe0 [ 186.868347][ C1] ? __pfx_panic+0x10/0x10 [ 186.868361][ C1] ? irqentry_exit+0x3b/0x90 [ 186.868372][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 186.868386][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 186.868396][ C1] check_panic_on_warn+0xab/0xb0 [ 186.868405][ C1] end_report+0x117/0x180 [ 186.868418][ C1] kasan_report+0xe9/0x110 [ 186.868429][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 186.868443][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 186.868455][ C1] selinux_ip_output+0x1e0/0x1f0 [ 186.868467][ C1] ? __pfx_selinux_ip_output+0x10/0x10 [ 186.868478][ C1] nf_hook_slow+0xbb/0x200 [ 186.868489][ C1] nf_hook+0x386/0x6d0 [ 186.868501][ C1] ? __pfx_dst_output+0x10/0x10 [ 186.868513][ C1] ? __pfx_nf_hook+0x10/0x10 [ 186.868523][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 186.868537][ C1] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 186.868548][ C1] ? __pfx_dst_output+0x10/0x10 [ 186.868559][ C1] ? __ip_make_skb+0x1150/0x1d00 [ 186.868571][ C1] ? do_csum+0x26f/0x2d0 [ 186.868583][ C1] __ip_local_out+0x339/0x640 [ 186.868594][ C1] ? __pfx_dst_output+0x10/0x10 [ 186.868606][ C1] ip_push_pending_frames+0xa0/0x5b0 [ 186.868619][ C1] ip_send_unicast_reply+0xd0e/0x1650 [ 186.868633][ C1] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 186.868645][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 186.868655][ C1] ? __pfx_mark_lock+0x10/0x10 [ 186.868666][ C1] ? find_held_lock+0x2d/0x110 [ 186.868680][ C1] ? tcp_v4_send_reset+0x1fe5/0x2f20 [ 186.868694][ C1] ? __pfx_lock_release+0x10/0x10 [ 186.868706][ C1] ? ktime_get+0x206/0x300 [ 186.868715][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 186.868726][ C1] tcp_v4_send_reset+0x129b/0x2f20 [ 186.868741][ C1] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 186.868753][ C1] ? __pfx_inet_ehashfn+0x10/0x10 [ 186.868766][ C1] ? hlock_class+0x4e/0x130 [ 186.868779][ C1] ? __lock_acquire+0xcc5/0x3c40 [ 186.868790][ C1] ? __inet_lookup_established+0x4bc/0x800 [ 186.868805][ C1] ? __pfx_tcp_timewait_state_process+0x10/0x10 [ 186.868820][ C1] ? __asan_memmove+0x3c/0x60 [ 186.868829][ C1] ? tcp_v4_rcv+0x371d/0x4390 [ 186.868842][ C1] tcp_v4_rcv+0x371d/0x4390 [ 186.868858][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 186.868872][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 186.868886][ C1] ? rcu_is_watching+0x12/0xc0 [ 186.868900][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 186.868914][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 186.868932][ C1] ip_local_deliver_finish+0x316/0x570 [ 186.868951][ C1] ip_local_deliver+0x18e/0x1f0 [ 186.868969][ C1] ip_sublist_rcv_finish+0x2c1/0x620 [ 186.868986][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 186.869004][ C1] ip_list_rcv_finish.constprop.0+0x559/0x720 [ 186.869025][ C1] ? __pfx_ip_list_rcv_finish.constprop.0+0x10/0x10 [ 186.869038][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 186.869049][ C1] ip_list_rcv+0x339/0x450 [ 186.869059][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 186.869068][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 186.869079][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 186.869088][ C1] __netif_receive_skb_list_core+0x755/0x950 [ 186.869104][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 186.869116][ C1] ? rcu_is_watching+0x12/0xc0 [ 186.869133][ C1] ? ktime_get_with_offset+0x273/0x3a0 [ 186.869143][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 186.869153][ C1] ? lock_acquire+0x2f/0xb0 [ 186.869163][ C1] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 186.869177][ C1] netif_receive_skb_list_internal+0x753/0xdb0 [ 186.869191][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 186.869204][ C1] ? e1000_alloc_rx_buffers+0x764/0xd30 [ 186.869216][ C1] ? napi_gro_receive+0x66a/0xc60 [ 186.869229][ C1] napi_complete_done+0x218/0x940 [ 186.869242][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 186.869256][ C1] e1000_clean+0xa28/0x2700 [ 186.869269][ C1] ? __pfx_mark_lock+0x10/0x10 [ 186.869279][ C1] ? __pfx_e1000_clean+0x10/0x10 [ 186.869289][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.869299][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 186.869307][ C1] ? process_backlog+0xd08/0x15f0 [ 186.869320][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 186.869333][ C1] net_rx_action+0xa94/0x1010 [ 186.869347][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 186.869359][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 186.869369][ C1] ? sched_clock+0x38/0x60 [ 186.869385][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 186.869397][ C1] ? mark_held_locks+0x9f/0xe0 [ 186.869408][ C1] handle_softirqs+0x213/0x8f0 [ 186.869421][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 186.869433][ C1] __irq_exit_rcu+0x109/0x170 [ 186.869444][ C1] irq_exit_rcu+0x9/0x30 [ 186.869455][ C1] common_interrupt+0xbf/0xe0 [ 186.869468][ C1] [ 186.869471][ C1] [ 186.869475][ C1] asm_common_interrupt+0x26/0x40 [ 186.869488][ C1] RIP: 0010:__rcu_read_lock+0xbe/0xf0 [ 186.869501][ C1] Code: 7e 48 8d bb 44 04 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1f 8b 83 44 04 00 00 <3d> ff ff ff 3f 7f 07 5b 5d c3 cc cc cc cc 90 0f 0b 90 5b 5d c3 cc [ 186.869511][ C1] RSP: 0018:ffffc900007d7b08 EFLAGS: 00000246 [ 186.869519][ C1] RAX: 0000000000000001 RBX: ffff88801fd82440 RCX: ffff88801bf406c0 [ 186.869526][ C1] RDX: 0000000000000000 RSI: ffffffff8af2369d RDI: ffff88801fd82884 [ 186.869532][ C1] RBP: ffff88801fd82440 R08: 0000000000000004 R09: 0000000000000080 [ 186.869538][ C1] R10: 0000000000000052 R11: 0000000000000002 R12: dffffc0000000000 [ 186.869544][ C1] R13: ffff88804db398a8 R14: 0000000000000052 R15: ffffffff8af22d50 [ 186.869550][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 186.869565][ C1] ? batadv_nc_process_nc_paths.part.0+0x9d/0x3e0 [ 186.869580][ C1] batadv_nc_process_nc_paths.part.0+0xc1/0x3e0 [ 186.869595][ C1] batadv_nc_worker+0xcc8/0x1060 [ 186.869609][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 186.869621][ C1] ? rcu_is_watching+0x12/0xc0 [ 186.869634][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 186.869647][ C1] ? process_one_work+0x921/0x1ba0 [ 186.869658][ C1] ? lock_acquire+0x2f/0xb0 [ 186.869667][ C1] ? process_one_work+0x921/0x1ba0 [ 186.869678][ C1] process_one_work+0x9c5/0x1ba0 [ 186.869690][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 187.038785][ C1] ? __pfx_process_one_work+0x10/0x10 [ 187.040178][ C1] ? rcu_is_watching+0x12/0xc0 [ 187.041422][ C1] ? assign_work+0x1a0/0x250 [ 187.042627][ C1] worker_thread+0x6c8/0xf00 [ 187.043839][ C1] ? __pfx_worker_thread+0x10/0x10 [ 187.045181][ C1] kthread+0x2c1/0x3a0 [ 187.046250][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 187.047604][ C1] ? __pfx_kthread+0x10/0x10 [ 187.048807][ C1] ret_from_fork+0x45/0x80 [ 187.049970][ C1] ? __pfx_kthread+0x10/0x10 [ 187.051191][ C1] ret_from_fork_asm+0x1a/0x30 [ 187.052443][ C1] [ 187.053670][ C1] Kernel Offset: disabled [ 187.054796][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:02:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a63fdc0 RCX=ffffffff8182cf64 RDX=ffff88801d688000 RSI=ffffffff8182cf3f RDI=0000000000000005 RBP=ffffc90000167d78 RSP=ffffc90000167ca0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c38d96 R12=1ffff9200002cf98 R13=0000000000000001 R14=0000000000000003 R15=ffffed100d4c7fb9 RIP=ffffffff8182cf41 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3ae4ed CR3=00000000486b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000007 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0064656e72757465 725f657269757163 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51e19f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51e19f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51e19f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51e19f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51e19f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51e19f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 201e8b0509100000 0000020505090000 0002001f8dcd0900 0103fe0300000409 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51e266d100 