last executing test programs: 4m59.612432462s ago: executing program 3 (id=200): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x8) getdents(r0, &(0x7f0000000040)=""/97, 0x61) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000180)={0x2, 0x10001, 0xaa, &(0x7f00000000c0)=""/170}) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f00000001c0)=0x5) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0xdddd1000, 0x3000, 0x1}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000280)={r1}) (async) r2 = socket(0x2b, 0x1, 0x0) setsockopt$inet_dccp_int(r2, 0x21, 0xa, &(0x7f00000002c0)=0x1, 0x4) (async) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x7, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000340)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000380)={r4, r4, 0x5, 0x2}) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) r5 = syz_open_dev$ndb(&(0x7f0000000400), 0x0, 0x10001) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000440)) (async) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) renameat2(r6, &(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x3) socketpair(0x18, 0x800, 0x768931d3, &(0x7f0000000540)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000580), 0x80c1, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f00000005c0)={0x44, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r8, 0x40106439, &(0x7f0000000600)={0x8, r9}) (async) syz_open_dev$media(&(0x7f0000000640), 0x5, 0x4040) (async) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000680)=0x2) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000880)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f0000000900)={&(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[{}], r10, 0x0, '\x00', 0x1, 0x1}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000f00)={0x0, 0x4, 0x0, &(0x7f0000000940)=[{}, {}, {0x80000000}, {}], 0x8, 0x0, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000e40)=[{}], 0x2, 0x0, &(0x7f0000000e80)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000f80)={r11}) ioctl$KVM_CAP_XEN_HVM(r6, 0x4068aea3, &(0x7f0000001080)={0x26, 0x0, 0x80}) 4m59.612278632s ago: executing program 3 (id=201): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x10bc, @local, 0xffff}}}, 0x90) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x13, 0x1, 0x2, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x50424752}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000080)={'vlan0\x00', @ifru_names='lo\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 4m59.545195624s ago: executing program 3 (id=203): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101200) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000001c0)={0x2, 0x6}) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000001c0)={0x2, 0x6}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) getrlimit(0x3, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001000000000000000000000018f19185e9d5e95fe76aba2bc282a73837f2018454f91b6107a7ae8dbdd576c80c788eef58cbab4dfdda480e63bbf296e97366975e757d4af03398b306b14492f9f29a9e21d31f6b15c891cad9b607d55f2ca76061864c7f3b2e58cdfb527c220899c0c15393d8a6aa5bb9c55f0cf1ae30684a92da84d64144145c7beb4c9a217c71824d0f518a2d9576520e35a6ddd2bc622336154f483a6c91274cd3aedd9e94b08b5c0cc7e5bdd231faf72d75555c8b733d178fee7d08bd58d90d315eaede43e5e26e5ff7898390b58046ada7e6aeba46677b93df9c7d56fea738b2d5f79300965bb60b84c2fe3e7a4a3d3772b3592eb36c467d5378fcbd66ab482f2c69f353712b36b707f372881e7d455c8d955b6225dd70376a3fb894fba7be8654fdfa37b10b1d905d834c23366b"], 0x38}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r9 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000440)=0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10, 0xfff2}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m59.193167448s ago: executing program 3 (id=209): chdir(&(0x7f0000000140)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x800c050}, 0x4000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x103140, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20000014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80700a, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000400), 0x10000, 0x0) 4m59.192702271s ago: executing program 3 (id=210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) semget(0x0, 0x1, 0x180) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2680, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0xfffffffc) close_range(r1, 0xffffffffffffffff, 0x2) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000004c0)={0x0, 0xff67, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20044090) 4m58.853302713s ago: executing program 3 (id=212): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x7000000) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)=0x9) fcntl$setpipe(r2, 0x407, 0x100000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfffc}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='binfmt_misc\x00', 0x201000, 0x0) 4m58.784210496s ago: executing program 32 (id=212): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x7000000) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)=0x9) fcntl$setpipe(r2, 0x407, 0x100000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfffc}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='binfmt_misc\x00', 0x201000, 0x0) 1m24.46799843s ago: executing program 4 (id=1853): r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0xa, 0x100) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd2(0x2, 0x80001) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000000)={0x2, r3}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="094fb143dacabf59d73c0cc3d555df24a81f0347ce624fc9792a71e2a49d9c9c916f9ca633448e08d325da339938ed8c1d9592b2c03d45319a177c350d830fa087392d562f65898bc0052140a8ff8d8a724009fef63a4982dcafed98133138c1b31c589ab4cb6b8993be58454b5ce1aa95d130eaa95e894d5789c33f0461117057adbebd36864c2267c4fc4e9614609dd029291281d8ce90973735fb9022762c22c8210524add6f1f6523f7bcd546e52f5f4d6748859e9e557ec3a82f8ca7ec0c72e9c", 0xc3}], 0x2}, 0x0) add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="5e720f15399bdb312175b37c8e78247dca306f5e5095f45c74d2f0835d5728496e49519740b57664bf6756", 0x2b, 0xfffffffffffffffc) 1m24.25810082s ago: executing program 4 (id=1859): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x4004550d, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) io_uring_setup(0x4c2d, &(0x7f0000000480)={0x0, 0x6e21, 0x8, 0x2, 0x2ec}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x3c, r6, 0x1, 0x0, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r7 = timerfd_create(0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0x7ffffffff7ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f0000000140)=0x7) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x1, 0x0, 0x7, 0x3439d9, 0x1b50a2}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x48814) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) 1m24.200898877s ago: executing program 4 (id=1861): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6}, 0x7c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x8) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1c, r3}, 0x10) (async) r4 = memfd_secret(0x0) (async) r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x91d9, 0x0, 0x0, 0x0, 0x400}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x10, 0xe9, &(0x7f0000000200)=""/233, 0x41000, 0x11, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xe, 0xb63}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x5, 0xe, 0x5}, {0x0, 0x3, 0x10, 0x6}, {0x5, 0x2, 0x4, 0xa}, {0x5, 0x1}, {0x4, 0x5, 0xc, 0x2}], 0x10, 0x3, @void, @value}, 0x94) (async) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640), 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) read$FUSE(r10, &(0x7f0000001400)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_FD={0x8, 0x1, r10}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}]}, 0x6c}}, 0x4000000) 1m24.151102818s ago: executing program 4 (id=1864): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'tunl0\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'tunl0\x00', @remote}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a0020002bbd7000fedbdf258080205dfe03fd0900020000"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0xffff, 0xc0, 0x1, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x1, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0xffff, 0xc0, 0x1, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x1, @void, @value, @void, @value}, 0x48) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x24000420) (async) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x24000420) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x40800) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) (async) setpgid(0x0, r5) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) (async) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) write$binfmt_elf32(r4, 0x0, 0x4cd) (async) write$binfmt_elf32(r4, 0x0, 0x4cd) fanotify_mark(r3, 0x261, 0x4800003e, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.current\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32=r6], 0x20}}, 0x40080c0) socket(0x1d, 0x2, 0x6) (async) r7 = socket(0x1d, 0x2, 0x6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(generic-gcm-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="ad56261a", 0x4) syz_emit_ethernet(0x121, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x26, 0x113, 0x67, 0x0, 0x40, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0x75, 0x1, 0x9}]}}, {0x14, 0x0, 0x0, @loopback, "26cf005eb7773e82c0926f5fe0b3a3870b4763a1ac1380e9ee907f8050d1d0e3e70698e8ba92ebbe3d1c527f990d6f367a04fb83b700c892e503c86c7e08a6aae5444122f6ef35fcbfc2b43e1c3635933a984fcb23c0fc7182f2542ca135c4330f3a6228954f48731ee4791ac48771345efc9471f0d2034e378ac075f603f1ba2be72428e9dbbb804305bcd5aff7e11782148a0dd12617100037f7c6824b5b641f26f7f269dc08b7d2f5296fd08190285510fe42b7ba94629615a0fe5489f27a645b2f9ec0f0a5723e777eda49751816f2c814f08ee1bc166d471bd9eba78921221a6f4875df3cecb67bc4930d6f80ddc190a4"}}}}}, 0x0) (async) syz_emit_ethernet(0x121, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x26, 0x113, 0x67, 0x0, 0x40, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0x75, 0x1, 0x9}]}}, {0x14, 0x0, 0x0, @loopback, "26cf005eb7773e82c0926f5fe0b3a3870b4763a1ac1380e9ee907f8050d1d0e3e70698e8ba92ebbe3d1c527f990d6f367a04fb83b700c892e503c86c7e08a6aae5444122f6ef35fcbfc2b43e1c3635933a984fcb23c0fc7182f2542ca135c4330f3a6228954f48731ee4791ac48771345efc9471f0d2034e378ac075f603f1ba2be72428e9dbbb804305bcd5aff7e11782148a0dd12617100037f7c6824b5b641f26f7f269dc08b7d2f5296fd08190285510fe42b7ba94629615a0fe5489f27a645b2f9ec0f0a5723e777eda49751816f2c814f08ee1bc166d471bd9eba78921221a6f4875df3cecb67bc4930d6f80ddc190a4"}}}}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r7, 0x6a, 0x3, 0x1ffffffe, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="180000007a000106000000000000000007e3"], 0x18}], 0x1}, 0x0) 1m24.071507485s ago: executing program 4 (id=1866): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003c000703fcffff324a0000de03"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0xc084) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000ea08010040"]) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000001600)=0x7fffffff) 1m23.720893601s ago: executing program 4 (id=1871): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="07000000000000000600e725f03eb7e71fe2"], 0x18}, 0x1, 0x0, 0x0, 0x48050}, 0x0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x15, 0xa, '/dev/vhost-vsock\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 1m23.680655629s ago: executing program 33 (id=1871): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="07000000000000000600e725f03eb7e71fe2"], 0x18}, 0x1, 0x0, 0x0, 0x48050}, 0x0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x15, 0xa, '/dev/vhost-vsock\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 3.751736541s ago: executing program 1 (id=2459): syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x65, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x0, 0x7fffffff}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000140)={0x400, 0x5, 0x2, 0x7fffffff, 0x3, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00000000000000", @ANYRES32=r0], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) 3.670664221s ago: executing program 1 (id=2460): r0 = fanotify_init(0x16, 0x0) r1 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x2) r2 = dup(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20002, 0x9f) fanotify_mark(r0, 0x2, 0x40000010, r2, 0x0) execveat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 3.670192284s ago: executing program 1 (id=2461): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) recvmsg$inet_nvme(r0, &(0x7f0000004c40)={0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000002680)=""/235, 0xeb}, {&(0x7f00000005c0)=""/16, 0x10}, {&(0x7f0000002780)=""/206, 0xce}, {&(0x7f0000002880)=""/141, 0x8d}, {&(0x7f0000002940)=""/139, 0x8b}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/206, 0xce}, {&(0x7f0000003b00)=""/120, 0x78}, {&(0x7f0000003b80)=""/4096, 0x1000}], 0x9}, 0x2020) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x6, 0x10, 0xfc3}}}}}, @NHA_BLACKHOLE={0x4}]}, 0x34}}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="0800755bf012f095fdcb5ad19539704aa0da91b6c8ae5dfdc47c794ce0dcbfbcabc40300000082656c057b19e2a149a7b4f4bab71c41bf6855cbcb989e657cdc3e3096fa75d6ff8de91b27722e983777b41aa70c7522bbd491508ce8e8f4c7317ec79a66353f93fd2ced31a0bf0cb4f6", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040009000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040840) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a5cfe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e4b2b9275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf138f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87acbeb48949b63b045313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65039cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x800}) r7 = fcntl$dupfd(r5, 0x406, r6) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0xa1024f99f359389e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendto(r7, &(0x7f0000000240)="db8f476211d6e67503736516bc996f32af5f017ea3836f03efd554dfed962ab8f05db91d844756361316e19e08ebfc0ec99de78789b94bef87647bd5ffe9e722caae4315d1b72465ae0ab215ee41d9934e2a687615808ee0924254945c2edef852092f303d786bc29c5e59854d3083c47bbb5d9c77754be195fc211330db10ef966bbf8ae3750a63d57935622f58276d0a68844dbc9fe01db573c1ec58388c5f38c26629fc34686b4122e4e00aee13444f82263bca588de44fad7e26bb8ed1d0996840c6ef6a3d33886f91741d3c7f38910e2fb06a4b66535f6b39989aa6", 0xde, 0x4084, &(0x7f0000000140)=@isdn={0x22, 0x8, 0x9, 0x9, 0x7}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r9, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xd, 0x0}}, 0x10) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 3.596582394s ago: executing program 1 (id=2462): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000040), 0x18) r3 = open(&(0x7f0000000080)='./file0\x00', 0x21a281, 0x0) write$bt_hci(r3, &(0x7f00000000c0)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc8}}}, 0x6) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz1\x00', {0x2, 0x37e, 0x8, 0x7}, 0x7, [0xf, 0x7, 0x8, 0x1, 0xca5, 0x1, 0x0, 0x194b, 0x7, 0x5, 0x9, 0x2, 0xfffeffff, 0x6, 0x800, 0x1, 0xdc, 0x9, 0x6, 0x3ff, 0x77b, 0x37b6, 0x8, 0x401, 0x6, 0x944f, 0x6, 0xfffffffc, 0x5, 0x8, 0x7, 0x8, 0x7, 0x2, 0x1, 0x8, 0x4, 0x8001, 0xfffffff9, 0x0, 0x5, 0x1, 0x8, 0x1, 0x6, 0x1, 0x7, 0x1, 0x4, 0x8, 0x80000001, 0x5, 0xb, 0x4d3a, 0x400, 0xd, 0x70000, 0xff, 0x0, 0x4, 0x4, 0x9, 0xf, 0xd90e], [0x8, 0x8, 0x8001, 0x80000001, 0x1, 0x0, 0x5, 0xeca, 0xed, 0x800, 0x6, 0x7, 0x7f, 0x2, 0x8, 0xfffffffc, 0x9, 0xa, 0x1, 0x8, 0x4, 0x7652, 0x9, 0x6, 0x8, 0x2, 0x8, 0x2da, 0x0, 0xfffffff8, 0x7, 0xea5, 0x9, 0x8001, 0x25ab, 0x981, 0x3, 0xf, 0xd, 0x6, 0x8, 0x8, 0xe6ad, 0x3, 0xfffffffa, 0x6, 0x9, 0x8, 0x7fff, 0x1, 0x1ff, 0x7fffffff, 0x597, 0x4, 0x1, 0x36f, 0xc1, 0xe, 0x100, 0x95b, 0x763d, 0x5, 0x7, 0xffffc80f], [0x2fcd53f, 0x5, 0x7fff, 0x4, 0x3, 0xc8, 0xffff0000, 0x8, 0x1, 0x7dc3, 0xb5e, 0x7, 0x2, 0x2, 0x9, 0x80000000, 0x400000, 0xfffffffd, 0x265, 0x7, 0x8, 0x5, 0x37b2, 0x7, 0x8b, 0xf, 0x1000, 0xe, 0x1000, 0x3, 0xfffffffb, 0x1, 0x84, 0x6, 0x8, 0x4, 0x100, 0x4, 0xd73, 0x6, 0x8, 0x5a0a, 0x401, 0x2, 0x4, 0x7fffffff, 0x4c, 0x3, 0xa6, 0x9, 0xfffffffa, 0xfffffffb, 0x2, 0x6, 0x5, 0x7ff, 0x7, 0x629, 0xb, 0x3, 0x40, 0x1, 0x8, 0x401], [0x8, 0x3, 0x2, 0x40000000, 0x8, 0x0, 0x8, 0xb0d0, 0xb86a, 0x40, 0xffffffff, 0xfffffffe, 0x3, 0x0, 0x2, 0x3, 0x2, 0x9f1, 0x7fff, 0x2, 0x7f, 0x1, 0x1, 0x4, 0x2, 0xfffffc00, 0xffffffff, 0x81, 0x1, 0x9, 0x1, 0xffffffff, 0x6, 0x9, 0xf8, 0x3, 0x3, 0x37, 0x4, 0x4, 0x4, 0x1, 0x1, 0x1, 0x1, 0x6, 0x7, 0x3, 0x739, 0x53, 0x0, 0x2, 0x101, 0x3, 0x4, 0xfffffffd, 0xfffffff9, 0x7, 0x2, 0x8000, 0x3, 0x6, 0xff, 0x80000000]}, 0x45c) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x101000, 0x12) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xf0d7bf1a32c5e467}, 0x40000) (async) r5 = accept4$alg(r3, 0x0, 0x0, 0x80800) sendto(r5, &(0x7f0000000700)="4a0d26112aca45228255541c7f873b861d5051f215ce846f0f5d1202336bc6e5aebc171814b2e98bd9cfcf1c3b552daf1964477a8f248b28485a9923657aba316cea38a63cedb0153d9cd0d382f95f29f7790af7fded695c55c7ff2b68207b15890b594752607ee1f618e6cbfea2d74b5cd8bd1145a9d6a7d55f00e2878c1666b352864877d27fa6fe6e5eb066c95f0059bcfc9242472b5f0db1b32245d9ff5dac477caebf0bef8427", 0xa9, 0x400c040, &(0x7f00000007c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80) (async) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000840)) (async) getpid() sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000c090) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6ce}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfef}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xc6b713f2ffd019b9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xfc}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x810) newfstatat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x2400) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c40)={'batadv_slave_0\x00', 0x0}) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x111, 0x111, 0x9, [@enum64={0x4, 0x7, 0x0, 0x13, 0x1, 0x8, [{0x7, 0x5, 0xe}, {0xa, 0x0, 0x6}, {0x8, 0xa95, 0x7}, {0x6, 0x4, 0x2}, {0x10, 0x200, 0x2}, {0x6, 0x4, 0x2}, {0x4, 0x7ff, 0x2e4}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0xa}, @datasec={0xd, 0xa, 0x0, 0xf, 0x1, [{0x1, 0x23e}, {0x3, 0xfffffff8, 0x4875}, {0x4, 0x0, 0x10001}, {0x4, 0x66bc, 0x5dfe}, {0x5, 0x0, 0x80}, {0x1, 0x4, 0x100}, {0x4, 0x6, 0x400}, {0x2, 0xc, 0xfffffff3}, {0x3, 0x7}, {0x3, 0x4, 0xdd1}], '8'}, @var={0x8, 0x0, 0x0, 0xe, 0x5, 0x1}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x61, 0x0, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000e40)=""/80, 0x135, 0x50, 0x1, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x9, 0x6cd6, 0xfffffffe, 0x8100, r2, 0x86a7, '\x00', r8, r6, 0x5, 0x1, 0x3, 0x1, @value=r9, @void, @void, @value}, 0x50) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001240)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000f40)={0x2b4, r7, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x2a0, 0x33, @probe_response={{{}, {0xc6a}, @device_b, @broadcast, @random="4f76c5caf671", {0x6, 0x10}}, 0x0, @default, 0x8001, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0xc, 0x1}, {0x6c, 0x1}, {0x0, 0x1}, {0x85, 0x1}, {0x18}, {0x16}, {0x24}]}, @val={0x3, 0x1, 0x64}, @void, @void, @void, @val={0x72, 0x6}, @void, [{0xdd, 0xc8, "a16bcace7f16fe13648d497bb1f6b6e1f44d8c3ba25f58195ceddd7ad2b82f9f82f04c1d64a359f98972149027de865a01e169fa620963edebdd5dde43eb9340fd5e7e4dafff0887914d55f159be86f815a4535d043fd09f58680845343fcc7fd636b23865c1bb8d9e90123413f343e48c6c7d7e346e80b534a8426cf40860fda65597a40e0cce838b3947a9f3396e96d9c9952409621abb1ef3a2c26af9ecf4271ff84f88203cb1c9d53875076e78a43f3cc5de0fe756941666cd62a1077b0b1e2e6faed97320a3"}, {0xdd, 0x2d, "62c777b7c0642b05eabc53828516b2f00bbf6251fba6e7930a12581cd9960e6bf9747412ff34884bf6f4df9552"}, {0xdd, 0x91, "6c8c6a0cb66a4f43327b5ef328e9046a54031df083cb6a74ae37f6abf3aec4769937a3373fadf92ecee6a5ba7809635f5a79193a3bfbda79787f03917811992457f78c21a6243744f0fcde177a25e6040d8e933762189d693b675fc9e9c2fe77335e285fcc85f0e2c7afe6189b80e3688e050d65a315bd9f95a0be982681003b60f2d7f3e78670d494c82bbdec039556ef"}, {0xdd, 