last executing test programs: 1m3.63367406s ago: executing program 0 (id=671): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x9, 0x0, 0x0, 0x9}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r2, @ANYBLOB="800002000a00020001"], 0x28}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x64, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "ce75713e1f83ac361c8b3ce671d0f6040eeeb5f3d682aa44b5baa75d0e6f30e9", "f78c045a5d3e3dd45207daba0bf8fb10", {"4633251188e45d79a220d115a0774e8a", "0c3e29a4f380cf106865a0edf7bf2a3d"}}}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) close(0xffffffffffffffff) 1m3.631613001s ago: executing program 0 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000001c0)={0x400, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000180)=[0x1], &(0x7f0000000200), &(0x7f00000000c0)}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008000280040005"], 0x76}}, 0xc000) r3 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r3, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="8f29e38d717cff1d06630323bd", 0xd}, {&(0x7f00000000c0)="11bccc48ef2606c8476918ccba7ee3c79c6e965b12e3ba6bafb770b669e304aec49bfb4568b56154f92df59ccb2ae76eb9589676c56f38b6218fb6eb9272c350d7803d14e40390e0c3caa1a1a74bc471405fc885801bca3d1346ee506ad78e909bdb970186274db30be9a1b0e9b5287fbe36746abe630acf0da03a1986459a0cd530687720d320521427d58dae2cb4db089ff594745dff2e51bf453118", 0x9d}, {&(0x7f00000001c0)="13b4749c022c0526d0e09202212fe29b474816f647ac50f7689bc9399487ff83e013bae429c779dd6e7d8e31e7aeed91510a231bbd597a54e8048e712af94a261b87a26f5777469962", 0x49}], 0x3, 0x0, 0x0, 0x40001}}, {{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000300)="687b8f77f77dffba91e7e8c4fea1fd7250540387b849f46c17122b7b2dd8c1859e74ecf5d627b991e974315d61684e2049010b40ac7feb0074f29214caa523e6e3a3500342bb2e9107bd4949053804efc0c2dc6ecf4a7db832cda4292136c2a0f658627892cd7e2e33e945869a2cea81e5d50e8880f4dd94de480e46e413baa3c2a89c50f7c7712aba58214e2a3e5e37530cf063351d66da266d8d1b86c8ef48686ad3823495d9803a13fbf8a554c0c6b0bc0d55d1275729829d58f9", 0xbc}, {&(0x7f00000003c0)="6175b12248ba7757f58573ebb807ee9fbb0075301cf1c62d6a6f8189cfd29263e428d8e0727b8eaca98ff4c490b3c18070c3cb3862ad3d404e2ae47c7535d1dc75380cdfbee5dc6ccc3386d6cfd26f4e9e300ee779f026ec7ee8285b3cf85404314c8ea179a4caaa7a91ce94ccf687e3e9ef52ebbc41c06ded45383d82b28653a51a5d3a7f56c552f8909dd5208546a541ec46a674c02c06cba2c38a91392b3ecd3729daa8284e2d4555a163003c04f02d50adc819e275d22df3cee48bee4f8e3f7b12cbab53abdc4c4e36de840c544c70c4515e87e2698bc2013b9635322e", 0xdf}, {&(0x7f00000004c0)="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", 0xfb}, {&(0x7f00000005c0)="2f131555a04311fb927f4a859c6d371d8f01d88b7cdb883a14a5beb057495d438985be27ebf16a395753619d4429694e874ae022deb21d1a2e1ef5", 0x3b}, {&(0x7f0000000600)="7175e0560b65e403402bcbbdec0405a1371262fec08b81db31f7a276002afde63379fafd096a52a76426b809b83b0eb653a676634ef92f63da06a278ee6b67869c449786ff1c9190aa62606299fe48a99855e9a23cc98de08d0983fe59c31f095e35f830fbc298a15048a4c55aa925c4a4de91488461aaeee90ee7c5a1524c028adcd4a4be0b505b8a365fd277caa7af1c0d331ca4f5aec4de3ecfc10ec780dc3768ea1dc3b3555c9c974c13eb4d1219bce779e18df9e45fad884cf4dea7decd46e28a357b06a93e7d383cee1501d0f0d0702776ba8a", 0xd6}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)}, {&(0x7f0000001740)="9c2df6bb1d708482b8b5accddecad69bf6c1d136374dfae3347c8271357cc0dbd38371be1985b373bb01641862df278ec64cda0a2e51aca4ec29e01b415734952fec4467afbfc2cf15fc5fa3e6cb687870eb6ea0da3671b4eb2b5fcdd21ed3e544b77ab3935a98f81244dc5a4e93b0d964ae6eb2f015774838a97422be5a7a37cccd90cbff44be019dd0e2b5d7d667f6e7d22a55597682e546ac6b20ddae02e3b55e8c9c43cbdc8898cc82fd3c5c6fe79f9c7d837658a8b0cdd17d4616d2060977fd5ec8e372", 0xc6}], 0x8, 0x0, 0x0, 0x20004801}}], 0x2, 0x4008000) 1m3.563456299s ago: executing program 0 (id=677): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x80000007) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) 1m3.483032569s ago: executing program 0 (id=679): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0/../file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x80, r8, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9c62937138262f83213927e4c3"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "89b3727b62141b5965da5fd5389fa1"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "15e013409ca2e9818f396634d0"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1}, 0x1c}}, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x300) 1m3.407459422s ago: executing program 0 (id=680): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800008, 0x13, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_setup(0x3cab, &(0x7f0000000040)={0x0, 0xf55a, 0x8000, 0x0, 0x1bb}, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x13, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e5e172bb0129f777"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf9473aa5d3e09426}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2c}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000480)=@req={0x28, &(0x7f0000000440)={'batadv_slave_0\x00', @ifru_map={0x3ff, 0x8, 0x3, 0x2, 0x3, 0x1}}}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r6) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r9, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r6) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r10, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x208, r11, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x219}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_ID={0xa6, 0x3, "a970e9bef893048b66eb4fdb2c5d51aecf8052489be70e0bc73c82617f16e251ddf8d29bff1ff17823b3d104abe7bf9d29de3ec2bdefebbd2916789c132dbd9cc0547a9787fcc654df649ba3985bb61ccedb8a9bcfafd4ddb6a77dde1434f1f70717952f492f50ad259bef93ef1680cb01356e5cfb969b4d9c0cb321218313956b686084a50a19e1722e310495ec7733f39474b89b5a78945fbcc2aa9b08f8a1be9c"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4d, 0x3, "ce9567e186a520cd85872dc32cbba13e9d1dac7261002e37d12aa922c9b1e67101a3259380a1552840b5e29f0e7b0ebc798301781d5d7983520aa6421b35b533520ab79a1f30f3d2fe"}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40800}, 0x200480c1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c40)=0x14) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r6) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r12, 0x900, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x61}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4004800) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000dc0)={0x80000001, 0x7, 0x1, "9fd14b0d978a793a6c7ef66a133df1f5f36d0bfed9e8e8649b1a3fc38e14d41e", 0x2036315a}) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000001100)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e40)={0x250, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b969c8c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x25a1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd0f4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x89}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc00}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x180}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x5d, 0x3, "42387a5d86934b00af8ca24414f6fa0540dfe589c69b148f19c58dad200a04dcbdde28df100de22ac4b83879de5843e043d4b1da51042a9c6a22dad5d9c637f0492a300ba0ff72ba3dde0cbbe1e6908c3ed704101dc3b12fa6"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xdda}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x16b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x4080}, 0x400c811) 1m3.104138038s ago: executing program 0 (id=681): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "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"}) r1 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x30, 0x1, 0x0, "000000000034b52ba75066c27891ca55e21f0000000000b2b60ec400", 0x30323953}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, r5, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r4, 0x3e}, 0x8) r7 = fsopen(&(0x7f0000000500)='bfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}, &(0x7f0000000040)=0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, r5, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r4, 0x3e}, 0x8) r7 = fsopen(&(0x7f0000000500)='bfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x3, r11, 0x0, 0x0}) r12 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r14 = dup(r13) ioctl$KVM_SET_MSRS(r14, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000410101c000000000fefffffffffff4ff"]) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x20, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa8, 0x60}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10004000) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b00060065003f"], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 44.033959373s ago: executing program 2 (id=1005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c0002800500010000000020440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000000000080007400000000018000680140004"], 0xb4}}, 0x0) 44.032929627s ago: executing program 2 (id=1006): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$getown(r0, 0x9) kcmp(0xffffffffffffffff, r1, 0x6, r0, r0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003b15000000000000000000000000d2c3ac98d24630ab9f9e73f88b78e5c62ad72c51dff6fceefdd838362c5b1b136414ff38f6588ab5f29f62760e296cb46ed5ee24f636e81f930ec19e9dc232b7c733465873114a4d5bb32d356946a7a85d513cd49a61acd92097ce0b12ea41f38c33ab88d589550ab2ce55df120ff7961424", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128008000100677470002000028005000500010000001400080000000000000000000000ffffac1414bb"], 0x4c}}, 0x0) 43.952855363s ago: executing program 2 (id=1007): syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x8000001}, [@default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 43.951857367s ago: executing program 2 (id=1010): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x400, 0x4f424752, 0x1, 0x8, 0x6, 0xb, 0xa, 0x0, 0x8, 0x0, 0x7}}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="8466879d520d5346f39317470bf20e1bf513dcd41379e234be3f5a869f2aee7032dd18e573dfd0a86cd4f327bdf53193635b59bf0404dc304c07cb7c7d94a14c005967877c999dcfba20e1963f7e5646e6cb419bc8f4914a2a02fdbec483bd391a5edb641bd896838a836bf3a305090eb5186d8f4d31b408c00cdcd37871cfd4afd2f02ecf71fbb57916d49dce43ef5620612253ece8e285c35b68b3f880787cbf8f67f31205274db53bf4aa199ca1d2c85b44b04a5b4f70f4a792e83d56a5504ad00a", 0xc3}], 0x1) 28.89026637s ago: executing program 33 (id=1010): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x400, 0x4f424752, 0x1, 0x8, 0x6, 0xb, 0xa, 0x0, 0x8, 0x0, 0x7}}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="8466879d520d5346f39317470bf20e1bf513dcd41379e234be3f5a869f2aee7032dd18e573dfd0a86cd4f327bdf53193635b59bf0404dc304c07cb7c7d94a14c005967877c999dcfba20e1963f7e5646e6cb419bc8f4914a2a02fdbec483bd391a5edb641bd896838a836bf3a305090eb5186d8f4d31b408c00cdcd37871cfd4afd2f02ecf71fbb57916d49dce43ef5620612253ece8e285c35b68b3f880787cbf8f67f31205274db53bf4aa199ca1d2c85b44b04a5b4f70f4a792e83d56a5504ad00a", 0xc3}], 0x1) 5.081636413s ago: executing program 3 (id=1499): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$cdc_ncm(0x6, 0x8c, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x8, 0x50, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d3d8"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0xcf, 0xe, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x19}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1000, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x7, 0x2, 0x0, 0x4, 0x6}, @country_functional={0x8, 0x24, 0x7, 0x99, 0x2, [0x3]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x5, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x65, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1, 0x8, 0x9}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x210, 0x5, 0x5, 0xf5, 0x40, 0x10}, 0x3c, &(0x7f0000000040)={0x5, 0xf, 0x3c, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "d11a9be9eb2e89757787fb695b6923d2"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf, 0x7, [0xff3f00, 0x0, 0xc0, 0xffc00f, 0x3fc0]}]}, 0x5, [{0x58, &(0x7f0000000280)=@string={0x58, 0x3, "f129064008f031fc1042df9fd39a0e746328f60b0a049d116a624fb173d7196adb7e7d5faa8253f0e32786c11351e56413c6e3b2cff4cc2e989e55c568ea056ce5fc12d4424c9b27bc6ee86c8a61c0f002be31bcc13d"}}, {0x53, &(0x7f0000000380)=@string={0x53, 0x3, "96aeb4a0e8659e1cf6ba1b9d0371eae70cd36d9358834fe7fd21a27ca7b27e7cad2eb13704d081f538f0e4f09aa22e1394b843bca8b486a64332a45824b9fa850b54202626a27b18e74b966bb6ec86d280"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x410}}, {0x42, &(0x7f0000000440)=@string={0x42, 0x3, "bc796510e8f43dad7eb733e9962f897e0dbb0f47b1db3b3c4d6336ac4ade76763f57f538343806207784e2fed06384b68709a081a0ada09687475cc718c5d583"}}]}) syz_usb_ep_read(r2, 0xa, 0xde, &(0x7f0000000540)=""/222) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400a788", @ANYRES16=r0, @ANYBLOB="17090100000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb0500210000000000"], 0x64}}, 0x0) 3.398761522s ago: executing program 4 (id=1523): syz_emit_ethernet(0x31, &(0x7f0000000180)={@random="c1114edeb2f2", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xf, 0x0, @opaque="d73f3ea74f34ea"}}}}}, 0x0) 3.393762055s ago: executing program 1 (id=1524): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x732}]}, 0x24}, 0x1, 0x0, 0x0, 0x40448d4}, 0x20008000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe00000100000000040012"], 0x30}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x101) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3}}}}]}, 0x48}}, 0x0) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) prctl$PR_MCE_KILL(0x41, 0x0, 0x0) ioctl$CDROMREADRAW(r10, 0x5314, &(0x7f0000002f00)={0x0, 0x2, 0x9, 0x8, 0x2, 0x8}) 3.333648938s ago: executing program 4 (id=1525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x10, @private=0xa0100fd}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x2}, &(0x7f00000002c0)=0xfffffffffffffffd, 0x0, 0x4, 0x7fff, 0x3, 0xf, 0x31, 0x2}}], 0x58}, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af24, &(0x7f00000001c0)) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ec23000040"]) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) recvfrom(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_int(r6, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) (async) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000240)) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0xcba0, 0x100b, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000000c0)='>', 0x1}], 0x1}, 0x3) 3.193359177s ago: executing program 4 (id=1529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000181000/0x1000)=nil, 0x1000}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 2.33369064s ago: executing program 4 (id=1530): sched_getattr(0x0, &(0x7f0000000080)={0x38}, 0x38, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3, 0x0, 0x3, 0x0, 0x2, 0x6, 0x10, 0x301, 0x38, 0xffffffff, 0xf, 0x0, 0x20, 0x3f, 0x4, 0x0, 0x4}}, 0x58) close(r3) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05a3a6a7104eadd3a8750b"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.053458982s ago: executing program 3 (id=1531): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) read$FUSE(r2, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x29, 0x5c682b2b, 0x803020, 0x81, 0x3, 0x8, 0x9, 0x0, 0x0, 0x10, 0x6}}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r5, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0xffffff77, 0x6, '9P2000'}, 0x13) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) 1.983454692s ago: executing program 1 (id=1532): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x65}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "134fa38a4a15df8975d90dcf8dd03820"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x31}, @NL80211_ATTR_SSID={0x23, 0x34, @random="462e7e6bd77aa009b1436bda194a0286f059df064fd0663e16d7c933cb697f"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfff8}]}, 0x68}, 0x1, 0x0, 0x0, 0xa0004}, 0x20004001) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000015c0)={'ip6_vti0\x00', &(0x7f0000001540)={'ip6gre0\x00', 0x0, 0x2f, 0xb7, 0x8, 0x15c3, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x10, 0x80, 0x4, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000015c0)={'ip6_vti0\x00', &(0x7f0000001540)={'ip6gre0\x00', 0x0, 0x2f, 0xb7, 0x8, 0x15c3, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x10, 0x80, 0x4, 0x4}}) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000002c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000300)="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", 0xff}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="6c5b66a816c33d300cb1729bdeeab3834386710a01afb3de5ffff232e7814810b2c8496c1494990990e9c620aaea900c6779c4d5828f6d3d8ea66e36fac2609d300ac286218c706e68a83de2dfd836ab6a0d463f603ebc59e806fa6fe3a3be74b024287f2da9438b5c0b82c69cc461953b4eb9bef63131619a8c6c7cdaa60f87076c551fbc2bbe729f09327f529946008ce4fd3d57f3bebd5adba40895d85fa6da5c1660b4", 0xa5}, {&(0x7f00000014c0)}], 0x4, &(0x7f0000001600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x43}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x33, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}, {@broadcast, 0x1ff}, {@loopback, 0x6}, {@remote, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x200}, {@rand_addr=0x64010102, 0x5ba}]}, @cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0x1c, 0xdb, 0x1, 0x3, [{@local, 0x49e}, {@loopback, 0x7}, {@loopback, 0x2}]}, @lsrr={0x83, 0x1b, 0xc1, [@broadcast, @rand_addr=0x64010100, @loopback, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @local}}}], 0xf0}, 0x44111) (async) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000002c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000300)="764ea81fa492e87b8e093b9a9c37e41deff86de8c5888966d9416a0eec67ab73707cdbbe4b71d0d0fe2980dd0673d9da226d0abef9fd448c3472f4e2189cc93aef5a6c35c37bf9fc8749db0113deb0e6654ecda322d74b0aef890f1a3f201022835a215080c394b4ff6cd6e5fc87f48973284f5e027bfe3ddd1d7bc875770134a4ce5077847be76cfa39ea0556d06351f694f4ff0ae0e7ee83b5d6d11acc6710be8e1579691166ef299673fbb4c636aad34661566a0926ed90480f49e48544a90dc5ab85c77e751f515e06be0cb2a277f509593edd7655dee91170a23856781726f346dc612718befb4c466bc92773800a018518bb33fbfcb55cf4b7a56039", 