00007f51e1b0c440 00007f51e1b00004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51e1b0c498 00007f51e1b0c490 00007f51e1b0c488 00007f51e1b0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85105ca5 RDI=ffffffff9ab3ca20 RBP=ffffffff9ab3c9e0 RSP=ffffc900006af7e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000038 R14=ffffffff85105c40 R15=0000000000000000 RIP=ffffffff85105ccf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffdb8275ff0 CR3=0000000045526000 CR4=00352ef0 DR0=0000000100000001 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18d57f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18d57f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18d57f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18d57f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18d57f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18d57f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18d590c488 00007f18d590c480 00007f18d590c478 00007f18d590c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18d646d100 00007f18d590c440 00007f18d5900004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18d590c498 00007f18d590c490 00007f18d590c488 00007f18d590c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001d6545 RBX=0000000000000002 RCX=ffffffff8b2ecec9 RDX=0000000000000000 RSI=ffffffff8b6cdee0 RDI=ffffffff8bd1e140 RBP=ffffed1003ad4000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff90609650 R15=0000000000000000 RIP=ffffffff8b2ee2af RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562916c360f0 CR3=000000000df7e000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=94c2e8e394c2e8e3 94c2e8e394c2e8e3 94c2e8e394c2e8e3 94c2e8e394c2e8e3 94c2e8e394c2e8e3 94c2e8e394c2e8e3 94c2e8e394c2e8e3 94c2e8e394c2e8e3 ZMM22=d9cc16c8d9cc16c8 d9cc16c8d9cc16c8 d9cc16c8d9cc16c8 d9cc16c8d9cc16c8 d9cc16c8d9cc16c8 d9cc16c8d9cc16c8 d9cc16c8d9cc16c8 d9cc16c8d9cc16c8 ZMM23=24ca388c24ca388c 24ca388c24ca388c 24ca388c24ca388c 24ca388c24ca388c 24ca388c24ca388c 24ca388c24ca388c 24ca388c24ca388c 24ca388c24ca388c ZMM24=b97544aab97544aa b97544aab97544aa b97544aab97544aa b97544aab97544aa b97544aab97544aa b97544aab97544aa b97544aab97544aa b97544aab97544aa ZMM25=3f09de583f09de58 3f09de583f09de58 3f09de583f09de58 3f09de583f09de58 3f09de583f09de58 3f09de583f09de58 3f09de583f09de58 3f09de583f09de58 ZMM26=bfd67d63bfd67d63 bfd67d63bfd67d63 bfd67d63bfd67d63 bfd67d63bfd67d63 bfd67d63bfd67d63 bfd67d63bfd67d63 bfd67d63bfd67d63 bfd67d63bfd67d63 ZMM27=3294f1c53294f1c5 3294f1c53294f1c5 3294f1c53294f1c5 3294f1c53294f1c5 3294f1c53294f1c5 3294f1c53294f1c5 3294f1c53294f1c5 3294f1c53294f1c5 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8609000086090000 8609000086090000 8609000086090000 8609000086090000 8609000086090000 8609000086090000 8609000086090000 8609000086090000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffea0000dd0e00 RCX=ffffffff81dec00e RDX=ffff8880250d8000 RSI=ffffffff81dec026 RDI=0000000000000007 RBP=ffffea0000dd0e00 RSP=ffffc9000319f5f8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000003 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff818ebb11 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe9d0a67d60 CR3=000000000df7e000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080000010 Opmask01=0000000000001d1f Opmask02=00000000ff001fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006f20 74276e6163003a23 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002f6e69622f3a 6e776f6474756873 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0f0e0d0c0b0a 0908070605040302 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006f20 74276e6163003a23 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f766e6f63675f5f 0000000000000000 000000706d74752f 6e75722f7261762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706d742f73666d61 7220746f6e207369 206d657473797365 6c696620746f6f72 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00656c6966207261 6c75676572206120 746f6e2073692027 7325270074696e69 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000