0xce, "801b505bb713a0e077b89ed824b017a7dc5338715c05e91ff6c4ca976710ff2e315ee6a1b4be9bbc45e1077c10fbbb9840d4d0552b5b141cf2933fa167503da8e4c3187de673a46a91f827d9c9eb5382d52a6b35912490b548b96102b477607a9c1e8358639c36be0a324e665b2d105d36c253bf84238c6340a37289e5db483e9db0a5a4dfb43e8630fbb9b1b38f9fe91ad2e855ffc477414d7b7a49c32219099804221a43a9a347b21dd36937e1932f50384dac5610252c7ac446dfcd1870992a61cb78740c48dc23172c564912"}]}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4c805}, 0x4040041) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001280), 0xc4000, 0x0) sendmsg$nl_route(r10, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)=@ipv4_delrule={0x48, 0x21, 0x400, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x10, 0x3, 0x2, 0x0, 0x0, 0x7, 0x1}, [@FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_SRC={0x8, 0x2, @private=0xa010100}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1800000000}, @FRA_FLOW={0x8, 0xb, 0x7}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000) (async, rerun: 64) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000001400)="c67dddc088cdddabf49363d88444a035a6787fdc18b36b3725270379a5fef4d3ff70c52782815a670249f2444291a3defd5920f2eda4b2cd6153b74d48e0112ae18109d8e9b8d7548170a7c20ddb5a07ca71c9bbbdec88ef611e562c0de06716b5a63e8fce6e022d124ad3b048d506698005eb713d41ee5a420394ad636d455cb472095bc65c15d90c8094c206a6bfc50ea0aa5c12542e66f8262796", 0x9c) (rerun: 64) write$uinput_user_dev(r10, &(0x7f00000014c0)={'syz0\x00', {0x5, 0x8, 0x9, 0x5}, 0x2, [0x5, 0x2, 0x401, 0x40, 0x10001, 0x9, 0xfffffff7, 0x9, 0x1, 0x8, 0x7f, 0x5f7e, 0xae2, 0x0, 0x6, 0x0, 0x1, 0xfffffffa, 0x9, 0x8, 0x5, 0x7ff, 0x95ed, 0x3, 0x4, 0xa, 0x0, 0x0, 0x5, 0x0, 0x4, 0x8, 0x100000, 0x6, 0x6, 0x8000, 0x9, 0x7, 0x7, 0xfffffffc, 0xfffffffe, 0x1, 0x0, 0xd0, 0x0, 0xa74, 0x0, 0xcb, 0x6, 0x80000000, 0x2, 0x85b3, 0x0, 0x10001, 0xa5, 0x718, 0xba, 0x7, 0xff, 0x400, 0x8001, 0x9, 0x3, 0x5], [0x8, 0x6, 0x2, 0x9, 0x8, 0x3, 0x7, 0x10000, 0x7, 0x8, 0x3, 0x8001, 0x3, 0x200, 0x3, 0x9, 0x8af2, 0xd17, 0x9d2, 0x3, 0x2, 0xdf, 0x4, 0x2, 0xf5, 0x4, 0x1000, 0xb, 0xce2, 0x9, 0x2f44, 0x1, 0x7, 0x2, 0x80, 0x1, 0x6, 0x3ff, 0x4, 0x1, 0x8, 0x1, 0x5, 0xbde, 0x1, 0x0, 0x7f, 0x5, 0x8, 0x7, 0x5, 0x7f, 0x1, 0xfff, 0x2, 0x3, 0x4, 0x6, 0x0, 0x4, 0x3994d6a7, 0x2, 0x9, 0xc], [0x680, 0x90ac, 0x4, 0x4, 0x50f, 0x0, 0x0, 0xfffffffc, 0x40, 0x401, 0x9, 0x6, 0x617a, 0x2, 0x2, 0x5, 0x0, 0x80000000, 0x8, 0xe5, 0x4, 0x2c12, 0x10, 0x0, 0x10000, 0x1, 0x3, 0x0, 0x4, 0x0, 0x6, 0x5, 0x8, 0x7, 0x5, 0x7, 0x8, 0x8, 0x6, 0xb, 0x8, 0x1000, 0x2d, 0x721, 0xffff, 0x7f, 0x80, 0x1, 0xeb3, 0xffffffff, 0x0, 0xfffffffc, 0x5, 0x6, 0x0, 0x80000000, 0x1000, 0x8a4, 0x200, 0x7, 0x5, 0xfffffff7, 0x6, 0x10], [0x9fa, 0x4, 0x6, 0x2e297bbf, 0x80000001, 0xd5c2, 0xd, 0x0, 0x1000, 0x1, 0x8, 0x50e, 0x7f3b, 0x8, 0x9, 0x6, 0x1000, 0x5, 0x4a, 0x80, 0x7, 0x0, 0x401, 0x1, 0x40, 0x7fff, 0xa, 0x4, 0x1, 0x401, 0x0, 0x1, 0x1, 0x1, 0x3, 0x5, 0x8, 0x3, 0x9, 0x4, 0x2, 0x8, 0x6, 0x9, 0x4, 0x7, 0x3, 0x7, 0x6, 0xc, 0x2, 0x100, 0x3, 0x7, 0x7, 0x1000, 0x7e000000, 0x8, 0x36, 0x7, 0x7, 0x9, 0x4, 0x60]}, 0x45c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001940)={0xffffffffffffffff}) connect$tipc(r11, &(0x7f0000001980)=@id={0x1e, 0x3, 0x3, {0xb1}}, 0x10) 3.595732244s ago: executing program 1 (id=2464): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xa, 0xf}, {0x0, 0xc}, {0x9, 0x1}}}, 0x24}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff0000000000190000007f000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r4], 0x50) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000400)={0x3, 0x5, 0x6, 0x0, 0x0, [{{r3}, 0x4}, {{r3}, 0x3}, {{r0}, 0x7}, {{r2}, 0x2}, {{r2}, 0x87cc}, {{r4}, 0x200}]}) r5 = gettid() r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r7, 0xffffffffffffffff, 0x11, 0x0, r7, @void, @value}, 0x11) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r8, 0x0, &(0x7f0000000180)={{r9, r10+60000000}, {0x0, 0x989680}}, &(0x7f00000001c0)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) 3.510169815s ago: executing program 5 (id=2465): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000700)={'nr0\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "00da3a3172a741ae48be05fd2bb8758f8a03caa49321e88ea3df09da12284535", "82e301b7bd24f4553e5b99b869d14305852a489c5aa4dbe82e8b657c181d6408", "4d2587f7089c5f8fdf723088bb186ac19fcf89792ca1f8ffa646b0fe66f1cd61", "fddc3c8fd73a0df07e89183896f7f3b420f8a860181de90a1f6f03d0cbc4d4fa", "f3c0aaf63275ad5bfe68f01e95ef8a25e42f9c68313f37e47c2a291cd4ce2ac9", "0d229ffde30ff3444a744a40", 0x8, 0x4d710a76, 0x15, 0x10, 0x6}}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f00000005c0)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000010ac0544020000010002010902240001000000000904000000030002"], 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6fa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 2.899950723s ago: executing program 0 (id=2469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x60, r2, 0x110, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "6b3fe26e8b2973a89c89297f85b47ff2"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1ff}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x50}, @NL80211_ATTR_PMKID={0x14, 0x55, "368d8923042a037c95a3394a4dc70f3d"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x603, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2.830910764s ago: executing program 2 (id=2471): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000c40)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @map_val, @call, @exit, @tail_call]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f00000000c0)=0xb, 0x4) (async) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r5, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2.600164889s ago: executing program 1 (id=2472): socket$unix(0x1, 0x5, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0xb}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x29, 0x24, 0x0, &(0x7f0000000180)) accept(r0, 0x0, &(0x7f0000000040)) (async, rerun: 64) syz_usb_connect(0x1, 0x677, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x3e, 0x54, 0x91, 0xe7, 0x1410, 0x2420, 0xfa90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x665, 0x2, 0xd, 0x6, 0x10, 0xb, [{{0x9, 0x4, 0xae, 0x7, 0xa, 0xd0, 0x3d, 0x47, 0x1, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x5, 0xaf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xfff7}, @generic={0xa3, 0x11, "9245e8ceb7dc3fd71531b6707781eaf1969695c05e0e30763bbff75fddef48c9cace1334aeaa3650b7cf098fe9bcd11a82423a17e7ff3e62d1e666afae84450c3da6901c51650449798e9d873b3fba55b4e7272b9430a401405b46d5135f51944dbc20224c988bf6bfa624095fccaafe7f45843f9954e4cb887431edef4d3e5ad93c62fa0e85ec67943f8cd734994f6651be3f10123727a23d23223fd479bc271c"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x8, 0x3, 0x7, [@generic={0x96, 0xa, "c748c4a149d1a17a268593d8bed5d533980a65a405269653b62b48298cf2abe581780ed0a5385faeb29f429f0b4cedacb6829cc10ca81f93216044da05de93389a510514fe49fdb94afe8f10ddf03ab379a6f5922847a068d923cbe41b4976802d79a0d77b778c3f82989d2425e854b12c5f22791420c46598d6f422569f4a3d993ebe08cbc6c038c7c0730094ab7fc3aa48c91a"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x5, 0x7, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0xda, 0xe2, 0x5}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x8, 0xb6, 0xf8, [@generic={0x8c, 0xd, "a90f2900bd5c13456ec33015459b912d503bd78a020e41f70e9a0f904e9233ea2fa1557eef302a0d052a5a1564d203ac1019ebfd7c7f8202eb155af683c4a699cd044144e78019ba5f404c42bfcc20c4e68c67b8ecfc0232eebf4ca1e8536ac8383aafb8667d3c1e428caa44b7593b665d8a287e4e9163e289266c87512d5e2bdffadc125883ee70c4b3"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x20, 0x40, 0x6, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x61, 0x70}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0xfa, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x8, 0x3, 0x28}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x4, 0x81, 0x6c}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x6, 0xa, 0x9e, [@generic={0x92, 0x23, "46aef9ab7a1b915a9e123a00225ac4634c453ebbd8c108c338114368933856fbd875813a138a846d699587068e3e7fd4c107c4f3e4ab4ef770eece8d65e3aea7c810ed712bbdc529e09ebc38da1d91316e2e76d32309edef6bd4fe8efd739d5df34f57eceb5e2dedee70f532c03ba1d1fdf68030f3dd957c4727eca91695aa31540b6e101955392c826c3f7901cb7b42"}, @generic={0x57, 0x21, "967dd99e53b91bf8ab217c148c6327bd06861913cfece1f6dc49d5470c3a8dd10a5e625e55a7c8ce5c0ddebb9660339e17e69d102bd81db747e47ba87bffa134c923e8645a620b260b2547df366d5c7b3ab78e815f"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x1, 0x0, [@generic={0xdb, 0x10, "af1bb1bda56c12089d7f77e35c17544176df382712444c7c950ebbacf36a03d6fdc07239fa8abab45aa0931c84886d57e7b087bc6f1543767e8c57bd349b99acb77ff2d37ad8ae1ebc3ed4c0bc42211946485db482d6a41094d1c873e0b5b2c772909f890c94bdc7932e5dcc819d51c7558d2bea836ed8c366e1d140c4e78b027743e01471225d8fd5ad696d3a80bdb9fdefcc2d3719bab49345fc8560f73afbb45c9c7b08db3fbcd9cba8a96312b67aa19f491ebd9200e70235f7d4d0cf39e37786476c6b59f238065fc963d2a43fb049ca40425767bcbcaf"}]}}]}}, {{0x9, 0x4, 0x4c, 0x5b, 0x7, 0xd8, 0x9b, 0xfa, 0x52, [], [{{0x9, 0x5, 0xa, 0x8, 0x200, 0x9, 0x2, 0x8, [@generic={0x84, 0xc, "b2411e9ab778375a12122d3207391cb7ab504578f36f4328ed5469a59fe41e67585f8473fbac1479bdecd85a40602f5fabe89800d8a97bcd7a65cd3e6eaf243025e9875a8166ed9e9100db84b027cd673eb94c830f3c88bf3b9ad96152e16f8d9c713e46456fda58c49d8b4354c05bb544f8ffe9116c4c61c4d42198b0d2e9306432"}, @generic={0x2f, 0x24, "739b4f7937f319e12f4f5ec49a08f371108f34e1df09ba82dc0b371b26d873d93ae679ac28dbe42875f2497e45"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xbb, 0x2b}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x5, 0xc, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x5f, 0x2, 0x0, [@generic={0xe4, 0x23, "38b4133ee2e5df898ad16a4e0ff23fdb902fd225aa2406045915126c01a2ccef898a1594a8b5d5fc1730d444fe99c668e40073d5ee5e3fe2e38ef46d89046c15745cf2d9f29dac9f65cb91cf8cd2967be78e446428de30ffd56bc900fac97bece12114b0aba80b3c0168142c88ead9b98209bd325c89692237ad29b8c39fd7056767a10f84bae3ac2eb9cabdf2c32026387abea6398320d46bec9e784a703994e8a775c5a18f73a597ac49bdecdcd31bbf0a74dcace4d07da7ef15eb78432c059c5850a7a5b5fe6957f73645e1420ef3c1952ec45cef5e3ef30e37d66afcb2c28672"}, @generic={0x7c, 0xb, "4d332d82197a2ccd2cc98309ad33702f78bcc62cebc9e0f417147b240ea2e5e82bd004ea67b2d23790bf38921cdf125939b908b8638d549ec041c49f1e7a5224ec7bf0b96b605b41b7e21da152eaa05f7529d71f3fff86205a58079f1180007e456ca4e4167f43a6632bf5aa49fce5debe0013b4bfebe58d2d29"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x1, 0x6, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x2, 0x9, 0xae}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x0, 0x1, 0x46}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x9, 0x32, 0x80, 0x58, 0xb4}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1409}}, {0x66, &(0x7f0000000280)=@string={0x66, 0x3, "dc3bb2d035856a6c5f731268beece1480a09a6160a6aee9bb4d79c62725ceb359d6942a14415c681702a8a4f3457e54610d433d3ce4f2dcef35390501ab7b2d74d899490a497b56819e26310f2dbd0092ab5076b24a9463f576ebd493ffa9666cb967092"}}, {0x8f, &(0x7f0000000300)=@string={0x8f, 0x3, "1278a534d3c40966898b5f688b8055d8dd2ce64844fef57e45c5f5fcdcb22bd7ce8f16f834dca8de2c93d5d5b9ac45a0e30623b2f98a17d12ffe80aff66a57975caf513d0699477f26a15cef272fcb29b5663f23ba5b3fc274653b2ae627da841b36008011c0ee426f44870fe6d4849ff992c1697c5a227f269c441c3ce990296867f760e97285842281a7c6f5"}}]}) (rerun: 64) 2.59980347s ago: executing program 0 (id=2473): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) statx(r3, &(0x7f00000000c0)='.\x00', 0x0, 0x40, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000026c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@euid_lt={'euid<', r4}}, {@smackfsdef={'smackfsdef', 0x3d, '\\---'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfsroot={'smackfsroot', 0x3d, '#.+!@.{)#\"'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '&!'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r5, 0x75e7f000) read$FUSE(r5, &(0x7f0000000680)={0x2020}, 0x2020) write$UHID_CREATE2(r0, &(0x7f0000000340)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x5, 0x3, 0x0, 0xe, 0x3d, 0x2a, "4e1ad5b9d4"}}, 0x11d) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)={0xe, {0x5, 0x81, 0x4}}, 0xc) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0xec) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f0000000b00)=[{&(0x7f0000000a00)="00214717a707001d0000030640710a069d317ebbaaa6b6eb35cc265143ba2a639a6e65bb66e2355a0b7ea44042f16d393de8181e4f647b793fc59b2aab5c48e5cea25fba161c", 0x46}], 0x1, 0xc, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r7, 0x40096101, &(0x7f0000000800)={{}, 0xfe}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) 2.599531103s ago: executing program 0 (id=2474): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x3, 0x3) ptrace$getregs(0xc, r1, 0x4, &(0x7f0000000600)=""/113) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) syz_io_uring_setup(0xe8f, &(0x7f0000002680)={0x0, 0x1a0e, 0x4005, 0x3, 0x166}, 0x0, 0x0) 2.440253612s ago: executing program 0 (id=2475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.700703077s ago: executing program 2 (id=2476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, r2, {0x40}}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x136}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) 1.699630609s ago: executing program 2 (id=2477): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000004380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75855f69643d8a856f9504220e37924a3bfcc6f75c4530c1cd2eb0a0cae853d4d494df71be4c672e5d7bb3b3b778f0e8ec9fb0a0186cf604f51fdb8d54a7b9b530b022536cc2bb813c58237591329fd0a0b0b08ecb6f55d48b52feb2cd104a992d301c7898762bce56fac4a0bf7bd4941e6236abde26b3b322dbb6b769d398babbfa9351f46701d288d8832254857827334e3409abbab2b5ed2f4efb0b5e30aa4f", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f0000000080)='./file0\x00', 0x101280, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x10000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}}, 0x40) syz_fuse_handle_req(r0, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0x0, r4}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0xa, 0x0, {0x0, 0x6, 0x1, 0x40000000000, 0x4, 0x100000000004, 0xe767, 0x8, 0x10000, 0x8000, 0x0, r5, r2, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.630556459s ago: executing program 2 (id=2478): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x1000000) 1.080580582s ago: executing program 0 (id=2479): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="901a", 0x2}], 0x1, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="cd14", 0x2}, {0x0}], 0x2}, 0x40020000}, {{0x0, 0x0, 0x0}}], 0x5, 0x48890) 980.880783ms ago: executing program 0 (id=2480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='xfrm0\x00', 0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x29) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000080)=0x5, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1027, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 480.876084ms ago: executing program 5 (id=2481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000032580)=""/102393, &(0x7f0000000100)=0x18ff9) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, &(0x7f00000004c0)) (async) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, &(0x7f00000004c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4008090) 370.059005ms ago: executing program 5 (id=2482): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@acquire={0x178, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in=@empty, {@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private2}]}, @mark={0xc, 0x15, {0x0, 0x37}}]}, 0x178}}, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000)=0x401, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900010073797a31000000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) 299.405699ms ago: executing program 5 (id=2483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000131301000000000000000000000000002ed9f47c626e8c6cbaa3f31888872ffaf59a3ef2bb7a85c9b158f2180c39b08020a4825b612c28", @ANYRES32=0x0, @ANYBLOB="000000000000000008002500030000001400350064756d6d793000"/36], 0x3c}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000400), 0x7, 0x446021) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000440)) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000280)='pids.current\x00', 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xa000, 0x0, @private0}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x19}}, r4, 0x1}}, 0x48) (async) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000140)='system_u:object_r:tzdata_exec_t:s0\x00', 0xfffffffffffffc85) close(r5) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth0_macvtap\x00'}) (async) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 297.598384ms ago: executing program 5 (id=2484): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x20, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0x8}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x80800) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x40, 0x6, @remote}, 0x14) (async) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) (async) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xd1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0x8, 0x41, &(0x7f00000005c0)=""/65}, {0xffff1000, 0x94, &(0x7f0000000640)=""/148}]}) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x1, 0x400}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x4, 0xb000}}, @l2cap_info_req={{0xa, 0x3, 0x2}, {0xfff8}}]}}, 0x1f) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000017c0)={0xe, [], 0x6, "6e4782f1bf6f78"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0xa, 0x10001, 0xf781, 0x400, 0x7}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000afc0)={0x8, [], 0x2, "126ababb703c4b"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 296.844338ms ago: executing program 5 (id=2485): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x492903, 0x0) read$watch_queue(r4, &(0x7f0000000740)=""/245, 0xf5) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x78}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3ec, r5, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x200, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x4}, {0x1, 0x7}, {0x4, 0x4}, {0x6, 0x9}, {0x1}, {0x3, 0x5}, {0x5}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0xa}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x4, 0x4}, {0x6, 0x6}, {0x6, 0x2}, {0x2}, {0x7, 0xa}, {0x3, 0x9}, {0x4, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x6, 0x8}, {0x2, 0x3}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0x3}, {0x2, 0x1}, {0x6, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x1}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x8}, {0x1}, {0x5, 0x6}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x5}, {0x5, 0x1}, {0x4, 0x5}, {0x5, 0x9}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x4}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x400, 0xc95, 0x7, 0x9aa2, 0x9, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x9}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x4}, {0x6, 0x5}, {0x3, 0x4}, {0x5, 0x5}, {0x2, 0x9}, {0x0, 0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x7}, {0x5}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0x5}, {}, {0x7}, {0x6, 0x5}, {0x6}, {}, {0x3, 0x6}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0xa}, {0x4, 0x8}, {0x0, 0x7}, {0x7, 0x9}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x3, 0x3, 0x7, 0xa, 0x3ff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8000, 0x3, 0xc, 0x0, 0x8, 0x4, 0x1]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x53, 0x6, 0xffc0, 0x58, 0x9, 0x9495, 0xd0e4, 0x8001]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x3}, {0x0, 0x9}, {0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x0, 0x3}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x4}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x8}, {0x4, 0x9}, {}, {0x5, 0x5}, {0x1}, {0x0, 0x3}, {0x0, 0xa}, {0x2}, {0x4, 0x3}, {0x1, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x2}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0xa}, {0x5, 0xa}, {0x1, 0xa}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x2}, {0x4}, {0x1, 0x9}, {0x6, 0x9}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x6}, {0x3, 