0xff}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="6c5b66a816c33d300cb1729bdeeab3834386710a01afb3de5ffff232e7814810b2c8496c1494990990e9c620aaea900c6779c4d5828f6d3d8ea66e36fac2609d300ac286218c706e68a83de2dfd836ab6a0d463f603ebc59e806fa6fe3a3be74b024287f2da9438b5c0b82c69cc461953b4eb9bef63131619a8c6c7cdaa60f87076c551fbc2bbe729f09327f529946008ce4fd3d57f3bebd5adba40895d85fa6da5c1660b4", 0xa5}, {&(0x7f00000014c0)}], 0x4, &(0x7f0000001600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x43}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x33, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}, {@broadcast, 0x1ff}, {@loopback, 0x6}, {@remote, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x200}, {@rand_addr=0x64010102, 0x5ba}]}, @cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0x1c, 0xdb, 0x1, 0x3, [{@local, 0x49e}, {@loopback, 0x7}, {@loopback, 0x2}]}, @lsrr={0x83, 0x1b, 0xc1, [@broadcast, @rand_addr=0x64010100, @loopback, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @local}}}], 0xf0}, 0x44111) r5 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r5, &(0x7f0000002a00)={&(0x7f0000001740), 0xc, &(0x7f0000002800)=[{&(0x7f0000001780)=""/118, 0x76}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x2, &(0x7f0000002840)=[{0x40, 0x0, 0x0, ""/42}, {0x30, 0x0, 0x0, ""/32}, {0x38, 0x0, 0x0, ""/35}, {0x38, 0x0, 0x0, ""/33}, {0x48, 0x0, 0x0, ""/50}, {0x70, 0x0, 0x0, ""/94}], 0x198}, 0x38, 0x40000020) openat$fuse(0xffffffffffffff9c, &(0x7f0000002a40), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002ac0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x5c, r3, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fdad8845e2162c679bdcd71e010248ccc5fd866d077668b5"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008880}, 0x20004010) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002cc0)={&(0x7f0000002c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x2, 0x3}, {0xd, 0x1}]}, @enum64={0x10, 0x1, 0x0, 0x13, 0x0, 0x9, [{0x10, 0xfe7b, 0xfffffffa}]}]}, {0x0, [0x30, 0x61, 0x51, 0x0]}}, &(0x7f0000002c80)=""/46, 0x5a, 0x2e, 0x0, 0x0, 0x10000, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r4, r7, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r4, r7, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002e00)={'ip6tnl0\x00', &(0x7f0000002d80)={'syztnl0\x00', r4, 0x2f, 0x0, 0x80, 0x7, 0x41, @dev={0xfe, 0x80, '\x00', 0x24}, @loopback, 0x40, 0x7, 0x200, 0xfffffffd}}) r8 = syz_open_dev$sndpcmc(&(0x7f0000002e40), 0x4d19, 0x40200) ioctl$SNDRV_PCM_IOCTL_INFO(r8, 0x81204101, &(0x7f0000002e80)) ioctl$SNDRV_PCM_IOCTL_STATUS32(r8, 0x806c4120, &(0x7f0000002fc0)) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000003040), 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000003200)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000031c0)={&(0x7f00000030c0)={0xe4, r3, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x36}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9e329dbbec34fe51228961652fe9defdcb8ed31edadf602c"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x5}, 0x8000) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000003240)) (async) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000003240)) getresuid(&(0x7f0000003280), &(0x7f00000032c0), &(0x7f0000003300)) (async) getresuid(&(0x7f0000003280), &(0x7f00000032c0), &(0x7f0000003300)=0x0) stat(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000003400)) (async) fstat(r0, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r10, r11, r12) getpid() syz_genetlink_get_family_id$tipc(&(0x7f00000034c0), r9) (async) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000034c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x38, r13, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0x2, 0xfffffff7, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) getpid() 1.883032933s ago: executing program 3 (id=1533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078001c0a0300050200000300000000000002d575ec96facbd3f58838068b91000000"], 0x4e) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) sendfile(r2, r3, &(0x7f0000000300)=0xfffffffffffffffc, 0x3) fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x20) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) 483.175678ms ago: executing program 4 (id=1534): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x80000000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb8, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd050}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "aabe8e3217e2290b7f434ba2bf0186990f61e43b55edea76fedfcf5ce82818503309"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x786}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040040}, 0x80) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000240)='system_u:object_r:ssh_agent_exec_t:s0\x00', 0x26, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x0, 0xffffffffffffffff}}) 482.634808ms ago: executing program 1 (id=1535): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd2d, 0x0, 0xa, 0x2}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) 482.410303ms ago: executing program 1 (id=1536): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x12023) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00eaffffff0000000000000000fd000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r4 = fsopen(&(0x7f00000001c0)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e1109560c0d02bc04f8a939bcfb4a5544ece593b794e66a46a3007db7e6a87c1d201889f13cc37c017196ebeff16461bc99656c8443d66ebcd2d80967b8847acfa0725e498fde36bd08e951706e049feab756"], 0x7) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xa, &(0x7f00000002c0)=@raw=[@generic={0x9f, 0x3, 0x8, 0x0, 0x1860}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r6, r5, &(0x7f0000000180)=0x3ff, 0x8) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x100000}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x240440a6}, 0xc094) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 479.912447ms ago: executing program 3 (id=1537): munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = shmget(0x0, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 451.639734ms ago: executing program 5 (id=1538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000004c0)={{r0}, r4, 0x10, @unused=[0x1, 0x1, 0x100000001, 0x80000000800000], @subvolid=0x3}) 372.802733ms ago: executing program 4 (id=1539): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x400, @loopback, 0x8e}]}, &(0x7f0000000100)=0x10) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 323.249506ms ago: executing program 5 (id=1540): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_names\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) accept4$alg(r2, 0x0, 0x0, 0x800) preadv(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) r3 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000580)=[{r3, 0x2}], 0x1, 0x3) 321.816979ms ago: executing program 5 (id=1541): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r2, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2000c810) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 321.593068ms ago: executing program 3 (id=1542): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x2, "5d4ac54a002011000000008000000000000002400e00311000"}) socket(0x3, 0x800, 0x4421) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000840)=@in6={0xa, 0x4e20, 0xffff, @mcast1}, 0x80, 0x0}, 0x20000910) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000000b9618706b3cda4ebaae31db2d51a883b8efc2ea2b56f0660bd6cb687b2ccda616fc138390d3a5b29d916aa449040a8c9c98d414158da33c8cc8c7ab6cfafbd81f2ddd4d175fa2452a371b4a23aba8ea35a1c2b40e092a4cab04c56dd7a4d1e250b555788ca4c46eeb9dd467c70c32488761a7ad01277b419743e5a4e485228bd7570dcee93d10c1a1630986026ffe670a4f904147809ab47f5f445a83771688683cf6c05bfc08", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0xfffa, 0x1, 0x6, 0x6e, 0x2}}}}, 0x17) socket(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000200)=0x1, 0x4) recvmmsg$unix(r3, &(0x7f00000001c0), 0x4000000000000bd, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xe9) 212.22618ms ago: executing program 5 (id=1543): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x5539, 0x4) 209.303635ms ago: executing program 1 (id=1544): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x58}}, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x4, 0x2}, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', r6, 0x2f, 0x0, 0x3, 0x48507b3b, 0x4, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0x1, 0x6}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01032757c38d085641a7260000000c00018008000100", @ANYRES32=r12], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@RTM_NEWMDB={0xb8, 0x54, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x2, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x2, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x1, 0x2, {@in6_addr=@private0, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x2, {@in6_addr=@private2, 0x9dce094d2306ff73}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x3, {@ip4=@multicast2, 0x86dd}}}]}, 0xb8}}, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x28c, r13, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x174, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8512}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a0a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x10}, 0x8001) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) 163.847832ms ago: executing program 5 (id=1545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) syz_io_uring_setup(0x7762, &(0x7f00000002c0)={0x0, 0x5c22, 0x40, 0x1, 0x2ac}, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f00000001c0)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "455a936e29dce970f9495ce7c5993abb4736e49865037714c0dde0c23a7f5e32", 0x6, 0x24, 0xffffffff}, 0x3c) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001800110117000000000000000a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 163.262926ms ago: executing program 3 (id=1546): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000004c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x80, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffffd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}]}]}, 0x80}}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0x4800) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES64=r0], 0x0) 388.473µs ago: executing program 5 (id=1547): unshare(0x6060400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') io_uring_setup(0x2e34, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0) unshare(0x6060400) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async) syz_usb_disconnect(r1) (async) syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async) io_uring_setup(0x2e34, &(0x7f0000000180)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0) (async) 0s ago: executing program 1 (id=1548): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/193, 0xc1}], 0x1) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/186, 0xba}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/181, 0xb5}], 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0) ioctl$BLKIOMIN(r3, 0x1278, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRESOCT=r0, @ANYRES32=r3], 0x6c}}, 0x20000014) kernel console output (not intermixed with test programs): slave_1) entered blocking state [ 88.197418][ T6573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.222032][ T8202] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 88.294263][ T6569] IPVS: stop unused estimator thread 0... [ 88.332839][ T8219] loop6: detected capacity change from 0 to 64 [ 88.339791][ T8147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.396534][ T8219] loop6: detected capacity change from 64 to 524287999 [ 88.406212][ C0] blk_print_req_error: 12 callbacks suppressed [ 88.406228][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.411270][ C0] buffer_io_error: 11 callbacks suppressed [ 88.411277][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.417727][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.420368][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.426797][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.429761][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.442589][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.446069][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.450261][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.452892][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.456900][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.460207][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.468487][ T8147] veth0_vlan: entered promiscuous mode [ 88.469164][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.473414][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.475224][ T8147] veth1_vlan: entered promiscuous mode [ 88.477192][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.480146][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.482988][ T5933] ldm_validate_partition_table(): Disk read failed. [ 88.485260][ T8235] netlink: 'syz.3.695': attribute type 10 has an invalid length. [ 88.495797][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.498849][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.500646][ T8235] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 88.505210][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.508352][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.514380][ T5933] Dev loop6: unable to read RDB block 0 [ 88.518084][ T5933] loop6: unable to read partition table [ 88.526998][ T8147] veth0_macvtap: entered promiscuous mode [ 88.531761][ T8147] veth1_macvtap: entered promiscuous mode [ 88.536758][ T8219] ldm_validate_partition_table(): Disk read failed. [ 88.541183][ T8219] Dev loop6: unable to read RDB block 0 [ 88.544168][ T8219] loop6: unable to read partition table [ 88.546205][ T8219] loop_reread_partitions: partition scan of loop6 (½ãètü†DËŸtü»KyIM®´'_o¼4D­ 1ã›(ÅI–a#‹–ÍÕºð/sÕL¼NIØõ±ñè¯Ö£) failed (rc=-5) [ 88.555211][ T5354] ldm_validate_partition_table(): Disk read failed. [ 88.556167][ T8147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.557482][ T5354] Dev loop6: unable to read RDB block 0 [ 88.560925][ T8147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.560940][ T8147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.560954][ T8147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.560963][ T8147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.563595][ T5354] loop6: unable to read partition table [ 88.568752][ T8147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.584151][ T8147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.591620][ T8147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.597240][ T8147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.600284][ T8147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.604802][ T8147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.607827][ T8147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.610774][ T8147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.615908][ T8147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.620807][ T8147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.624225][ T8147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.626699][ T8147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.628237][ T8253] Bluetooth: hci0: too big key_count value 65311 [ 88.629106][ T8147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.656759][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 88.678733][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.681074][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.702225][ T6573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.711596][ T6573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.723038][ T39] audit: type=1400 audit(1739455509.137:67409): avc: denied { mounton } for pid=8147 comm="syz-executor" path="/syzkaller.yNUj6c/syz-tmp" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 88.741058][ T39] audit: type=1400 audit(1739455509.137:67410): avc: denied { mounton } for pid=8147 comm="syz-executor" path="/syzkaller.yNUj6c/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 88.757734][ T39] audit: type=1400 audit(1739455509.147:67411): avc: denied { mount } for pid=8147 comm="syz-executor" name="/" dev="gadgetfs" ino=9398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 88.767320][ T39] audit: type=1400 audit(1739455509.167:67412): avc: denied { mounton } for pid=8147 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 88.921879][ T39] audit: type=1400 audit(1739455509.327:67413): avc: denied { create } for pid=8266 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 89.096069][ T8296] netlink: 128 bytes leftover after parsing attributes in process `syz.2.704'. [ 89.103455][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.705'. [ 89.106078][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.705'. [ 89.155084][ T8307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.705'. [ 89.158441][ T8307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.705'. [ 89.279849][ T8317] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.708'. [ 89.333207][ T39] audit: type=1400 audit(1739455509.737:67414): avc: denied { relabelfrom } for pid=8321 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.342607][ T39] audit: type=1400 audit(1739455509.757:67415): avc: denied { relabelto } for pid=8321 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.365930][ T39] audit: type=1400 audit(1739455509.777:67416): avc: denied { mounton } for pid=8327 comm="syz.1.712" path="/208/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 89.452600][ T5942] Bluetooth: hci2: command tx timeout [ 89.522462][ T39] audit: type=1400 audit(1739455509.927:67417): avc: denied { connect } for pid=8334 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 89.608847][ T8350] netlink: 104 bytes leftover after parsing attributes in process `syz.3.717'. [ 89.635603][ T8353] syzkaller1: entered promiscuous mode [ 89.637670][ T8353] syzkaller1: entered allmulticast mode [ 89.714441][ T8364] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 89.717979][ T8364] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.720849][ T8361] netlink: 76 bytes leftover after parsing attributes in process `syz.3.721'. [ 89.724066][ T8364] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.727459][ T8364] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.730075][ T8364] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.734480][ T8364] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.737596][ T8364] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.740226][ T8364] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.752270][ T8364] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.764353][ T8364] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.767215][ T8364] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.782001][ T8370] syz.2.724: vmalloc error: size 3850735616, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 89.786490][ T8370] CPU: 0 UID: 0 PID: 8370 Comm: syz.2.724 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 89.786506][ T8370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.786514][ T8370] Call Trace: [ 89.786552][ T8370] [ 89.786557][ T8370] dump_stack_lvl+0x16c/0x1f0 [ 89.786631][ T8370] warn_alloc+0x24d/0x3a0 [ 89.786700][ T8370] ? __pfx_warn_alloc+0x10/0x10 [ 89.786710][ T8370] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.786735][ T8370] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 89.786752][ T8370] ? kasan_save_stack+0x42/0x60 [ 89.786786][ T8370] ? kasan_save_stack+0x33/0x60 [ 89.786796][ T8370] ? kasan_save_track+0x14/0x30 [ 89.786807][ T8370] ? __kasan_kmalloc+0xaa/0xb0 [ 89.786817][ T8370] ? vb2_vmalloc_alloc+0xe2/0x3d0 [ 89.786831][ T8370] ? vb2_core_create_bufs+0x55d/0xab0 [ 89.786845][ T8370] ? vb2_create_bufs+0x566/0x780 [ 89.786857][ T8370] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 89.786872][ T8370] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 89.786898][ T8370] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 89.786915][ T8370] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 89.786937][ T8370] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 89.786951][ T8370] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 89.786963][ T8370] vmalloc_user_noprof+0x6b/0x90 [ 89.786978][ T8370] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 89.786991][ T8370] vb2_vmalloc_alloc+0x11e/0x3d0 [ 89.787005][ T8370] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 89.787018][ T8370] __vb2_queue_alloc+0x896/0x1230 [ 89.787036][ T8370] vb2_core_create_bufs+0x55d/0xab0 [ 89.787051][ T8370] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 89.787064][ T8370] ? lock_acquire.part.0+0x11b/0x380 [ 89.787127][ T8370] vb2_create_bufs+0x566/0x780 [ 89.787142][ T8370] ? __pfx_vb2_create_bufs+0x10/0x10 [ 89.787156][ T8370] ? __video_do_ioctl+0x4a2/0xf00 [ 89.787176][ T8370] vb2_ioctl_create_bufs+0x244/0x3e0 [ 89.787189][ T8370] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.787246][ T8370] vidioc_create_bufs+0x7d/0xf0 [ 89.787259][ T8370] v4l_create_bufs+0x156/0x270 [ 89.787277][ T8370] __video_do_ioctl+0xaf0/0xf00 [ 89.787299][ T8370] ? __pfx___video_do_ioctl+0x10/0x10 [ 89.787316][ T8370] ? __might_fault+0xe3/0x190 [ 89.787336][ T8370] video_usercopy+0x4d2/0x1620 [ 89.787346][ T8370] ? __pfx___video_do_ioctl+0x10/0x10 [ 89.787363][ T8370] ? __pfx_video_usercopy+0x10/0x10 [ 89.787382][ T8370] v4l2_ioctl+0x1ba/0x250 [ 89.787443][ T8370] ? __pfx_v4l2_ioctl+0x10/0x10 [ 89.787462][ T8370] __x64_sys_ioctl+0x190/0x200 [ 89.787498][ T8370] do_syscall_64+0xcd/0x250 [ 89.787515][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.787534][ T8370] RIP: 0033:0x7f9ae9f8cde9 [ 89.787564][ T8370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.787576][ T8370] RSP: 002b:00007f9aeadaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.787607][ T8370] RAX: ffffffffffffffda RBX: 00007f9aea1a5fa0 RCX: 00007f9ae9f8cde9 [ 89.787614][ T8370] RDX: 0000400000000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 89.787621][ T8370] RBP: 00007f9aea00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 89.787628][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.787635][ T8370] R13: 0000000000000000 R14: 00007f9aea1a5fa0 R15: 00007ffe5a85e338 [ 89.787654][ T8370] [ 89.787695][ T8370] Mem-Info: [ 89.886180][ T8370] active_anon:31549 inactive_anon:6 isolated_anon:0 [ 89.886180][ T8370] active_file:16883 inactive_file:3354 isolated_file:0 [ 89.886180][ T8370] unevictable:1768 dirty:43 writeback:0 [ 89.886180][ T8370] slab_reclaimable:11413 slab_unreclaimable:74199 [ 89.886180][ T8370] mapped:24053 shmem:27977 pagetables:936 [ 89.886180][ T8370] sec_pagetables:306 bounce:0 [ 89.886180][ T8370] kernel_misc_reclaimable:0 [ 89.886180][ T8370] free:473564 free_pcp:3007 free_cma:0 [ 89.901223][ T8370] Node 0 active_anon:126196kB inactive_anon:24kB active_file:67532kB inactive_file:13408kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96212kB dirty:172kB writeback:0kB shmem:108372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12400kB pagetables:3736kB sec_pagetables:1224kB all_unreclaimable? yes [ 89.910808][ T8370] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:8kB sec_pagetables:0kB all_unreclaimable? no [ 89.920805][ T8370] Node 0 DMA free:15324kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 89.921290][ T8378] xt_HMARK: spi-set and port-set can't be combined [ 89.929192][ T8370] lowmem_reserve[]: 0 1240 0 0 0 [ 89.929246][ T8370] Node 0 DMA32 free:289392kB boost:2048kB min:29656kB low:36556kB high:43456kB reserved_highatomic:0KB active_anon:126196kB inactive_anon:24kB active_file:67532kB inactive_file:13532kB unevictable:3536kB writepending:172kB present:2080628kB managed:1270200kB mlocked:0kB bounce:0kB free_pcp:11288kB local_pcp:1212kB free_cma:0kB [ 89.929283][ T8370] lowmem_reserve[]: 0 0 0 0 0 [ 89.944841][ T8370] Node 1 Normal free:1590216kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:588kB local_pcp:500kB free_cma:0kB [ 89.952859][ T8370] lowmem_reserve[]: 0 0 0 0 0 [ 89.954932][ T8370] Node 0 DMA: 9*4kB (U) 9*8kB (U) 9*16kB (U) 9*32kB (U) 9*64kB (U) 7*128kB (U) 8*256kB (U) 6*512kB (U) 6*1024kB (U) 1*2048kB (M) 0*4096kB = 15324kB [ 89.960086][ T8370] Node 0 DMA32: 48*4kB (UME) 44*8kB (UME) 35*16kB (UE) 76*32kB (UME) 48*64kB (UME) 27*128kB (UME) 88*256kB (UME) 149*512kB (UME) 97*1024kB (UM) 11*2048kB (UME) 14*4096kB (UM) = 288080kB [ 89.966620][ T8370] Node 1 Normal: 2*4kB (UM) 112*8kB (UME) 154*16kB (UME) 235*32kB (UME) 171*64kB (UME) 117*128kB (UME) 100*256kB (UE) 94*512kB (UME) 85*1024kB (UE) 6*2048kB (UME) 337*4096kB (M) = 1590216kB [ 89.971947][ T8370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 89.974795][ T8370] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 89.977511][ T8370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 89.980257][ T8370] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 89.982973][ T8370] 48203 total pagecache pages [ 89.985148][ T8370] 0 pages in swap cache [ 89.986342][ T8370] Free swap = 124344kB [ 89.987904][ T8370] Total swap = 124996kB [ 89.989088][ T8370] 1048443 pages RAM [ 89.990218][ T8370] 0 pages HighMem/MovableOnly [ 89.991604][ T8370] 281572 pages reserved [ 89.992947][ T8370] 0 pages cma reserved [ 90.022478][ T8378] tmpfs: Bad value for 'huge' [ 90.220777][ T8418] loop9: detected capacity change from 0 to 6 [ 90.335418][ T8425] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 90.335632][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 90.395887][ T8425] NILFS (loop3): device size too small [ 90.566588][ T8462] netlink: 'syz.3.751': attribute type 1 has an invalid length. [ 90.576303][ T8462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.585944][ T8462] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 90.588812][ T8462] bond2: (slave batadv1): making interface the new active one [ 90.591998][ T8462] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 90.659362][ T8473] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 90.663722][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.698239][ T8479] overlay: filesystem on ./bus not supported as upperdir [ 90.917118][ T8498] xt_hashlimit: size too large, truncated to 1048576 [ 90.971959][ T8500] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 91.017591][ T8502] lo speed is unknown, defaulting to 1000 [ 91.197626][ T8521] bond0: (slave ip6_vti0): Error: Device can not be enslaved while up [ 91.209008][ T8531] overlayfs: missing 'lowerdir' [ 91.309618][ T8543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8543 comm=syz.3.778 [ 91.413056][ T8553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=8553 comm=syz.4.781 [ 91.476183][ T8573] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20003 [ 91.542465][ T5942] Bluetooth: hci2: command tx timeout [ 91.788775][ T8591] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 91.817336][ T8594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.847677][ T8599] netlink: 'syz.3.796': attribute type 7 has an invalid length. [ 92.019753][ T8609] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 92.065072][ T8611] input: syz1 as /devices/virtual/input/input13 [ 92.199727][ T8620] netlink: 'syz.4.804': attribute type 1 has an invalid length. [ 92.201883][ T8620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.203930][ T8620] IPv6: NLM_F_CREATE should be set when creating new route [ 92.205940][ T8620] IPv6: NLM_F_CREATE should be set when creating new route [ 92.219655][ T8620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.257906][ T8626] bridge1: entered promiscuous mode [ 92.696366][ T8652] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 92.816155][ T8656] lo speed is unknown, defaulting to 1000 [ 92.855222][ T8655] lo speed is unknown, defaulting to 1000 [ 93.196983][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 93.196999][ T39] audit: type=1400 audit(93.095:67441): avc: denied { getopt } for pid=8666 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 93.309798][ T8680] macvlan1: entered promiscuous mode [ 93.311350][ T8680] macvlan1: entered allmulticast mode [ 93.320034][ T8680] cgroup: release_agent respecified [ 93.416017][ T8697] syz.1.826 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.490552][ T39] audit: type=1400 audit(93.385:67442): avc: denied { read } for pid=8698 comm="syz.4.829" path="socket:[23417]" dev="sockfs" ino=23417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.554630][ T39] audit: type=1400 audit(93.455:67443): avc: denied { setattr } for pid=8705 comm="syz.4.831" name="SCTPv6" dev="sockfs" ino=24342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.563482][ T39] audit: type=1400 audit(93.455:67444): avc: denied { setopt } for pid=8707 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.587067][ T8710] netlink: 'syz.4.833': attribute type 2 has an invalid length. [ 93.589881][ T8710] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 93.622552][ T5942] Bluetooth: hci2: command tx timeout [ 93.862601][ T63] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 94.012589][ T63] usb 9-1: Using ep0 maxpacket: 32 [ 94.017341][ T63] usb 9-1: config 3 has an invalid interface number: 144 but max is 1 [ 94.019873][ T63] usb 9-1: config 3 has an invalid interface number: 2 but max is 1 [ 94.022845][ T63] usb 9-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 94.026993][ T63] usb 9-1: config 3 has an invalid descriptor of length 229, skipping remainder of the config [ 94.030213][ T63] usb 9-1: config 3 has no interface number 0 [ 94.032086][ T63] usb 9-1: config 3 has no interface number 1 [ 94.034853][ T63] usb 9-1: config 3 interface 144 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.038670][ T63] usb 9-1: too many endpoints for config 3 interface 2 altsetting 3: 101, using maximum allowed: 30 [ 94.041991][ T63] usb 9-1: config 3 interface 2 altsetting 3 has an invalid endpoint descriptor of length 3, skipping [ 94.045311][ T63] usb 9-1: config 3 interface 2 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 94.048982][ T63] usb 9-1: config 3 interface 144 has no altsetting 0 [ 94.051024][ T63] usb 9-1: config 3 interface 2 has no altsetting 0 [ 94.058142][ T63] usb 9-1: New USB device found, idVendor=8086, idProduct=0200, bcdDevice=9b.2d [ 94.060822][ T63] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.063293][ T63] usb 9-1: Product: ㇪ë§ã„鼩◵柧췮 [ 94.065062][ T63] usb 9-1: Manufacturer: Ь [ 94.066506][ T63] usb 9-1: SerialNumber: á Š [ 94.088091][ T8718] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 94.145783][ T8722] __nla_validate_parse: 8 callbacks suppressed [ 94.145797][ T8722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.838'. [ 94.274802][ T63] hub 9-1:3.2: bad descriptor, ignoring hub [ 94.276676][ T63] hub 9-1:3.2: probe with driver hub failed with error -5 [ 94.304984][ T63] usb 9-1: USB disconnect, device number 2 [ 94.306599][ T8731] Debayer A: ================= START STATUS ================= [ 94.310000][ T8731] Debayer A: Debayer Mean Window Size: 3 [ 94.313511][ T8731] Debayer A: ================== END STATUS ================== [ 94.504717][ C1] blk_print_req_error: 52 callbacks suppressed [ 94.504735][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.505863][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.507290][ C1] buffer_io_error: 50 callbacks suppressed [ 94.507303][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.510066][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 94.510196][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.515777][ T39] audit: type=1400 audit(94.415:67445): avc: denied { bind } for pid=8749 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 94.517191][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 94.530571][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.533538][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 94.535935][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.538430][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 94.540809][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.543403][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 94.545624][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.548166][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 94.550343][ C0] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.552992][ C0] Buffer I/O error on dev loop6, logical block 7, async page read [ 94.555504][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.557039][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.558638][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.562549][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 94.568401][ T8748] ldm_validate_partition_table(): Disk read failed. [ 94.569590][ T8754] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.573946][ T8754] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.574175][ T8748] Dev loop6: unable to read RDB block 0 [ 94.580626][ T8748] loop6: unable to read partition table [ 94.739505][ T5942] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 94.860168][ T8778] tmpfs: Bad value for 'huge' [ 94.930237][ T8783] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 94.938494][ T39] audit: type=1400 audit(94.835:67446): avc: denied { getopt } for pid=8782 comm="syz.3.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.948951][ T8783] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 94.949856][ T39] audit: type=1400 audit(94.845:67447): avc: denied { mounton } for pid=8782 comm="syz.3.856" path="/191/file0/bus" dev="ramfs" ino=24431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 94.951232][ T8783] overlayfs: failed to set xattr on upper [ 94.962307][ T8783] overlayfs: ...falling back to redirect_dir=nofollow. [ 94.962569][ T39] audit: type=1400 audit(94.855:67448): avc: denied { connect } for pid=8784 comm="syz.1.