0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0x6}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0xa}, {0x7, 0x7}, {0x0, 0x3}, {0x2}, {0x0, 0x5}, {0x5, 0x8}, {0x7, 0x3}, {0x5, 0x6}, {0x2, 0xf}, {0x5, 0x6}, {0x1, 0x3}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x1}, {0x6, 0x4}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x6, 0x2, 0x60, 0x6c, 0x3, 0x6c, 0x18, 0x3, 0x4, 0x12, 0x48, 0x9, 0x24, 0x0, 0x39, 0x1b, 0x60, 0x6c, 0x2, 0x18, 0x2, 0xb, 0x5c, 0x12, 0x3, 0x4, 0x24, 0x24, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x401, 0x7, 0x9, 0xfff2, 0x9, 0xb, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xb89, 0x6, 0x9, 0x5, 0x6, 0x2, 0xfff8]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x84, 0x6b, 0x4, 0x5, 0x1cf, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0xf36, 0x4, 0xffff, 0x0, 0x976f, 0x224]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x2, 0xb0bf, 0x10, 0x400, 0x6, 0x7b6, 0x7ff]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x2, 0x2, 0x0, 0xbf9, 0x8, 0x9, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1ff, 0x1, 0x40, 0x9, 0x0, 0xf, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x60, 0xd, 0x1, 0xf1a, 0x4, 0x30ef]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x8, 0x3, 0xfff9, 0x6, 0x4aa, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xff, 0x400, 0x8, 0x401, 0x7, 0x0, 0x100]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x36, 0x47, 0x60, 0x6, 0x2, 0x60, 0x24, 0x6c, 0x1, 0x48]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0xc, 0xc6b50155d1cffac7]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x1, 0xb, 0x2, 0x30, 0xb34f2017b9c381a3, 0x18, 0x1, 0x5, 0x4, 0x2a, 0x6c, 0x16, 0x2, 0x48, 0x2a, 0x4, 0x1, 0x18, 0x36, 0x16, 0x4, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x7, 0x1, 0x7, 0x100, 0x3, 0x1]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xc763, 0x6, 0x80, 0x0, 0xf, 0x582, 0x4703]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x21, 0x4, 0x8, 0x3, 0x4, 0xff, 0x4, 0x61d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x596, 0x3f02, 0x1, 0x6, 0x8, 0x7fff, 0x3]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0x5}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x30, 0x18, 0x16, 0x3, 0x18, 0x18, 0x60, 0x2, 0x6c, 0xb, 0x24, 0x4, 0x5, 0x10, 0x2, 0x16, 0x9, 0x18, 0x6, 0x2, 0xc, 0x82, 0x6, 0x18, 0x36, 0x4, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x2, 0x24, 0x4, 0x2a, 0x1000, 0xa, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x8}, {0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x6, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x1, 0xa}]}]}]}]}, 0x3ec}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r5, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x390, 0x1d8, 0x0, 0x2a8, 0xf8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@mh={{0x28}, {"8aba"}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0x3}, {}, 0x203, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x89}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) rt_sigsuspend(&(0x7f0000000680)={[0x3]}, 0x8) 90.110825ms ago: executing program 2 (id=2486): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000f6c26beabf2d3131d2fcb5854c6db0d0feab48b3b163993cde0fa6b8da4ea4d1b310eea8ec42d217441553eb1403a9c01d14e67900b6a09b56edc11144967aa9858f0bb8f5c80d78c5658be9d3fddf8046954ea078c7a112d0f7f9231f25fdc647ca60d77c0d491ab9f1247c62311a6c025f59", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 0s ago: executing program 2 (id=2487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)={0x100000, 0x0, [0x4, 0x100, 0x57db, 0x800, 0x0, 0x0, 0x6, 0x98df]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0105b08, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7, 0x5, 0xff, 0x27, 0x7ff, 0x2, 0x10000, 0x2}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x7}, {0xd, 0xa}, {0x0, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x800) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 279.764889][ T3232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.913754][ T5943] Bluetooth: hci1: command tx timeout [ 279.975157][ T3232] usb 7-1: usb_control_msg returned -32 [ 279.976996][ T3232] usbtmc 7-1:16.0: can't read capabilities [ 281.983617][ T5943] Bluetooth: hci1: command tx timeout [ 282.193021][ T8152] usb 7-1: USB disconnect, device number 33 [ 284.063909][ T5943] Bluetooth: hci1: command tx timeout [ 286.291143][ T9026] team0 (unregistering): Port device team_slave_1 removed [ 287.141071][ T9026] team0 (unregistering): Port device team_slave_0 removed [ 293.146270][ T40] audit: type=1400 audit(1745075397.928:876): avc: denied { create } for pid=12588 comm="syz.1.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 293.169835][T12589] ALSA: seq fatal error: cannot create timer (-19) [ 293.179032][ T9013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.183185][ T9013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.221469][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.225449][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.237291][ T40] audit: type=1400 audit(1745075398.018:877): avc: denied { mounton } for pid=12402 comm="syz-executor" path="/syzkaller.Xfs45r/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 293.264443][ T5943] Bluetooth: hci2: unexpected event for opcode 0x0c24 [ 293.346473][ T40] audit: type=1400 audit(1745075398.128:878): avc: denied { shutdown } for pid=12605 comm="syz.5.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 293.353194][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1872'. [ 293.360517][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1872'. [ 293.438876][ T6804] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 293.603615][ T6804] usb 5-1: Using ep0 maxpacket: 16 [ 293.606494][ T6804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.610833][ T6804] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 293.614777][ T6804] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 293.617324][ T6804] usb 5-1: Manufacturer: syz [ 293.618800][ T6804] usb 5-1: SerialNumber: syz [ 293.621972][ T6804] usb 5-1: config 0 descriptor?? [ 293.626829][ T6804] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input94 [ 293.657329][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1921'. [ 293.827333][T12586] input: syz0 as /devices/virtual/input/input95 [ 293.898877][T12678] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 293.901742][T12678] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 293.958714][T12682] input: syz0 as /devices/virtual/input/input96 [ 294.016699][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 294.029360][T12686] netlink: 'syz.2.1935': attribute type 5 has an invalid length. [ 294.123426][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1936'. [ 294.127803][T12689] netlink: 'syz.2.1936': attribute type 2 has an invalid length. [ 294.130210][T12689] netlink: 'syz.2.1936': attribute type 11 has an invalid length. [ 294.132552][T12689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1936'. [ 294.756418][ T9024] Bluetooth: hci4: Frame reassembly failed (-84) [ 295.157155][T12712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12712 comm=syz.2.1942 [ 296.204659][ T5340] bcm5974 5-1:0.0: could not read from device [ 296.267650][ T6804] usb 5-1: USB disconnect, device number 25 [ 296.308140][T12730] netlink: 'syz.2.1948': attribute type 1 has an invalid length. [ 296.421075][ T40] audit: type=1400 audit(1745075401.198:879): avc: denied { setopt } for pid=12734 comm="syz.0.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 296.500533][T12738] kvm: Disabled LAPIC found during irq injection [ 296.643143][T12746] rtc_cmos 00:05: Alarms can be up to one day in the future [ 296.646253][T12746] fuse: Bad value for 'fd' [ 296.646377][T12747] fuse: Bad value for 'fd' [ 296.709430][T12749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1955'. [ 296.783732][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 296.783743][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 296.809058][T12755] block device autoloading is deprecated and will be removed. [ 296.815045][T12755] syz.2.1957: attempt to access beyond end of device [ 296.815045][T12755] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 296.824599][ T57] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 296.897173][ T40] audit: type=1400 audit(1745075401.678:880): avc: denied { write } for pid=12763 comm="syz.2.1960" path="socket:[45938]" dev="sockfs" ino=45938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 296.974087][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 296.977659][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.986703][ T57] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 296.990256][ T57] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 296.993059][ T57] usb 5-1: Manufacturer: syz [ 297.007803][ T57] usb 5-1: SerialNumber: syz [ 297.014587][ T57] usb 5-1: config 0 descriptor?? [ 297.021960][ T57] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input97 [ 297.037071][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 297.121627][T12794] tipc: Started in network mode [ 297.123249][T12794] tipc: Node identity 9e4db4d78ab, cluster identity 4711 [ 297.125936][T12794] tipc: Enabled bearer , priority 0 [ 297.128903][T12792] tipc: Enabling of bearer rejected, already enabled [ 297.133568][T12792] syzkaller0: MTU too low for tipc bearer [ 297.135377][T12792] tipc: Disabling bearer [ 297.219262][T12742] input: syz0 as /devices/virtual/input/input98 [ 297.333253][T12804] input: syz0 as /devices/virtual/input/input99 [ 297.402654][T12807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1972'. [ 298.013823][T12825] i2c i2c-1: Invalid block write size 34 [ 298.239739][T12844] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1982'. [ 298.320644][ T40] audit: type=1400 audit(1745075403.088:881): avc: denied { read } for pid=12862 comm="syz.5.1987" name="/" dev="configfs" ino=3079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 298.354361][ T40] audit: type=1400 audit(1745075403.088:882): avc: denied { open } for pid=12862 comm="syz.5.1987" path="/" dev="configfs" ino=3079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 298.377282][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1990'. [ 298.380292][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 298.563654][T12882] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 298.607179][T12895] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 298.660148][ T40] audit: type=1400 audit(1745075403.438:883): avc: denied { getopt } for pid=12894 comm="syz.2.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 298.789544][ T40] audit: type=1400 audit(1745075403.568:884): avc: denied { audit_write } for pid=12917 comm="syz.2.2004" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 298.895427][T12930] netlink: 'syz.2.2009': attribute type 142 has an invalid length. [ 298.901990][T12930] bridge2: entered promiscuous mode [ 299.193670][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 299.343752][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 299.347698][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.350790][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 299.353953][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 299.357007][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.361047][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.363990][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.569312][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 299.571112][ T9] usbtmc 7-1:16.0: can't read capabilities [ 299.581454][ T1328] usb 7-1: USB disconnect, device number 34 [ 299.647521][ T5340] bcm5974 5-1:0.0: could not read from device [ 299.704340][ T57] usb 5-1: USB disconnect, device number 26 [ 299.824468][T12968] netlink: 'syz.1.2021': attribute type 1 has an invalid length. [ 299.827591][T12968] netlink: 'syz.1.2021': attribute type 2 has an invalid length. [ 299.831311][T12968] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.2021'. [ 299.837569][T12971] nilfs2: Unknown parameter 'discardmx' [ 300.093335][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2025'. [ 300.100942][T12981] ipip0: entered promiscuous mode [ 300.183604][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 300.333590][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 300.336556][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.340873][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 300.343732][ T9] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 300.346502][ T9] usb 7-1: Manufacturer: syz [ 300.347954][ T9] usb 7-1: SerialNumber: syz [ 300.350675][ T9] usb 7-1: config 0 descriptor?? [ 300.356267][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input100 [ 300.482235][T13000] fuse: Bad value for 'fd' [ 300.484048][T13000] fuse: Bad value for 'fd' [ 300.485993][T13000] fuse: Bad value for 'fd' [ 300.487638][T13000] fuse: Bad value for 'fd' [ 300.489223][T13000] fuse: Bad value for 'fd' [ 300.538328][T13008] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 300.556210][T12973] input: syz0 as /devices/virtual/input/input101 [ 300.684457][T13029] overlayfs: missing 'lowerdir' [ 300.864660][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 300.867073][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 300.906496][ T40] audit: type=1400 audit(1745075405.688:885): avc: denied { bind } for pid=13048 comm="syz.5.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 301.048706][ T40] audit: type=1400 audit(1745075405.828:886): avc: denied { nlmsg_read } for pid=13059 comm="syz.1.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 301.131121][T13064] input: syz0 as /devices/virtual/input/input103 [ 301.638993][T13082] netlink: 'syz.0.2059': attribute type 25 has an invalid length. [ 301.814068][ T40] audit: type=1400 audit(1745075406.598:887): avc: denied { getopt } for pid=13089 comm="syz.0.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 301.820227][ T40] audit: type=1400 audit(1745075406.598:888): avc: denied { write } for pid=13089 comm="syz.0.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 301.920607][ T40] audit: type=1400 audit(1745075406.698:889): avc: denied { watch } for pid=13104 comm="syz.0.2068" path="/570/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 301.977718][ T40] audit: type=1400 audit(1745075406.758:890): avc: denied { write } for pid=13106 comm="syz.5.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 302.018951][T13105] ubi31: attaching mtd0 [ 302.021894][T13105] ubi31: scanning is finished [ 302.023574][T13105] ubi31: empty MTD device detected [ 302.049695][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2071'. [ 302.056564][T13116] syzkaller1: entered promiscuous mode [ 302.058618][T13116] syzkaller1: entered allmulticast mode [ 302.124295][T13105] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 302.127295][T13105] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 302.129972][T13105] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 302.132137][T13105] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 302.134501][T13105] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 302.136793][T13105] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 302.139481][T13105] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2151034574 [ 302.143147][T13105] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 302.147187][T13117] ubi31: background thread "ubi_bgt31d" started, PID 13117 [ 302.417387][T13129] IPVS: set_ctl: invalid protocol: 23 255.255.255.255:20003 [ 302.637995][T13139] FAULT_INJECTION: forcing a failure. [ 302.637995][T13139] name failslab, interval 1, probability 0, space 0, times 0 [ 302.642340][T13139] CPU: 3 UID: 0 PID: 13139 Comm: syz.1.2079 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 302.642356][T13139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.642362][T13139] Call Trace: [ 302.642366][T13139] [ 302.642370][T13139] dump_stack_lvl+0x16c/0x1f0 [ 302.642399][T13139] should_fail_ex+0x512/0x640 [ 302.642415][T13139] ? fs_reclaim_acquire+0xae/0x150 [ 302.642429][T13139] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 302.642444][T13139] should_failslab+0xc2/0x120 [ 302.642456][T13139] __kmalloc_noprof+0xd2/0x510 [ 302.642464][T13139] ? kernel_text_address+0x8d/0x100 [ 302.642480][T13139] tomoyo_realpath_from_path+0xc2/0x6e0 [ 302.642495][T13139] ? tomoyo_profile+0x47/0x60 [ 302.642506][T13139] tomoyo_path_number_perm+0x245/0x580 [ 302.642517][T13139] ? tomoyo_path_number_perm+0x237/0x580 [ 302.642530][T13139] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 302.642543][T13139] ? __pfx__kstrtoull+0x10/0x10 [ 302.642560][T13139] ? find_held_lock+0x2b/0x80 [ 302.642584][T13139] ? from_kuid+0x8d/0xd0 [ 302.642594][T13139] ? __pfx_from_kuid+0x10/0x10 [ 302.642607][T13139] tomoyo_path_chown+0x173/0x1b0 [ 302.642616][T13139] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 302.642626][T13139] ? from_vfsuid+0xea/0x140 [ 302.642639][T13139] ? __pfx_from_vfsuid+0x10/0x10 [ 302.642650][T13139] ? __lock_acquire+0x5ca/0x1ba0 [ 302.642660][T13139] security_path_chown+0x12a/0x2e0 [ 302.642674][T13139] chown_common+0x3bb/0x670 [ 302.642702][T13139] ? __pfx_chown_common+0x10/0x10 [ 302.642722][T13139] ksys_fchown+0x11f/0x170 [ 302.642734][T13139] __x64_sys_fchown+0x72/0xb0 [ 302.642745][T13139] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.642757][T13139] do_syscall_64+0xcd/0x260 [ 302.642772][T13139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.642782][T13139] RIP: 0033:0x7ff3c478e169 [ 302.642790][T13139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.642800][T13139] RSP: 002b:00007ff3c5546038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 302.642810][T13139] RAX: ffffffffffffffda RBX: 00007ff3c49b5fa0 RCX: 00007ff3c478e169 [ 302.642816][T13139] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000003 [ 302.642821][T13139] RBP: 00007ff3c5546090 R08: 0000000000000000 R09: 0000000000000000 [ 302.642827][T13139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.642832][T13139] R13: 0000000000000000 R14: 00007ff3c49b5fa0 R15: 00007ffd781b1088 [ 302.642846][T13139] [ 302.642890][T13139] ERROR: Out of memory at tomoyo_realpath_from_path. [ 302.962278][T13155] xt_cgroup: invalid path, errno=-2 [ 302.975713][ T5340] bcm5974 7-1:0.0: could not read from device [ 302.999847][T13161] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 303.024746][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2083'. [ 303.032901][ T9] usb 7-1: USB disconnect, device number 35 [ 303.091097][T13174] Bluetooth: hci0: load_link_keys: too big key_count value 16419 [ 303.728741][T13184] FAULT_INJECTION: forcing a failure. [ 303.728741][T13184] name failslab, interval 1, probability 0, space 0, times 0 [ 303.734032][T13184] CPU: 1 UID: 0 PID: 13184 Comm: syz.0.2090 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 303.734059][T13184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 303.734070][T13184] Call Trace: [ 303.734075][T13184] [ 303.734082][T13184] dump_stack_lvl+0x16c/0x1f0 [ 303.734108][T13184] should_fail_ex+0x512/0x640 [ 303.734125][T13184] ? fs_reclaim_acquire+0xae/0x150 [ 303.734149][T13184] ? tomoyo_encode2+0x100/0x3e0 [ 303.734171][T13184] should_failslab+0xc2/0x120 [ 303.734190][T13184] __kmalloc_noprof+0xd2/0x510 [ 303.734206][T13184] ? d_absolute_path+0x136/0x1a0 [ 303.734231][T13184] tomoyo_encode2+0x100/0x3e0 [ 303.734258][T13184] tomoyo_encode+0x29/0x50 [ 303.734280][T13184] tomoyo_realpath_from_path+0x18f/0x6e0 [ 303.734309][T13184] tomoyo_path_number_perm+0x245/0x580 [ 303.734328][T13184] ? tomoyo_path_number_perm+0x237/0x580 [ 303.734350][T13184] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 303.734370][T13184] ? __pfx__kstrtoull+0x10/0x10 [ 303.734399][T13184] ? find_held_lock+0x2b/0x80 [ 303.734443][T13184] ? from_kuid+0x8d/0xd0 [ 303.734460][T13184] ? __pfx_from_kuid+0x10/0x10 [ 303.734483][T13184] tomoyo_path_chown+0x173/0x1b0 [ 303.734500][T13184] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 303.734518][T13184] ? from_vfsuid+0xea/0x140 [ 303.734538][T13184] ? __pfx_from_vfsuid+0x10/0x10 [ 303.734555][T13184] ? __lock_acquire+0x5ca/0x1ba0 [ 303.734572][T13184] security_path_chown+0x12a/0x2e0 [ 303.734595][T13184] chown_common+0x3bb/0x670 [ 