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.964663][ T8783] overlayfs: ...falling back to metacopy=off. [ 94.982563][ T8783] overlayfs: ...falling back to index=off. [ 94.984292][ T8783] overlayfs: ...falling back to uuid=null. [ 95.038897][ T8793] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 95.040914][ T8793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.046941][ T8793] vhci_hcd vhci_hcd.0: Device attached [ 95.049404][ T8794] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 95.052539][ T8797] overlayfs: failed to resolve './bus': -2 [ 95.058655][ T6569] vhci_hcd: stop threads [ 95.060725][ T6569] vhci_hcd: release socket [ 95.062054][ T6569] vhci_hcd: disconnect device [ 95.322641][ T65] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 95.332739][ T1490] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 95.482710][ T65] usb 9-1: Using ep0 maxpacket: 32 [ 95.486416][ T65] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 95.490711][ T65] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 95.492484][ T1490] usb 6-1: Using ep0 maxpacket: 16 [ 95.493504][ T65] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 95.497076][ T65] usb 9-1: Product: syz [ 95.497697][ T1490] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 95.498266][ T65] usb 9-1: Manufacturer: syz [ 95.500900][ T1490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.502552][ T65] usb 9-1: SerialNumber: syz [ 95.504728][ T1490] usb 6-1: Product: syz [ 95.507688][ T1490] usb 6-1: Manufacturer: syz [ 95.509067][ T1490] usb 6-1: SerialNumber: syz [ 95.511497][ T65] usb 9-1: config 0 descriptor?? [ 95.513639][ T1490] r8152-cfgselector 6-1: Unknown version 0x0000 [ 95.515352][ T8804] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.515445][ T1490] r8152-cfgselector 6-1: config 0 descriptor?? [ 95.596953][ T39] audit: type=1400 audit(95.495:67449): avc: denied { sqpoll } for pid=8808 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 95.630821][ T39] audit: type=1400 audit(95.525:67450): avc: denied { setopt } for pid=8808 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.725504][ T8804] /dev/nullb0: Can't open blockdev [ 95.727460][ T8806] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.753568][ T1490] r8152-cfgselector 6-1: Unknown version 0x0000 [ 95.755492][ T1490] r8152-cfgselector 6-1: bad CDC descriptors [ 95.763127][ T1490] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 95.787788][ T9] usb 9-1: USB disconnect, device number 3 [ 96.261068][ T8850] netlink: 'syz.4.870': attribute type 16 has an invalid length. [ 96.263510][ T8850] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.870'. [ 96.326285][ T8855] syz.1.873: attempt to access beyond end of device [ 96.326285][ T8855] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 96.334694][ T8855] XFS (nbd1): SB validate failed with error -5. [ 96.354284][ T8871] team0: No ports can be present during mode change [ 96.396269][ T8876] netlink: 348 bytes leftover after parsing attributes in process `syz.3.877'. [ 96.468349][ T67] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 96.473772][ T67] CPU: 1 UID: 0 PID: 67 Comm: kworker/u33:0 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 96.473798][ T67] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.473812][ T67] Workqueue: hci2 hci_rx_work [ 96.473905][ T67] Call Trace: [ 96.473933][ T67] [ 96.473941][ T67] dump_stack_lvl+0x16c/0x1f0 [ 96.473966][ T67] sysfs_warn_dup+0x7f/0xa0 [ 96.474020][ T67] sysfs_create_dir_ns+0x24d/0x2b0 [ 96.474064][ T67] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 96.474092][ T67] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 96.474149][ T67] ? kobject_add_internal+0x12d/0x990 [ 96.474176][ T67] ? do_raw_spin_unlock+0x172/0x230 [ 96.474236][ T67] kobject_add_internal+0x2c8/0x990 [ 96.474266][ T67] kobject_add+0x16f/0x240 [ 96.474325][ T67] ? __pfx_kobject_add+0x10/0x10 [ 96.474348][ T67] ? class_to_subsys+0x3e/0x160 [ 96.474491][ T67] ? do_raw_spin_unlock+0x172/0x230 [ 96.474511][ T67] ? kobject_put+0xab/0x5a0 [ 96.474592][ T67] device_add+0x289/0x1a70 [ 96.474619][ T67] ? __pfx_dev_set_name+0x10/0x10 [ 96.474691][ T67] ? __pfx_device_add+0x10/0x10 [ 96.474718][ T67] ? mgmt_send_event_skb+0x2f2/0x460 [ 96.474774][ T67] hci_conn_add_sysfs+0x17e/0x230 [ 96.474834][ T67] le_conn_complete_evt+0x107f/0x1da0 [ 96.474868][ T67] ? __pfx_lock_release+0x10/0x10 [ 96.474923][ T67] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 96.474949][ T67] ? __mutex_lock+0x1cc/0xb10 [ 96.474999][ T67] hci_le_conn_complete_evt+0x23c/0x370 [ 96.475049][ T67] hci_le_meta_evt+0x2e2/0x5d0 [ 96.475077][ T67] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 96.475121][ T67] hci_event_packet+0x666/0x1180 [ 96.475146][ T67] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 96.475190][ T67] ? __pfx_hci_event_packet+0x10/0x10 [ 96.475227][ T67] ? mark_held_locks+0x9f/0xe0 [ 96.475257][ T67] ? kcov_remote_start+0x3cf/0x6e0 [ 96.475325][ T67] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.475353][ T67] hci_rx_work+0x2c5/0x16b0 [ 96.475397][ T67] ? process_one_work+0x921/0x1ba0 [ 96.475461][ T67] process_one_work+0x9c5/0x1ba0 [ 96.475516][ T67] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 96.475558][ T67] ? __pfx_process_one_work+0x10/0x10 [ 96.475592][ T67] ? assign_work+0x1a0/0x250 [ 96.475636][ T67] worker_thread+0x6c8/0xf00 [ 96.475686][ T67] ? __pfx_worker_thread+0x10/0x10 [ 96.475715][ T67] kthread+0x3af/0x750 [ 96.475770][ T67] ? __pfx_kthread+0x10/0x10 [ 96.475794][ T67] ? lock_acquire+0x2f/0xb0 [ 96.475848][ T67] ? __pfx_kthread+0x10/0x10 [ 96.475873][ T67] ret_from_fork+0x45/0x80 [ 96.475946][ T67] ? __pfx_kthread+0x10/0x10 [ 96.475993][ T67] ret_from_fork_asm+0x1a/0x30 [ 96.476046][ T67] [ 96.476543][ T67] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 96.562247][ T67] Bluetooth: hci2: failed to register connection device [ 96.775514][ T8913] netlink: 'syz.1.889': attribute type 10 has an invalid length. [ 96.779796][ T8913] bond0: (slave bond_slave_0): Releasing backup interface [ 96.864892][ T8923] netlink: 224 bytes leftover after parsing attributes in process `syz.3.892'. [ 97.009464][ T8926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.013349][ T8926] bond0 (unregistering): Released all slaves [ 97.036420][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 97.414172][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 97.527412][ T8982] ALSA: mixer_oss: invalid OSS volume '' [ 97.607546][ T8] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 97.649060][ T8995] syz.1.913 (8995): attempted to duplicate a private mapping with mremap. This is not supported. [ 97.752560][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 97.756382][ T8] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 97.756899][ T9006] use of bytesused == 0 is deprecated and will be removed in the future, [ 97.759603][ T8] usb 9-1: config 0 has no interface number 0 [ 97.763266][ T9006] use the actual size instead. [ 97.764981][ T8] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.770538][ T8] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 97.773863][ T8] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.776965][ T8] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.780736][ T8] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 97.783664][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.789093][ T8] usb 9-1: config 0 descriptor?? [ 97.794003][ T8] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 97.928465][ T9017] program syz.1.920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.005766][ T63] usb 9-1: USB disconnect, device number 4 [ 98.006131][ T8957] ldusb 9-1:0.55: Couldn't submit interrupt_out_urb -19 [ 98.007614][ C1] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 98.015509][ T63] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 98.027834][ T9026] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5133 sclass=netlink_xfrm_socket pid=9026 comm=syz.1.923 [ 98.033612][ T9026] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9026 comm=syz.1.923 [ 98.038138][ T9026] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1012 sclass=netlink_xfrm_socket pid=9026 comm=syz.1.923 [ 98.104698][ T9033] netlink: 140 bytes leftover after parsing attributes in process `syz.1.925'. [ 98.109620][ T9034] netlink: 140 bytes leftover after parsing attributes in process `syz.1.925'. [ 98.492644][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.680843][ T9059] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 98.906733][ T39] kauditd_printk_skb: 51 callbacks suppressed [ 98.906745][ T39] audit: type=1400 audit(98.805:67502): avc: denied { connect } for pid=9092 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.915593][ T39] audit: type=1400 audit(98.815:67503): avc: denied { read } for pid=9092 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 99.022469][ T39] audit: type=1400 audit(98.915:67504): avc: denied { write } for pid=9099 comm="syz.1.945" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 99.068713][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 99.130664][ T9106] netlink: 'syz.1.947': attribute type 3 has an invalid length. [ 99.137070][ T9106] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 99.138994][ T9106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 99.141409][ T9106] vhci_hcd vhci_hcd.0: Device attached [ 99.146311][ T9107] usbip_core: unknown command [ 99.147934][ T9107] vhci_hcd: unknown pdu 0 [ 99.149300][ T9107] usbip_core: unknown command [ 99.153123][ T12] vhci_hcd: stop threads [ 99.154846][ T12] vhci_hcd: release socket [ 99.156293][ T12] vhci_hcd: disconnect device [ 99.528039][ T9121] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9121 comm=syz.3.949 [ 99.533623][ T9121] SELinux: policydb string length 14080 does not match expected length 8 [ 99.535990][ T9121] SELinux: failed to load policy [ 99.694680][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 99.729460][ T39] audit: type=1326 audit(99.625:67505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.951" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f809d98cde9 code=0x0 [ 99.856325][ T9148] program syz.1.958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.932519][ T6053] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 100.082411][ T6053] usb 7-1: Using ep0 maxpacket: 8 [ 100.086222][ T6053] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 100.088769][ T6053] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.091628][ T6053] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.095840][ T6053] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.098722][ T6053] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.102714][ T6053] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.106046][ T6053] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.312311][ T6053] usb 7-1: usb_control_msg returned -32 [ 100.313962][ T6053] usbtmc 7-1:16.0: can't read capabilities [ 100.682281][ T39] audit: type=1400 audit(100.575:67506): avc: denied { ioctl } for pid=9126 comm="syz.2.954" path="socket:[26590]" dev="sockfs" ino=26590 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 100.724596][ T39] audit: type=1400 audit(100.625:67507): avc: denied { listen } for pid=9126 comm="syz.2.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.730169][ T39] audit: type=1400 audit(100.625:67508): avc: denied { accept } for pid=9126 comm="syz.2.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.800443][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.964'. [ 100.803844][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.964'. [ 100.809094][ T9213] erspan0: entered promiscuous mode [ 100.811438][ T9213] macvlan2: entered promiscuous mode [ 100.813805][ T9213] macvlan2: entered allmulticast mode [ 100.815785][ T9213] erspan0: entered allmulticast mode [ 100.858044][ T39] audit: type=1400 audit(100.755:67509): avc: denied { mount } for pid=9216 comm="syz.3.965" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 100.872428][ T39] audit: type=1400 audit(100.765:67510): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 100.897169][ T9219] loop2: detected capacity change from 0 to 524287999 [ 100.906296][ T39] audit: type=1400 audit(100.805:67511): avc: denied { setopt } for pid=9218 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.067556][ T9237] block nbd3: NBD_DISCONNECT [ 101.070182][ T9237] netlink: 'syz.3.971': attribute type 1 has an invalid length. [ 101.079925][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 101.082613][ T9237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.971'. [ 101.087880][ T9237] bond0: entered promiscuous mode [ 101.089330][ T9237] bond0: entered allmulticast mode [ 101.090998][ T9237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.143011][ T9239] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 101.623703][ T9247] delete_channel: no stack [ 101.776599][ T9265] ptrace attach of "/syz-executor exec"[8147] was attempted by "/syz-executor exec"[9265] [ 102.073389][ T63] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 102.143831][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 102.224109][ T63] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 102.226946][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.230854][ T63] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 102.234827][ T63] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 102.237511][ T63] usb 6-1: Manufacturer: syz [ 102.244964][ T63] usb 6-1: config 0 descriptor?? [ 102.292574][ T63] rc_core: IR keymap rc-hauppauge not found [ 102.294571][ T63] Registered IR keymap rc-empty [ 102.300637][ T63] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 102.312577][ T63] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 102.451101][ T9267] 9pnet_virtio: no channels available for device syz [ 102.457301][ T63] usb 6-1: USB disconnect, device number 9 [ 102.793804][ T6053] usb 7-1: USB disconnect, device number 6 [ 102.821618][ T9299] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 102.823981][ T9299] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.827932][ T9299] vhci_hcd vhci_hcd.0: Device attached [ 102.831111][ T9301] vhci_hcd: unknown pdu 2 [ 102.835594][ T6573] vhci_hcd: stop threads [ 102.837160][ T6573] vhci_hcd: release socket [ 102.838519][ T6573] vhci_hcd: disconnect device [ 102.840157][ T9299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.987'. [ 103.031883][ T9305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.035675][ T9305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.055312][ T9308] overlayfs: workdir and upperdir must be separate subtrees [ 103.282612][ T8807] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 103.419748][ T9316] netlink: 140 bytes leftover after parsing attributes in process `syz.4.992'. [ 103.446386][ T8807] usb 6-1: Using ep0 maxpacket: 8 [ 103.458440][ T67] Bluetooth: hci2: command 0x0406 tx timeout [ 103.468577][ T8807] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 61, changing to 9 [ 103.474192][ T8807] usb 6-1: config 1 interface 0 has no altsetting 0 [ 103.479511][ T8807] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 103.483571][ T8807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.486799][ T8807] usb 6-1: Product: syz [ 103.488686][ T8807] usb 6-1: Manufacturer: syz [ 103.490612][ T8807] usb 6-1: SerialNumber: syz [ 103.493918][ T9316] kvm: MONITOR instruction emulated as NOP! [ 103.664544][ T9334] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 103.715750][ T9332] wg1 speed is unknown, defaulting to 1000 [ 103.717490][ T9332] wg1 speed is unknown, defaulting to 1000 [ 103.719709][ T9332] wg1 speed is unknown, defaulting to 1000 [ 103.725723][ T9332] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 103.729871][ T9305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.737929][ T9305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.738217][ T9332] wg1 speed is unknown, defaulting to 1000 [ 103.746349][ T9332] wg1 speed is unknown, defaulting to 1000 [ 103.748756][ T9332] wg1 speed is unknown, defaulting to 1000 [ 103.750987][ T9332] wg1 speed is unknown, defaulting to 1000 [ 103.758223][ T8807] usbhid 6-1:1.0: can't add hid device: -71 [ 103.760694][ T8807] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 103.770995][ T8807] usb 6-1: USB disconnect, device number 10 [ 103.774994][ T5933] udevd[5933]: setting mode of /dev/bus/usb/006/010 to 020664 failed: No such file or directory [ 103.778364][ T5933] udevd[5933]: setting owner of /dev/bus/usb/006/010 to uid=0, gid=0 failed: No such file or directory [ 103.789365][ T9342] openvswitch: netlink: EtherType 0 is less than min 600 [ 103.789587][ T5942] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 103.791834][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'. [ 103.960348][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 103.960360][ T39] audit: type=1400 audit(103.855:67520): avc: denied { accept } for pid=9353 comm="syz.2.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.168767][ T9359] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1006'. [ 104.210460][ T39] audit: type=1400 audit(104.105:67521): avc: denied { bind } for pid=9362 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.216644][ T9363] IPv6: Can't replace route, no match found [ 104.220652][ T39] audit: type=1400 audit(104.115:67522): avc: denied { mounton } for pid=9362 comm="syz.2.1007" path="/215/file1/file0" dev="autofs" ino=27113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 104.450376][ T9379] /dev/sr0: Can't open blockdev [ 104.708980][ T9407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9407 comm=syz.4.1022 [ 104.713070][ T9407] __nla_validate_parse: 4 callbacks suppressed [ 104.713080][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1022'. [ 104.824856][ T9421] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 104.827487][ T9421] SELinux: failed to load policy [ 105.140408][ T9522] vxlan0: entered promiscuous mode [ 105.141929][ T9522] vxlan0: entered allmulticast mode [ 105.322527][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 105.568869][ T9534] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.601993][ T39] audit: type=1400 audit(105.485:67523): avc: denied { read } for pid=9533 comm="syz.3.1032" name="file0" dev="9p" ino=36185707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.612192][ T39] audit: type=1400 audit(105.495:67524): avc: denied { open } for pid=9533 comm="syz.3.1032" path="/file0" dev="9p" ino=36185707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.765790][ T65] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 105.827976][ T39] audit: type=1400 audit(105.725:67525): avc: denied { read } for pid=9533 comm="syz.3.1032" name="file1" dev="overlay" ino=36185709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.908150][ T65] usb 6-1: device descriptor read/64, error -71 [ 106.078401][ T9547] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1035'. [ 106.097481][ T9547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1035'. [ 106.152825][ T65] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 106.158152][ T9550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1036'. [ 106.158206][ T9551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1036'. [ 106.160695][ T9550] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1036'. [ 106.164269][ T9551] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1036'. [ 106.171474][ T9550] netlink: 'syz.3.1036': attribute type 21 has an invalid length. [ 106.173899][ T9550] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1036'. [ 106.176454][ T9550] netlink: 'syz.3.1036': attribute type 5 has an invalid length. [ 106.178699][ T9550] netlink: 'syz.3.1036': attribute type 6 has an invalid length. [ 106.180704][ T9550] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1036'. [ 106.282728][ T65] usb 6-1: device descriptor read/64, error -71 [ 106.392747][ T65] usb usb6-port1: attempt power cycle [ 106.518827][ T9566] input: syz0 as /devices/virtual/input/input19 [ 106.654245][ T9574] netlink: 'syz.3.1044': attribute type 1 has an invalid length. [ 106.665356][ T39] audit: type=1400 audit(106.565:67526): avc: denied { execute } for pid=9575 comm="syz.4.1045" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.738668][ T9580] SELinux: syz.4.1048 (9580) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 106.743214][ T65] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 106.767094][ T9580] kvm: emulating exchange as write [ 106.776110][ T65] usb 6-1: device descriptor read/8, error -71 [ 106.838276][ T9585] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 106.898114][ T9589] input: syz0 as /devices/virtual/input/input20 [ 106.937473][ T39] audit: type=1400 audit(106.835:67527): avc: denied { execmem } for pid=9588 comm="syz.4.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 106.953021][ T5933] udevd[5933]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 107.022470][ T65] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 107.045103][ T65] usb 6-1: device descriptor read/8, error -71 [ 107.095604][ T9608] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 107.099345][ T9608] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.101828][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.104394][ T9608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.114515][ T9608] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 107.117211][ T9608] SELinux: failed to load policy [ 107.151762][ T9615] overlayfs: conflicting lowerdir path [ 107.153763][ T65] usb usb6-port1: unable to enumerate USB device [ 107.229152][ T39] audit: type=1400 audit(107.125:67528): avc: denied { lock } for pid=9622 comm="syz.4.1056" path="/dev/nbd4" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.503565][ T63] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 107.595939][ T39] audit: type=1400 audit(107.495:67529): avc: denied { append } for pid=9640 comm="syz.3.1058" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.653997][ T63] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.658328][ T63] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.662578][ T63] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.667884][ T63] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.671428][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.677073][ T63] usb 9-1: config 0 descriptor?? [ 107.887313][ T63] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 107.893321][ T63] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 107.901612][ T63] usb 9-1: USB disconnect, device number 5 [ 107.927703][ T9650] bridge_slave_0: left allmulticast mode [ 107.929581][ T9650] bridge_slave_0: left promiscuous mode [ 107.931626][ T9650] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.950395][ T9650] bridge_slave_1: left allmulticast mode [ 107.952195][ T9650] bridge_slave_1: left promiscuous mode [ 107.956608][ T9650] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.974748][ T9650] bond0: (slave bond_slave_0): Releasing backup interface [ 107.978781][ T9650] bond0: (slave bond_slave_1): Releasing backup interface [ 107.998403][ T9650] team0: Port device team_slave_0 removed [ 108.004725][ T9650] team0: Port device team_slave_1 removed [ 108.006792][ T9650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.008944][ T9650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.012216][ T9650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.014490][ T9650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.020804][ T835] wg1 speed is unknown, defaulting to 1000 [ 108.072788][ T9650] vlan3: entered allmulticast mode [ 108.074791][ T9650] bond0: entered allmulticast mode [ 108.084153][ T9650] netlink: 'syz.4.1060': attribute type 10 has an invalid length. [ 108.091337][ T9650] bridge0: entered allmulticast mode [ 108.093739][ T9650] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 108.770985][ T9689] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 108.812087][ T9692] vlan4: entered promiscuous mode [ 108.836500][ T9689] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 108.972687][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.972813][ T5980] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.978907][ T5980] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 109.570898][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 109.570914][ T39] audit: type=1400 audit(109.465:67544): avc: denied { setattr } for pid=9704 comm="syz.1.1079" name="file0" dev="tmpfs" ino=1672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.582499][ T39] audit: type=1400 audit(109.475:67545): avc: denied { read } for pid=9704 comm="syz.1.1079" name="file0" dev="tmpfs" ino=1672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.588890][ T39] audit: type=1400 audit(109.475:67546): avc: denied { open } for pid=9704 comm="syz.1.1079" path="/302/file0" dev="tmpfs" ino=1672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.596212][ T39] audit: type=1400 audit(109.485:67547): avc: denied { append } for pid=9704 comm="syz.1.1079" name="file0" dev="tmpfs" ino=1672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.677392][ T39] audit: type=1400 audit(109.575:67548): avc: denied { map } for pid=9720 comm="syz.3.1085" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.684171][ T39] audit: type=1400 audit(109.575:67549): avc: denied { execute } for pid=9720 comm="syz.3.1085" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.758714][ T9726] __nla_validate_parse: 3 callbacks suppressed [ 109.758728][ T9726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1087'. [ 109.763586][ T9726] netlink: 'syz.3.1087': attribute type 7 has an invalid length. [ 109.766075][ T9726] netlink: 'syz.3.1087': attribute type 8 has an invalid length. [ 109.769011][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 109.817401][ T39] audit: type=1400 audit(109.715:67550): avc: denied { create } for pid=9728 comm="syz.4.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 109.830897][ T9730] Failed to initialize the IGMP autojoin socket (err -2) [ 109.876966][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1089'. [ 109.921291][ T9735] /dev/nullb0: Can't open blockdev [ 109.924098][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 110.062605][ T9] usb 6-1: device descriptor read/64, error -71 [ 110.286253][ T12] Bluetooth: (null): Invalid header checksum [ 110.288740][ T12] Bluetooth: (null): Invalid header checksum [ 110.322457][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 110.412538][ T5942] Bluetooth: hci2: command 0x0406 tx timeout [ 110.456640][ T9] usb 6-1: device descriptor read/64, error -71 [ 110.563861][ T9] usb usb6-port1: attempt power cycle [ 110.570910][ T9750] kvm: kvm [9749]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 110.580345][ T9750] kvm: kvm [9749]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 110.667231][ T39] audit: type=1400 audit(110.565:67551): avc: denied { unmount } for pid=8147 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 110.704296][ T39] audit: type=1400 audit(110.605:67552): avc: denied { create } for pid=9755 comm="syz.4.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 110.729625][ T39] audit: type=1326 audit(110.625:67553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.3.1099" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f809d98cde9 code=0x0 [ 110.902602][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 110.922968][ T9] usb 6-1: device descriptor read/8, error -71 [ 111.002228][ T9770] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1101'. [ 111.052628][ T5942] Bluetooth: hci3: command 0x0405 tx timeout [ 111.054680][ T5980] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 111.060899][ T5980] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 111.102025][ T9775] syzkaller1: entered promiscuous mode [ 111.105056][ T9775] syzkaller1: entered allmulticast mode [ 111.110911][ T9775] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 111.162571][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 111.182895][ T9] usb 6-1: device descriptor read/8, error -71 [ 111.224272][ T9781] tipc: Started in network mode [ 111.225747][ T9781] tipc: Node identity , cluster identity 8 [ 111.227377][ T9781] tipc: Failed to obtain node identity [ 111.228918][ T9781] tipc: Enabling of bearer rejected, failed to enable media [ 111.232111][ T9781] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1106'. [ 111.292600][ T9] usb usb6-port1: unable to enumerate USB device [ 112.132458][ T9834] Failed to initialize the IGMP autojoin socket (err -2) [ 112.518717][ T9844] netlink: 'syz.4.1116': attribute type 1 has an invalid length. [ 112.844237][ T9856] program syz.1.1121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.888106][ T9863] tmpfs: Unknown parameter 'usrquotae' [ 112.921486][ T9867] fuse: Unknown parameter 'úú–3®¯.ÍW¢áåkš\‰ÎÌŸñóÀ¥ûWžü»Ù©Q̲]ºré—ë ¼HÔq]ˆ}M:žÛGLZÛšÌ4·f“ Áa^yô)“ú¬ Ì™ æ [ 112.921486][ T9867] —Æ)"ÑâÁãS¨•;Gû~IÙì0_Ï&`S@!Õ§—D?‘½ÎŽËE¦Š' [ 112.979576][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803427ec00: rx timeout, send abort [ 112.984817][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88803427ec00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 113.292559][ T5980] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 113.294979][ T5980] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 113.303469][ T5942] Bluetooth: hci2: command 0x0406 tx timeout [ 114.279124][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 114.349580][ T9911] overlayfs: overlapping lowerdir path [ 114.666969][ T9936] unknown channel width for channel at 909000KHz? [ 114.807576][ T9946] overlayfs: overlapping lowerdir path [ 114.841715][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 114.871804][ T9957] openvswitch: netlink: Actions may not be safe on all matching packets [ 114.992799][ T9972] cgroup2: Unknown parameter 'dont_measure' [ 114.995701][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 114.995711][ T39] audit: type=1400 audit(114.895:67563): avc: denied { mount } for pid=9968 comm="syz.1.1159" name="/" dev="9p" ino=36185694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.995972][ T9971] 9pnet_virtio: no channels available for device syz [ 114.997466][ T39] audit: type=1400 audit(114.895:67564): avc: denied { mounton } for pid=9968 comm="syz.1.1159" path="/328/file0" dev="9p" ino=36185694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.004111][ T9971] 9pnet_virtio: no channels available for device syz [ 115.015241][ T9971] 9pnet_virtio: no channels available for device syz [ 115.018159][ T9971] 9pnet_virtio: no channels available for device syz [ 115.020821][ T9971] 9pnet_virtio: no channels available for device syz [ 115.024753][ T9971] 9pnet_virtio: no channels available for device syz [ 115.027848][ T9971] 9pnet_virtio: no channels available for device syz [ 115.030344][ T9971] 9pnet_virtio: no channels available for device syz [ 115.032348][ T9971] 9pnet_virtio: no channels available for device syz [ 115.034443][ T9971] 9pnet_virtio: no channels available for device syz [ 115.036473][ T9971] 9pnet_virtio: no channels available for device syz [ 115.038572][ T9971] 9pnet_virtio: no channels available for device syz [ 115.041122][ T9971] 9pnet_virtio: no channels available for device syz [ 115.043781][ T9971] 9pnet_virtio: no channels available for device syz [ 115.045911][ T9971] 9pnet_virtio: no channels available for device syz [ 115.047973][ T9971] 9pnet_virtio: no channels available for device syz [ 115.050121][ T9971] 9pnet_virtio: no channels available for device syz [ 115.052207][ T9971] 9pnet_virtio: no channels available for device syz [ 115.054990][ T9971] 9pnet_virtio: no channels available for device syz [ 115.057806][ T9971] 9pnet_virtio: no channels available for device syz [ 115.059988][ T9976] netlink: 'syz.3.1161': attribute type 1 has an invalid length. [ 115.060516][ T9971] 9pnet_virtio: no channels available for device syz [ 115.065038][ T9971] 9pnet_virtio: no channels available for device syz [ 115.067195][ T9971] 9pnet_virtio: no channels available for device syz [ 115.069349][ T9971] 9pnet_virtio: no channels available for device syz [ 115.071489][ T9971] 9pnet_virtio: no channels available for device syz [ 115.073878][ T9971] 9pnet_virtio: no channels available for device syz [ 115.075948][ T9971] 9pnet_virtio: no channels available for device syz [ 115.077991][ T9971] 9pnet_virtio: no channels available for device syz [ 115.080111][ T9971] 9pnet_virtio: no channels available for device syz [ 115.082209][ T9971] 9pnet_virtio: no channels available for device syz [ 115.085032][ T9971] 9pnet_virtio: no channels available for device syz [ 115.087356][ T9971] 9pnet_virtio: no channels available for device syz [ 115.088959][ T9976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.099677][ T39] audit: type=1400 audit(114.995:67565): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 115.124038][ T39] audit: type=1326 audit(115.025:67566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.3.1163" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f809d98cde9 code=0x0 [ 115.211072][ T9985] tmpfs: Bad value for 'mpol' [ 115.632553][ T5980] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 115.722566][ T8] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 115.785271][ T5980] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.789147][ T5980] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.792966][ T5980] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.796331][ T5980] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.800474][ T5980] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.803507][ T5980] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.805717][ T5980] usb 9-1: Product: syz [ 115.806973][ T5980] usb 9-1: Manufacturer: syz [ 115.811098][ T5980] cdc_wdm 9-1:1.0: skipping garbage [ 115.812741][ T5980] cdc_wdm 9-1:1.0: skipping garbage [ 115.814285][ T5980] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 115.883865][ T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.887035][ T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.889932][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.892716][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.897361][T10006] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 115.904391][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.015740][ T8807] usb 9-1: USB disconnect, device number 6 [ 116.140779][T10013] ERROR: device name not specified. [ 116.233368][ T5980] usb 6-1: USB disconnect, device number 19 [ 116.233976][T10017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1174'. [ 116.356255][ T39] audit: type=1400 audit(116.255:67567): avc: denied { write } for pid=10022 comm="syz.1.1176" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 116.407451][T10023] kvm: pic: single mode not supported [ 116.411450][T10023] kvm: pic: single mode not supported [ 116.416508][T10023] kvm: pic: non byte write [ 116.421041][T10023] kvm: pic: non byte read [ 116.426002][T10023] kvm: pic: non byte write [ 116.427623][T10023] kvm: pic: non byte read [ 116.429276][T10023] kvm: pic: non byte write [ 116.431585][T10023] kvm: pic: non byte read [ 116.435442][T10023] kvm: pic: non byte write [ 116.437555][T10023] kvm: pic: non byte read [ 116.439806][T10023] kvm: pic: non byte write [ 116.441974][T10023] kvm: pic: non byte read [ 116.444410][T10023] kvm: pic: non byte write [ 116.446449][T10023] kvm: pic: non byte read [ 116.605809][ T39] audit: type=1400 audit(116.505:67568): avc: denied { module_load } for pid=10036 comm="syz.3.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 116.618421][ T39] audit: type=1400 audit(116.515:67569): avc: denied { ioctl } for pid=10038 comm="syz.4.1182" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 116.689091][T10052] netlink: 'syz.3.1184': attribute type 5 has an invalid length. [ 116.719514][T10055] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1187'. [ 116.719525][T10054] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1187'. [ 116.727614][ T39] audit: type=1400 audit(116.625:67570): avc: denied { create } for pid=10053 comm="syz.3.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.915095][T10079] netlink: 'syz.3.1192': attribute type 12 has an invalid length. [ 116.941746][T10090] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.947991][T10090] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1195'. [ 117.131194][T10107] ptrace attach of "/syz-executor exec"[8147] was attempted by "/syz-executor exec"[10107] [ 117.153707][ T39] audit: type=1400 audit(117.055:67571): avc: denied { watch watch_reads } for pid=10109 comm="syz.1.1199" path="/proc/1011" dev="proc" ino=36028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 117.187014][T10112] ptrace attach of "/syz-executor exec"[5938] was attempted by "/syz-executor exec"[10112] [ 117.219888][ T39] audit: type=1400 audit(117.115:67572): avc: denied { setopt } for pid=10113 comm="syz.3.