303.734619][T13184] ? __pfx_chown_common+0x10/0x10 [ 303.734655][T13184] ksys_fchown+0x11f/0x170 [ 303.734676][T13184] __x64_sys_fchown+0x72/0xb0 [ 303.734694][T13184] ? lockdep_hardirqs_on+0x7c/0x110 [ 303.734716][T13184] do_syscall_64+0xcd/0x260 [ 303.734740][T13184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.734756][T13184] RIP: 0033:0x7f55c858e169 [ 303.734769][T13184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.734784][T13184] RSP: 002b:00007f55c943f038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 303.734799][T13184] RAX: ffffffffffffffda RBX: 00007f55c87b5fa0 RCX: 00007f55c858e169 [ 303.734810][T13184] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000003 [ 303.734819][T13184] RBP: 00007f55c943f090 R08: 0000000000000000 R09: 0000000000000000 [ 303.734828][T13184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.734838][T13184] R13: 0000000000000000 R14: 00007f55c87b5fa0 R15: 00007ffd455f4378 [ 303.734861][T13184] [ 303.735416][T13184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 303.974630][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2096'. [ 304.018066][T13211] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2097'. [ 304.223761][ T1328] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 304.266610][T13223] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2100'. [ 304.373794][ T1328] usb 5-1: Using ep0 maxpacket: 16 [ 304.377590][ T1328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.383208][ T1328] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 304.388114][ T1328] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 304.391729][ T1328] usb 5-1: Manufacturer: syz [ 304.396238][ T1328] usb 5-1: SerialNumber: syz [ 304.400856][ T1328] usb 5-1: config 0 descriptor?? [ 304.414257][ T1328] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input104 [ 304.512815][T13234] xt_hashlimit: size too large, truncated to 1048576 [ 304.609322][T13193] input: syz0 as /devices/virtual/input/input105 [ 305.013641][ T34] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 305.087079][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 305.087090][ T40] audit: type=1400 audit(1745075409.868:897): avc: denied { setcheckreqprot } for pid=13259 comm="syz.5.2105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 305.095576][T13260] SELinux: syz.5.2105 (13260) set checkreqprot to 1. This is no longer supported. [ 305.113217][ T40] audit: type=1800 audit(1745075409.888:898): pid=13257 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2104" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 305.173686][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 305.178215][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 305.180906][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 305.184333][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 305.187427][ T34] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.190789][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.195916][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 305.198775][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.211483][ T34] usbtmc 6-1:16.0: bulk endpoints not found [ 305.361350][T13279] FAULT_INJECTION: forcing a failure. [ 305.361350][T13279] name failslab, interval 1, probability 0, space 0, times 0 [ 305.366597][T13279] CPU: 3 UID: 0 PID: 13279 Comm: syz.5.2109 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 305.366612][T13279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.366618][T13279] Call Trace: [ 305.366621][T13279] [ 305.366625][T13279] dump_stack_lvl+0x16c/0x1f0 [ 305.366664][T13279] should_fail_ex+0x512/0x640 [ 305.366679][T13279] ? fs_reclaim_acquire+0xae/0x150 [ 305.366694][T13279] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 305.366709][T13279] should_failslab+0xc2/0x120 [ 305.366721][T13279] __kmalloc_noprof+0xd2/0x510 [ 305.366734][T13279] tomoyo_realpath_from_path+0xc2/0x6e0 [ 305.366749][T13279] ? tomoyo_profile+0x47/0x60 [ 305.366760][T13279] tomoyo_path_number_perm+0x245/0x580 [ 305.366772][T13279] ? tomoyo_path_number_perm+0x237/0x580 [ 305.366785][T13279] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 305.366798][T13279] ? __pfx__kstrtoull+0x10/0x10 [ 305.366814][T13279] ? find_held_lock+0x2b/0x80 [ 305.366838][T13279] ? from_kgid+0x8f/0xd0 [ 305.366850][T13279] ? __pfx_from_kgid+0x10/0x10 [ 305.366863][T13279] tomoyo_path_chown+0x14b/0x1b0 [ 305.366872][T13279] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 305.366882][T13279] ? from_vfsuid+0xea/0x140 [ 305.366895][T13279] ? __pfx_from_vfsuid+0x10/0x10 [ 305.366906][T13279] ? __lock_acquire+0x5ca/0x1ba0 [ 305.366916][T13279] security_path_chown+0x12a/0x2e0 [ 305.366930][T13279] chown_common+0x3bb/0x670 [ 305.366944][T13279] ? __pfx_chown_common+0x10/0x10 [ 305.366965][T13279] ksys_fchown+0x11f/0x170 [ 305.366977][T13279] __x64_sys_fchown+0x72/0xb0 [ 305.366988][T13279] ? lockdep_hardirqs_on+0x7c/0x110 [ 305.367004][T13279] do_syscall_64+0xcd/0x260 [ 305.367018][T13279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.367029][T13279] RIP: 0033:0x7f5ac318e169 [ 305.367037][T13279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.367047][T13279] RSP: 002b:00007f5ac3f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 305.367057][T13279] RAX: ffffffffffffffda RBX: 00007f5ac33b5fa0 RCX: 00007f5ac318e169 [ 305.367063][T13279] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000003 [ 305.367069][T13279] RBP: 00007f5ac3f76090 R08: 0000000000000000 R09: 0000000000000000 [ 305.367075][T13279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.367081][T13279] R13: 0000000000000000 R14: 00007f5ac33b5fa0 R15: 00007ffe9165f568 [ 305.367094][T13279] [ 305.367131][T13279] ERROR: Out of memory at tomoyo_realpath_from_path. [ 305.464890][T13285] tmpfs: Cannot change global quota limit on remount [ 305.516218][T13289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 305.647709][ C0] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 305.650951][ C0] sr 2:0:0:0: [sr0] tag#14 CDB: Pre-fetch(16) 90 7c c2 15 ac 1f 90 37 1a c7 9d 37 [ 305.714288][T13308] usb usb8: usbfs: process 13308 (syz.2.2119) did not claim interface 0 before use [ 305.720567][T13308] tmpfs: Unknown parameter 'usrquota0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.720567][T13308] 0 [ 305.740655][ T40] audit: type=1400 audit(1745075410.518:899): avc: denied { append } for pid=13309 comm="syz.5.2120" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.741082][T13310] loop6: detected capacity change from 0 to 524287999 [ 305.816666][T13319] FAULT_INJECTION: forcing a failure. [ 305.816666][T13319] name failslab, interval 1, probability 0, space 0, times 0 [ 305.821403][T13319] CPU: 2 UID: 0 PID: 13319 Comm: syz.2.2121 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 305.821419][T13319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.821425][T13319] Call Trace: [ 305.821429][T13319] [ 305.821433][T13319] dump_stack_lvl+0x16c/0x1f0 [ 305.821463][T13319] should_fail_ex+0x512/0x640 [ 305.821477][T13319] ? fs_reclaim_acquire+0xae/0x150 [ 305.821492][T13319] ? tomoyo_encode2+0x100/0x3e0 [ 305.821506][T13319] should_failslab+0xc2/0x120 [ 305.821518][T13319] __kmalloc_noprof+0xd2/0x510 [ 305.821527][T13319] ? d_absolute_path+0x136/0x1a0 [ 305.821542][T13319] tomoyo_encode2+0x100/0x3e0 [ 305.821558][T13319] tomoyo_encode+0x29/0x50 [ 305.821570][T13319] tomoyo_realpath_from_path+0x18f/0x6e0 [ 305.821588][T13319] tomoyo_path_number_perm+0x245/0x580 [ 305.821600][T13319] ? tomoyo_path_number_perm+0x237/0x580 [ 305.821613][T13319] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 305.821626][T13319] ? __pfx__kstrtoull+0x10/0x10 [ 305.821643][T13319] ? find_held_lock+0x2b/0x80 [ 305.821667][T13319] ? from_kgid+0x8f/0xd0 [ 305.821677][T13319] ? __pfx_from_kgid+0x10/0x10 [ 305.821690][T13319] tomoyo_path_chown+0x14b/0x1b0 [ 305.821699][T13319] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 305.821709][T13319] ? from_vfsuid+0xea/0x140 [ 305.821721][T13319] ? __pfx_from_vfsuid+0x10/0x10 [ 305.821732][T13319] ? __lock_acquire+0x5ca/0x1ba0 [ 305.821742][T13319] security_path_chown+0x12a/0x2e0 [ 305.821756][T13319] chown_common+0x3bb/0x670 [ 305.821770][T13319] ? __pfx_chown_common+0x10/0x10 [ 305.821789][T13319] ksys_fchown+0x11f/0x170 [ 305.821802][T13319] __x64_sys_fchown+0x72/0xb0 [ 305.821812][T13319] ? lockdep_hardirqs_on+0x7c/0x110 [ 305.821824][T13319] do_syscall_64+0xcd/0x260 [ 305.821838][T13319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.821849][T13319] RIP: 0033:0x7f869f78e169 [ 305.821858][T13319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.821867][T13319] RSP: 002b:00007f86a0561038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 305.821877][T13319] RAX: ffffffffffffffda RBX: 00007f869f9b5fa0 RCX: 00007f869f78e169 [ 305.821883][T13319] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000003 [ 305.821888][T13319] RBP: 00007f86a0561090 R08: 0000000000000000 R09: 0000000000000000 [ 305.821894][T13319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.821899][T13319] R13: 0000000000000000 R14: 00007f869f9b5fa0 R15: 00007ffda8bda088 [ 305.821912][T13319] [ 305.821923][T13319] ERROR: Out of memory at tomoyo_realpath_from_path. [ 306.111426][ T40] audit: type=1400 audit(1745075410.888:900): avc: denied { append } for pid=13350 comm="syz.5.2128" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 306.122547][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2128'. [ 306.179153][T13360] FAULT_INJECTION: forcing a failure. [ 306.179153][T13360] name failslab, interval 1, probability 0, space 0, times 0 [ 306.183483][T13360] CPU: 2 UID: 0 PID: 13360 Comm: syz.5.2130 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 306.183521][T13360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 306.183532][T13360] Call Trace: [ 306.183539][T13360] [ 306.183545][T13360] dump_stack_lvl+0x16c/0x1f0 [ 306.183573][T13360] should_fail_ex+0x512/0x640 [ 306.183590][T13360] ? fs_reclaim_acquire+0xae/0x150 [ 306.183615][T13360] should_failslab+0xc2/0x120 [ 306.183634][T13360] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 306.183648][T13360] ? dqget+0x70b/0x1180 [ 306.183662][T13360] ? dqget+0x747/0x1180 [ 306.183674][T13360] dqget+0x747/0x1180 [ 306.183686][T13360] ? __pfx_dqget+0x10/0x10 [ 306.183699][T13360] dquot_transfer+0x3a8/0x6a0 [ 306.183711][T13360] ? __pfx_dquot_transfer+0x10/0x10 [ 306.183723][T13360] ? __pfx_make_vfsuid+0x10/0x10 [ 306.183735][T13360] ? setattr_prepare+0x140/0x9a0 [ 306.183752][T13360] shmem_setattr+0x582/0x1120 [ 306.183765][T13360] ? __pfx_shmem_setattr+0x10/0x10 [ 306.183776][T13360] notify_change+0x6a6/0x1230 [ 306.183793][T13360] chown_common+0x536/0x670 [ 306.183807][T13360] ? __pfx_chown_common+0x10/0x10 [ 306.183827][T13360] ksys_fchown+0x11f/0x170 [ 306.183839][T13360] __x64_sys_fchown+0x72/0xb0 [ 306.183850][T13360] ? lockdep_hardirqs_on+0x7c/0x110 [ 306.183863][T13360] do_syscall_64+0xcd/0x260 [ 306.183877][T13360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.183887][T13360] RIP: 0033:0x7f5ac318e169 [ 306.183896][T13360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.183905][T13360] RSP: 002b:00007f5ac3f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 306.183915][T13360] RAX: ffffffffffffffda RBX: 00007f5ac33b5fa0 RCX: 00007f5ac318e169 [ 306.183921][T13360] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000003 [ 306.183927][T13360] RBP: 00007f5ac3f76090 R08: 0000000000000000 R09: 0000000000000000 [ 306.183932][T13360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.183938][T13360] R13: 0000000000000000 R14: 00007f5ac33b5fa0 R15: 00007ffe9165f568 [ 306.183951][T13360] [ 306.401202][T13373] program syz.5.2135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.553321][T13390] FAULT_INJECTION: forcing a failure. [ 306.553321][T13390] name failslab, interval 1, probability 0, space 0, times 0 [ 306.559179][T13390] CPU: 0 UID: 0 PID: 13390 Comm: syz.5.2139 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 306.559194][T13390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 306.559201][T13390] Call Trace: [ 306.559204][T13390] [ 306.559208][T13390] dump_stack_lvl+0x16c/0x1f0 [ 306.559225][T13390] should_fail_ex+0x512/0x640 [ 306.559236][T13390] ? fs_reclaim_acquire+0xae/0x150 [ 306.559251][T13390] should_failslab+0xc2/0x120 [ 306.559263][T13390] __kmalloc_cache_noprof+0x6a/0x3e0 [ 306.559284][T13390] ? __pfx_from_kqid+0x10/0x10 [ 306.559298][T13390] ? shmem_acquire_dquot+0x246/0x8d0 [ 306.559316][T13390] shmem_acquire_dquot+0x246/0x8d0 [ 306.559333][T13390] dqget+0x690/0x1180 [ 306.559345][T13390] ? __pfx_dqget+0x10/0x10 [ 306.559358][T13390] dquot_transfer+0x3a8/0x6a0 [ 306.559370][T13390] ? __pfx_dquot_transfer+0x10/0x10 [ 306.559382][T13390] ? __pfx_make_vfsuid+0x10/0x10 [ 306.559394][T13390] ? setattr_prepare+0x140/0x9a0 [ 306.559411][T13390] shmem_setattr+0x582/0x1120 [ 306.559424][T13390] ? __pfx_shmem_setattr+0x10/0x10 [ 306.559435][T13390] notify_change+0x6a6/0x1230 [ 306.559452][T13390] chown_common+0x536/0x670 [ 306.559466][T13390] ? __pfx_chown_common+0x10/0x10 [ 306.559486][T13390] ksys_fchown+0x11f/0x170 [ 306.559498][T13390] __x64_sys_fchown+0x72/0xb0 [ 306.559508][T13390] ? lockdep_hardirqs_on+0x7c/0x110 [ 306.559521][T13390] do_syscall_64+0xcd/0x260 [ 306.559535][T13390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.559545][T13390] RIP: 0033:0x7f5ac318e169 [ 306.559553][T13390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.559562][T13390] RSP: 002b:00007f5ac3f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 306.559572][T13390] RAX: ffffffffffffffda RBX: 00007f5ac33b5fa0 RCX: 00007f5ac318e169 [ 306.559578][T13390] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000003 [ 306.559584][T13390] RBP: 00007f5ac3f76090 R08: 0000000000000000 R09: 0000000000000000 [ 306.559589][T13390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.559594][T13390] R13: 0000000000000000 R14: 00007f5ac33b5fa0 R15: 00007ffe9165f568 [ 306.559607][T13390] [ 306.619527][T13393] ip6t_REJECT: ECHOREPLY is not supported [ 306.901312][T13404] netlink: 'syz.5.2144': attribute type 2 has an invalid length. [ 306.904392][T13404] netlink: 'syz.5.2144': attribute type 1 has an invalid length. [ 306.906961][T13404] netlink: 'syz.5.2144': attribute type 1 has an invalid length. [ 306.945854][ T5340] bcm5974 5-1:0.0: could not read from device [ 306.962293][T13408] netlink: 'syz.5.2144': attribute type 13 has an invalid length. [ 306.964752][T13407] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 306.967430][T13407] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 306.971611][T13407] vhci_hcd vhci_hcd.0: Device attached [ 306.986650][ T1328] usb 5-1: USB disconnect, device number 27 [ 307.016034][T13408] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.018513][T13408] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.233743][ T34] usb 38-1: SetAddress Request (2) to port 0 [ 307.236568][ T34] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 307.439148][T13408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.452214][T13408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.708006][T13408] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.710800][T13408] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.713667][T13408] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.716335][T13408] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.772370][ T1328] usb 6-1: USB disconnect, device number 31 [ 307.798126][T13409] vhci_hcd: connection reset by peer [ 307.803125][ T1186] vhci_hcd: stop threads [ 307.804970][ T1186] vhci_hcd: release socket [ 307.807801][ T1186] vhci_hcd: disconnect device [ 308.028104][T13407] netlink: 'syz.0.2145': attribute type 2 has an invalid length. [ 308.031445][T13407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.183997][ T1328] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 308.206167][T13433] FAULT_INJECTION: forcing a failure. [ 308.206167][T13433] name failslab, interval 1, probability 0, space 0, times 0 [ 308.211839][T13433] CPU: 1 UID: 0 PID: 13433 Comm: syz.5.2150 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 308.211861][T13433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.211871][T13433] Call Trace: [ 308.211876][T13433] [ 308.211883][T13433] dump_stack_lvl+0x16c/0x1f0 [ 308.211909][T13433] should_fail_ex+0x512/0x640 [ 308.211928][T13433] ? fs_reclaim_acquire+0xae/0x150 [ 308.211953][T13433] should_failslab+0xc2/0x120 [ 308.211972][T13433] __kmalloc_cache_noprof+0x6a/0x3e0 [ 308.211996][T13433] ? __pfx_from_kqid+0x10/0x10 [ 308.212019][T13433] ? shmem_acquire_dquot+0x246/0x8d0 [ 308.212049][T13433] shmem_acquire_dquot+0x246/0x8d0 [ 308.212078][T13433] dqget+0x690/0x1180 [ 308.212094][T13433] ? __pfx_dqget+0x10/0x10 [ 308.212116][T13433] dquot_transfer+0x3a8/0x6a0 [ 308.212134][T13433] ? __pfx_dquot_transfer+0x10/0x10 [ 308.212153][T13433] ? __pfx_make_vfsuid+0x10/0x10 [ 308.212172][T13433] ? setattr_prepare+0x140/0x9a0 [ 308.212199][T13433] shmem_setattr+0x582/0x1120 [ 308.212222][T13433] ? __pfx_shmem_setattr+0x10/0x10 [ 308.212240][T13433] notify_change+0x6a6/0x1230 [ 308.212270][T13433] chown_common+0x536/0x670 [ 308.212295][T13433] ? __pfx_chown_common+0x10/0x10 [ 308.212336][T13433] ksys_fchown+0x11f/0x170 [ 308.212356][T13433] __x64_sys_fchown+0x72/0xb0 [ 308.212373][T13433] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.212395][T13433] do_syscall_64+0xcd/0x260 [ 308.212419][T13433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.212435][T13433] RIP: 0033:0x7f5ac318e169 [ 308.212449][T13433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.212464][T13433] RSP: 002b:00007f5ac3f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 308.212480][T13433] RAX: ffffffffffffffda RBX: 00007f5ac33b5fa0 RCX: 00007f5ac318e169 [ 308.212490][T13433] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000003 [ 308.212499][T13433] RBP: 00007f5ac3f76090 R08: 0000000000000000 R09: 0000000000000000 [ 308.212508][T13433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.212517][T13433] R13: 0000000000000000 R14: 00007f5ac33b5fa0 R15: 00007ffe9165f568 [ 308.212541][T13433] [ 308.298274][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.359669][ T1328] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.363689][ T1328] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 308.367362][ T1328] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 308.370881][ T1328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.383162][ T1328] usb 6-1: config 0 descriptor?? [ 308.391382][ T1328] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 308.397705][ T1328] dvb-usb: bulk message failed: -22 (3/0) [ 308.407748][ T1328] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 308.411761][ T1328] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 308.415234][ T1328] usb 6-1: media controller created [ 308.419714][ T1328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.424617][T13449] /dev/nullb0: Can't open blockdev [ 308.430288][ T1328] dvb-usb: bulk message failed: -22 (6/0) [ 308.432745][ T1328] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 308.438211][ T1328] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input107 [ 308.450584][ T1328] dvb-usb: schedule remote query interval to 150 msecs. [ 308.453391][ T1328] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 308.457597][ T40] audit: type=1400 audit(1745075413.238:901): avc: denied { lock } for pid=13450 comm="syz.2.2158" path="socket:[50480]" dev="sockfs" ino=50480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 308.590721][ T5980] usb 6-1: USB disconnect, device number 32 [ 308.643716][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 308.646932][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 308.735251][ T5980] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 308.813705][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 308.816017][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 308.820483][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 308.823923][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.828138][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.832209][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.836332][ T10] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 308.840761][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.846251][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.849998][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.853353][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 308.858762][ T9] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 308.862103][ T9] usb 10-1: Manufacturer: syz [ 308.865168][ T9] usb 10-1: SerialNumber: syz [ 308.868619][ T10] usbtmc 5-1:16.0: bulk endpoints not found [ 308.876524][ T9] usb 10-1: config 0 descriptor?? [ 308.884780][ T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input108 [ 309.088030][T13438] input: syz0 as /devices/virtual/input/input109 [ 309.201570][T13458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2159'. [ 309.225033][T13458] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 309.377677][T13467] VFS: Not enough memory to send quota warning. [ 309.420451][T13469] bond0: entered promiscuous mode [ 309.422604][T13469] bond_slave_0: entered promiscuous mode [ 309.425408][T13469] bond_slave_1: entered promiscuous mode [ 309.427845][T13469] bond1: entered promiscuous mode [ 309.430124][T13469] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 309.436545][T13469] batadv0: entered promiscuous mode [ 309.439644][T13469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.442778][T13469] Cannot create hsr debugfs directory [ 309.447060][T13469] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 309.668521][T13485] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2168'. [ 309.735058][T13499] afs: Unknown parameter 'usrquota' [ 309.861937][T13506] FAULT_INJECTION: forcing a failure. [ 309.861937][T13506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.866615][T13506] CPU: 1 UID: 0 PID: 13506 Comm: syz.1.2173 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 309.866636][T13506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.866645][T13506] Call Trace: [ 309.866651][T13506] [ 309.866656][T13506] dump_stack_lvl+0x16c/0x1f0 [ 309.866697][T13506] should_fail_ex+0x512/0x640 [ 309.866723][T13506] _copy_to_user+0x32/0xd0 [ 309.866744][T13506] simple_read_from_buffer+0xcb/0x170 [ 309.866769][T13506] proc_fail_nth_read+0x197/0x270 [ 309.866794][T13506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.866819][T13506] ? rw_verify_area+0xcf/0x680 [ 309.866839][T13506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.866862][T13506] vfs_read+0x1de/0xc70 [ 309.866888][T13506] ? __pfx___mutex_lock+0x10/0x10 [ 309.866909][T13506] ? __pfx_vfs_read+0x10/0x10 [ 309.866939][T13506] ? __fget_files+0x20e/0x3c0 [ 309.866961][T13506] ksys_read+0x12a/0x240 [ 309.866974][T13506] ? __pfx_ksys_read+0x10/0x10 [ 309.866995][T13506] do_syscall_64+0xcd/0x260 [ 309.867017][T13506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.867033][T13506] RIP: 0033:0x7ff3c478cb7c [ 309.867045][T13506] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 309.867060][T13506] RSP: 002b:00007ff3c5546030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.867075][T13506] RAX: ffffffffffffffda RBX: 00007ff3c49b5fa0 RCX: 00007ff3c478cb7c [ 309.867085][T13506] RDX: 000000000000000f RSI: 00007ff3c55460a0 RDI: 0000000000000004 [ 309.867094][T13506] RBP: 00007ff3c5546090 R08: 0000000000000000 R09: 0000000000000000 [ 309.867104][T13506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.867113][T13506] R13: 0000000000000000 R14: 00007ff3c49b5fa0 R15: 00007ffd781b1088 [ 309.867134][T13506] [ 309.937038][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.038126][ T40] audit: type=1400 audit(1745075414.818:902): avc: denied { read } for pid=13509 comm="syz.1.2175" lport=51005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.090984][T13517] ./cgroup: Can't lookup blockdev [ 310.947181][T13525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.017035][ T40] audit: type=1326 audit(1745075415.798:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.2.2178" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869f78e169 code=0x7fc00000 [ 311.125864][T13525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.268251][T13525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.324975][ T40] audit: type=1400 audit(1745075416.108:904): avc: denied { create } for pid=13534 comm="syz.2.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.331125][ T40] audit: type=1400 audit(1745075416.108:905): avc: denied { shutdown } for pid=13534 comm="syz.2.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.337563][ T40] audit: type=1400 audit(1745075416.108:906): avc: denied { getopt } for pid=13534 comm="syz.2.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.343789][ T40] audit: type=1400 audit(1745075416.108:907): avc: denied { connect } for pid=13534 comm="syz.2.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.349829][ T40] audit: type=1400 audit(1745075416.108:908): avc: denied { setopt } for pid=13534 comm="syz.2.2183" lport=37271 faddr=fc02:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.383994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 311.393792][ T5980] usb 5-1: USB disconnect, device number 28 [ 311.405625][T13525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.414559][ T5340] bcm5974 10-1:0.0: could not read from device [ 311.465326][ T9] usb 10-1: USB disconnect, device number 2 [ 311.487399][T13552] usb usb8: usbfs: process 13552 (syz.2.2187) did not claim interface 0 before use [ 311.590181][T13525] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.597556][T13564] xt_hashlimit: size too large, truncated to 1048576 [ 311.655393][T13564] overlayfs: conflicting lowerdir path [ 311.662333][ T40] audit: type=1400 audit(1745075416.438:909): avc: denied { ioctl } for pid=13563 comm="syz.5.2190" path="socket:[50696]" dev="sockfs" ino=50696 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.673232][ T40] audit: type=1400 audit(1745075416.438:910): avc: denied { write } for pid=13563 comm="syz.5.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.675408][T13525] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.683998][ T134] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 311.689800][T13525] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.701573][T13525] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.725491][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2194'. [ 311.731094][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2194'. [ 311.893697][ T10] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 312.023571][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 312.043615][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 312.046900][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 312.049491][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.052429][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.055533][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 312.058536][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 312.061535][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.065538][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 312.068276][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.073295][ T10] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 312.174152][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 312.177473][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.182285][ T24] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 312.186063][ T24] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 312.188744][ T24] usb 10-1: Manufacturer: syz [ 312.190277][ T24] usb 10-1: SerialNumber: syz [ 312.194035][ T24] usb 10-1: config 0 descriptor?? [ 312.198392][ T24] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input110 [ 312.303710][ T34] usb 38-1: device descriptor read/8, error -110 [ 312.400178][T13580] input: syz0 as /devices/virtual/input/input111 [ 312.707170][ T34] usb usb38-port1: attempt power cycle [ 312.774227][ T40] audit: type=1400 audit(1745075417.558:911): avc: denied { bind } for pid=13608 comm="syz.0.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 312.815681][T13611] tmpfs: Bad value for 'mpol' [ 312.830660][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 313.287052][ T34] usb usb38-port1: unable to enumerate USB device [ 314.093680][ T134] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 314.243623][ T134] usb 6-1: Using ep0 maxpacket: 8 [ 314.247296][ T134] usb 6-1: config index 0 descriptor too short (expected 5138, got 18) [ 314.250719][ T134] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.254900][ T134] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 314.260737][ T134] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 314.265015][ T134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.268289][ T134] usb 6-1: Product: syz [ 314.270111][ T134] usb 6-1: Manufacturer: syz [ 314.272039][ T134] usb 6-1: SerialNumber: syz [ 314.275241][ T134] usb 6-1: config 0 descriptor?? [ 314.573804][T13621] overlay: Bad value for 'workdir' [ 314.602053][T13626] loop6: detected capacity change from 0 to 16384 [ 314.607703][ T134] usb 6-1: USB disconnect, device number 33 [ 314.656748][ T34] usb 7-1: USB disconnect, device number 36 [ 314.663815][ T7053] I/O error, dev loop6, sector 536 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 314.771922][ T5340] bcm5974 10-1:0.0: could not read from device [ 314.842029][ T24] usb 10-1: USB disconnect, device number 3 [ 314.877090][ T5943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.891057][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.894339][ T5943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.897710][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.900386][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.011640][ T1186] Bluetooth: hci4: Frame reassembly failed (-84) [ 315.037644][T13634] chnl_net:caif_netlink_parms(): no params data found [ 315.214412][T13634] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.217437][T13634] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.220321][T13634] bridge_slave_0: entered allmulticast mode [ 315.224711][T13634] bridge_slave_0: entered promiscuous mode [ 315.229282][T13634] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.232123][T13634] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.235231][T13634] bridge_slave_1: entered allmulticast mode [ 315.239041][T13634] bridge_slave_1: entered promiscuous mode [ 315.332084][T13634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.337194][T13634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.413573][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 315.437497][T13634] team0: Port device team_slave_0 added [ 315.442709][T13634] team0: Port device team_slave_1 added [ 315.532450][T13634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.535632][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.542645][T13634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.546509][T13634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.548615][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.556567][T13634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.563774][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 315.566664][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 315.570059][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.573581][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.576749][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 315.579798][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 315.582881][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.587612][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 315.590588][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.599335][ T24] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 315.615280][T13634] hsr_slave_0: entered promiscuous mode [ 315.617591][T13634] hsr_slave_1: entered promiscuous mode [ 315.619707][T13634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.622974][T13634] Cannot create hsr debugfs directory [ 315.840995][T13634] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.987822][T13634] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.103828][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 316.124979][T13634] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.215087][T13634] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.253779][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 316.260499][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.265015][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 316.267682][ T9] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 316.270060][ T9] usb 5-1: Manufacturer: syz [ 316.271451][ T9] usb 5-1: SerialNumber: syz [ 316.274305][ T9] usb 5-1: config 0 descriptor?? [ 316.278125][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input112 [ 316.380446][T13634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.385928][T13634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.390437][T13634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.395401][T13634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.441146][T13634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.454475][T13634] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.461442][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.463971][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.471234][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.473598][ T9026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.478725][T13661] input: syz0 as /devices/virtual/input/input113 [ 316.592561][T13634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.617927][T13634] veth0_vlan: entered promiscuous mode [ 316.623327][T13634] veth1_vlan: entered promiscuous mode [ 316.645124][T13634] veth0_macvtap: entered promiscuous mode [ 316.650984][T13634] veth1_macvtap: entered promiscuous mode [ 316.662138][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.666324][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.670200][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.674573][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.678428][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.682540][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.686465][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.690588][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.695765][T13634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.702950][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.706816][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.709764][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.713938][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.717005][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.720051][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.723320][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.726383][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.730045][T13634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.738538][T13634] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.741979][T13634] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.745597][T13634] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.749082][T13634] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.797651][ T9026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.800637][ T9026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.811839][ T9026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.814411][ T9026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.866316][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.868942][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.913630][ T40] audit: type=1400 audit(1745075421.688:912): avc: denied { write } for pid=13634 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 316.921507][ T40] audit: type=1400 audit(1745075421.688:913): avc: denied { open } for pid=13634 comm="syz-executor" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 316.943694][ T66] Bluetooth: hci3: command tx timeout [ 317.014975][ T40] audit: type=1400 audit(1745075421.798:914): avc: denied { watch_mount } for pid=13680 comm="syz.2.2222" path="/2" dev="tmpfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 317.017244][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 317.033770][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 317.034209][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 317.220653][T13695] libceph: resolve ' [ 317.220653][T13695] -&fYǝa2i [ 317.220653][T13695] .?&*&' (ret=-3): failed [ 317.238877][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.241235][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.243413][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.245925][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.248117][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.250407][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.253049][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.256576][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.259036][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.261270][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.263448][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.266093][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.268326][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.270558][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.272748][ T34] hid-generic 00A0:000B:0007.0009: unknown main item tag 0x0 [ 317.278077][ T34] hid-generic 00A0:000B:0007.0009: hidraw0: HID v0.05 Device [syz1] on syz0 [ 317.522068][T13707] xt_hashlimit: size too large, truncated to 1048576 [ 317.583817][T13709] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2231'. [ 317.741821][ T40] audit: type=1400 audit(1745075422.518:915): avc: denied { create } for pid=13722 comm="syz.5.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 317.757722][ T40] audit: type=1400 audit(1745075422.538:916): avc: denied { setopt } for pid=13722 comm="syz.5.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 317.765627][ T40] audit: type=1400 audit(1745075422.538:917): avc: denied { map } for pid=13722 comm="syz.5.2236" path="socket:[53499]" dev="sockfs" ino=53499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 317.772574][ T40] audit: type=1400 audit(1745075422.538:918): avc: denied { read } for pid=13722 comm="syz.5.2236" path="socket:[53499]" dev="sockfs" ino=53499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 317.800830][T13727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2238'. [ 318.031720][T13746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2243'. [ 318.115929][T13749] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2245'. [ 318.157748][T13751] random: crng reseeded on system resumption [ 318.183927][ T24] usb 6-1: USB disconnect, device number 34 [ 318.227646][T13757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2247'. [ 318.357402][T13761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2250'. [ 318.377728][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 318.382886][ T40] audit: type=1400 audit(1745075423.158:919): avc: denied { listen } for pid=13760 comm="syz.2.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 318.389659][ T40] audit: type=1400 audit(1745075423.168:920): avc: denied { accept } for pid=13760 comm="syz.2.