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 117.399052][T10122] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 117.399052][T10122] The task syz.3.1204 (10122) triggered the difference, watch for misbehavior. [ 117.538004][T10125] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 117.542903][T10125] input: syz0 as /devices/virtual/input/input21 [ 117.581311][T10125] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 117.586187][T10125] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 117.717712][T10129] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1206'. [ 117.756632][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1207'. [ 117.759428][T10131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1207'. [ 117.773601][T10131] veth3: entered promiscuous mode [ 117.775203][T10131] veth3: entered allmulticast mode [ 118.049435][T10142] fuse: Bad value for 'user_id' [ 118.050852][T10142] fuse: Bad value for 'user_id' [ 118.125740][T10151] veth1_vlan: mtu less than device minimum [ 118.155298][T10155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1216'. [ 118.382292][T10174] syz.1.1223: attempt to access beyond end of device [ 118.382292][T10174] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 118.386611][T10174] exFAT-fs (nbd1): unable to read boot sector [ 118.388250][T10174] exFAT-fs (nbd1): failed to read boot sector [ 118.389926][T10174] exFAT-fs (nbd1): failed to recognize exfat type [ 118.406377][T10178] netlink: 'syz.3.1224': attribute type 4 has an invalid length. [ 118.552567][ T6206] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 118.627611][T10199] cgroup: noprefix used incorrectly [ 118.702897][ T6206] usb 9-1: Using ep0 maxpacket: 8 [ 118.710604][ T6206] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 118.719475][ T6206] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.722689][ T6206] usb 9-1: Product: syz [ 118.724876][ T6206] usb 9-1: Manufacturer: syz [ 118.726773][ T6206] usb 9-1: SerialNumber: syz [ 118.733947][ T6206] usb 9-1: config 0 descriptor?? [ 118.738008][ T6206] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 118.743190][ T6206] dvb-usb: bulk message failed: -22 (2/0) [ 118.744966][ T6206] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.747846][ T6206] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 118.750604][ T6206] usb 9-1: media controller created [ 118.760242][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 118.765273][ T6206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.769681][T10214] netlink: 'syz.1.1237': attribute type 13 has an invalid length. [ 118.775467][T10214] netlink: 'syz.1.1237': attribute type 13 has an invalid length. [ 118.778060][T10214] netlink: 'syz.1.1237': attribute type 13 has an invalid length. [ 118.780458][T10214] netlink: 'syz.1.1237': attribute type 13 has an invalid length. [ 118.781338][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 118.783080][T10214] netlink: 'syz.1.1237': attribute type 13 has an invalid length. [ 118.783255][T10214] netlink: 'syz.1.1237': attribute type 13 has an invalid length. [ 118.785727][ T6206] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 118.787139][T10214] netlink: 'syz.1.1237': attribute type 13 has an invalid length. [ 118.787292][T10214] netlink: 'syz.1.1237': attribute type 13 has an invalid length. [ 118.787429][T10214] netlink: 'syz.1.1237': attribute type 13 has an invalid length. [ 118.791221][ T6206] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input23 [ 118.804175][ T6206] dvb-usb: schedule remote query interval to 50 msecs. [ 118.806137][ T6206] dvb-usb: bulk message failed: -22 (2/0) [ 118.831243][ T6206] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 118.870231][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 118.872196][ T6206] dvb-usb: error while querying for an remote control event. [ 118.932981][ T6206] dvb-usb: bulk message failed: -22 (1/0) [ 118.934629][ T6206] dvb-usb: error while querying for an remote control event. [ 118.938336][ T6206] usb 9-1: USB disconnect, device number 7 [ 118.963603][ T6206] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 119.336430][T10232] @: renamed from vlan0 (while UP) [ 119.464511][ T67] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.471753][ T67] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.479367][ T67] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.483424][ T67] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.486586][ T67] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 119.488781][ T67] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.490816][T10232] kvm: requested 169295 ns i8254 timer period limited to 200000 ns [ 119.519620][ T5942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.522331][ T5942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.524651][ T5942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.527074][ T5942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.532304][ T5942] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 119.534776][ T5942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.562158][T10236] Failed to initialize the IGMP autojoin socket (err -2) [ 119.710488][ T211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.771861][T10250] overlay: Unknown parameter './file0' [ 119.784912][ T211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.850390][T10236] chnl_net:caif_netlink_parms(): no params data found [ 119.907549][ T211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.002633][ T39] kauditd_printk_skb: 2917 callbacks suppressed [ 120.002649][ T39] audit: type=1326 audit(119.905:70490): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1241" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa93d583da7 code=0x7ffc0000 [ 120.011586][ T39] audit: type=1326 audit(119.905:70491): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1241" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa93d528fb9 code=0x7ffc0000 [ 120.020094][T10275] delete_channel: no stack [ 120.026167][ T39] audit: type=1326 audit(119.905:70492): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1241" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa93d583da7 code=0x7ffc0000 [ 120.033173][ T39] audit: type=1326 audit(119.905:70493): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1241" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa93d528fb9 code=0x7ffc0000 [ 120.040019][ T39] audit: type=1326 audit(119.905:70494): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1241" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa93d583da7 code=0x7ffc0000 [ 120.046569][ T39] audit: type=1326 audit(119.905:70495): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1241" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa93d528fb9 code=0x7ffc0000 [ 120.053523][ T39] audit: type=1326 audit(119.905:70496): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1241" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa93d583da7 code=0x7ffc0000 [ 120.059938][ T39] audit: type=1326 audit(119.905:70497): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1241" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa93d528fb9 code=0x7ffc0000 [ 120.063857][T10278] __nla_validate_parse: 66 callbacks suppressed [ 120.063873][T10278] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1252'. [ 120.066434][ T39] audit: type=1326 audit(119.905:70498): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1241" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa93d583da7 code=0x7ffc0000 [ 120.079276][ T39] audit: type=1326 audit(119.905:70499): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1241" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa93d528fb9 code=0x7ffc0000 [ 120.084624][T10236] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.087855][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.089968][T10236] bridge_slave_0: entered allmulticast mode [ 120.092331][T10236] bridge_slave_0: entered promiscuous mode [ 120.160180][ T211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.174834][T10236] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.178111][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.178310][T10236] bridge_slave_1: entered allmulticast mode [ 120.179165][T10236] bridge_slave_1: entered promiscuous mode [ 120.282062][T10236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.298045][T10236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.461414][T10315] input: syz1 as /devices/virtual/input/input24 [ 120.465134][T10236] team0: Port device team_slave_0 added [ 120.493110][T10236] team0: Port device team_slave_1 added [ 120.498571][T10317] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1263'. [ 120.537520][T10315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1262'. [ 120.584696][ T211] bridge_slave_1: left allmulticast mode [ 120.590532][ T211] bridge_slave_1: left promiscuous mode [ 120.592889][ T211] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.597541][ T211] bridge_slave_0: left allmulticast mode [ 120.599649][ T211] bridge_slave_0: left promiscuous mode [ 120.605677][ T211] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.611138][ T211] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 120.670311][ T211] batman_adv: batadv0: Removing interface: ip6gretap1 [ 120.792994][ T211] batman_adv: batadv0: Removing interface: geneve2 [ 121.068552][ T211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.072246][ T211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.075857][ T211] bond0 (unregistering): Released all slaves [ 121.080404][T10236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.082764][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.090406][T10236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.095002][T10236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.102433][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.111639][T10236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.176103][ T211] tipc: Left network mode [ 121.259635][T10341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1269'. [ 121.287991][T10236] hsr_slave_0: entered promiscuous mode [ 121.290075][T10236] hsr_slave_1: entered promiscuous mode [ 121.292010][T10236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.295923][T10236] Cannot create hsr debugfs directory [ 121.406083][T10347] overlayfs: failed to resolve 'metacopy=on': -2 [ 121.407243][T10350] syz.1.1272: attempt to access beyond end of device [ 121.407243][T10350] nbd1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 121.610692][ T211] hsr_slave_0: left promiscuous mode [ 121.612767][ T5942] Bluetooth: hci4: command tx timeout [ 121.617136][ T211] hsr_slave_1: left promiscuous mode [ 121.620086][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.623353][ T211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.626538][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.628943][ T211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.650587][ T211] veth1_macvtap: left promiscuous mode [ 121.652231][ T211] veth0_macvtap: left promiscuous mode [ 121.655828][ T211] veth1_vlan: left promiscuous mode [ 121.657838][ T211] veth0_vlan: left promiscuous mode [ 121.901441][T10375] kvm: pic: non byte read [ 121.904606][T10375] kvm: pic: level sensitive irq not supported [ 121.904866][T10375] kvm: pic: non byte read [ 121.908984][T10375] kvm: pic: level sensitive irq not supported [ 121.909220][T10375] kvm: pic: non byte read [ 122.402573][ T5980] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 122.539446][T10388] netlink: 'syz.4.1284': attribute type 11 has an invalid length. [ 122.552613][ T5980] usb 6-1: Using ep0 maxpacket: 16 [ 122.555813][ T5980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.560396][ T5980] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.564196][ T5980] usb 6-1: New USB device found, idVendor=00ac, idProduct=0244, bcdDevice= 0.00 [ 122.568196][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.578313][ T5980] usb 6-1: config 0 descriptor?? [ 122.698977][ T211] team0 (unregistering): Port device team_slave_1 removed [ 122.783072][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.785729][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.788892][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.792028][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.794890][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.797640][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.798755][ T211] team0 (unregistering): Port device team_slave_0 removed [ 122.800344][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.804818][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.807422][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.809863][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.631607][ T6206] usb 6-1: USB disconnect, device number 20 [ 123.680061][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 123.692772][ T5942] Bluetooth: hci4: command tx timeout [ 123.731286][T10236] netdevsim netdevsim5 netdevsim0: renamed from eth10 [ 123.745489][T10236] netdevsim netdevsim5 netdevsim1: renamed from eth11 [ 123.756756][T10236] netdevsim netdevsim5 netdevsim2: renamed from eth12 [ 123.785381][T10236] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 123.929411][T10236] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.943621][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.945662][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.956180][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.958299][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.083469][T10236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.257287][T10236] veth0_vlan: entered promiscuous mode [ 124.264185][T10236] veth1_vlan: entered promiscuous mode [ 124.316267][T10236] veth0_macvtap: entered promiscuous mode [ 124.328727][T10236] veth1_macvtap: entered promiscuous mode [ 124.367655][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.370887][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.375264][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.378223][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.388308][T10236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.395533][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.402503][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.405288][T10236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.408081][T10236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.414487][T10236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.424111][T10236] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 124.430360][T10236] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 124.436581][T10236] wireguard: wg0: Could not create IPv4 socket [ 124.440078][T10236] wireguard: wg1: Could not create IPv4 socket [ 124.444321][T10236] wireguard: wg2: Could not create IPv4 socket [ 124.598818][T10439] random: crng reseeded on system resumption [ 124.838834][T10450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10450 comm=syz.3.1296 [ 124.843405][T10449] validate_nla: 25 callbacks suppressed [ 124.843416][T10449] netlink: 'syz.3.1296': attribute type 1 has an invalid length. [ 125.012544][ T8807] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 125.015876][ T39] kauditd_printk_skb: 187 callbacks suppressed [ 125.015886][ T39] audit: type=1400 audit(124.915:70687): avc: denied { ioctl } for pid=10462 comm="syz.3.1299" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.152564][ T8807] usb 6-1: device descriptor read/64, error -71 [ 125.292490][ T25] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 125.343130][T10481] kvm: vcpu 0: requested 448 ns lapic timer period limited to 200000 ns [ 125.402133][T10484] cgroup: Name too long [ 125.402842][ T8807] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 125.415853][T10481] kvm: pic: non byte write [ 125.454609][ T25] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.458024][ T25] usb 9-1: config 0 has no interface number 0 [ 125.460322][ T25] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 125.464845][ T25] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.467362][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.475463][ T25] usb 9-1: config 0 descriptor?? [ 125.479216][T10466] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 125.487218][ T25] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 125.542547][ T8807] usb 6-1: device descriptor read/64, error -71 [ 125.665173][ T8807] usb usb6-port1: attempt power cycle [ 125.694767][ T25] usb 9-1: USB disconnect, device number 8 [ 125.870098][T10528] Failed to initialize the IGMP autojoin socket (err -2) [ 125.950624][ T39] audit: type=1400 audit(125.845:70688): avc: denied { module_load } for pid=10539 comm="syz.4.1315" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=37503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 125.968729][T10540] Invalid ELF header magic: != ELF [ 126.028324][ T39] audit: type=1400 audit(125.925:70689): avc: denied { getattr } for pid=10543 comm="syz.4.1316" name="/" dev="9p" ino=36185694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 126.029463][T10544] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.034427][ T8807] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 126.055146][ T8807] usb 6-1: device descriptor read/8, error -71 [ 126.303562][ T8807] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 126.345239][ T8807] usb 6-1: device descriptor read/8, error -71 [ 126.370684][ T39] audit: type=1400 audit(126.265:70690): avc: denied { accept } for pid=10565 comm="syz.4.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.462847][ T8807] usb usb6-port1: unable to enumerate USB device [ 126.525202][ T39] audit: type=1400 audit(126.425:70691): avc: denied { setopt } for pid=10580 comm="syz.4.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 126.527071][T10583] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10583 comm=syz.4.1320 [ 126.527082][T10582] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10582 comm=syz.4.1320 [ 126.705871][T10601] fuse: Unknown parameter 'd' [ 126.887551][ T6206] hid-generic 0000:FFFFFFFE:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz1 [ 127.096601][ T39] audit: type=1400 audit(126.995:70692): avc: denied { mounton } for pid=10637 comm="syz.4.1327" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 127.229679][ T39] audit: type=1400 audit(127.125:70693): avc: denied { read } for pid=10641 comm="syz.4.1328" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 127.236171][ T39] audit: type=1400 audit(127.125:70694): avc: denied { open } for pid=10641 comm="syz.4.1328" path="/214/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 127.243111][ T39] audit: type=1400 audit(127.135:70695): avc: denied { ioctl } for pid=10641 comm="syz.4.1328" path="/214/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 127.893742][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.897580][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.902859][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.905397][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.923519][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 127.925750][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.953267][T10689] Failed to initialize the IGMP autojoin socket (err -2) [ 128.024233][ T39] audit: type=1400 audit(127.925:70696): avc: denied { setattr } for pid=10697 comm="syz.4.1333" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 128.831034][T10781] 9pnet_virtio: no channels available for device syz [ 128.876984][T10785] netlink: 'syz.1.1351': attribute type 2 has an invalid length. [ 128.879406][T10785] netlink: 'syz.1.1351': attribute type 1 has an invalid length. [ 128.916859][T10790] bond0: (slave rose0): Error: Device type is different from other slaves [ 128.950833][T10796] SELinux: policydb string length 405633141 does not match expected length 8 [ 128.955192][T10796] SELinux: failed to load policy [ 128.964943][T10796] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1355'. [ 129.008432][T10800] Failed to initialize the IGMP autojoin socket (err -2) [ 129.188894][T10814] netlink: 'syz.1.1357': attribute type 11 has an invalid length. [ 129.191155][T10814] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1357'. [ 129.268361][T10819] Failed to initialize the IGMP autojoin socket (err -2) [ 129.285421][T10820] Failed to initialize the IGMP autojoin socket (err -2) [ 129.481225][T10834] Bluetooth: MGMT ver 1.23 [ 129.701123][T10842] wireguard: wg0: Could not create IPv4 socket [ 129.725647][T10689] netdevsim netdevsim5 netdevsim0: renamed from eth10 [ 129.746406][T10689] netdevsim netdevsim5 netdevsim1: renamed from eth11 [ 129.776670][T10689] netdevsim netdevsim5 netdevsim2: renamed from eth12 [ 129.817096][T10689] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 129.931011][ T6124] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 130.029610][ T5942] Bluetooth: hci3: command tx timeout [ 130.046169][T10896] netlink: 'syz.4.1370': attribute type 1 has an invalid length. [ 130.057555][T10896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.104068][T10910] cgroup: Unknown subsys name 'cpuset' [ 130.112558][ T6124] usb 6-1: Using ep0 maxpacket: 8 [ 130.115656][T10910] wireguard: wg0: Could not create IPv4 socket [ 130.116520][ T6124] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 130.120549][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.120577][ T6124] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.127006][ T6124] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.131713][ T6124] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.131950][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.135333][ T6124] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.138822][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.141937][ T6124] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.141976][ T6124] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.153453][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.155422][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.160456][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.160467][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.160476][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.165855][T10689] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 130.169710][T10689] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 130.188979][T10689] wireguard: wg0: Could not create IPv4 socket [ 130.192827][T10689] wireguard: wg1: Could not create IPv4 socket [ 130.195937][T10689] wireguard: wg2: Could not create IPv4 socket [ 130.358534][ T6124] usb 6-1: usb_control_msg returned -32 [ 130.360254][ T6124] usbtmc 6-1:16.0: can't read capabilities [ 130.412557][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 130.418509][T10940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43541 sclass=netlink_route_socket pid=10940 comm=syz.3.1375 [ 130.422772][T10932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43541 sclass=netlink_route_socket pid=10932 comm=syz.3.1375 [ 130.468643][T10944] /dev/nullb0: Can't open blockdev [ 131.067470][T10976] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 131.071752][T10854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.076258][T10854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.081333][T10854] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 131.224414][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 131.224426][ T39] audit: type=1400 audit(131.115:70702): avc: denied { create } for pid=10984 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 131.281396][ T834] usb 6-1: USB disconnect, device number 25 [ 131.683538][T11032] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1384'. [ 131.687067][T11032] veth0_virt_wifi: entered promiscuous mode [ 131.690531][T11032] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1384'. [ 131.967559][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 131.977397][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1389'. [ 132.247281][T11077] /dev/nullb0: Can't open blockdev [ 132.324178][T11088] program syz.4.1392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.431195][T11095] ipvlan2: entered promiscuous mode [ 132.475752][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 132.895977][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.897986][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.136285][T11170] overlayfs: failed to resolve './file0': -2 [ 133.144592][T11143] syz.1.1397 (11143): drop_caches: 1 [ 133.250437][T11143] syz.1.1397 (11143): drop_caches: 1 [ 133.299167][ T39] audit: type=1400 audit(133.195:70703): avc: denied { map } for pid=11179 comm="syz.1.1400" path="socket:[39599]" dev="sockfs" ino=39599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.312566][ T39] audit: type=1400 audit(133.195:70704): avc: denied { read } for pid=11179 comm="syz.1.1400" path="socket:[39599]" dev="sockfs" ino=39599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.320531][ T39] audit: type=1400 audit(133.195:70705): avc: denied { ioctl } for pid=11179 comm="syz.1.1400" path="socket:[39599]" dev="sockfs" ino=39599 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.336972][ T39] audit: type=1400 audit(133.235:70706): avc: denied { setattr } for pid=11177 comm="syz.4.1399" path="/dev/random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 133.417135][T11193] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 133.422805][ T39] audit: type=1400 audit(133.315:70707): avc: denied { relabelto } for pid=11192 comm="syz.4.1403" name="246" dev="tmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 133.430977][ T39] audit: type=1400 audit(133.325:70708): avc: denied { associate } for pid=11192 comm="syz.4.1403" name="246" dev="tmpfs" ino=1337 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 133.443825][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'. [ 133.579665][T11195] hsr_slave_1 (unregistering): left promiscuous mode [ 133.703039][ T6124] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 133.833289][ T6124] usb 9-1: device descriptor read/64, error -71 [ 134.072630][ T6124] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 134.212682][ T6124] usb 9-1: device descriptor read/64, error -71 [ 134.322787][ T6124] usb usb9-port1: attempt power cycle [ 134.545762][T11254] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1407'. [ 134.548497][T11254] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1407'. [ 134.662513][ T6124] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 134.683119][ T6124] usb 9-1: device descriptor read/8, error -71 [ 134.736235][T11282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1412'. [ 134.924931][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 134.932814][ T6124] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 134.964117][ T6124] usb 9-1: device descriptor read/8, error -71 [ 135.072797][ T6124] usb usb9-port1: unable to enumerate USB device [ 135.074614][ T39] audit: type=1326 audit(134.975:70709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11320 comm="syz.3.1416" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f809d98cde9 code=0x0 [ 135.964687][ T5943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.968786][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.971965][ T5943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.974699][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.976845][ T5943] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 135.980032][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.000295][T11369] Failed to initialize the IGMP autojoin socket (err -2) [ 136.024854][ T39] audit: type=1400 audit(135.925:70710): avc: denied { create } for pid=11373 comm="syz.3.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 136.351933][ T39] audit: type=1400 audit(136.245:70711): avc: denied { nlmsg_read } for pid=11393 comm="syz.3.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.421850][ T39] audit: type=1400 audit(136.315:70712): avc: denied { write } for pid=8147 comm="syz-executor" name="246" dev="tmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 136.430439][ T39] audit: type=1400 audit(136.315:70713): avc: denied { remove_name } for pid=8147 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 136.438423][ T39] audit: type=1400 audit(136.315:70714): avc: denied { rmdir } for pid=8147 comm="syz-executor" name="246" dev="tmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 136.610901][T11369] netdevsim netdevsim5 netdevsim0: renamed from eth10 [ 136.639332][T11369] netdevsim netdevsim5 netdevsim1: renamed from eth11 [ 136.658547][T11369] netdevsim netdevsim5 netdevsim2: renamed from eth12 [ 136.679660][T11369] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 136.730716][T11415] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1436'. [ 136.950703][ T39] audit: type=1400 audit(136.845:70715): avc: denied { create } for pid=11427 comm="syz.4.1438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 136.959087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.076749][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.079699][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.082390][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.085357][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.089475][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.093144][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.095876][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.098889][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.102533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.106108][T11369] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 137.111950][T11369] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 137.118087][T11369] wireguard: wg0: Could not create IPv4 socket [ 137.121336][T11369] wireguard: wg1: Could not create IPv4 socket [ 137.124468][T11369] wireguard: wg2: Could not create IPv4 socket [ 137.125737][T11445] overlayfs: failed to resolve './file0': -2 [ 137.562908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.693287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.771388][T11480] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 137.784540][T11480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.797559][T11480] bond2: (slave gretap1): making interface the new active one [ 137.800252][T11480] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 137.833892][T11486] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1441'. [ 137.962031][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 137.967492][T11497] netlink: 'syz.1.1444': attribute type 1 has an invalid length. [ 138.049810][T11509] vlan2: entered allmulticast mode [ 138.051825][T11509] bond0: entered allmulticast mode [ 138.054657][T11509] bond_slave_1: entered allmulticast mode [ 138.061279][ T39] audit: type=1400 audit(137.955:70716): avc: denied { read } for pid=11507 comm="syz.1.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.362539][ T6053] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 138.487202][ T39] audit: type=1400 audit(138.385:70717): avc: denied { append } for pid=11545 comm="syz.4.1450" path="/254/file0/cpuset.effective_cpus" dev="9p" ino=36185989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.512531][ T6053] usb 6-1: Using ep0 maxpacket: 8 [ 138.515688][ T6053] usb 6-1: too many configurations: 69, using maximum allowed: 8 [ 138.520053][ T6053] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 138.522235][ T6053] usb 6-1: can't read configurations, error -61 [ 138.552123][T11550] CIFS: VFS: Malformed UNC in devname [ 138.664144][ T6053] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 138.849379][ T6053] usb 6-1: Using ep0 maxpacket: 8 [ 138.851527][ T6053] usb 6-1: too many configurations: 69, using maximum allowed: 8 [ 138.855162][ T6053] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 138.857336][ T6053] usb 6-1: can't read configurations, error -61 [ 138.859751][ T6053] usb usb6-port1: attempt power cycle [ 139.217572][ T6053] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 139.243836][ T6053] usb 6-1: Using ep0 maxpacket: 8 [ 139.246339][ T6053] usb 6-1: too many configurations: 69, using maximum allowed: 8 [ 139.250271][ T6053] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 139.253580][ T6053] usb 6-1: can't read configurations, error -61 [ 139.392468][ T6053] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 139.400086][ T39] audit: type=1400 audit(139.295:70718): avc: denied { connect } for pid=11590 comm="syz.4.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 139.400219][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1451'. [ 139.413831][ T6053] usb 6-1: Using ep0 maxpacket: 8 [ 139.416258][ T6053] usb 6-1: too many configurations: 69, using maximum allowed: 8 [ 139.419548][ T6053] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 139.432507][ T6053] usb 6-1: can't read configurations, error -61 [ 139.434606][ T6053] usb usb6-port1: unable to enumerate USB device [ 139.440761][T11592] bond0: (slave bridge0): Releasing backup interface [ 139.445260][T11592] bridge0 (unregistering): left allmulticast mode [ 139.524721][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1453'. [ 139.865176][T11636] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 139.901420][T11640] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 139.902966][T11623] 9pnet_fd: p9_fd_create_tcp (11623): problem creating socket [ 139.907107][T11640] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 139.919237][T11640] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1460'. [ 139.996867][ T39] audit: type=1400 audit(139.895:70719): avc: denied { connect } for pid=11659 comm="syz.4.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.072917][ T39] audit: type=1326 audit(139.965:70720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11677 comm="syz.3.1465" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f809d98cde9 code=0x0 [ 140.181163][T11692] netlink: 'syz.4.1467': attribute type 9 has an invalid length. [ 140.184182][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 140.358591][T11713] netlink: 'syz.3.1473': attribute type 12 has an invalid length. [ 140.415042][T11720] Failed to initialize the IGMP autojoin socket (err -2) [ 140.473702][ T6562] Bluetooth: hci3: Frame reassembly failed (-84) [ 140.798932][T11744] netlink: 'syz.4.1481': attribute type 1 has an invalid length. [ 140.826522][T11744] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 140.834061][T11744] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1481'. [ 140.841733][ T6562] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 140.842704][T11744] 8021q: adding VLAN 0 to HW filter on device bond5 [ 140.919679][T11747] overlayfs: failed to get inode (-116) [ 140.922962][T11747] overlayfs: failed to get inode (-116) [ 140.956758][ T64] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 141.062865][T11755] netlink: 6824 bytes leftover after parsing attributes in process `syz.1.1485'. [ 141.252464][ T6206] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 141.402539][ T6206] usb 9-1: Using ep0 maxpacket: 8 [ 141.406283][ T6206] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 141.412631][ T6206] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.416389][ T6206] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.420139][ T6206] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.430714][ T6206] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.436440][ T6206] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 141.439055][ T6206] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.646585][ T6206] usb 9-1: usb_control_msg returned -32 [ 141.648315][ T6206] usbtmc 9-1:16.0: can't read capabilities [ 142.410355][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 142.410370][ T39] audit: type=1400 audit(142.305:70722): avc: denied { bind } for pid=11806 comm="syz.1.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.427056][T11808] usbtmc 9-1:16.0: CHECK_CLEAR_STATUS returned 2c [ 142.493004][ T5942] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 142.652082][ T39] audit: type=1400 audit(142.545:70723): avc: denied { map } for pid=11752 comm="syz.4.1484" path="/275/file0/blkio.bfq.io_serviced" dev="9p" ino=36186363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.661783][ T39] audit: type=1400 audit(142.545:70724): avc: denied { write } for pid=11752 comm="syz.4.1484" path="/275/file0/blkio.bfq.io_serviced" dev="9p" ino=36186363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.730809][ T39] audit: type=1400 audit(142.625:70725): avc: denied { write } for pid=11819 comm="syz.3.1493" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 142.793042][T11827] overlay: ./bus is not a directory [ 142.817027][ T1021] usb 9-1: USB disconnect, device number 13 [ 142.994550][T11837] : renamed from bond0 (while UP) [ 143.043052][ T5943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.050101][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.054138][ T5943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.056896][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.060961][ T5943] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.063424][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.079919][T11838] Failed to initialize the IGMP autojoin socket (err -2) [ 143.462854][T11848] @: renamed from vlan0 (while UP) [ 143.498372][T11848] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=11848 comm=syz.4.1500 [ 143.617134][T11855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.684477][T11860] program syz.4.1502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.728638][ T39] audit: type=1400 audit(143.625:70726): avc: denied { accept } for pid=11863 comm="syz.4.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.859812][T11838] netdevsim netdevsim5 netdevsim0: renamed from eth10 [ 143.877054][T11838] netdevsim netdevsim5 netdevsim1: renamed from eth11 [ 143.883933][T11838] netdevsim netdevsim5 netdevsim2: renamed from eth12 [ 143.897258][T11838] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 143.910196][T11881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1508'. [ 143.914193][T11881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1508'. [ 143.952255][ T39] audit: type=1400 audit(143.845:70727): avc: denied { getopt } for pid=11885 comm="syz.1.