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 318.489402][T13764] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 318.491360][T13764] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 318.494041][T13764] vhci_hcd vhci_hcd.0: Device attached [ 318.733578][ T134] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 318.736608][ T57] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 318.825686][ T5340] bcm5974 5-1:0.0: could not read from device [ 318.842358][T13768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2252'. [ 318.846535][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2252'. [ 318.866642][ T9] usb 5-1: USB disconnect, device number 29 [ 318.883915][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 318.885712][T13770] netlink: 'syz.0.2253': attribute type 2 has an invalid length. [ 318.888773][ T57] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 318.891632][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.894312][ T57] usb 6-1: Product: syz [ 318.895572][ T57] usb 6-1: Manufacturer: syz [ 318.896932][ T57] usb 6-1: SerialNumber: syz [ 318.899440][ T57] usb 6-1: config 0 descriptor?? [ 318.902897][ T57] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 318.908517][ T57] usb 6-1: Detected FT232H [ 318.942288][ T40] audit: type=1400 audit(1745075423.718:921): avc: denied { map } for pid=13769 comm="syz.0.2253" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 319.023714][ T5943] Bluetooth: hci3: command tx timeout [ 319.103000][T13765] usb 39-1: recv xbuf, 0 [ 319.104979][ T9026] vhci_hcd: stop threads [ 319.106421][ T57] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 319.106877][ T9026] vhci_hcd: release socket [ 319.109355][ T57] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 319.109868][ T9026] vhci_hcd: disconnect device [ 319.114023][ T57] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 319.117251][ T57] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 319.124685][ T57] usb 6-1: USB disconnect, device number 35 [ 319.134033][ T57] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 319.137283][ T57] ftdi_sio 6-1:0.0: device disconnected [ 319.173697][ T134] vhci_hcd: vhci_device speed not set [ 319.297317][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.300842][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.305631][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.309880][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.312358][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.466452][T13785] chnl_net:caif_netlink_parms(): no params data found [ 319.623814][ T5999] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 319.774404][ T5999] usb 7-1: Using ep0 maxpacket: 8 [ 319.779990][ T5999] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 319.783231][ T5999] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.787849][ T5999] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.791816][ T5999] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 319.797124][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 319.800314][ T5999] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 319.804464][ T5999] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.809203][ T5999] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 319.812265][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.820001][ T5999] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 319.877158][ T6476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.964489][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 319.969993][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.975185][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 319.978700][ T9] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 319.981159][ T9] usb 10-1: Manufacturer: syz [ 319.982600][ T9] usb 10-1: SerialNumber: syz [ 319.993134][ T9] usb 10-1: config 0 descriptor?? [ 320.000298][T13785] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.001171][ T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input114 [ 320.005721][T13785] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.009465][T13785] bridge_slave_0: entered allmulticast mode [ 320.013011][T13785] bridge_slave_0: entered promiscuous mode [ 320.076210][ T6476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.085875][T13785] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.088681][T13785] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.091557][T13785] bridge_slave_1: entered allmulticast mode [ 320.095382][T13785] bridge_slave_1: entered promiscuous mode [ 320.205172][ T6476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.208111][T13799] input: syz0 as /devices/virtual/input/input115 [ 320.222958][T13785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.235484][T13785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.303543][T13785] team0: Port device team_slave_0 added [ 320.499065][ T6476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.510259][T13785] team0: Port device team_slave_1 added [ 320.547207][T13785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.549698][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.558089][T13785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.562154][T13785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.564348][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.571896][T13785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.601212][T13814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 320.604330][T13814] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 320.777303][T13785] hsr_slave_0: entered promiscuous mode [ 320.780367][T13785] hsr_slave_1: entered promiscuous mode [ 320.783155][T13785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.786517][T13785] Cannot create hsr debugfs directory [ 321.103678][ T5943] Bluetooth: hci3: command tx timeout [ 321.353670][ T5943] Bluetooth: hci0: command tx timeout [ 321.418219][T13814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.420727][T13814] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 321.460903][ T6476] @: left allmulticast mode [ 321.462894][ T6476] @: left promiscuous mode [ 321.465396][ T6476] bridge0: port 1(0@) entered disabled state [ 322.385914][ T9] usb 7-1: USB disconnect, device number 37 [ 322.511839][T13839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=13839 comm=syz.2.2264 [ 322.578789][T13840] overlay: ./bus is not a directory [ 323.184028][ T5943] Bluetooth: hci3: command tx timeout [ 323.423705][ T5943] Bluetooth: hci0: command tx timeout [ 323.805681][ T6476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.846242][ T6476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.905770][ T6476] bond0 (unregistering): (slave bond1): Releasing backup interface [ 323.964283][ T6476] bond0 (unregistering): Released all slaves [ 324.884871][ T6476] bond1 (unregistering): Released all slaves [ 324.890916][ T6476] bond2 (unregistering): Released all slaves [ 325.033787][ T5340] bcm5974 10-1:0.0: could not read from device [ 325.085326][T12580] bcm5974 10-1:0.0: could not read from device [ 325.124103][ T5340] bcm5974 10-1:0.0: could not read from device [ 325.234142][ T5340] bcm5974 10-1:0.0: could not read from device [ 325.374553][ T5340] bcm5974 10-1:0.0: could not read from device [ 325.464974][ T5340] bcm5974 10-1:0.0: could not read from device [ 325.503668][ T5943] Bluetooth: hci0: command tx timeout [ 325.744908][ T5340] bcm5974 10-1:0.0: could not read from device [ 325.768288][ T6476] bond3 (unregistering): Released all slaves [ 325.809431][T13814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 325.812477][T13814] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 325.855726][ T24] usb 10-1: USB disconnect, device number 4 [ 325.858305][ T6476] tipc: Disabling bearer [ 325.860687][ T6476] tipc: Left network mode [ 325.873943][T13843] __nla_validate_parse: 2 callbacks suppressed [ 325.873952][T13843] netlink: 45 bytes leftover after parsing attributes in process `syz.5.2266'. [ 325.942865][T13856] veth1_to_bond: entered allmulticast mode [ 325.970089][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 325.970098][ T40] audit: type=1400 audit(1745075430.748:924): avc: denied { append } for pid=13855 comm="syz.2.2268" name="ttyr0" dev="devtmpfs" ino=399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 326.035404][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2269'. [ 326.040404][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2269'. [ 326.043418][T13859] netlink: 'syz.5.2269': attribute type 18 has an invalid length. [ 326.139116][T13861] ipt_REJECT: ECHOREPLY no longer supported. [ 326.144281][T13861] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 326.146386][T13861] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 326.148760][T13861] vhci_hcd vhci_hcd.0: Device attached [ 326.276447][T13855] veth1_to_bond: left allmulticast mode [ 326.295451][T13860] /dev/sr0: Can't open blockdev [ 326.298145][T13862] vhci_hcd: connection closed [ 326.298365][ T9019] vhci_hcd: stop threads [ 326.301288][ T9019] vhci_hcd: release socket [ 326.302759][ T9019] vhci_hcd: disconnect device [ 326.323927][ T3232] vhci_hcd: vhci_device speed not set [ 326.369670][T13814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 326.371935][T13814] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 326.593731][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 326.615931][T13785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.626529][T13785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.631503][T13785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.637056][T13785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.729214][T13785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.743169][T13785] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.749552][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.751850][ T9019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.773652][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 326.776777][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 326.779325][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.782351][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.785696][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 326.788753][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.792744][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 326.795866][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.824705][ T6476] hsr_slave_0: left promiscuous mode [ 326.830905][ T6476] hsr_slave_1: left promiscuous mode [ 326.832974][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.835866][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.838815][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.841183][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.858883][T13880] netfs: Couldn't get user pages (rc=-14) [ 326.867273][ T6476] veth1_macvtap: left promiscuous mode [ 326.868086][T13880] netfs: Couldn't get user pages (rc=-14) [ 326.869157][ T6476] veth1_vlan: left promiscuous mode [ 326.872584][ T6476] veth0_vlan: left promiscuous mode [ 327.003332][ T9] usb 7-1: usb_control_msg returned -32 [ 327.006137][ T6476] pim6reg9 (unregistering): left allmulticast mode [ 327.006303][ T9] usbtmc 7-1:16.0: can't read capabilities [ 327.016789][ T9] usb 7-1: USB disconnect, device number 38 [ 327.483931][ T34] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 327.633594][ T34] usb 10-1: Using ep0 maxpacket: 16 [ 327.636512][ T34] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.641297][ T34] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 327.644550][ T34] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 327.647908][ T34] usb 10-1: Manufacturer: syz [ 327.649606][ T34] usb 10-1: SerialNumber: syz [ 327.652346][ T34] usb 10-1: config 0 descriptor?? [ 327.656716][ T34] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input116 [ 327.858232][T13889] input: syz0 as /devices/virtual/input/input117 [ 327.864860][T13894] netfs: Couldn't get user pages (rc=-14) [ 327.970435][T13902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2278'. [ 332.703958][ T5340] bcm5974 10-1:0.0: could not read from device [ 332.806881][T12580] bcm5974 10-1:0.0: could not read from device [ 332.854361][ T5340] bcm5974 10-1:0.0: could not read from device [ 332.954397][ T5340] bcm5974 10-1:0.0: could not read from device [ 333.043961][ T5340] bcm5974 10-1:0.0: could not read from device [ 333.144390][ T5340] bcm5974 10-1:0.0: could not read from device [ 333.244427][ T5340] bcm5974 10-1:0.0: could not read from device [ 337.185708][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.188081][ T9019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.219712][ T1328] usb 10-1: USB disconnect, device number 5 [ 337.352652][T13785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.396151][T13785] veth0_vlan: entered promiscuous mode [ 337.401510][T13785] veth1_vlan: entered promiscuous mode [ 337.413919][T13785] veth0_macvtap: entered promiscuous mode [ 337.417432][T13785] veth1_macvtap: entered promiscuous mode [ 337.426977][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.430234][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.433124][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.440214][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.443403][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.446649][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.449638][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.452737][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.456538][T13785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.463127][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.467207][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.470590][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.474067][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.477069][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.480421][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.484454][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.488195][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.501904][T13785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.506775][T13785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.509533][T13785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.512160][T13785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.515012][T13785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.589429][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.592423][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.620287][ T9026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.622760][ T9026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.634385][ T1328] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 337.654397][T13950] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 337.721536][T13958] netlink: 'syz.0.2255': attribute type 3 has an invalid length. [ 337.724656][T13958] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2255'. [ 337.783805][ T1328] usb 10-1: Using ep0 maxpacket: 8 [ 337.786654][ T1328] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 337.789194][ T1328] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.792141][ T1328] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 337.796684][ T1328] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 337.799732][ T1328] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.804173][ T1328] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 337.806951][ T1328] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.963635][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 338.012478][ T1328] usb 10-1: usb_control_msg returned -32 [ 338.015691][ T1328] usbtmc 10-1:16.0: can't read capabilities [ 338.024031][ T1328] usb 10-1: USB disconnect, device number 6 [ 338.027053][ T40] audit: type=1400 audit(1745075442.808:925): avc: denied { getopt } for pid=13954 comm="syz.2.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 338.027174][T13968] tmpfs: Invalid gid '0x00000000ffffffff' [ 338.123640][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 338.127404][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.133367][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 338.137077][ T9] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 338.139829][ T9] usb 6-1: Manufacturer: syz [ 338.141788][ T9] usb 6-1: SerialNumber: syz [ 338.145151][ T9] usb 6-1: config 0 descriptor?? [ 338.149795][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input118 [ 338.177926][ T40] audit: type=1400 audit(1745075442.958:926): avc: denied { connect } for pid=13975 comm="syz.0.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 338.353917][T13952] input: syz0 as /devices/virtual/input/input119 [ 338.745639][T13992] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 338.908671][T14002] nbd: must specify at least one socket [ 338.937800][T14000] SELinux: ebitmap: truncated map [ 338.968242][T14004] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 338.968784][T14000] SELinux: failed to load policy [ 338.970590][T14004] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 338.981061][T13999] SELinux: failed to load policy [ 339.236265][T14016] netlink: 'syz.0.2306': attribute type 23 has an invalid length. [ 339.352092][T14030] xt_hashlimit: size too large, truncated to 1048576 [ 339.513198][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2312'. [ 339.520328][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'. [ 339.523090][T14038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2312'. [ 339.543835][ T1328] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 339.564573][ T134] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 339.669029][T14042] input: syz0 as /devices/virtual/input/input120 [ 339.693864][ T1328] usb 7-1: Using ep0 maxpacket: 8 [ 339.697317][ T1328] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 339.700362][ T1328] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.704264][ T1328] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.707938][ T1328] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 339.711354][ T1328] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.722156][ T1328] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 339.724983][ T134] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.725590][ T1328] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.727822][ T134] usb 10-1: config 0 has no interface number 0 [ 339.732668][ T134] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 339.736159][ T134] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.739244][ T134] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 339.742060][ T134] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.745970][ T134] usb 10-1: config 0 descriptor?? [ 339.750300][ T134] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 339.934772][ T1328] usb 7-1: usb_control_msg returned -32 [ 339.935161][T14022] iowarrior 10-1:0.1: Error -90 while submitting URB [ 339.936566][ T1328] usbtmc 7-1:16.0: can't read capabilities [ 339.947444][ T1328] usb 7-1: USB disconnect, device number 39 [ 339.951333][T14028] iowarrior 10-1:0.1: Error -90 while submitting URB [ 339.957527][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.960866][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.976947][ T134] usb 10-1: USB disconnect, device number 7 [ 340.382167][T14062] overlayfs: failed to clone upperpath [ 340.408791][ T40] audit: type=1400 audit(1745075445.188:927): avc: denied { bind } for pid=14063 comm="syz.5.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.417357][ T40] audit: type=1400 audit(1745075445.188:928): avc: denied { listen } for pid=14063 comm="syz.5.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.531193][ T40] audit: type=1400 audit(1745075445.308:929): avc: denied { getopt } for pid=14071 comm="syz.0.