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.958090][ T39] audit: type=1400 audit(143.845:70728): avc: denied { connect } for pid=11885 comm="syz.1.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.965523][ T39] audit: type=1400 audit(143.845:70729): avc: denied { name_connect } for pid=11885 comm="syz.1.1510" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 143.973860][ T39] audit: type=1400 audit(143.865:70730): avc: denied { setopt } for pid=11885 comm="syz.1.1510" laddr=::1 lport=42322 faddr=::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.025292][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 144.034459][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 144.074151][ T39] audit: type=1400 audit(143.965:70731): avc: denied { write } for pid=11903 comm="syz.4.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.179542][T11838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.182736][T11838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.185664][T11838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.187098][T11915] overlayfs: conflicting lowerdir path [ 144.188782][T11838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.195636][T11838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.199056][T11838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.201772][T11838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.212465][T11838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.219567][T11838] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.221993][T11838] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.224897][T11838] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.227194][T11838] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.229738][T11838] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.232091][T11838] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.235234][T11838] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.237576][T11838] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.240283][T11838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.243065][T11838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.245579][T11838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.248066][T11838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.253841][T11922] ptrace attach of "/syz-executor exec"[5939] was attempted by ""[11922] [ 144.257043][T11922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11922 comm=syz.1.1517 [ 144.261132][T11922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1517'. [ 144.309593][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.312074][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.333510][ T6573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.335633][ T6573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.524235][T11933] "syz.5.1519" (11933) uses obsolete ecb(arc4) skcipher [ 144.618910][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1521'. [ 144.858607][T11951] netlink: 'syz.5.1526': attribute type 10 has an invalid length. [ 145.023692][T11969] __nla_validate_parse: 2 callbacks suppressed [ 145.023703][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 145.057604][T11916] syz.4.1515 (11916) used greatest stack depth: 20272 bytes left [ 145.082894][ T8] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 145.132588][ T5943] Bluetooth: hci3: command tx timeout [ 145.205497][T11972] syzkaller0: entered promiscuous mode [ 145.207074][T11972] syzkaller0: entered allmulticast mode [ 145.232815][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 145.236308][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 145.240317][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 145.244697][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.249112][ T8] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 145.252791][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.258518][ T8] usb 6-1: config 0 descriptor?? [ 145.261414][T11949] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 145.267929][ T8] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input26 [ 145.628084][ T25] usb 6-1: USB disconnect, device number 30 [ 146.183560][T11981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1531'. [ 146.472071][T11990] overlay: ./bus is not a directory [ 147.222601][ T5943] Bluetooth: hci3: command tx timeout [ 147.681816][T11995] netlink: 'syz.1.1535': attribute type 32 has an invalid length. [ 147.684799][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'. [ 147.731616][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 147.731632][ T39] audit: type=1401 audit(147.625:70736): op=setxattr invalid_context="system_u:object_r:ssh_agent_exec_t:s0" [ 147.767106][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1538'. [ 147.777447][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1538'. [ 147.784503][T11999] mkiss: ax0: crc mode is auto. [ 147.891290][T12019] sp0: Synchronizing with TNC [ 147.901766][T12019] sp0: Found TNC [ 147.967901][ T39] audit: type=1400 audit(147.865:70737): avc: denied { setopt } for pid=12022 comm="syz.5.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 147.975642][T12025] ip6gre1: entered promiscuous mode [ 148.070182][T12037] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.1546'. [ 148.073218][T12037] openvswitch: netlink: Unknown key attributes 20 [ 148.155543][T12042] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1548'. [ 148.183055][ T835] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 148.290816][T12040] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 148.487817][T12071] ceph: Path missing in source [ 148.501963][T12068] No control pipe specified [ 148.787074][ T9] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 149.162038][ C1] ------------[ cut here ]------------ [ 149.163730][ C1] WARNING: CPU: 1 PID: 0 at ./include/linux/skbuff.h:5155 e1000_rx_checksum.constprop.0+0x176/0x1e0 [ 149.167156][ C1] Modules linked in: [ 149.168397][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 149.172988][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.176012][ C1] RIP: 0010:e1000_rx_checksum.constprop.0+0x176/0x1e0 [ 149.178370][ C1] Code: 00 00 00 00 fc ff df 80 3c 02 00 75 76 48 83 85 b0 04 00 00 01 5b 5d 41 5c 41 5d 41 5e 41 5f e9 e0 6e 33 fb e8 db 6e 33 fb 90 <0f> 0b 90 e9 e7 fe ff ff e8 cd 6e 33 fb 48 8d bd a8 04 00 00 48 b8 [ 149.183779][ C1] RSP: 0018:ffffc900006b0a30 EFLAGS: 00010246 [ 149.185519][ C1] RAX: 0000000000000000 RBX: 0000000000000007 RCX: ffffffff868663ec [ 149.187700][ C1] RDX: ffff88801d2b4880 RSI: ffffffff86866505 RDI: 0000000000000001 [ 149.189936][ C1] RBP: ffff888107a08d80 R08: 0000000000000001 R09: 0000000000000000 [ 149.192586][ C1] R10: 0000000000000020 R11: 0000000000000000 R12: ffff888035a5d7c0 [ 149.194784][ C1] R13: 0000000000000020 R14: ffff888035a5d840 R15: 0000000000000000 [ 149.197020][ C1] FS: 0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 149.199557][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.201411][ C1] CR2: 00007f0958da2060 CR3: 0000000040c66000 CR4: 0000000000352ef0 [ 149.203670][ C1] Call Trace: [ 149.204626][ C1] [ 149.205462][ C1] ? __warn+0xea/0x3c0 [ 149.206675][ C1] ? e1000_rx_checksum.constprop.0+0x176/0x1e0 [ 149.208826][ C1] ? report_bug+0x3c0/0x580 [ 149.210142][ C1] ? handle_bug+0x54/0xa0 [ 149.211349][ C1] ? exc_invalid_op+0x17/0x50 [ 149.212729][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 149.214161][ C1] ? e1000_rx_checksum.constprop.0+0x5c/0x1e0 [ 149.215871][ C1] ? e1000_rx_checksum.constprop.0+0x175/0x1e0 [ 149.217605][ C1] ? e1000_rx_checksum.constprop.0+0x176/0x1e0 [ 149.219335][ C1] e1000_clean_jumbo_rx_irq+0xf3e/0x28c0 [ 149.220918][ C1] ? __pfx_e1000_clean_jumbo_rx_irq+0x10/0x10 [ 149.222670][ C1] e1000_clean+0x9d6/0x2700 [ 149.224341][ C1] ? hlock_class+0x4e/0x130 [ 149.225686][ C1] ? hlock_class+0x4e/0x130 [ 149.226974][ C1] ? __pfx_mark_lock+0x10/0x10 [ 149.228324][ C1] ? __pfx_e1000_clean+0x10/0x10 [ 149.229773][ C1] ? __pfx_mark_lock+0x10/0x10 [ 149.231126][ C1] ? lock_acquire+0x2f/0xb0 [ 149.232455][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 149.234019][ C1] net_rx_action+0xa94/0x1010 [ 149.235347][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 149.236789][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 149.238272][ C1] ? sched_clock+0x38/0x60 [ 149.239944][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 149.241393][ C1] handle_softirqs+0x213/0x8f0 [ 149.242791][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 149.244320][ C1] __irq_exit_rcu+0x109/0x170 [ 149.245625][ C1] irq_exit_rcu+0x9/0x30 [ 149.246793][ C1] common_interrupt+0xbf/0xe0 [ 149.248079][ C1] [ 149.248943][ C1] [ 149.249802][ C1] asm_common_interrupt+0x26/0x40 [ 149.251175][ C1] RIP: 0010:default_idle+0xf/0x20 [ 149.252606][ C1] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 20 10 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 149.258242][ C1] RSP: 0018:ffffc90000187e08 EFLAGS: 00000206 [ 149.259897][ C1] RAX: 000000000016d7bb RBX: 0000000000000001 RCX: ffffffff8b567469 [ 149.262087][ C1] RDX: 0000000000000000 RSI: ffffffff8b6ced20 RDI: ffffffff8bd35100 [ 149.264343][ C1] RBP: ffffed1003a56910 R08: 0000000000000001 R09: ffffed100d4e6f85 [ 149.266568][ C1] R10: ffff88806a737c2b R11: 0000000000000000 R12: 0000000000000001 [ 149.268825][ C1] R13: ffff88801d2b4880 R14: ffffffff90623910 R15: 0000000000000000 [ 149.271428][ C1] ? ct_kernel_exit+0x139/0x190 [ 149.272870][ C1] default_idle_call+0x6d/0xb0 [ 149.274246][ C1] do_idle+0x329/0x3f0 [ 149.275392][ C1] ? __pfx_do_idle+0x10/0x10 [ 149.276700][ C1] cpu_startup_entry+0x4f/0x60 [ 149.278067][ C1] start_secondary+0x222/0x2b0 [ 149.279434][ C1] ? __pfx_start_secondary+0x10/0x10 [ 149.280856][ C1] common_startup_64+0x13e/0x148 [ 149.282234][ C1] [ 149.283164][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 149.285214][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 149.288069][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.291086][ C1] Call Trace: [ 149.292034][ C1] [ 149.292861][ C1] dump_stack_lvl+0x3d/0x1f0 [ 149.294167][ C1] panic+0x71d/0x800 [ 149.295235][ C1] ? __pfx_panic+0x10/0x10 [ 149.296460][ C1] ? show_trace_log_lvl+0x29d/0x3d0 [ 149.297935][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 149.299398][ C1] ? e1000_rx_checksum.constprop.0+0x176/0x1e0 [ 149.301057][ C1] check_panic_on_warn+0xab/0xb0 [ 149.302496][ C1] __warn+0xf6/0x3c0 [ 149.303607][ C1] ? e1000_rx_checksum.constprop.0+0x176/0x1e0 [ 149.305418][ C1] report_bug+0x3c0/0x580 [ 149.306632][ C1] handle_bug+0x54/0xa0 [ 149.307804][ C1] exc_invalid_op+0x17/0x50 [ 149.309142][ C1] asm_exc_invalid_op+0x1a/0x20 [ 149.310511][ C1] RIP: 0010:e1000_rx_checksum.constprop.0+0x176/0x1e0 [ 149.312383][ C1] Code: 00 00 00 00 fc ff df 80 3c 02 00 75 76 48 83 85 b0 04 00 00 01 5b 5d 41 5c 41 5d 41 5e 41 5f e9 e0 6e 33 fb e8 db 6e 33 fb 90 <0f> 0b 90 e9 e7 fe ff ff e8 cd 6e 33 fb 48 8d bd a8 04 00 00 48 b8 [ 149.317682][ C1] RSP: 0018:ffffc900006b0a30 EFLAGS: 00010246 [ 149.319412][ C1] RAX: 0000000000000000 RBX: 0000000000000007 RCX: ffffffff868663ec [ 149.321642][ C1] RDX: ffff88801d2b4880 RSI: ffffffff86866505 RDI: 0000000000000001 [ 149.323823][ C1] RBP: ffff888107a08d80 R08: 0000000000000001 R09: 0000000000000000 [ 149.326039][ C1] R10: 0000000000000020 R11: 0000000000000000 R12: ffff888035a5d7c0 [ 149.328237][ C1] R13: 0000000000000020 R14: ffff888035a5d840 R15: 0000000000000000 [ 149.330498][ C1] ? e1000_rx_checksum.constprop.0+0x5c/0x1e0 [ 149.332194][ C1] ? e1000_rx_checksum.constprop.0+0x175/0x1e0 [ 149.333918][ C1] e1000_clean_jumbo_rx_irq+0xf3e/0x28c0 [ 149.335489][ C1] ? __pfx_e1000_clean_jumbo_rx_irq+0x10/0x10 [ 149.337248][ C1] e1000_clean+0x9d6/0x2700 [ 149.338524][ C1] ? hlock_class+0x4e/0x130 [ 149.339852][ C1] ? hlock_class+0x4e/0x130 [ 149.341167][ C1] ? __pfx_mark_lock+0x10/0x10 [ 149.342509][ C1] ? __pfx_e1000_clean+0x10/0x10 [ 149.343908][ C1] ? __pfx_mark_lock+0x10/0x10 [ 149.345263][ C1] ? lock_acquire+0x2f/0xb0 [ 149.346539][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 149.348031][ C1] net_rx_action+0xa94/0x1010 [ 149.349409][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 149.350833][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 149.352308][ C1] ? sched_clock+0x38/0x60 [ 149.353565][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 149.354944][ C1] handle_softirqs+0x213/0x8f0 [ 149.356314][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 149.357831][ C1] __irq_exit_rcu+0x109/0x170 [ 149.359263][ C1] irq_exit_rcu+0x9/0x30 [ 149.360461][ C1] common_interrupt+0xbf/0xe0 [ 149.361811][ C1] [ 149.362660][ C1] [ 149.363510][ C1] asm_common_interrupt+0x26/0x40 [ 149.364935][ C1] RIP: 0010:default_idle+0xf/0x20 [ 149.366414][ C1] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 20 10 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 149.371769][ C1] RSP: 0018:ffffc90000187e08 EFLAGS: 00000206 [ 149.373447][ C1] RAX: 000000000016d7bb RBX: 0000000000000001 RCX: ffffffff8b567469 [ 149.375626][ C1] RDX: 0000000000000000 RSI: ffffffff8b6ced20 RDI: ffffffff8bd35100 [ 149.378020][ C1] RBP: ffffed1003a56910 R08: 0000000000000001 R09: ffffed100d4e6f85 [ 149.380287][ C1] R10: ffff88806a737c2b R11: 0000000000000000 R12: 0000000000000001 [ 149.382704][ C1] R13: ffff88801d2b4880 R14: ffffffff90623910 R15: 0000000000000000 [ 149.385409][ C1] ? ct_kernel_exit+0x139/0x190 [ 149.386820][ C1] default_idle_call+0x6d/0xb0 [ 149.388206][ C1] do_idle+0x329/0x3f0 [ 149.389450][ C1] ? __pfx_do_idle+0x10/0x10 [ 149.390784][ C1] cpu_startup_entry+0x4f/0x60 [ 149.392148][ C1] start_secondary+0x222/0x2b0 [ 149.393551][ C1] ? __pfx_start_secondary+0x10/0x10 [ 149.395047][ C1] common_startup_64+0x13e/0x148 [ 149.396468][ C1] [ 149.398137][ C1] Kernel Offset: disabled [ 149.399457][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:23:30 Registers: info registers vcpu 0 CPU#0 RAX=000000000018b3f1 RBX=0000000000000000 RCX=ffffffff8b567469 RDX=0000000000000000 RSI=ffffffff8b6ced20 RDI=ffffffff8bd35100 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6f85 R10=ffff88806a637c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90623910 R15=0000000000000000 RIP=ffffffff8b56884f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f809e6d8710 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000001 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faabd429698 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000014 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000017 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faabd57cd00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555b00bb1d 000055555b00b990 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ed08038380031808 000000000000000b 0000555000000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08060601209e0480 8410000210000383 0000000100000018 67732f7600000001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006012400000032 d0c6080000000000 0806060125a20a08 00000301800402d0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000e8000000033 ea00020000000000 fe02000e80030280 0402d0a608000108 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 0e80030e00000000 02d0ee0800010000 000806060125b804 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000100 000484000ee40300 0484000ee0030220 8080808200000037 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000e00000000 000ec20302d80200 0ec00302f602000e be03000000000036 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff e5080ea403028002 000ea20300000035 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ea0030000000000 00007faabd57cd70 000055555af98f70 0000000000000034 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85404295 RDI=ffffffff9ab7b740 RBP=ffffffff9ab7b700 RSP=ffffc900006b03b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000004 R12=0000000000000000 R13=0000000000000063 R14=ffffffff9ab7b700 R15=0000000000000000 RIP=ffffffff854042bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0958da2060 CR3=0000000040c66000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09598dd100 00007f0958d7c440 00007f0958d7c458 00007f0958d7c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001192d9 RBX=0000000000000002 RCX=ffffffff8b567469 RDX=0000000000000000 RSI=ffffffff8b6ced20 RDI=ffffffff8bd35100 RBP=ffffed1003ad9000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6c8000 R14=ffffffff90623910 R15=0000000000000000 RIP=ffffffff8b56884f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fdb6180300 CR3=000000005be20000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000e0000000 Opmask01=000000000000001c Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002075676f008786 8a8984828183883a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000084 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2075676f0087868a 8984828183883a3d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f73657201828800 000000843d736563 61667265746e6900 883d656d616e6669 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 524e584f01828800 00000084004e585e 5c5b4f5849535400 880058505c535b54 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fdb6187958 0000000000000000 000000000000000f 0000000000885d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000112e19 RBX=0000000000000003 RCX=ffffffff8b567469 RDX=0000000000000000 RSI=ffffffff8b6ced20 RDI=ffffffff8bd35100 RBP=ffffed1003ad9488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526f85 R10=ffff88806a937c2b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6ca440 R14=ffffffff90623910 R15=0000000000000000 RIP=ffffffff8b56884f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff74e8c188 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c0fffd Opmask01=000000000000001c Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000100000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0f0e0d0c0b0a 0908070605040302 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0302000100008881 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fdb6191bc0 0000000000000211 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fdb6191da8 000055fdb6191da0 0000000000000000 0000000000008800 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e35322e2e3531 323d6b6561645f61 5f6e625f735f6e00 650032382e393132 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000