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 340.569354][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2323'. [ 340.572150][T14078] netlink: 'syz.0.2323': attribute type 9 has an invalid length. [ 340.627508][T14080] netlink: 'syz.0.2324': attribute type 10 has an invalid length. [ 340.630960][T14080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2324'. [ 340.635067][T14080] batadv0: entered promiscuous mode [ 340.637276][T14080] batadv0: entered allmulticast mode [ 340.640045][T14080] bridge0: port 3(batadv0) entered blocking state [ 340.642924][T14080] bridge0: port 3(batadv0) entered disabled state [ 340.649477][T14080] bridge0: port 3(batadv0) entered blocking state [ 340.652208][T14080] bridge0: port 3(batadv0) entered forwarding state [ 340.777103][ T5340] bcm5974 6-1:0.0: could not read from device [ 340.832998][ T40] audit: type=1400 audit(1745075445.608:930): avc: denied { setattr } for pid=14091 comm="syz.1.2329" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 340.837479][ T9] usb 6-1: USB disconnect, device number 36 [ 340.852935][T14097] xt_hashlimit: size too large, truncated to 1048576 [ 340.858516][T14097] warn_alloc: 1 callbacks suppressed [ 340.858523][T14097] syz.0.2330: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 340.868122][T14097] CPU: 1 UID: 0 PID: 14097 Comm: syz.0.2330 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 340.868144][T14097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 340.868154][T14097] Call Trace: [ 340.868160][T14097] [ 340.868166][T14097] dump_stack_lvl+0x16c/0x1f0 [ 340.868193][T14097] warn_alloc+0x248/0x3a0 [ 340.868213][T14097] ? __pfx_warn_alloc+0x10/0x10 [ 340.868239][T14097] ? __get_vm_area_node+0x1b9/0x300 [ 340.868260][T14097] ? __get_vm_area_node+0x1e5/0x300 [ 340.868288][T14097] __vmalloc_node_range_noprof+0x1110/0x1540 [ 340.868321][T14097] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 340.868352][T14097] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 340.868409][T14097] __kvmalloc_node_noprof+0x2ff/0x600 [ 340.868424][T14097] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 340.868449][T14097] ? net_generic+0xea/0x2a0 [ 340.868469][T14097] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 340.868498][T14097] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 340.868522][T14097] hashlimit_mt_check_common+0x8bb/0x1460 [ 340.868552][T14097] hashlimit_mt_check+0x71/0x90 [ 340.868574][T14097] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 340.868598][T14097] xt_check_match+0x283/0xa50 [ 340.868620][T14097] ? __irq_alloc_descs+0x482/0x5f0 [ 340.868640][T14097] ? __pfx_xt_check_match+0x10/0x10 [ 340.868666][T14097] ? xt_find_target+0x1f2/0x290 [ 340.868702][T14097] ? xt_find_match+0x1f6/0x290 [ 340.868731][T14097] find_check_entry.constprop.0+0x34e/0xa20 [ 340.868761][T14097] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 340.868792][T14097] ? kasan_quarantine_put+0x10a/0x240 [ 340.868807][T14097] ? lockdep_hardirqs_on+0x7c/0x110 [ 340.868832][T14097] ? kfree+0x2b6/0x4d0 [ 340.868854][T14097] ? translate_table+0xc0e/0x17b0 [ 340.868880][T14097] translate_table+0xd0b/0x17b0 [ 340.868914][T14097] ? __pfx_translate_table+0x10/0x10 [ 340.868935][T14097] ? xt_alloc_table_info+0x3e/0xa0 [ 340.868964][T14097] do_ip6t_set_ctl+0x570/0xb00 [ 340.868986][T14097] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 340.869017][T14097] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 340.869043][T14097] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 340.869078][T14097] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 340.869103][T14097] nf_setsockopt+0x8a/0xf0 [ 340.869126][T14097] ipv6_setsockopt+0x135/0x170 [ 340.869150][T14097] rawv6_setsockopt+0xc2/0x510 [ 340.869170][T14097] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 340.869190][T14097] ? selinux_socket_setsockopt+0x6a/0x80 [ 340.869210][T14097] ? sock_common_setsockopt+0x2e/0xf0 [ 340.869233][T14097] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 340.869257][T14097] do_sock_setsockopt+0x221/0x470 [ 340.869279][T14097] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 340.869317][T14097] __sys_setsockopt+0x1a0/0x230 [ 340.869340][T14097] __x64_sys_setsockopt+0xbd/0x160 [ 340.869357][T14097] ? do_syscall_64+0x91/0x260 [ 340.869378][T14097] ? lockdep_hardirqs_on+0x7c/0x110 [ 340.869398][T14097] do_syscall_64+0xcd/0x260 [ 340.869421][T14097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.869438][T14097] RIP: 0033:0x7f7500f8e169 [ 340.869452][T14097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.869466][T14097] RSP: 002b:00007f7501de6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 340.869482][T14097] RAX: ffffffffffffffda RBX: 00007f75011b6080 RCX: 00007f7500f8e169 [ 340.869492][T14097] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 340.869501][T14097] RBP: 00007f7501010a68 R08: 0000000000000588 R09: 0000000000000000 [ 340.869510][T14097] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 340.869519][T14097] R13: 0000000000000000 R14: 00007f75011b6080 R15: 00007fff7b962d58 [ 340.869541][T14097] [ 340.869547][T14097] Mem-Info: [ 340.964220][ T9019] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 340.964838][T14097] active_anon:7044 inactive_anon:0 isolated_anon:0 [ 340.964838][T14097] active_file:5468 inactive_file:15497 isolated_file:0 [ 340.964838][T14097] unevictable:1768 dirty:30 writeback:0 [ 340.964838][T14097] slab_reclaimable:7279 slab_unreclaimable:97898 [ 340.964838][T14097] mapped:24207 shmem:2463 pagetables:1172 [ 340.964838][T14097] sec_pagetables:313 bounce:0 [ 340.964838][T14097] kernel_misc_reclaimable:0 [ 340.964838][T14097] free:463076 free_pcp:6240 free_cma:0 [ 340.967145][ T9019] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 341.027361][T14097] Node 0 active_anon:28300kB inactive_anon:0kB active_file:21872kB inactive_file:61876kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96756kB dirty:104kB writeback:0kB shmem:6316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14384kB pagetables:4936kB sec_pagetables:1252kB all_unreclaimable? yes Balloon:0kB [ 341.037564][T14097] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:112kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:16kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 341.047577][T14097] Node 0 DMA free:11244kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 341.056002][T14097] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 341.057771][T14097] Node 0 DMA32 free:313664kB boost:61972kB min:89520kB low:96404kB high:103288kB reserved_highatomic:0KB active_anon:28300kB inactive_anon:0kB active_file:21872kB inactive_file:61876kB unevictable:3536kB writepending:104kB present:2080628kB managed:1265888kB mlocked:0kB bounce:0kB free_pcp:15516kB local_pcp:3020kB free_cma:0kB [ 341.068842][T14097] lowmem_reserve[]: 0 0 0 0 0 [ 341.070401][T14097] Node 1 Normal free:1528036kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:112kB unevictable:3536kB writepending:16kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:9024kB local_pcp:248kB free_cma:0kB [ 341.073481][T14103] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 341.080551][T14097] lowmem_reserve[]: 0 0 0 0 0 [ 341.085055][T14097] Node 0 DMA: 5*4kB (U) 5*8kB (U) 5*16kB (U) 5*32kB (U) 5*64kB (U) 5*128kB (U) 5*256kB (U) 5*512kB (U) 6*1024kB (U) 0*2048kB 0*4096kB = 11244kB [ 341.089825][T14097] Node 0 DMA32: 112*4kB (ME) 89*8kB (ME) 45*16kB (UME) 32*32kB (UE) 146*64kB (UME) 372*128kB (UME) 296*256kB (UME) 133*512kB (UME) 85*1024kB (UM) 11*2048kB (UM) 0*4096kB = 313304kB [ 341.096546][T14097] Node 1 Normal: 23*4kB (UME) 161*8kB (UE) 162*16kB (UE) 303*32kB (UME) 190*64kB (UME) 144*128kB (UME) 132*256kB (UE) 128*512kB (UME) 118*1024kB (UE) 5*2048kB (UME) 306*4096kB (M) = 1528036kB [ 341.102612][T14097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.105652][T14097] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 341.108838][T14097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.111690][T14097] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 341.114621][T14097] 23428 total pagecache pages [ 341.116032][T14097] 0 pages in swap cache [ 341.117311][T14097] Free swap = 124996kB [ 341.118582][T14097] Total swap = 124996kB [ 341.119890][T14097] 1048443 pages RAM [ 341.121118][T14097] 0 pages HighMem/MovableOnly [ 341.122597][T14097] 282640 pages reserved [ 341.124906][T14097] 0 pages cma reserved [ 341.194386][ T40] audit: type=1400 audit(1745075445.978:931): avc: denied { setopt } for pid=14106 comm="syz.1.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 341.203192][T14107] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.237521][T14107] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.296148][T14107] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.369593][T14107] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.393791][ T1328] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 341.543595][ T1328] usb 5-1: Using ep0 maxpacket: 8 [ 341.546957][ T1328] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 341.549923][ T1328] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.550315][T14107] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.553950][ T1328] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.560148][ T1328] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.563724][ T1328] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.568198][T14107] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.568372][ T1328] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.575216][ T1328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.578933][T14107] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.591601][T14107] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.692293][ T24] kernel read not supported for file /swradio2 (pid: 24 comm: kworker/2:0) [ 341.754138][T14116] smc: net device bond0 erased user defined pnetid SYZ0 [ 341.782711][ T1328] usb 5-1: usb_control_msg returned -32 [ 341.786062][ T1328] usbtmc 5-1:16.0: can't read capabilities [ 341.791952][ T1328] usb 5-1: USB disconnect, device number 30 [ 342.034744][ T5980] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 342.183932][ T5980] usb 6-1: Using ep0 maxpacket: 16 [ 342.186644][ T5980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.190818][ T5980] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 342.193403][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 342.195713][ T5980] usb 6-1: Manufacturer: syz [ 342.197137][ T5980] usb 6-1: SerialNumber: syz [ 342.201034][ T5980] usb 6-1: config 0 descriptor?? [ 342.206062][ T5980] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input122 [ 342.407374][T14118] input: syz0 as /devices/virtual/input/input123 [ 342.527107][ T40] audit: type=1400 audit(1745075447.308:932): avc: denied { listen } for pid=14122 comm="syz.0.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 342.643731][T14131] openvswitch: netlink: Message has 8 unknown bytes. [ 342.647615][T14131] SELinux: truncated policydb string identifier [ 342.649839][T14131] SELinux: failed to load policy [ 343.837998][T14154] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 343.953679][ T5999] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 344.123673][ T5999] usb 7-1: Using ep0 maxpacket: 8 [ 344.128302][ T5999] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 344.131027][ T5999] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.134217][ T5999] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 344.137294][ T5999] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.140409][ T5999] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.144562][ T5999] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 344.147470][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.305096][T14172] gre1: entered promiscuous mode [ 344.306647][T14172] gre1: entered allmulticast mode [ 344.353337][ T5999] usb 7-1: usb_control_msg returned -32 [ 344.355253][ T5999] usbtmc 7-1:16.0: can't read capabilities [ 344.366042][ T5999] usb 7-1: USB disconnect, device number 40 [ 344.810143][T14194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32806 sclass=netlink_route_socket pid=14194 comm=syz.5.2362 [ 344.819237][T14194] overlayfs: failed to clone upperpath [ 344.846021][ T5340] bcm5974 6-1:0.0: could not read from device [ 344.900811][ T5980] usb 6-1: USB disconnect, device number 37 [ 344.937135][T14206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14206 comm=syz.1.2366 [ 345.067765][T14210] syz.1.2368: attempt to access beyond end of device [ 345.067765][T14210] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 345.071635][T14210] MINIX-fs: unable to read superblock [ 345.466368][ T5980] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 345.563647][ T3232] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 345.623592][ T5980] usb 6-1: Using ep0 maxpacket: 8 [ 345.627178][ T5980] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.630876][ T5980] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 345.636007][ T5980] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 345.640438][ T5980] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 345.644995][ T5980] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 345.648557][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.656446][ T5980] hub 6-1:1.0: bad descriptor, ignoring hub [ 345.658852][ T5980] hub 6-1:1.0: probe with driver hub failed with error -5 [ 345.662116][ T5980] cdc_wdm 6-1:1.0: skipping garbage [ 345.665526][ T5980] cdc_wdm 6-1:1.0: skipping garbage [ 345.668899][ T5980] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 345.671371][ T5980] cdc_wdm 6-1:1.0: Unknown control protocol [ 345.713761][ T3232] usb 7-1: Using ep0 maxpacket: 16 [ 345.717606][ T3232] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.721911][ T3232] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 345.724978][ T3232] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 345.727465][ T3232] usb 7-1: Manufacturer: syz [ 345.729019][ T3232] usb 7-1: SerialNumber: syz [ 345.732058][ T3232] usb 7-1: config 0 descriptor?? [ 345.736447][ T3232] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input124 [ 345.903778][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 345.935911][T14222] input: syz0 as /devices/virtual/input/input125 [ 346.278173][T14256] Bluetooth: MGMT ver 1.23 [ 346.298783][T14220] usb 6-1: reset high-speed USB device number 38 using dummy_hcd [ 346.433634][T14220] usb 6-1: device descriptor read/64, error -71 [ 346.685092][T14220] usb 6-1: reset high-speed USB device number 38 using dummy_hcd [ 346.814279][T14220] usb 6-1: device descriptor read/64, error -71 [ 346.886693][T14262] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2383'. [ 347.030229][ T40] audit: type=1326 audit(1745075451.808:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14267 comm="syz.5.2386" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ac318e169 code=0x0 [ 347.054288][T14220] usb 6-1: reset high-speed USB device number 38 using dummy_hcd [ 347.074267][T14220] usb 6-1: device descriptor read/8, error -71 [ 347.092212][T14270] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2387'. [ 347.161359][T14276] netlink: 'syz.5.2388': attribute type 10 has an invalid length. [ 347.167105][T14276] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 347.183737][ T40] audit: type=1400 audit(1745075451.958:934): avc: denied { write } for pid=14280 comm="syz.0.2389" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 347.198656][T14276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.313823][T14220] usb 6-1: reset high-speed USB device number 38 using dummy_hcd [ 347.334209][T14220] usb 6-1: device descriptor read/8, error -71 [ 347.446642][T14220] cdc_wdm 6-1:1.0: Error autopm - -16 [ 347.449357][ T6000] usb 6-1: USB disconnect, device number 38 [ 347.453995][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 347.586586][ T6000] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 347.603603][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 347.607292][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 347.610627][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.615136][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.618897][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.622924][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.628755][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 347.632521][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.716232][ T6000] usb 6-1: device descriptor read/64, error -71 [ 347.837824][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 347.839687][ T9] usbtmc 5-1:16.0: can't read capabilities [ 347.954030][ T6000] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 347.958943][T14291] veth1_to_bond: entered allmulticast mode [ 347.962778][T14291] futex_wake_op: syz.5.2392 tries to shift op by -1; fix this program [ 348.023918][T14290] veth1_to_bond: left allmulticast mode [ 348.040177][ T5980] usb 5-1: USB disconnect, device number 31 [ 348.103812][ T6000] usb 6-1: device descriptor read/64, error -71 [ 348.213783][ T6000] usb usb6-port1: attempt power cycle [ 348.346312][ T5340] bcm5974 7-1:0.0: could not read from device [ 348.349839][T14302] TCP: TCP_TX_DELAY enabled [ 348.385814][ T3232] usb 7-1: USB disconnect, device number 41 [ 348.544027][T14322] sp0: Synchronizing with TNC [ 348.547677][T14322] tmpfs: Bad value for 'mpol' [ 348.833593][ T6000] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 348.856392][ T6000] usb 6-1: Using ep0 maxpacket: 8 [ 348.859305][ T6000] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 348.861889][ T6000] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.865860][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.869020][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.872096][ T6000] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.877763][ T6000] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 348.881592][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.090632][ T6000] usb 6-1: GET_CAPABILITIES returned 0 [ 349.092482][ T6000] usbtmc 6-1:16.0: can't read capabilities [ 349.280839][T14337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14337 comm=syz.0.2410 [ 349.296639][ T6000] usb 6-1: USB disconnect, device number 41 [ 349.943743][ T6000] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 350.029375][T14357] netlink: 'syz.1.2417': attribute type 11 has an invalid length. [ 350.032506][T14357] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2417'. [ 350.103817][ T6000] usb 5-1: Using ep0 maxpacket: 8 [ 350.105721][ T6000] usb 5-1: no configurations [ 350.107041][ T6000] usb 5-1: can't read configurations, error -22 [ 350.240828][ T40] audit: type=1400 audit(1745075455.018:935): avc: denied { ioctl } for pid=14366 comm="syz.1.2421" path="socket:[55903]" dev="sockfs" ino=55903 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 350.254059][ T6000] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 350.414100][ T6000] usb 5-1: Using ep0 maxpacket: 8 [ 350.418523][ T6000] usb 5-1: no configurations [ 350.420014][ T6000] usb 5-1: can't read configurations, error -22 [ 350.422170][ T6000] usb usb5-port1: attempt power cycle [ 350.773854][ T6000] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 350.794522][ T6000] usb 5-1: Using ep0 maxpacket: 8 [ 350.797270][ T6000] usb 5-1: no configurations [ 350.799327][ T6000] usb 5-1: can't read configurations, error -22 [ 350.863685][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 350.925121][ T6000] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 350.944084][ T6000] usb 5-1: Using ep0 maxpacket: 8 [ 350.946256][ T6000] usb 5-1: no configurations [ 350.947776][ T6000] usb 5-1: can't read configurations, error -22 [ 350.950109][ T6000] usb usb5-port1: unable to enumerate USB device [ 351.025991][T14375] jfs: Unknown parameter 'discardck_acquire_returned' [ 351.383852][ T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 351.533820][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 351.537454][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 351.541123][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.545327][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.549225][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.553298][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.558760][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 351.562478][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.772009][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 351.773964][ T24] usbtmc 7-1:16.0: can't read capabilities [ 351.871644][T14382] overlayfs: failed to clone upperpath [ 351.908226][T14385] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 351.975245][ T24] usb 7-1: USB disconnect, device number 42 [ 352.713781][ T40] audit: type=1400 audit(1745075457.498:936): avc: denied { shutdown } for pid=14406 comm="syz.2.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 352.772938][ T40] audit: type=1400 audit(1745075457.548:937): avc: denied { create } for pid=14406 comm="syz.2.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 353.589819][T14416] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 353.800564][ T40] audit: type=1400 audit(1745075458.578:938): avc: denied { accept } for pid=14417 comm="syz.0.2439" laddr=172.20.20.10 lport=58409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 353.849704][T14422] xt_hashlimit: invalid interval [ 353.907601][T14428] Cannot find set identified by id 65534 to match [ 354.923591][ T5980] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 355.013974][ T3232] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 355.073986][ T5980] usb 7-1: Using ep0 maxpacket: 8 [ 355.076935][ T5980] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 355.079530][ T5980] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.082469][ T5980] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.085972][ T5980] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.089114][ T5980] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.093145][ T5980] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 355.096182][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.166070][T14459] ksmbd: Unknown IPC event: 3, ignore. [ 355.173635][ T3232] usb 5-1: Using ep0 maxpacket: 8 [ 355.184593][ T3232] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 355.187189][ T3232] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.190313][ T3232] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.193318][ T3232] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.196941][ T3232] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.201729][ T3232] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 355.205036][ T3232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.305795][T14461] kvm: Disabled LAPIC found during irq injection [ 355.307386][ T5980] usb 7-1: GET_CAPABILITIES returned 0 [ 355.310232][ T5980] usbtmc 7-1:16.0: can't read capabilities [ 355.412465][ T3232] usb 5-1: GET_CAPABILITIES returned 0 [ 355.414811][ T3232] usbtmc 5-1:16.0: can't read capabilities [ 355.511123][ T3232] usb 7-1: USB disconnect, device number 43 [ 355.531799][T14475] netlink: 'syz.1.2459': attribute type 2 has an invalid length. [ 355.532598][T14474] netlink: 'syz.1.2459': attribute type 2 has an invalid length. [ 355.534889][T14475] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.2459'. [ 355.537453][T14474] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.2459'. [ 355.614230][ T1328] usb 5-1: USB disconnect, device number 36 [ 355.673265][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'. [ 356.421176][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2471'. [ 356.635627][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2472'. [ 356.660121][T14520] netfs: Couldn't get user pages (rc=-14) [ 356.662629][T14520] netfs: Zero-sized read [R=13] [ 356.676462][ T40] audit: type=1400 audit(1745075461.458:939): avc: denied { accept } for pid=14516 comm="syz.1.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 356.913921][ T3232] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 357.043600][ T3232] usb 6-1: device descriptor read/64, error -71 [ 357.043602][ T6000] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 357.193810][ T6000] usb 5-1: Using ep0 maxpacket: 8 [ 357.197202][ T6000] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 357.200459][ T6000] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 357.204264][ T6000] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 357.207485][ T6000] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 357.210677][ T6000] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.215211][ T6000] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 357.217929][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.283582][ T3232] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 357.414188][ T3232] usb 6-1: device descriptor read/64, error -71 [ 357.426297][ T6000] usb 5-1: usb_control_msg returned -71 [ 357.428151][ T6000] usbtmc 5-1:16.0: can't read capabilities [ 357.433138][ T6000] usb 5-1: USB disconnect, device number 37 [ 357.534135][ T3232] usb usb6-port1: attempt power cycle [ 357.538180][T14532] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 357.569111][T14534] fuse: Unknown parameter 'grou_id' [ 357.833900][ T24] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 357.904106][ T3232] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 357.924344][ T3232] usb 6-1: device descriptor read/8, error -71 [ 357.983567][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 357.986383][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 357.988963][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 357.992057][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 357.996306][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.000064][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.004239][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 358.007367][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.184264][ T3232] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 358.205908][ T3232] usb 6-1: device descriptor read/8, error -71 [ 358.215516][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 358.217938][ T24] usbtmc 7-1:16.0: can't read capabilities [ 358.324123][ T3232] usb usb6-port1: unable to enumerate USB device [ 358.417469][ T5980] usb 7-1: USB disconnect, device number 44 [ 358.574252][ T3232] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 358.733632][ T3232] usb 5-1: Using ep0 maxpacket: 16 [ 358.736538][ T3232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.740182][ T3232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.744257][ T3232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 358.748151][ T3232] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 358.751057][ T3232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.755149][ T3232] usb 5-1: config 0 descriptor?? [ 358.939678][T14551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4883 sclass=netlink_route_socket pid=14551 comm=syz.5.2483 [ 359.003286][T14561] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 359.149541][T14563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49910 sclass=netlink_route_socket pid=14563 comm=syz.2.2486 [ 359.161429][ T3232] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 359.164057][ T3232] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 359.166287][ T3232] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 359.168529][ T3232] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 359.170741][ T3232] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 359.175217][ T3232] input: HID 0955:7214 Haptics as /devices/virtual/input/input126 [ 359.198733][ T3232] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 359.201511][ T3232] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 359.361102][T14544] random: crng reseeded on system resumption [ 359.471678][T14567] fuse: Bad value for 'fd' [ 359.483737][ T5999] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 359.483969][ T34] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 359.483992][ T57] usb 5-1: USB disconnect, device number 38 [ 359.487783][ T57] ------------[ cut here ]------------ [ 359.490050][ T34] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 359.491729][ T57] workqueue: work disable count underflowed [ 359.491776][ T57] WARNING: CPU: 1 PID: 57 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 359.493440][ T34] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 359.496698][ T57] Modules linked in: [ 359.496720][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/1:1 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 359.496733][ T57] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 359.496740][ T57] Workqueue: usb_hub_wq hub_event [ 359.496757][ T57] RIP: 0010:enable_work+0x2f8/0x340 [ 359.496769][ T57] Code: 89 ee e8 cb 69 37 00 45 84 ed 0f 85 29 fe ff ff e8 dd 6e 37 00 c6 05 f3 b8 ea 0e 01 90 48 c7 c7 60 e5 8b 8b e8 99 fd f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 c7 e8 9c 00 e9 aa fe ff ff [ 359.496780][ T57] RSP: 0018:ffffc90000aef3c8 EFLAGS: 00010086 [ 359.496789][ T57] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817adff8 [ 359.496808][ T57] RDX: ffff888020470000 RSI: ffffffff817ae005 RDI: 0000000000000001 [ 359.498662][ T34] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 359.501324][ T57] RBP: ffff88804f502730 R08: 0000000000000001 R09: 0000000000000000 [ 359.501333][ T57] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200015de7a [ 359.501339][ T57] R13: 0000000000000000 R14: ffff88804f502728 R15: ffffffff8fc4a640 [ 359.501346][ T57] FS: 0000000000000000(0000) GS:ffff8880d6ab2000(0000) knlGS:0000000000000000 [ 359.501368][ T57] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.545885][ T57] CR2: 0000200000009000 CR3: 0000000043688000 CR4: 0000000000352ef0 [ 359.548378][ T57] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.550905][ T57] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.553374][ T57] Call Trace: [ 359.554458][ T57] [ 359.555424][ T57] ? __pfx_enable_work+0x10/0x10 [ 359.557025][ T57] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 359.558894][ T57] __cancel_work_sync+0xe7/0x130 [ 359.560512][ T57] thermal_zone_device_unregister+0x239/0x450 [ 359.562444][ T57] ? __pfx_shield_remove+0x10/0x10 [ 359.564097][ T57] power_supply_unregister+0x10a/0x150 [ 359.565841][ T57] shield_remove+0x75/0x130 [ 359.567300][ T57] ? __pfx_shield_remove+0x10/0x10 [ 359.568979][ T57] hid_device_remove+0xce/0x260 [ 359.570550][ T57] ? __pfx_hid_device_remove+0x10/0x10 [ 359.572291][ T57] device_remove+0xc8/0x170 [ 359.573772][ T57] device_release_driver_internal+0x44b/0x620 [ 359.575723][ T57] bus_remove_device+0x22f/0x420 [ 359.577315][ T57] device_del+0x396/0x9f0 [ 359.578707][ T57] ? __pfx_device_del+0x10/0x10 [ 359.580274][ T57] ? do_raw_spin_lock+0x12c/0x2b0 [ 359.581885][ T57] hid_destroy_device+0x19c/0x240 [ 359.583504][ T57] usbhid_disconnect+0xa0/0xe0 [ 359.585048][ T57] usb_unbind_interface+0x1da/0x9a0 [ 359.586713][ T57] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 359.588510][ T57] ? __pfx_usb_unbind_interface+0x10/0x10 [ 359.590354][ T57] device_remove+0x122/0x170 [ 359.591844][ T57] device_release_driver_internal+0x44b/0x620 [ 359.593813][ T57] bus_remove_device+0x22f/0x420 [ 359.595411][ T57] device_del+0x396/0x9f0 [ 359.596813][ T57] ? __pfx_device_del+0x10/0x10 [ 359.598375][ T57] ? kobject_put+0x210/0x5a0 [ 359.599882][ T57] usb_disable_device+0x355/0x7d0 [ 359.601502][ T57] usb_disconnect+0x2e1/0x920 [ 359.603032][ T57] hub_event+0x1c57/0x4fa0 [ 359.604481][ T57] ? __lock_acquire+0xaa4/0x1ba0 [ 359.606065][ T57] ? __pfx_hub_event+0x10/0x10 [ 359.607596][ T57] ? debug_object_deactivate+0x1ec/0x3a0 [ 359.609406][ T57] ? rcu_is_watching+0x12/0xc0 [ 359.610943][ T57] process_one_work+0x9cc/0x1b70 [ 359.612580][ T57] ? __pfx_process_one_work+0x10/0x10 [ 359.614306][ T57] ? assign_work+0x1a0/0x250 [ 359.615793][ T57] worker_thread+0x6c8/0xf10 [ 359.617286][ T57] ? __pfx_worker_thread+0x10/0x10 [ 359.618920][ T57] kthread+0x3c2/0x780 [ 359.620234][ T57] ? __pfx_kthread+0x10/0x10 [ 359.621713][ T57] ? __pfx_kthread+0x10/0x10 [ 359.623199][ T57] ? __pfx_kthread+0x10/0x10 [ 359.624686][ T57] ? __pfx_kthread+0x10/0x10 [ 359.626168][ T57] ? rcu_is_watching+0x12/0xc0 [ 359.627703][ T57] ? __pfx_kthread+0x10/0x10 [ 359.629197][ T57] ret_from_fork+0x45/0x80 [ 359.630628][ T57] ? __pfx_kthread+0x10/0x10 [ 359.632104][ T57] ret_from_fork_asm+0x1a/0x30 [ 359.633667][ T57] [ 359.634703][ T57] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 359.636979][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/1:1 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 359.640685][ T57] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 359.644029][ T57] Workqueue: usb_hub_wq hub_event [ 359.645641][ T57] Call Trace: [ 359.646722][ T57] [ 359.647682][ T57] dump_stack_lvl+0x3d/0x1f0 [ 359.649208][ T57] panic+0x71c/0x800 [ 359.650470][ T57] ? __pfx_panic+0x10/0x10 [ 359.651906][ T57] ? show_trace_log_lvl+0x29b/0x3e0 [ 359.653589][ T57] ? check_panic_on_warn+0x1f/0xb0 [ 359.655223][ T57] ? enable_work+0x2f8/0x340 [ 359.656724][ T57] check_panic_on_warn+0xab/0xb0 [ 359.658313][ T57] __warn+0xf6/0x3c0 [ 359.659582][ T57] ? enable_work+0x2f8/0x340 [ 359.661074][ T57] report_bug+0x3c3/0x580 [ 359.662463][ T57] ? enable_work+0x2f8/0x340 [ 359.663961][ T57] handle_bug+0x184/0x210 [ 359.665367][ T57] exc_invalid_op+0x17/0x50 [ 359.666835][ T57] asm_exc_invalid_op+0x1a/0x20 [ 359.668407][ T57] RIP: 0010:enable_work+0x2f8/0x340 [ 359.670095][ T57] Code: 89 ee e8 cb 69 37 00 45 84 ed 0f 85 29 fe ff ff e8 dd 6e 37 00 c6 05 f3 b8 ea 0e 01 90 48 c7 c7 60 e5 8b 8b e8 99 fd f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 c7 e8 9c 00 e9 aa fe ff ff [ 359.676101][ T57] RSP: 0018:ffffc90000aef3c8 EFLAGS: 00010086 [ 359.678044][ T57] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817adff8 [ 359.680544][ T57] RDX: ffff888020470000 RSI: ffffffff817ae005 RDI: 0000000000000001 [ 359.683057][ T57] RBP: ffff88804f502730 R08: 0000000000000001 R09: 0000000000000000 [ 359.685561][ T57] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200015de7a [ 359.688066][ T57] R13: 0000000000000000 R14: ffff88804f502728 R15: ffffffff8fc4a640 [ 359.690599][ T57] ? __warn_printk+0x198/0x350 [ 359.692131][ T57] ? __warn_printk+0x1a5/0x350 [ 359.693686][ T57] ? enable_work+0x2f7/0x340 [ 359.695168][ T57] ? __pfx_enable_work+0x10/0x10 [ 359.696755][ T57] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 359.698754][ T57] __cancel_work_sync+0xe7/0x130 [ 359.700356][ T57] thermal_zone_device_unregister+0x239/0x450 [ 359.702312][ T57] ? __pfx_shield_remove+0x10/0x10 [ 359.703985][ T57] power_supply_unregister+0x10a/0x150 [ 359.705721][ T57] shield_remove+0x75/0x130 [ 359.707174][ T57] ? __pfx_shield_remove+0x10/0x10 [ 359.708829][ T57] hid_device_remove+0xce/0x260 [ 359.710382][ T57] ? __pfx_hid_device_remove+0x10/0x10 [ 359.712111][ T57] device_remove+0xc8/0x170 [ 359.713605][ T57] device_release_driver_internal+0x44b/0x620 [ 359.715504][ T57] bus_remove_device+0x22f/0x420 [ 359.717087][ T57] device_del+0x396/0x9f0 [ 359.718469][ T57] ? __pfx_device_del+0x10/0x10 [ 359.720022][ T57] ? do_raw_spin_lock+0x12c/0x2b0 [ 359.721632][ T57] hid_destroy_device+0x19c/0x240 [ 359.723240][ T57] usbhid_disconnect+0xa0/0xe0 [ 359.724778][ T57] usb_unbind_interface+0x1da/0x9a0 [ 359.726429][ T57] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 359.728211][ T57] ? __pfx_usb_unbind_interface+0x10/0x10 [ 359.730019][ T57] device_remove+0x122/0x170 [ 359.731494][ T57] device_release_driver_internal+0x44b/0x620 [ 359.733450][ T57] bus_remove_device+0x22f/0x420 [ 359.735038][ T57] device_del+0x396/0x9f0 [ 359.736427][ T57] ? __pfx_device_del+0x10/0x10 [ 359.737974][ T57] ? kobject_put+0x210/0x5a0 [ 359.739452][ T57] usb_disable_device+0x355/0x7d0 [ 359.741062][ T57] usb_disconnect+0x2e1/0x920 [ 359.742566][ T57] hub_event+0x1c57/0x4fa0 [ 359.743998][ T57] ? __lock_acquire+0xaa4/0x1ba0 [ 359.745573][ T57] ? __pfx_hub_event+0x10/0x10 [ 359.747081][ T57] ? debug_object_deactivate+0x1ec/0x3a0 [ 359.748874][ T57] ? rcu_is_watching+0x12/0xc0 [ 359.750397][ T57] process_one_work+0x9cc/0x1b70 [ 359.751974][ T57] ? __pfx_process_one_work+0x10/0x10 [ 359.753696][ T57] ? assign_work+0x1a0/0x250 [ 359.755170][ T57] worker_thread+0x6c8/0xf10 [ 359.756661][ T57] ? __pfx_worker_thread+0x10/0x10 [ 359.758282][ T57] kthread+0x3c2/0x780 [ 359.759590][ T57] ? __pfx_kthread+0x10/0x10 [ 359.761063][ T57] ? __pfx_kthread+0x10/0x10 [ 359.762532][ T57] ? __pfx_kthread+0x10/0x10 [ 359.764010][ T57] ? __pfx_kthread+0x10/0x10 [ 359.765430][ T57] ? rcu_is_watching+0x12/0xc0 [ 359.766917][ T57] ? __pfx_kthread+0x10/0x10 [ 359.768398][ T57] ret_from_fork+0x45/0x80 [ 359.769833][ T57] ? __pfx_kthread+0x10/0x10 [ 359.771307][ T57] ret_from_fork_asm+0x1a/0x30 [ 359.772847][ T57] [ 359.774523][ T57] Kernel Offset: disabled [ 359.775936][ T57] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:06:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000742bc1 RBX=0000000000000000 RCX=ffffffff8b72a419 RDX=0000000000000000 RSI=ffffffff8dbef7b7 RDI=ffffffff8bf46440 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90864610 R15=0000000000000000 RIP=ffffffff8b728caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb5cf771f20 CR3=000000002baec000 CR4=00352ef0 DR0=0000000000006000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ac3211a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ac3211a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ac3211a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ac3211a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ac3211aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ac3211bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000031 RCX=ffffffff819b30f2 RDX=ffff888020470000 RSI=ffffffff819b30e0 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90000aef058 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff9200015de0d R13=0000000000000000 R14=ffff88801e2d4880 R15=ffffc90000aef120 RIP=ffffffff819b30e2 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000009000 CR3=0000000043688000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=0000000000000007 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7501011aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7501011bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7501183488 00007f7501183480 00007f7501183478 00007f7501183450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7501ced100 00007f7501183440 00007f7501183458 00007f7501adc0de ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7501183498 00007f7501183490 00007f7501183488 00007f7501183480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 0000000000000264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000006de2f RBX=0000000000000001 RCX=ffffc90036002000 RDX=0000000000080000 RSI=ffffffff81af5c3f RDI=0000000000000005 RBP=ffffc90006ce7a70 RSP=ffffc90006ce7998 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000d9cf38 R13=0000000000000000 R14=0000000000000001 R15=ffff888039211f00 RIP=ffffffff81bb4fe6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7501de66c0 ffffffff 00c00000 GS =0000 ffff8880d6bb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7501da4d58 CR3=0000000043688000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fe01ff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0840000404420020 Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff58eb8a00 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732531dfff40b3 73732531dffa8583 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732531dfff17d3 73730c9e090c6833 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000231 00000000322e7465 676461672d776172 2f73726576697264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0384d60106217ed0 00005647c8a6e2cd 0000000000000301 0000000000000030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056003100306e 6f6d77682f305f65 6b69727473726564 6e7568742f796c70 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7b7f7f7f6e7f 7d7f7b7f7f777f6f 7e793f7f7f7f7f7e 7e7f7f757e777776 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333b263d333b263f 333b2639333b2638 333b263b333b263a 333b264c323b264f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4434312c3034312c 3530312c3030302c 3031316b2c332c00 2c30372d31303030 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32332c2c302c302c 2c30002c30302c2c 2c2c312c2c332c00 2c2c312c2c30302c ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=00000000006a65bb RBX=0000000000000003 RCX=ffffffff8b72a419 RDX=0000000000000000 RSI=ffffffff8dbef7b7 RDI=ffffffff8bf46440 RBP=ffffed1003bd3000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801de98000 R14=ffffffff90864610 R15=0000000000000000 RIP=ffffffff8b728caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c394155 CR3=0000000030e86000 CR4=00352ef0 DR0=0000000000000035 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=0000000000000002 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa2c6a640 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39353320205b3e34 3c0020296c6c7566 2854504d45455250 2030232063643300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3335332020513434 3600202366667566 2254504745455250 2030232063643300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030302020204252 2030303030302e30 3030202030303030 0a20383030312030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020302020203735 2020202030302430 3030202024303030 0020323030300020 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 305a59582a573d3f 5e2a2a2a51573a32 3d3c333e24333f39 2a2a51343e36006c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3f5e2a2a2a5157 33323d3c333e2433 3f392a2a51343e36 003c323a3a3b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000